【开放测试】卡饭病毒样本包 20260409 第284期

awsl10000次

wwwmjrcom 发表于 2026-4-11 02:00
eis 19.0.14.0 解压杀31，扫描杀3，余6

欸，所以这五个样本的检测只是挂在elg上，没被livegrid拉黑？

浦北光

卡巴斯基 清空

wwwmjrcom

awsl10000次 发表于 2026-4-11 03:53
欸，所以这五个样本的检测只是挂在elg上，没被livegrid拉黑？

不知道可能我没双击？

c199529

腾讯电脑管家18

miss 4x
---------------------
2026-4-12 00:49:13 MD5:acb80e7a65f2cd74b1702baef5988825  
infected2026040901\-点击安装简体中文包 -.exe [Win32.Backdoor.Xkcp.Hplw]
2026-4-12 00:49:13 MD5:c1916fccbec37b42d481a9eaf0a8c67e  
infected2026040901\2026年第一季度违纪违规人员名单pdf.exe [Win32.Trojan.Generic.Twhl]
2026-4-12 00:49:13 MD5:5eeb2c1a19a34e8fae54358df2bb7948  
infected2026040901\2026年第一季度违规违纪人员名单.exe [Win32.Backdoor.Phish.Trzo]
2026-4-12 00:49:13 MD5:5420c17772154007d2e38429f64131f6  
infected2026040901\31ds.scr [Msil.Backdoor.Xworm.Edhl]
2026-4-12 00:49:13 MD5:62e87370ef117a469a618127c12ceadc  
infected2026040901\点击此处安装中文语音包.exe [Win64.Trojan-Downloader.Oader.Rqil]
2026-4-12 00:49:13 MD5:26abe1501666f4301722d2e625e44076  
infected2026040901\点击此处切换简体中文语言l.exe [Win32.Trojan-Downloader.Oader.Cplw]
2026-4-12 00:49:13 MD5:48c41a330ed9d07eea62bca1a203b908  
infected2026040901\点击安装简体中文语言包 (8).exe [Win32.Trojan.FalseSign.Vmhl]
2026-4-12 00:49:13 MD5:ab8c7471f9fc4d05daa1bdba6b15e15b  
infected2026040901\点击安装简体中文语言包 (15).exe [Win32.Trojan.Generic.Xylw]
2026-4-12 00:49:13 MD5:cd70cd60b913558dc3838744a4366df5  
infected2026040901\点击安装中文语言包s.exe [Win32.Trojan.Generic.Wdkl]
2026-4-12 00:49:13 MD5:76da73642fc208350bfe369400e11829
infected2026040901\安装简体中文语言包(1).exe [Win32.Trojan.Generic.Oqil]
2026-4-12 00:49:13 MD5:adaa32393a21177b803e4e4a1af148df  
infected2026040901\如何获得客户信任？又该怎样与客户聊天？.exe [Win32.Trojan.Generic.Akjl]
2026-4-12 00:49:13 MD5:b0d431debf96097c7d1278ef4ecea5fc
infected2026040901\Szc_Wps_Office_x64_win.exe [Win32.Trojan.Generic.Pzfl]
2026-4-12 00:49:13 MD5:5b92ca990237d0453a85f959e72b6afa  
infected2026040901\Slip pembayaran.exe [Win32.Trojan.FalseSign.Iflw]
2026-4-12 00:49:13 MD5:6ec5b09ffa9ec22a5d4d17e9167dcffa  
infected2026040901\SetupAPP3.exe [Win32.Trojan.FalseSign.Qwhl]
2026-4-12 00:49:13 MD5:62022b5e3c7ccd594283a4a3d968dc83  
infected2026040901\Setup.exe [Win32.Trojan.FalseSign.Azlw]
2026-4-12 00:49:13 MD5:1deee382d42fe3dfa5c4ba2251dbb209  
infected2026040901\OneDrive.exe [Win64.Trojan.Zenpak.Xtjl]
2026-4-12 00:49:13 MD5:edff143835679fa92868047f4ec8139d
infected2026040901\ba78920f1b5fcba2c06b012995ad0dfef8c0a7b0e14587a32c2e91c5f2174db5.exe [Win32.Trojan.Cobaltstrike.Nsmw]
2026-4-12 00:49:13 MD5:3c52962b6e289caaee3dc58a06201655
infected2026040901\08_04_Bookings_pdf_png.vbs [Win32.Trojan-Downloader.Downloader.Lflw]
