This Trojan may be installed manually by a user. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.
It accesses Web sites to download file(s). As a result, malicious routines of the downloaded files are exhibited on the affected system. It saves the downloaded files using certain file names. It then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system.


More...