We have some cases here at the University. Apparently it disables the virus checker straight off then does its dastardly stuff.I'm not an expert but it has disabled a pc in the office next to me, and out computer centre staff have just left it switched off.
Cheers
Gary