Add two new signature modules, the first checks if the malware attempted to prevent cuckoo from obtaining dropped files by maintaining an open handle to a dropped file with FILE_SHARE_READ not specified -- a bug we've recently worked around in cuckoomon

The second signature modules checks if the malware is trying to identify installed AV products based on installation paths