maybe its just me but this virus sounds allot more like the work of the mydoom gang...opening ports to download smtp servers and DoSing sites to cover their intentions