Troj/Agent-IRL copies itself to <Temp>\ms<random number>.exe.
Troj/Agent-IRL creates the following registry value: HKCU\Software\Microsoft\Windows\CurrentVersion\Run
InetChk
<Temp>\ms<random value>.exe work
Troj/Agent-IRL continuously issues ICMP pings to common web sites.
Troj/Agent-IRL issues fake HTTP requests to simulate traffic to web sites.