Add some detections for CK EK based on http://www.kahusecurity.com/2013/deobfuscating-the-ck-exploit-kit/