W32/Autorun-ANA spreads by copying itself to removable devices such as USB sticks.
W32/Autorun-ANA copies itself to the <profile> folder as a hidden file and creates the following registry entry to run itself on system restart:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
<variable>
<profile>\<variable>\<variable>.exe
where <variable> is the same stub name, eg "user" or "support".
W32/Autorun-ANA also sets the following registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
0x00000000