Ecup is a worm that spreads through file sharing networks using popular peer-to-peer applications such as eMule, Kazaa Lite, Morpheus, eDonkey2000, BearShare, Grokster, Overnet, Shareaza, WinMX, LimeWire and others. Once executed, the parasite displays a message, installs itself to the system and starts a spreading routine. Ecup does not carry any destructive payload. The worm runs on every Windows startup.