bd only detected it i had to use vundo fix to get rid of it
pass:infected
/applications/core/interface/file/attachment.php?id=2256" data-fileid="2256" rel="">VundoFix_Backups.rar
Thank you for the sample !
The guys from the LAB will take a look