PoisonIvy backdoor

Get Started
1

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor:Win32/Poisonivy.I

When contacting the remote server in order to receive commands, PoisonIvy starts iexplore.exe and injects into it, thus attempting to evade common firewall programs.

How PoisonIvy inject IE?

2
3

I use Zonealarm firewall and it really works to restrict many types of infiltrations.