I actually captured the new variant (*a* new one, anyway) a few days ago
that no AV picked up and forwarded it to Trend and Symantc (I think the SF
guys already had it). The original attachment was a .zip file with the
contents being a .doc.exe extension.

The zip was named after my own domain, as...

[ more ]