假搜狗输入法

MinikoMew

竟然是首传 10x
https://www.virustotal.com/gui/f ... 7625cd901ade3f58ce3

xiaobao233通过QQ闪传分享了【sоgоu_рiпyiп_guапwaпg_15.3а_pаtсhеd.zip】
链接：https://qfile.qq.com/q/cIm2sVZaKc


来自 sougou<dot>zip
https://sougou<dot>zip/s%D0%BEg%D0%BEu_%D1%80i%D0%BFyi%D0%BF_gu%D0%B0%D0%BFwa%D0%BFg_15.3%D0%B0_p%D0%B0t%D1%81h%D0%B5d.zip

莒县小哥

idhaname

360：
扫描Miss，双击运行主防无任何提示，安装完成后才弹出需要重启清除病毒
重启后似乎没异样？

scottxzt

扫

成顔

BEST 过右键，双击后阻止命令，隔离部分。系统正常

Nocria

IKARUS

1. Date and Time:       2026/2/9 17:54:09
   
2. File Name:           Profiler.json
   
3. Original Path:       C:\Users\promi\AppData\Local
   
4. File Size:           109531 b
   
5. File Size:           106.96 kB
   
6. Detection Name:      Trojan.ShellCodeLoader
   
7. Detection-ID:        6050080
   
8. Suggestion:          Backup and Delete
   
9. Found with VDB:      108970
   
10. Found with T3        6.4.12
    

复制代码

WGC_ZY

ESET：
C:\Users\Zhang\Desktop\sоgоu_рiпyiп_guапwaпg_15.3а_pаtсhеd\sоgоu_рiпyiп_guапwaпg_15.3а_pаtсhеd.exe;NSIS/TrojanDropper.Agent.FH trojan;cleaned by deleting
C:\Users\Zhang\Desktop\sоgоu_рiпyiп_guапwaпg_15.3а_pаtсhеd\sоgоu_рiпyiп_guапwaпg_15.3а_pаtсhеd.exe » NSIS » Script.nsi;NSIS/TrojanDropper.Agent.FH trojan;cleaned by deleting