http://thaicert.nectec.or.th/paper/virus/a.../antivirus1.php

http://www.theballball.com/archives/00000304.html