This backdoor may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself. It executes files/components. It injects threads into normal processes.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.


More...