fake app 3x

myywin

https://wormhole.app/rMRBmX#nNWeZD9U_x1jRwZ_BpHpaw

fake app 3x

post88

eset   2x
pinyinSG.exe;Win32/TrojanDropper.Agent
sluvou_pinyin5.02.exe;Win32/TrojanDropper.Agent.TAN

superLYT

BDTS右键杀一个，剩下两个双击杀衍生物

莒县小哥

Curve25519

post88 发表于 2025-11-20 16:17
eset   2x
pinyinSG.exe;Win32/TrojanDropper.Agent
sluvou_pinyin5.02.exe;Win32/TrojanDropper.Agent.T ...

sogou_pinyin_guanwang_15.10A.msi 扫描 kill

扫描日志
检测引擎的版本: 32217 (20251119)
日期: 2025/11/20  时间: 16:25:08
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._build - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react-router-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/._react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/._client - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/._ai-assistant - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._assets - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/._pages - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/assets/._setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > __MACOSX/build/client/ai-assistant/pages/._main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/.DS_Store - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/304_3979cf6.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/474_593b3e0.chunk.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/6_0139599.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/7_726e849.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/8_39a47c9.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/9_ab1e7de.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/aidraw_5f0e6f6.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/airead_32260cf.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/bg_8129e8c.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/exit-imgs_ee3ba67.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/logo-big_942cf1b.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/new-sogou-logo-sider_59892c0.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/assets/setting-select_bb16c47.png - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > build/client/ai-assistant/pages/main_ec1b493.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > aegis.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > index.html - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > polyfill.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > sogou_pinyin_guanwang_15.7.exe > NSIS > ichat_1.0.2.2888.scpf > ZIP > SOGOUSmartAssistant.exe > ZIP > react-dom.production.min.js - 错误 - 文件受密码保护
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > t.jpg - Win32/Farfli.CMI 特洛伊木马 - 已保留
W:\Sandbox\Admin\DefaultBox\drive\W\WARNING\sogou_pinyin_guanwang_15.10A.msi > MSI > disk1.cab > CAB > yyxf_play.dll - Win32/ShellcodeRunner.AAI 特洛伊木马 的变量 - 已保留
已扫描的对象数: 2526
检测数: 2
已清除的对象数: 0
完成时间: 16:25:32  总扫描时间: 24 秒 (00:00:24)