What made the story "interesting" (and painful) was the irony: The Target:
Security & Integrity
The worst category. A "dropper" is a small piece of code that does nothing malicious initially. Instead, it reaches out to a remote server to download the real malware—which can change daily. One day it might be ransomware. The next day, a keylogger. This makes the repack undetectable by signature-based antivirus (yes, even AVG itself) because the malicious code doesn't exist until after the installation. avg internet security patch repack