SagaLore
Elite Member
Symantec doesn't appear to be recognizing it right now. Google doesn't show any results for "Word-Text_packedList.exe" yet, which is the file inside the zip.
Just a simple variant, but what amused me was that generic heuristics couldn't pick this up, and the zip file isn't password protected. The exe uses the MS Word icon which is bound to trick a lot of users.
http://www.antisource.com/article.php/sober-registration-zip-word
Just a simple variant, but what amused me was that generic heuristics couldn't pick this up, and the zip file isn't password protected. The exe uses the MS Word icon which is bound to trick a lot of users.
http://www.antisource.com/article.php/sober-registration-zip-word
