there is this from f-secure with some detail of after effects.
http://www.f-secure.com/v-descs/santy_a.shtml