It
F-Secure is reporting that the worm is behind a spike in traffic on Port 3389/TCP. Once it

The link for this article located at The Register UK is no longer available.