Just because I recall many of you saying you're using TeamViewer for remote control on some of your hosts...

http://www.informationsecuritybuzz.c...ia-teamviewer/

Propagation of the virus exploits multiple infection vectors. The Surprise crypto-trojan is the first ransomware to be dropped via TeamViewer. Judging by the complaints submitted, the TeamViwer based infiltration dominates the malware distribution.