Stealer 17x

xiaozhu009

https://qfile.qq.com/q/AI1TEp8AO6
https://pan.huang1111.cn/s/A6X5BsB

tony099

KES 扫描 14X

Myrenaser

EES解压剩余 x1，自动ELG x1
SPOILER_madsnod_2.0.2.exe：未发现威胁 SPOILER_madsnod_2.0.2.exe - ESET LiveGuard - 高级行为报告

C:\Users\Administrator\Desktop\BewysVanBetaling16.js: JS/Packed.Agent.AA suspicious application
C:\Users\Administrator\Desktop\goingbestplacecomingforbetterwaysinthelifegoodformebest.hta: JS/LausivLoader.B trojan
C:\Users\Administrator\Desktop\ddos.exe: A variant of MSIL/Agent.DZT trojan
C:\Users\Administrator\Desktop\pdfreader.vbs: VBS/TrojanDownloader.Agent.ADJI trojan
C:\Users\Administrator\Desktop\GoogleChromeInstaller.vbs: VBS/TrojanDownloader.Agent.ADJI trojan
C:\Users\Administrator\Desktop\lnstaller.exe: A variant of Win64/Packed.CAB.BS trojan
C:\Users\Administrator\Desktop\i7x8vu.exe: A variant of WinGo/Kryptik.VC trojan
C:\Users\Administrator\Desktop\AndromedaLoader.exe: A variant of WinGo/Agent_AGen.XS trojan
C:\Users\Administrator\Desktop\Mod Menu.exe: A variant of WinGo/Kryptik.VC trojan
C:\Users\Administrator\Desktop\Microsoft365(Activation).exe: A variant of Generik.MLQQLTR trojan
C:\Users\Administrator\Desktop\payload.exe: A variant of Win64/Spy.Agent.AUI trojan
C:\Users\Administrator\Desktop\mpclient.dll: A variant of Win64/GenKryptik.HRGN trojan
C:\Users\Administrator\Desktop\salt.exe: A variant of Win64/Agent_AGen.PAM trojan
C:\Users\Administrator\Desktop\vsdbg.dll: A variant of Win64/Aotera.KZ trojan
C:\Users\Administrator\Desktop\ws-Setup-Complete.exe: A variant of WinGo/Kryptik.VA trojan
C:\Users\Administrator\Desktop\WindowsSecurityServices.exe: A variant of MSIL/Agent.FGG trojan

000EXE

360扫描杀16

anxiety520

BD 扫描双击 剩余SPOILER_madsnod_2.0.2.exe

一只小白泽

sep扫描后剩余一个（巧的是剩下的那个居然会被智量扫描杀了）

UNknownOoo

火绒
扫描：5x（剩下12x）

1. 扫描文件：17
   
2. 发现风险：5
   
3. 已处理风险：5
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\20260717Stealer 17x\ddos.exe, 病毒名：TrojanSpy/MSIL.Stealer.add!crit, 病毒ID：4c92bced597d1cd1, 处理结果：已处理，删除文件
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\20260717Stealer 17x\goingbestplacecomingforbetterwaysinthelifegoodformebest.hta, 病毒名：Trojan/JS.Obfuscated.hh, 病毒ID：e7eea7d97c0cde42, 处理结果：已处理，删除文件
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\20260717Stealer 17x\ws-Setup-Complete.exe, 病毒名：Trojan/Loader.vo, 病毒ID：7230a1c98f7fe6fe, 处理结果：已处理，删除文件
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\20260717Stealer 17x\AndromedaLoader.exe, 病毒名：TrojanSpy/Stealer.pa, 病毒ID：7fec40225cf45b49, 处理结果：已处理，删除文件
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\20260717Stealer 17x\Microsoft365(Activation).exe >> [NSIS].nsi, 病毒名：HEUR:TrojanSpy/Stealer.s, 病毒ID：0ff6fcb4ac25cea1, 处理结果：已处理，删除文件
   

复制代码

ahhh

腾讯管家  7x

xjwtzq

奇安信杀15，拦截2

c199529

腾讯电脑管家18

24+小时复测 miss 4x（7 -> 13）

---------------------
2026-7-19 09:47:15 MD5:4f0ca8f7e506ecccc125928fd160055e 20260717Stealer 17x\AndromedaLoader.exe [Win32.Trojan.Stealer.Vwhl]  [未修复]
2026-7-19 09:47:15 MD5:cc7972faa869e8cd6d6cee77b952fe46 20260717Stealer 17x\ws-Setup-Complete.exe [Win32.Trojan.FalseSign.Agow]  [未修复]
2026-7-19 09:47:15 MD5:bc7d571df70ac82cf10c5277d0f02767 20260717Stealer 17x\WindowsSecurityServices.exe [Win32.Trojan.FalseSign.Ftgl]  [未修复]
2026-7-19 09:47:15 MD5:89876b0af0f4d2d39273741801d93c82 20260717Stealer 17x\vsdbg.dll [Win32.Trojan.W64.Rwhl]  [未修复]
2026-7-19 09:47:15 MD5:52e3e8a125e0d4622af567add2c3f513 20260717Stealer 17x\salt.exe [Win32.Trojan-Downloader.Agent.Lzfl]  [未修复]
2026-7-19 09:47:15 MD5:f1ee0061b90fb095412c861376e7fd57 20260717Stealer 17x\mpclient.dll [Win64.Backdoor.Agent.Hmnw]  [未修复]
2026-7-19 09:47:15 MD5:4e355f6a33988ae05f8b6d48f6b21d8e 20260717Stealer 17x\Mod Menu.exe [Win64.Trojan.LummaStealer.Zchl]  [未修复]
2026-7-19 09:47:15 MD5:ae46beb536b185ee659838c6fc42123a 20260717Stealer 17x\Microsoft365(Activation).exe [Js.Trojan.Agent.Dtgl]  [未修复]
2026-7-19 09:47:15 MD5:c539922546828047309ddfa99a2fd6a3 20260717Stealer 17x\lnstaller.exe [Win32.Backdoor.Agent.Bkjl]  [未修复]
2026-7-19 09:47:15 MD5:3de5acd6dc23eeb63d7d52b108f0e2da 20260717Stealer 17x\i7x8vu.exe [Win32.Trojan.FalseSign.Ckjl]  [未修复]
2026-7-19 09:47:15 MD5:5430ecd46f6ff7764070f320f1470bd6 20260717Stealer 17x\ddos.exe [Msil.Trojan.Agent.Yolw]  [未修复]
2026-7-19 09:47:15 MD5:21f13f6a917e2eb7b035084d68eeb385 20260717Stealer 17x\BewysVanBetaling16.js [Js.Trojan.Agent.Nsmw]  [未修复]
2026-7-19 09:47:15 MD5:63bd99d4ce2e11852e71ba2058f8d6e3 20260717Stealer 17x\goingbestplacecomingforbetterwaysinthelifegoodformebest.hta [Script.Backdoor.Agent.Ikjl]  [未修复]
---------------------