This worm arrives as attachment to mass-mailed email messages.It drops copies of itself. It creates registry entries to enable its automatic execution at every system startup.It uses various online Simple Mail Transfer Protocol (SMTP) engines to send email messages with a copy of itself as attachment. It may use multiple file name extensions for the attachment.