Remote Access: Tries to identify its external IP address. Uses network protocols on unusual ports; Persistence: Modifies auto-execute functionality by .