Hi!, I hope you are doing well.
We have the following alert generated for the path C:\Windows\Temp\q.vbs, attached is an image. The issue now is that the antivirus product (ESET Endpoint Antivirus) appears to block this path because it detects the Trojan, and it does not allow the execution of an Excel file with macros. I have attached an image of the error that appears.
Text in English from excel error:
Script: C:\Windows\Temp\q.vbs
Line: 5
Character: 1
Error: This script contains malicious elements, and the antivirus software has blocked it: 'Send'
Code: 800A802D
Source: Microsoft VBScript Runtime Error