假火绒1x

MinikoMew

还是熟悉的网址 https://hrnfaenawmjg<Dot>com (huorongh<dot>com)
【火绒01525 (2).zip】
https://qfile.qq.com/q/Yi5ZmXttGo

vt初扫2x
https://www.virustotal.com/gui/f ... bd37b407c/detection

火绒扫描miss

莒县小哥

Xopii

\火绒01525.exe - Win32/Packed.NSISmod.BG 可疑应用程序 的变量 - 已通过删除清除

wowocock

病毒名称：Trojan/Generic!EEB700A8ADBC7E91
病毒ID：EEB700A8ADBC7E91
病毒路径：C:\Users\yhg\AppData\Local\Temp\libexpat.dll
操作类型：修改
操作结果：已处理，删除文件

进程ID：11752
操作进程：C:\Users\yhg\Desktop\新建文件夹\火绒01525 (2)\火绒01525\火绒01525.exe
操作进程命令行："C:\Users\yhg\Desktop\新建文件夹\火绒01525 (2)\火绒01525\火绒01525.exe"
父进程ID：8584
父进程：C:\Windows\explorer.exe

scottxzt

阻止

Loyisa

AVG

superLYT

双击后拦截释放的dll

WGC_ZY

卡巴
Component: Virus Scan
Result: Detected
Result description: Detected
Type: Trojan
Name: Trojan.Win32.DllHijack.aehz
Precision: Exactly
Threat level: High
Object type: File
Object name: libexpat.dll
Object path: C:\Users\Zhang\Downloads\火绒01525 (2)\火绒01525\火绒01525.exe//
MD5 of an object: 6AAB6C2D3DE3D59D9F6502E73F58B858
Reason: Databases
Databases release date: Today, 2/12/2026 7:30:00

22222221

elastic kill

trellix kill

啊松