0719银狐（盗用火狐浏览器签名）

hashcake

TiS kill
----------------------------------------

Ti Security 1.1 Beta Pre2
Packed time: 2025/07/18 21:18
引擎信息:
| Ti 卷积核 202507151804
| Ti 智芯 202507182116
--------------------
Feedback Email: 1828529634@qq.com
----------------------------------------
开-始-扫-描
请输入要扫描的文件夹/文件: .

发现威胁: Sougou_shurufawinxp86.exe (置信度: 0.997584)
扫描完成！
路径: .
用时: 00:01:12
已扫描: 21 文件
发现威胁: 1
请按任意键继续. . .

网名丢失

火绒2025年7月20日的病毒库可以查杀了

Curve25519

ESSP 全杀。监控似乎有点迟钝？扫描了一会才报毒

监控：
2025/7/23 10:13:29;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe;Win32/Farfli.DCO 特洛伊木马;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (50F7C87E15F2DADADF3C177B85D2F58ED0E4A6FA).;DE05475608F0D273B743876794504C4054D6205E;
------------------------------------------------------------------
扫描：

扫描日志
检测引擎的版本: 31570 (20250722)
日期: 2025/7/23  时间: 10:13:11
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\main.xml > 7ZIP >  - 文件校验和 (CRC) 错误；文件可能受密码保护。
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_a592486.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_0e262ed.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_12770df.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_3f88f33.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_5866cc4.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_f86c4dc.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_9807e73.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_215f357.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_68d2e93.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_0bd4532.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_3db1ae7.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_974aed6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_6423fe6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_31dbb79.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > {app}\setup.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\0719银狐\Sougou_shurufawinxp86.exe > INNO > script_decompiled.pas - Win32/Farfli.DCO 特洛伊木马 - 已通过删除清除 [1]
已扫描的对象数: 2443
检测数: 1
已清除的对象数: 1
完成时间: 10:13:45  总扫描时间: 34 秒 (00:00:34)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。

18773149655

不是，各位大佬都在讨论各个杀毒软件的效果，只有我是真感染了qwq，火绒打不开，360安装失败，现在有点慌