From 5/12 we have recevied a few emails (from the CIA!!, wow) that contain a single zip (random name) - this always carried the same ex file gsbill.exe. Kaserpsky ignores it, Avast! ignores it - only my desktop F-Prot has picked this up as W32/Nadme.A. This is following an enforced signature update (which is scheduled hourly anyway).
Anyone else seen this?
Markt