Gallory is a worm that spreads through floppy disks, local drives and network shares. Once executed, the parasite installs itself to the system and starts a spreading routine. It searches accessible drives for folders containing the setup.exe file and creates copies of itself there. Then Gallory runs a payload. The worm deletes all system backup files and disables essential Windows tools such as the Registry Editor and the Task Manager. It also alters Internet security settings. Gallory runs on every Windows startup.