This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself. It drops files/components. It then deletes itself after execution.
It creates registry entries to enable its automatic execution at every system startup.
It modifies registry entries to hide files with both System and Read-only attributes.
It drops copies of itself in all physical and removable drives. It drops an
AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.
More...