One invisible Unicode character makes Windows executables appear as harmless MP3s. This 15-year-old trick still fools users and can't be patched.
ddrimus's blog