fakeapp youdao 1x

tihs

h通过QQ闪传分享了【Yòydaofanyi_navigationn-s_x64.rar】
链接：https://qfile.qq.com/q/IZ0Sq2MGMm

莒县小哥

WGC_ZY

EIS：
Scan Log
Version of detection engine: 32644 (20260206)
Date: 2/6/2026  Time: 2:05:02 PM
Scanned disks, folders and files: C:\Users\Zhang\Desktop\Yòydaofanyi_navigationn-s_x64.msi
User: DESKTOP-85GL5HT\Zhang
C:\Users\Zhang\Desktop\Yòydaofanyi_navigationn-s_x64.msi » MSI » disk1.cab » CAB » ThereD.dll - a variant of Win64/Agent_AGen.KGE trojan - action selection postponed until scan completion
C:\Users\Zhang\Desktop\Yòydaofanyi_navigationn-s_x64.msi » MSI » disk1.cab » CAB » resource.png » ZIP » libcef.dll - a variant of Win64/Agent.IGE trojan - action selection postponed until scan completion
C:\Users\Zhang\Desktop\Yòydaofanyi_navigationn-s_x64.msi » MSI » disk1.cab » CAB » ThereD.dll - a variant of Win64/Agent_AGen.KGE trojan - deleted
C:\Users\Zhang\Desktop\Yòydaofanyi_navigationn-s_x64.msi » MSI » disk1.cab » CAB » resource.png » ZIP » libcef.dll - a variant of Win64/Agent.IGE trojan - deleted
Number of scanned objects: 1290
Number of detections: 2
Number of cleaned objects: 2
Time of completion: 2:06:01 PM  Total scanning time: 59 sec (00:00:59)

成顔

B

wowocock

病毒名称：Trojan/Agent.clx
病毒ID：666F2DC70633C0CE
病毒路径：C:\Program Files (x86)\YoudaoDict_fanyiweb_navigation\YoudaoDict_fanyiweb_navigation\ThereD.dll
操作类型：修改
操作结果：已处理，删除文件

进程ID：1660
操作进程：C:\Windows\System32\msiexec.exe
操作进程命令行：C:\Windows\system32\msiexec.exe /V
父进程ID：764
父进程：C:\Windows\System32\services.exe

LingGao

Microsoft Defender

“Yòydaofanyi_navigationn-s_x64.msi”
Yòydaofanyi_navigationn-s_x64.msi->disk1.cab->resource.png->libcef.dll
Yòydaofanyi_navigationn-s_x64.msi->disk1.cab->ThereD.dll

Trojan:Win32/Wacatac.H!ml

superLYT

BDTS右键kill

微微的笑

ZXCVDS

360kill

lingchenheiye

火绒kill