Read the complete post at http://www.sophos.com/security/analyses/suspicious-behavior-and-files/susvbh.html?_log_from=rss