http://myitforum.techtarget.com/blog...5/24/6746.aspx

Those **bastards*.

According to the Internet Storm Center, blocking the IP 81.222.131.59 should prevent the downloading.