This worm is downloaded from remote sites or dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.
It creates a folder in all physical drives and in all removable devices.
It drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.