管家小团队版升级后上了自研引擎一通乱杀

显示全部楼层 · 发表于 2024-4-23 13:47:40

本帖最后由 yxzdennis 于 2024-4-23 13:51 编辑

好家伙

今天在办公室开票机上玩耍发现之前安装的管家小团队版升级后默默把本地BD引擎给下了只有自家的云和本地自研引擎了

彳亍口巴

好久没全扫了来一波结果吓死人

几十个病毒我定睛一看不算激活工具 49/50=0.98的误报率也叫一个离谱

蜘蛛都不带这么误报的

我现在想卸了换上360安全云了

顺带说一下我自己的办公电脑之前安装SEP 始终无法升级一直升级失败

最近一直琢磨上哪个好久没玩过的软件

之前准备用AVG 但是我们这儿的电信联通移动三家都打不开官网

不过话说回来公司拉的电信金融专线管家的本地引擎也是一直升级失败有点离谱

顺带附上扫描日志

【扫描信息】
开始时间:2024-4-23 10:34:25
扫描用时:00:29:04
扫描类型:全盘杀毒
扫描引擎:管家云查杀引擎管家系统反病毒引擎管家系统修复引擎
扫描状态:扫描完成
【扫描结果】
扫描文件数:179918
发现风险数:50
已处理风险数:50
---------------------
2024-4-23 11:07:59 MD5:a193add03abc1a58b0c4671d1b7c249c C:\Program Files (x86)\DbillSoft\1.0.11.0\UPCOS.exe [Win32.Trojan.FalseSign.wimw] [信任成功]
2024-4-23 11:09:02 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\RobotWolf\1.0.0.7\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:08:10 MD5:d7669ceb5bd50fcc9ce15cbaca9af4f1 C:\Program Files (x86)\DbillSoft\1.0.11.0\DbillSoft.exe [Win32.Trojan.FalseSign.wmhl(aiScore=h)] [信任成功]
2024-4-23 11:08:52 MD5:90827558324e2f7986de8a937159a110 D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\3.0.16.230831zl\ukeyzxbg.exe [Malicious] [信任成功]
2024-4-23 11:08:59 MD5:c46917e0ca4308fb8d3add7f7f100c47 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.0.7\AddIns\HXDiskChannel\Third\axnDll\BWClient.dll [Adware.Generic] [信任成功]
2024-4-23 11:08:44 MD5:00cf619c3cf5367f921f9f1f0680496f E:\123pan\Downloads\杀毒软件\雨过天晴.exe [Win32.Trojan.FalseSign.uylw(aiScore=m)] [信任成功]
2024-4-23 11:08:53 MD5:1573096123c25f66dabb75b4727a4c2e D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\3.0.16.230831zl\RemoteLogout.exe [Malicious] [信任成功]
2024-4-23 11:07:46 MD5:485dc32e6984c46719540a0eabe69a31 C:\Program Files (x86)\DbillSoft\1.0.10.1\DbillSoft.exe [Win32.Trojan.FalseSign.qzfl] [信任成功]
2024-4-23 11:09:05 MD5:0ec0edd34f8d7d90a2c504889f65b099 C:\Program Files (x86)\DbillSoft\1.0.11.0\lsdkp\BW_Cookie_Helper.exe [Win32.Trojan.Agen.oqil] [信任成功]
2024-4-23 11:09:01 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.2.0\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:09:11 MD5:403b424c5b3e546d1793e6a91f8a535d C:\Program Files (x86)\DbillSoft\1.0.10.1\RemoteLogout.exe [Win32.Trojan.FalseSign.mcnw] [信任成功]
2024-4-23 11:08:50 MD5:beaad9274e1e052945511472f12a53c1 D:\Program Files (x86)\[过滤]助手\1.0.1.9\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:08:57 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.1.0\AddIns\Third\RobotWolf\1.0.0.7\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:07:55 MD5:358bbdcee2ea618830c1b721958ed8d4 C:\Program Files (x86)\DbillSoft\1.0.10.1\UbillSoft.exe [Win32.Trojan.FalseSign.bplw] [信任成功]
2024-4-23 11:09:04 MD5:e3f6e1d55ea1ab6a5e962579d01e6b44 C:\Users\XXX\AppData\Roaming\downLoads\ukeysoft.exe [Adware.Generic] [信任成功]
2024-4-23 11:08:06 MD5:6d0f5c93608e7b5cecff79bb968d41c7 C:\Program Files (x86)\DbillSoft\1.0.11.0\UbillSoft.exe [Win32.Trojan.FalseSign.tgil(aiScore=h)] [信任成功]
2024-4-23 11:09:07 MD5:0ec0edd34f8d7d90a2c504889f65b099 C:\Program Files (x86)\DbillSoft\1.0.10.0\lsdkp\BW_Cookie_Helper.exe [Win32.Trojan.Agen.oqil] [信任成功]
2024-4-23 11:08:45 MD5:33072cd9a7b675fed27b2de00f052343 D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\1.0.16.220331.exe [Malicious] [信任成功]
2024-4-23 11:08:55 MD5:d0ae4f0bab3fe3afda90c6bddead8696 D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\3.0.12.230331.exe [Malicious] [信任成功]
2024-4-23 11:07:27 MD5:485dc32e6984c46719540a0eabe69a31 C:\Program Files (x86)\DbillSoft\1.0.10.0\DbillSoft.exe [Win32.Trojan.FalseSign.qzfl] [信任成功]
2024-4-23 11:08:02 MD5:8d3197de4eefacad4a979ed61b27042c C:\Program Files (x86)\DbillSoft\1.0.11.0\zczcm.dll [Malicious] [信任成功]
2024-4-23 11:09:02 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\RobotWolf\1.0.0.9\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:08:12 MD5:a193add03abc1a58b0c4671d1b7c249c C:\Program Files (x86)\DbillSoft\1.0.10.1\UPCOS.exe [Win32.Trojan.FalseSign.wimw] [信任成功]
