/applications/core/interface/file/attachment.php?id=1580" data-fileid="1580" rel="">mati.rar
The file is a batch file that attempts to kill bdagent`s process. Then, it creates a file called "uum.com", which has the exact layout as the EICAR test file, but instead of the EICAR-STANDARD-ANTIVIRUS-TEST-FILE message, it will print a VNOM-WEAKNESS-SOPHOS-FILE! message. After creating this file, it`ll execute it.
Cheers!
