ML/Augur Trojan notification VbsEdit

[Sebastiaan 0]

Last Thursday one of my coworkers got quite a few ESET ML/Augur antivirus notifications that a threat was found. The product that seemed to be giving problems was VbsEdit. The product has been installed on the device for a long time and has not raised issues before.

The coworker immediately disconnected the network connection and has removed the software. Here is the relevant Virustotal link of the file that was generating the notifications:  https://www.virustotal.com/gui/file/2129b29bdbf58ab04d95dba658c20a47d1b9e98b07b3f8e4d89a80c67a197ea7

Our IT partner seems to think it is a false positive, however we seek some additional confirmation herein. Could you confirm or deny if this is indeed a false positive or let us know what steps we should take to find out. 

If necessary, we could probably reproduce the notification by either reinstalling the software or recovering the removed files.

Kind regards,

Sebastian

[Marcos 5,451]

It was a false positive, it's fixed already.