Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\Sword.exe
Network activity:
Connects to:
- 'localhost':1990