Pasobir is a worm that spreads through removable media such as CDs, USB drives, flash disks, network drives, etc. Once executed, the parasite secretly installs itself to the system and runs a payload. It disables installed antivirus programs and terminates running security-related applications. The worm also attempts to steal user login names and passwords for the QQ Messenger program. Gathered data can be transferred to a predetermined web site or sent by e-mail using Pasobir’s own mail engine. Furthermore, the parasite may update itself via the Internet, secretly download and execute arbitrary, potentially malicious files. Pasobir run on every Windows startup.