Its blocked too :slight_smile:

Avast labs are very quick to react to new ransom samples :wink:

Just because VT doesn’t say we detect doesn’t mean avast doesn’t block the url or the binary:
https://www.virustotal.com/en/file/b6eb979579aa43fdfad147a4821b4a12c2745be994e4de563a61d23e219fd72f/analysis/1486785235/

This may have been flagged first by filerep then by their labs as malware-gen