http://forums.techguy.org/security/...pass-virus.html

It's a bit long in the tooth with details, but gets to the crux of the situation at registry towrds the end of the post.