2024-4-23 11:08:52 MD5:30f5f40daacc412083a81b36f191bf0d D:\Program Files (x86)\[过滤]助手\1.0.1.2\AddIns\InvoiceData\Third\jroUD.dll [Win32.Packed.Acked.imnw] [信任成功]
2024-4-23 11:08:58 MD5:c46917e0ca4308fb8d3add7f7f100c47 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.1.0\AddIns\HXDiskChannel\Third\axnDll\BWClient.dll [Adware.Generic] [信任成功]
2024-4-23 11:07:49 MD5:358bbdcee2ea618830c1b721958ed8d4 C:\Program Files (x86)\DbillSoft\1.0.10.0\UbillSoft.exe [Win32.Trojan.FalseSign.bplw] [信任成功]
2024-4-23 11:09:05 MD5:d709ea22945c98782dc69e996a98d643 C:\Windows\SysWOW64\Macromed\Flash\FlashHelperService.exe [Win32.AdWare.Flashserv.ogil] [信任成功]
2024-4-23 11:09:00 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\DbillSoft\1.0.10.1\kjkp\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:09:11 MD5:8d3197de4eefacad4a979ed61b27042c C:\Program Files (x86)\DbillSoft\1.0.10.0\zczcm.dll [Malicious] [信任成功]
2024-4-23 11:08:49 MD5:cc698b0e40acb87f5caa13e885e35e40 D:\Program Files (x86)\[过滤]助手\1.0.1.9\AddIns\InvoiceData\Third\jroUD.dll [Win32.Packed.Acked.iqil] [信任成功]
2024-4-23 11:08:57 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.2.0\AddIns\Third\RobotWolf\1.0.0.7\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:07:57 MD5:8d3197de4eefacad4a979ed61b27042c C:\Program Files (x86)\DbillSoft\1.0.10.1\zczcm.dll [Malicious] [信任成功]
2024-4-23 11:09:03 MD5:beaad9274e1e052945511472f12a53c1 C:\Users\XXX\AppData\Local\Temp\aisinolove.dll [Malicious] [信任成功]
2024-4-23 11:08:09 MD5:403b424c5b3e546d1793e6a91f8a535d C:\Program Files (x86)\DbillSoft\1.0.11.0\RemoteLogout.exe [Win32.Trojan.FalseSign.mcnw] [信任成功]
2024-4-23 11:08:53 MD5:873b6ca59d9f00e1a8b530beaa22f07f D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\3.0.16.230831zl\UKRJ.exe [Win32.Packed.Acked.gkjl] [信任成功]
2024-4-23 11:08:59 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\DbillSoft\1.0.11.0\kjkp\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:09:06 MD5:0ec0edd34f8d7d90a2c504889f65b099 C:\Program Files (x86)\DbillSoft\1.0.10.1\lsdkp\BW_Cookie_Helper.exe [Win32.Trojan.Agen.oqil] [信任成功]
2024-4-23 11:08:48 MD5:b4472ad6ca12b86c7f8ee25f622e81ab D:\激活工具\三星笔记本win7激活工具.eXe [Win32.Hacktool.Wincred.bzlw(aiScore=m)] [信任成功]
2024-4-23 11:08:54 MD5:d2f31a4883b03bc67dbed8612d735b51 D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\Upgrade\1.0.17.220429.exe [Malicious] [信任成功]
2024-4-23 11:07:32 MD5:403b424c5b3e546d1793e6a91f8a535d C:\Program Files (x86)\DbillSoft\1.0.10.0\RemoteLogout.exe [Win32.Trojan.FalseSign.mcnw] [信任成功]
2024-4-23 11:08:04 MD5:45cc0aac3cda09e29b6c238454570f4c C:\Program Files (x86)\DbillSoft\1.0.11.0\ukeyzxbg.exe [Win32.Trojan.FalseSign.tdkl] [信任成功]
2024-4-23 11:09:01 MD5:beaad9274e1e052945511472f12a53c1 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.1.0\AddIns\Init\Third\zprog.dll [Malicious] [信任成功]
2024-4-23 11:08:14 MD5:45cc0aac3cda09e29b6c238454570f4c C:\Program Files (x86)\DbillSoft\1.0.10.1\ukeyzxbg.exe [Win32.Trojan.FalseSign.tdkl] [信任成功]
2024-4-23 11:08:51 MD5:eece14157909c3b5212953a2d0c609cb D:\Program Files (x86)\[过滤]助手\1.0.1.3\AddIns\InvoiceData\Third\jroUD.dll [Win32.Packed.Acked.rwhl] [信任成功]
2024-4-23 11:08:58 MD5:c46917e0ca4308fb8d3add7f7f100c47 C:\Program Files (x86)\bwSoft\全电开票软件\1.2.2.0\AddIns\HXDiskChannel\Third\axnDll\BWClient.dll [Adware.Generic] [信任成功]
2024-4-23 11:07:52 MD5:a193add03abc1a58b0c4671d1b7c249c C:\Program Files (x86)\DbillSoft\1.0.10.0\UPCOS.exe [Win32.Trojan.FalseSign.wimw] [信任成功]
2024-4-23 11:09:04 MD5:863ed00b96d140425392277ce1adacb8 C:\Users\XXX\AppData\Local\Temp\hx.exe [Adware.Generic] [信任成功]
2024-4-23 11:09:08 MD5:45cc0aac3cda09e29b6c238454570f4c C:\Program Files (x86)\DbillSoft\1.0.10.0\ukeyzxbg.exe [Win32.Trojan.FalseSign.tdkl] [信任成功]
2024-4-23 11:08:48 MD5:e688891f1b30ff1a96fc990e655b1fbb D:\Program Files (x86)\[过滤]助手\1.0.1.5\AddIns\InvoiceData\Third\jroUD.dll [Win32.Packed.Acked.oqil] [信任成功]
2024-4-23 11:08:56 MD5:9724276f0dd76d8c8ba0778c37dc5112 D:\Program Files (x86)\增值税[过滤]开票软件（税务UKey版）\FileLoadAO\UKAO1__V3operation.exe [Malicious] [信任成功]
---------------------

