I "think" that Klez can go over the IPC$ authentication also, but don't quote me on that.
Irony?

Klez definately does go across IPC$. Either that or it just materialized onto my computer from the firey depths of virus hell.