This worm is downloaded unknowingly by a user when visiting malicious Web sites. It propagates by dropping copies of itself in all available physical and removable drives.It also drops copies of itself into folders, which contain certain strings. It uses attractive file names as a social engineering to trick the user into opening the said files.