复制代码

显示全部楼层 · 发表于 2024-4-23 14:01:07

这些软件，都是一些黑签名，加壳的，感觉360也一样会报，除非360那边有加白

显示全部楼层 · 发表于 2024-4-23 14:26:38

企业办公还是换个更靠谱的杀毒软件吧

显示全部楼层 · 发表于 2024-4-23 15:09:56

只要我全报，就不会漏报

显示全部楼层 · 发表于 2024-4-23 15:21:47

国内没几家本地查杀引擎用别人的辅助了，说句心里话本地引擎包含别人的引擎，对断网用户来说又多了一份保障

显示全部楼层 · 发表于 2024-4-23 15:30:34

ddxuchen 发表于 2024-4-23 14:26
企业办公还是换个更靠谱的杀毒软件吧

还好开票机只有税盘插入USB 其余都不用的后面都线上开票了开票机快要完成历史任务了

显示全部楼层 · 发表于 2024-4-23 15:33:49

huicuan 发表于 2024-4-23 15:21
国内没几家本地查杀引擎用别人的辅助了，说句心里话本地引擎包含别人的引擎，对断网用户来说又多了一份保障

是的我家里的电脑用的金山企业版带的红伞本地引擎金山云现在有点进步有个红伞也好如果能把蓝芯引擎升级一下就好了

显示全部楼层 · 发表于 2024-4-23 16:10:31

yxzdennis 发表于 2024-4-23 15:33
是的我家里的电脑用的金山企业版带的红伞本地引擎金山云现在有点进步有个红伞也好如果能把蓝芯引擎 ...

360就用了自己的引擎

显示全部楼层 · 发表于 2024-4-23 16:46:30

heavencc 发表于 2024-4-23 15:09
只要我全报，就不会漏报

哈哈哈之前BD的OEM引擎加持下根本不会瞎报这把好了全报这误报率可以

显示全部楼层 · 发表于 2024-4-23 16:47:36

00006666 发表于 2024-4-23 14:01
这些软件，都是一些黑签名，加壳的，感觉360也一样会报，除非360那边有加白

360没啥问题我这边重装了360套装开了张票没啥问题明天有空全扫一下看看

[讨论] 管家小团队版升级后上了自研引擎一通乱杀

本帖子中包含更多资源