Global Security Watch > How This Trojan Horse Works
[ Ariks blog] Its almost impossible to understand anything - these guys should really learn how to write articles. Also a lot of personal information can be gleened from the logs they posted - for example, we can see full names and details (encoded as URL encoded UTF-8) in the contacts directory for outlook.
Some slightly related from Technorati and Google.
Reflected tags on Technorati: Blog, Privacy, Global Security Watch