（确认为误报）只有卡巴UDS报的powershell

病毒搜集者

KART突然报了Temp目录下一堆psXXXXX.tmp.ps1，不过验了一下哈希是同一个文件
里面的内容似乎只是获取开机启动项
一开始是PDM:Trojan.Win32.Bazon.a报了其中一个，传OP报红，过了四天把文件夹里所有的都报成Malware了

VT 卡巴斯基 UDS:Trojan.PowerShell.Agent
opentip
蓝奏云 密码infected

fdsax

emsi扫描双击miss

Myrenaser

EES扫描不报

呼啸山庄

现在应该没得了，其实觉得是误报且传了op，点个reanalyze，写个It seem negative virus alarm就行（一般处理很快，二般就不知道了）。

---

2026年6月16日 11:07给我回的邮件。

Hello,

Sorry, it was a false detection. It will be fixed.
Thank you for your help.

Best regards, Alexey, Malware Analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

__________________________________________

From:      
Received:        2026-06-16 02:44:43
Sent:        2026-06-16 02:44:42
To:        newvirus@kaspersky.com
Subject:        Kaspersky Anti-virus Lab replies to your request [VD3] [FILE:2] [LN:EN]

Client feedback, query 6b24a441a4e877c037b2caf8fa97ea34b6d46b19b4926e4bc0109f5b1252f17e, type [Hash], zone [Red], was sent with the following commentary:
It seem negative virus alarm and just collective start task appx..

This message is generated automatically by OpenTIP.
With Best regards,
OpenTIP Team.

病毒搜集者

呼啸山庄 发表于 2026-6-16 16:45
现在应该没得了，其实觉得是误报且传了op，点个reanalyze，写个It seem negative virus alarm就行（一般处 ...

谢谢，我才发现我没登录，怪不得没有提交误报的入口

c199529

腾讯电脑管家18

不报毒