The attached file was in an email as attachment as "bill": 319598.js sha1sum b32a6dfdef2444de1695cb96e6a674c2f7cda74b 319598.js sha256sum 319598.js 50df856fa3291473face6db59dcc655476e0618e457cdfa2832d0d72f61008e7 319598.js Shows several virus alerts on https://www.virustotal.com/de/ but not with clamav. BR