语言包2x

a2650183122

卡巴

Shake2333

mcafee 1x

WGC_ZY

扫描：卡巴1个、EIS1个。

卡巴：
Event: Object deleted
User type: Active user
Application name: WinRAR.exe
Application path: C:\Program Files\WinRAR
Component: File Anti-Virus
Result description: Deleted
Type: Trojan
Name: HEUR:Trojan-Dropper.Script.Agent.gen
Precision: Heuristic analysis
Threat level: High
Object type: File
Object name: script
Object path: C:\Users\Zhang\Downloads\20260203CNLanguage2x\点击安装中文语音包-3.exe//
MD5 of an object: 9A4327C62DC01AC95BB867CBA0F0A136

EIS：
C:\Users\Zhang\Desktop\点击安装中文语音包-3.exe » INNO » {app}\r968w\Cl139.l;a variant of Win64/Agent.IBD trojan;cleaned by deleting;;E70B7037350BF6AC6B95549B53F1E2C85192D50A;

在卡巴免费版上双击扫描miss的样本：一开始弹出了一个tg什么的，然后过了一会儿拦截了一个恶意远程访问，触发了PDM，kill掉了。

胡淇允

DI静态1x

执行1x

谈谈MEMZ

Cortex XDR 1 静态杀 1执行杀 ALL