Shouldn't the speaker/mic communication theory be easy to test? If computer microphones are being used by the malware a simple computer mic should be enough to detect if there is any communication going on...
According to the last few comments on his G+ post, he was able to isolate the communication to the mic/speaker and disable it. He also took some recordings.
