Nice one. I have a very good friend who works for a very well known anti- virus company. The support staff have a document to follow if a virus is sent in that has not been identified. Would you believe it reads;
"First of all confirm the file is a virus."
How do you think they have been doing this? Why, by opening them and running them on their windows desktops and looking to see if the AV (which never caught it in the first place, hence why the customer has submitted it) detects it.
You could not make this up if you tried.