Another possible feature: flood abuse@ e-mail addresses and other reporting conventions.
DDoS of antivirus update sites, forcing manual update of definitions.
If take advantage of known patches exploit, modify OS to think it is already patches.
Instead of adding an autorun entry: infect an actual executable file.
Mail death threats to various political figures around the world.
DDoS airline web allocations. Other mean things to travel infrastructure.
Terror threats. Yeow!