Read the complete post at http://www.sophos.com/security/analyses/suspicious-behavior-and-files/susbehav194.html?_log_from=rss