Is this a Javascript virus?

It most certainly is malware rather than a javascript virus . It uses JavaScript with ActiveX* and VBScript to download and execute a stage two payload that does something else. Although it is written in JavaScript, it is not executed in the browser. Instead, it is executed in the Windows Script Host when it is double-clicked. This is the deobfuscated and abridged version of the function zQlMdib from the file: There is no such thing as a Javascript virus. But, you still can run some scripts to collect some data. The most widespread example is to use JS to get like on FB etc. it's simple and nothing like a javascript virus, however, it's a trick and you can try it on your system. Hint: you can use CharCode() to trick noncomputer guys. There is a sample CharCode in my profile, take a look to get the basic idea.