Potentially harmful software

[REDACTED]

Hello!

I have recently downloaded a Documents.zip file from freelancer.com and I unpacked this file and saw a icon New text document file which is not in .txt file and this look is only a mask for some application which install some harmful software in windows powershell.
Until then my laptop is a quite slowly than before.
I scaned my laptop with avast but nothing.
I am wonder what kind of harmful software is this application?
Does anymore know somthing more about it??
Here is a link from dropbox where you can download this harmful software but be careful when after you unzip this file.

https://www.dropbox.com/s/jmoyuvi735vlz7g/Documents.zip?dl=0

[Eddy]

Never post a life link to (potential) malicious software on this webboard.
Make the link not clickable. (e.g. change http to hxxp)

For a check/help with malware removal :
http://forum.avast.com/index.php?topic=53253.0

[REDACTED]

You can click at this link but you need download rar file, unpack this file and ONLY when you click masked .txt file or application you start this software.
I just need help of some experts in that field because I would like to know what this software do???

[Pondus]

I am wonder what kind of harmful software is this application?

Upload end test file  (preferably the file inside the zip)  at  www.virustotal.com   if tested before, click rescan for a fresh result
Post link to scan result here

alternative:  www.metascan-online.com  /  www.jotti.org

[REDACTED]

Thanks Pondus for such information.
This file is some kind of trojan.

Here is a result of scanning at www. virustotal.com:
https://www.virustotal.com/en/file/a8df500f25f038bd0044415c1e67ea34391d6e3ce6560a38fe3fa0b1c0218bdf/analysis/

 

[Pondus]

then this is next to get it removed

follow instructions here  https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total

see below the box you write in ... Attachments and other options


A malware expert will then assist you when online

[REDACTED]

Thanks Pondus
I will do that ASAP.
Bye

[Pondus]

Confirmed infected by ESET

===============================================================
Thank you for your submission.
The detection for this threat will be included in our next signature update, expected version: 13157.

New Text Document.lnk - LNK/TrojanDownloader.Agent.A trojan
===============================================================


Seems to be made with Trillium Toolkit 
https://blogs.mcafee.com/mcafee-labs/trillium-toolkit-leads-widespread-malware/