[Texaggie79]

I ran the "message.zip" in a controlled environment when I first saw it in my email, this was before any news broke. Norton, being fully updated did not recognize any infection. So I opened it up to see a .doc file. Scanned that and nothing.

So, what the hell, I knew it had to be a virus, but I wanted to see it in action. My zonealarm pro and router firewall kept it from emailing out.

I can see though how many people would open it thinking its just a zip or doc and get infected, never knowing it was a virus.

The stupid thing was, the doc file simply runs a pif file and doesn't even open word pad. If it did, that would fool even more people. Otherwise, they are going to get suspicious and check their processes.

[DefCon]

"...doc file simply runs a pif file ..."
- - -
Well, check and see if you now have this file

shimgapi.dll

hiding in your system32 directory!

Here's Norton's Advice