HPsus/TSpy-B exhibits behaviour commonly associated with malware such as modifying registry entries so that it starts before other executables on the computer, copying itself to sensitive areas of the file system and writing autorun.inf files so that may attempt to spread via USB devices.