1

First submission 2016-12-26 07:54:27 UTC ( 1 month, 3 weeks ago )
https://virustotal.com/en/file/fb65c2425069a2584590acf67878f5591d40e47834694276423d4e6baff9d002/analysis/1487259934/

Must have slipped true the labs auto analyse, no avast / AVG detection … good we have MCShield :wink:

2

This is a downloader…probably downloads ransom.Yet again it proves avast’s cybercapture and deepscreen not monitoring these .js and .vbs extensions is a flaw.

3

should be repaired anymore antivirus avast again to investigate the problem ransomware :wink:

4

dont worry , behavior protection still activated :wink:

5

I will create a gen detection for the file, too :wink:

6

This VBS script probably has download link that is long gone/terminated.

7

In this case yes >> http://www.downforeveryoneorjustme.com/http://vlc.servehttp.com/

https://virustotal.com/en/url/babadaa16c0bf4ca60761ee23fcd3f386a9caf2cfa156b0cd95eb7a3bdb161e4/analysis/1487341795/

8

hi , i found the problem delete sample in the virus chest . (that sample block by IDP)
suppose delete instantly ,did u fix soon ?

9

You mean the sample is not detected if deleted from virus chest? Can you attach screenshot and explain what you mean?

10

i means a sample blocked by IDP , and u go check in the chest , try delete that sample , it take a few minute delete sample.