This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be installed manually by a user. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It terminates certain services if found on the system.

It injects itself into a process on the affected system, allowing it to run as long as Windows Explorer is running. It also attempts to download another program from an unknown Web site.

More...