●1.hidden in Recycled folder.

　　●2.spread by USB Flash.

　　●3.downloading malware'[random].exe'.

　　●After executing virus, it will create following files:
　　　C:\WINDOWS\Fonts\unwise_.exe

　　●After executing virus, it will downloads following files in all folder:
　　　[random].exe

　　●Modify the following registry file:
　　　HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Windows Hosts
　　　Controller\ImagePath= ""C:\WINDOWS\Fonts\unwise_.exe""
　　　HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Hosts
　　　Controller\ImagePath: ""C:\WINDOWS\Fonts\unwise_.exe""