It is spread when the infected USB device is inserted into a Microsoft Windows workstation or server whereby the setup.exe and autorun.ini files run automatically.

FORBES: IBM Distributes Malware-Infected USB Sticks At Security Conference