It manifests itself as s2.exe
If you do a namual search and find this file, DO NOT OPEN IT...
It spreads via USB sitcks and mp3 players. sxs2.exe is the program which is executed by an infected autorun.inf If you look at the infected autorun.inf you will find some command lines that lead directly to a launch of sxs2.exe
sxs2.exe is a hidden file, autorun a system file - so make sure to change your settings (properties - windows explorer) so you can see ALL files including system files and hidden files.
As long as the autorun is not enabled or as long as you just look at the folders on your USB stick or mp3 player and delete the malicious stuff (including the autorun) nothing can happen. So check first then use.
Once the sxs2.exe has been activated it is a nasty stuff. Avira antivir, Norton and MacAffee do not recognize it. Rising does if it is the newest edition (older versions don't) AVG antivirus from Grisoft does recognize it best, as far as I could find out. (Have not yet confronted Kaspersky and Bitdefender with this problem)
Once the sxs2.exe is executed all kind of nasty things happen.
1. It spreads via USB sticks and Mp3 players.
2. It changes the date to April 1980.
3. It duplicates files.
4. If might cause trouble with the file location.
5. In the end you can't use your USB stick or mp3 any longer.
What you can do
1. Try to get a good antivirus program (like AVG free down load or even better ones)
2. Clean up your system.
3. Have a close look at your stick.
4. Delete autorun and sxs2.exe on ALL your USB sticks or mp3s.
5. Clean your USB stick or mp3 with a good antivirus.
6. Try to back up all the file you need.
7. Delete or better SAFE erase all the files on your USB stick or mp3.
8. Formate it (NOT quick format)
9. Clean all the systems your USB stick or mp3 has come into contact with.
10. Warn your friends.