This worm propagates via network shares It uses NetBEUI functions to get available lists of user names and passwords It then lists down the available network shares and attempts to drop a copy of itself into these shares using the gathered user names and passwords