This worm may be downloaded from remote sites by other malware. It may be dropped by other malware.

It creates folders. It drops copies of itself. It drops files/components.

It creates registry entries to enable its automatic execution at every system startup. It modifies registry entries to hide files with both System and Read-only attributes.

It drops copies of itself in all physical drives and in all removable drives.

It drops component files.

It deletes itself after execution.



More...