O ENSURE AUTORUN AND DISTRIBUTION: Modifies the following registry keys: [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '??????????' = '<SYSTEM32>\iesys.exe'
MALICIOUS FUNCTIONS: Sets a new unauthorized home page for Windows Internet Explorer.
MODIFIES FILE SYSTEM : Creates the following files: <SYSTEM32>\iesys.exe Sets the 'hidden' attribute to the following files: <SYSTEM32>\iesys.exe