751abe0a__Dorkbot_a14480b383___Lavasoft__Description
[Behaviour] USBInfector [Description] 
A program can register a device notification with the help of RegisterDeviceNotification. So it is notified when a USB device is plugged and then the worm copies itself to the USB device plugged into the affected computer.
Worm.Win32.Dorkbot_a14480b383 | Lavasoft