Heh, well, at first it spread thru e-mail.
Then probably people sending it to another people without the knowledge that it was a bad program.