On Thu, February 16, 2017 7:55 pm, Markus Egg wrote: > The attached file was in an email as attachment as "bill": > 319598.js Detected: phish.ndb: Sanesecurity.Malware.26652.JsHeur shelter.ldb: Sanesecurity.Shelter.Malware.JSHeur.004 -- Cheers, Steve Twitter: @sanesecurity