This worm may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.
Upon execution, this worm drops several files. It then modifies a registry entry to enable its automatic execution at every system startup.
It hides a dropped file and its related processes as part of its rootkit routine.
This worm drops copies of itself in all physical and removable drives. It also drops an
AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.
More...
