针对国内杀软的银狐

ulyanov2233

【sogou_pinyin_guanwang_15.7.rar】
链接：https://qfile.qq.com/q/vRw4v6GaCO
密码:infected
vt初扫9/55，没有国内杀软静态检出：https://www.virustotal.com/gui/f ... 82cb97192/detection

凉猹

微步跑通，C2：154.23.221.136
C:\Users\Administrator\AppData\Local\Hxgbn9 释放白加黑
qmbrowser.exe 腾讯浏览器白文件
qbcore.dll 黑DLL PDB：C:\UserslAdministratorDesktop源710文件+源码710\gbcore\Release\gbcore.pdb
恶意逻辑在cef_api_hash()这个导出函数中，Software\\Microsoft\\Windows\\CurrentVersion\\Run 设为开机自启维权

从1.txt中解密出一个driver，用于隐藏注册表项和值、隐藏文件和目录、保护进程；看了下这个driver是开源的Hidden二改的。

后续连接C2.
本人眼拙没有看见此病毒对杀毒有什么特殊处理，其释放的Rootkit driver连Windows Defender都可以轻松拿下（当然是落地的情况下），这种程度应该是无法对抗杀软的。

munsimli

卡巴掃描與雙擊均殺，KSN未知

UNknownOoo

火绒
扫描：特征捉

1. 病毒详情：
   
2. 风险路径：C:\Users\UnknownOoo\Downloads\sogou_pinyin_guanwang_15.7.msi, 病毒名：TrojanDropper/Agent.acn, 病毒ID：304b426fa61db0ff, 处理结果：暂不处理
   

复制代码

tihs

卡巴断网锁库pdm
=====================
Emsi信誉杀
=====================
BD  free/BDTS明明可以扫描杀1.txt，但是运行还是被过，奇怪？


=====================

inhh1

tihs 发表于 2025-7-21 15:07
卡巴断网锁库pdm

Emsi信誉杀

企业版是可以行为杀的，个人版估计又是少防护层

高级反漏洞利用已阻止进程被漏洞利用以运行恶意代码。进程qmbrowser.exe已结束。 威胁名称: Generic.ShellCode.RDI.Marte.4.566553BF

Nocria

biue

腾讯电脑管家 1X

Curve25519

ESET 扫描杀

扫描日志
检测引擎的版本: 31565 (20250722)
日期: 2025/7/22  时间: 15:53:03
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > txt_1 - Win32/Farfli.CMI 特洛伊木马 - 已将选择操作推迟到扫描完成后进行
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > qbcore.dll - Win32/ShellcodeRunner.XI 特洛伊木马 - 已将选择操作推迟到扫描完成后进行
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._build - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._client - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._ai-assistant - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._assets - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._pages - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/pages/._main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > txt_1 - Win32/Farfli.CMI 特洛伊木马 - 已保留
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > qbcore.dll - Win32/ShellcodeRunner.XI 特洛伊木马 - 已保留
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._build - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._client - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._ai-assistant - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._assets - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._pages - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/pages/._main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\sogou_pinyin_guanwang_15.7\sogou_pinyin_guanwang_15.7.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
已扫描的对象数: 2522
检测数: 2
已清除的对象数: 0
完成时间: 15:54:10  总扫描时间: 67 秒 (00:01:07)

scottxzt

扫