fake app 1x vt初扫:5/63

ulyanov2233

【pinyin_v2.16_SLetu_8.3.2.rar】
链接：https://qfile.qq.com/q/4FCuQcy7GU
https://wormhole.app/pA10Xx#os_9J-iknrtMa62HGN0BXw
https://www.virustotal.com/gui/f ... e414e1c0b/detection

superLYT

BD杀衍生物

haol

生成物 https://wormhole.app/aRKmK9#ZC55Cgm8D6Hdg9wAlb4xAQ
Avira found HEUR/APC.AVADL

munsimli

Emsisoft掃描miss，雙擊殺衍生物

2025/8/10 上午 10:16:03
即時監控檢測 惡意軟體 "Gen:Variant.Lazy.689827 (B)" 來自於 C:\Program Files (x86)\synchost\driverhelper\Yj.dll (SHA1: B46931E14ACF742F0975F6D94A1B9F4A58CC3702)

2025/8/10 上午 10:16:03
依據規則：隔離

心醉咖啡

360扫描miss

lingchenheiye

火绒高启发下扫了很久才扫出来一个，也算是通过吧

xiaobaobao20

wscs kill衍生物

LSPD

eis 杀衍生物

1. 2025/8/10 11:40:49;文件系统实时防护;文件;C:\Program Files (x86)\synchost\driverhelper\Yj.dll;Win64/Agent_AGen.FYL 特洛伊木马 的变量;已通过删除清除;msi\abc;在通过应用程序创建的新文件上发生了事件: C:\Users\abc\Desktop\pinyin_v2.16_SLetu_8.3.2.exe (224F40DD4A83DE98BB2C453512E5BFB2353BE82B).;B46931E14ACF742F0975F6D94A1B9F4A58CC3702;2024/5/11 16:08:18

复制代码

ongarabazanade

360kill

Curve25519

ESET Smart Security Premium 解压不报，扫描杀

扫描日志
检测引擎的版本: 31672 (20250810)
日期: 2025/8/11  时间: 10:01:43
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_a592486.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_0e262ed.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_12770df.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_3f88f33.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_5866cc4.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_f86c4dc.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_9807e73.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_215f357.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_68d2e93.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_0bd4532.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_3db1ae7.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_974aed6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_6423fe6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_31dbb79.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > sogou_pinyin_guanwang_15.5c.exe > NSIS > ichat_1.0.2.2852.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\pinyin_v2.16_SLetu_8.3.2\pinyin_v2.16_SLetu_8.3.2.exe > NSIS > Yj.dll - Win64/Agent_AGen.FYL 特洛伊木马 的变量 - 已保留
已扫描的对象数: 2408
检测数: 1
已清除的对象数: 0
完成时间: 10:02:10  总扫描时间: 27 秒 (00:00:27)