2026-4-12 00:49:13 MD5:75222a6d8c92378f988af0fcf3bfbb62  
infected2026040901\432.js [Script.Trojan.Generic.Aplw]
2026-4-12 00:49:13 MD5:aa0ab313d177587c8ffc52045f842b2f  
infected2026040901\HG987667890009909876567.js [Script.Trojan-Downloader.Generic.Qzfl]
2026-4-12 00:49:13 MD5:a16be7d105608808ed40761a1a33dc1f  
infected2026040901\简体中文翻译包(1).msi [Win32.Backdoor.Phish.Dplw]
2026-4-12 00:49:13 MD5:7bcae8b4349e5352dd0c70e63fe9683b  
infected2026040901\点击此处安装中文语言.msi [Win32.Trojan.Gencirc.Ekjl]
2026-4-12 00:49:13 MD5:04da911b8690dc89429bf05625b58215  
infected2026040901\45aw76d57YYYXIAZ.exe [Win32.Trojan.Generic.Nzfl]
2026-4-12 00:49:13 MD5:d60c1344d0f25170e0668de162509b87  
infected2026040901\Wire payment pdf.js [Script.Trojan.Generic.Uwhl]
2026-4-12 00:49:13 MD5:d68e346787c4cecc363ab7c96001a74d  
infected2026040901\rnek_sipari.js [Script.Trojan.Generic.Xylw]
2026-4-12 00:49:13 MD5:132fc2ede6af469123f5479f8168a5c0  
infected2026040901\RFQ.JS [Script.Trojan.Generic.Nzfl]
2026-4-12 00:49:13 MD5:55beaa03d4012b3e26e381a7f3885b37  
infected2026040901\Purchase Request_2026-04-02_FIN_pdf.js [Script.Trojan.Generic.Dzlw]
2026-4-12 00:49:13 MD5:0a11b050300756e13b9a51c43c8b0199  
infected2026040901\POG2605-3445.js [Script.Trojan.Generic.Gmnw]
2026-4-12 00:49:13 MD5:ff519d477affe36d4d15fbebdd5f21cc  
infected2026040901\Invoice_2025-0202_USD_Payment_Request.pdf.js [Script.Trojan.Generic.Ychl]
2026-4-12 00:49:13 MD5:114bb977ecb657752dfb90679dc523b3  
infected2026040901\62e4efe3032deede76edd6ed217c87a8844fb42040bb408e3fdf45fdb45cf999.msi [Win32.Trojan-Downloader.Downloader.Ogil]
2026-4-12 00:49:13 MD5:5ce14c0f3168691af8a070087a318d80  
infected2026040901\IMG20260407-00371.js [Script.Trojan.Sagent.Zimw]
2026-4-12 00:49:13 MD5:01636a383ae625fffad6d85962e94638  
infected2026040901\file.js [Script.Trojan.Generic.Rwhl]
2026-4-12 00:49:13 MD5:07b85d0e9475060ef4f248801045f46e  
infected2026040901\dsa231.js [Script.Trojan.Sagent.Sgil]
2026-4-12 00:49:13 MD5:d21a12732497e419f1affb06dc75f8be  
infected2026040901\Booking_Information.js [Script.Trojan.Generic.Mjgl]
2026-4-12 00:49:13 MD5:0db2449794d0832a6827a5747116c3f6  
infected2026040901\b8d4751c6222e4e387bb46a343bc2427035e86245e1d3e7ad073cdc16fdc59c5.msi [Win32.Trojan.Malware.Gplw]
2026-4-12 00:49:13 MD5:924b52adbcfdf7214a32882d2ea42dad  
infected2026040901\aqglfixnzrhw.bat [Bat.Trojan.Agent.Ckjl]
---------------------

davidbgb1

scottxzt 发表于 2026-4-10 17:16
可以看看这8个什么时候能够全灭

截至到现在还剩3个

scottxzt

davidbgb1 发表于 2026-4-19 11:38
截至到现在还剩3个

感谢跟踪，有些可能是潜在不安全，或者不受欢迎的安装软件，但是MD会非常谨慎的不报了。

一成不变

4.19日卡巴斯基测试：kill all

AAAAHHHHH

卡巴斯基免费版 扫描全kill