A、复到WINDOWS安装目录，使用随机的文件名；

B、添加启动项，使病毒可随机启动，键名使用随机字符；
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "随机字符" = "%windir%\<随机字符>.exe

C、在磁盘中释放病毒复本，采用如下方法：
病毒搜索到一个EXE文件后，会在文件名下添加不同的后缀生成病毒复本。比如：病毒毒找到WinWord.exe，就会在同盘生成一个名为“WinWord32.exe”（或是WinWord16.exe、WinWord2k.exe）的病毒复本。

D、对于Win9x系统，病毒会修改Win.ini文件：
[windows]
run = %windir%\蠕虫的复本文件名
以便随机启动

E、病毒会修改REG、EXE文件的关联，在打开此类文件时会首先运行病毒；

F、终止系统中正在运行的反病毒软件和防火墙，并试图删除这些安全软件；
病毒会终止包含以下字符串的进程：
black
panda
shield
scan
mcafee
labs
zone
alarm
agent
avp
msie
navap
mstask
webcheck
iomon
nai_vs_stat
病毒会搜索磁盘中名字包含以下字符串的文件，并删除它们
labs and zone
kaspers
mcafee
panda
avp
pc
cillin
black and ice
norton and virus

G、病毒会从通讯溥中提取邮件地址，并向其发送带病毒的电子邮件
病毒邮件会用以下可能的主题、内容、附件名随机组合而成：
可能的主题:
HeY
ZzZz
Bla Bla
HoWie
Happy
Hi Again
Wow
Hi
Hello
Hey Ya
Boom
Hi There
Zdrasti
Zdr Otnovo
Ohoo
Ei dupe
Pisamce
TinKi WinKy
ZzZz
Bla Bla
Hey
Privet
Boom
..
!!
:)
;))
:pPpP
~pPp
:>
!
;)

可能的内容：
Zdravei :)) Da ne me zabravi ve4e :) Ko praish? Za teb neznam ama v momenta se chustvam mnoo qko i reshih da ti pisha :) Kolko ti e rekorda na minichkite? Toku shto na Expert razminirah za 2 minuti :)) Ei sq smqtam da si vzema nqkoi qk film i da gledam. Hodil li si na %s - Mnoo me kefi :)) Za drugo ne se seshtam tai che chao za sega :)) I da pishesh :pP
Hey :) Kak si? Otdavna ne sme se chuvali :)) Kak q karash, neshto novo ima li? Nqma da povqrvash kakvo mi se sluchi neska :) Vidqh Slavi Trifonov i nqkvi mnoo qki madami s nego :))) Ko shi kajesh a? Misleh da mu iskam avtograf ama me dosramq :(( Karai, drug pat ~pP. Skoro shti pratq onva deto obeshtah, za sq mojesh da hvarlish edno oko na %s - ako imash nqkvi predlojeniq pishi mi :)) Aide doskoro i umnata ~pP
Ekiput na Kefche.com ima radostta da pozdravi vsichki fenove na Kefcheto s 1-ta godishnina ot puskaneto na site-a.

Nie se prevurnahme v nai-dobriq i poseshtavan bg site za zabavleniq i igri. Ot samoto si nachalo Kefche.com ima za cel da vi nosi samo i edinstveno smqh i zabava, nadqvame se che sme postignali celite si :))

Po sluchai godishninata, ekiput ni poe iniciativata da izprashta vsqka sedmica nai-dobrite flash-cheta i igrichki na vsichki user-i poseshtavashti Kefche-to.

Nadqvame se da vi haresa i tova da bude samo nachaloto na edno novo zabavlenie :))

-----------------

Kefche.com Team.

Zdrasti, ko staa :))) Baq vreme ne sme se chuvali. Beshe mi skuchno i si vikam shto da ne napisha nqkoi drugo pismo :)) Sq i tva daskalo i napravo ujas, ne sa jivee :) Ti ostai drugoto ami i e studeno.. ~PpPp. Dano idva vakanciqta po skoro :)) Pishi neshto interesno, kak q karash, neshto novo ima li :) Pratih ti onva deto obeshtah, qko a :)) Aide i chakam..
Hey :) Wasupp ~Pp I wanted to write you a letter, but i didn't know what to talk about actually :) Have you ever done an IQ test? I've just scored 120 points :) I'm not sure if this good or bad is,but who cares :) Have you visited %s :) Finally, how are you:) I'll be very happy if you send me 1,2 funny cards :)) bye! :)
Hi again :)) Where are you? Don't you chat any more? I haven't seen you so long.. Well, I've got a lot to tell you about. The Summer vacation was too good to be true. Beach, disco's, friends.. Unfortunately, it's Winter now and the temperatures here are very low. I was ill almost 2 weeks. Quite unpleasant :(( Let's talk about you :) Are you oK? Are you in love :)) I sent you a surprise :)) There are cool thoughts, especially about love. It's nice. I'm a little bit bored of these stupid computers, but I'm waiting for the reply :)) Bye!
Hi again :)) Where are you? Don't you chat any more? I haven't seen you so long :)) Well, I've got a lot to tell you about. The Summer vacation was too good to be true. Beach, disco's, friends.. Unfortunately, it's Winter now and the temperatures here are very low. I was ill almost 2 weeks. Quite unpleasant :(( Have you visited . A little bit strange, but nice :)) Finally, how are you? Write to me :)) Byeee :pP

Then, one of the following is added:
P.S. Hvarli edno oko na :))
P.S. Bqgai na mnoo zdravo flash4e ima :pP
P.S. Be happy, don't worry ~pPp. Check this - Cool :))
P.S. Have you visited :) Co0l :))

可能的附件名称：
附件名组成部份之一:
BoxDave_
PcDudes
Pamela 3D_
Kama Sutra
LaFemmeNikita
Fishfood
install_en_
Story017_
Inter012_
Actu002_
Chess
followed by one of these:
(sHow)
3D
(Eng)
2.3
with an .exe extension.
附件名组成部份之二
install_en_
ClubExtreme
WWF_The_ROCK
EminemDesktop
DMX tHeMe
Inter012_
Story017_
Gipsy
sound_brake_
Elfbowl
Goggles
snowball_fight_
Chess
附件名组成部份之三
2.1
(zip)
(sHow)
3D
_zip
(Eng)
_v1.1
最后会以.exe文件结尾