>It may
>be that the initial phase of the worm, these registry modifications, were
>intended to make it easier for the attacker to come back to the machine
>later and perform some action against it.

Or use the confiscated dialup networking info to launch attacks from lots of infected computers at the same time.