The worm will produce Arod.exe and " get to C: WINDOWS catalogue . After starting the machine again , will put worm shelf Arod.exe into C: , C:WINDOWS,In zip file under WINDOWS system32 , these three catalogues ,. As the user opens Outlook Express, the worm will search Outlook Express and accept a mail while inserting , and falsely use the person who sends one name and send the addressee for this mail of worm s mail automatically.