2. Linux.do
  3. 我的电脑好像中银狐了

我的电脑好像中银狐了

wxk666 2026-06-20 11:00 1

如题 前几天从bing搜索下载迅雷的时候发现搜出来的结果参差不齐，然后乱点好像进入的是 https://hl-xunlei.com.cn 这个网站下载的 然后发现360无法启动了 是不是中了啊 有没有佬能分析下这个网站

最新回复 (19)
  • 550W 06-20 11:01
    1楼

    一眼假，建议电脑先断网观望一下……

  • yehuoshun 06-20 11:01
    2楼

    网上说中银狐了，只能装个360杀？

  • 一个名字 06-20 11:02
    3楼

    这网站肯定假的 杀毒没办法的话只能重装了

  • heart_of_god_lin 06-20 11:02
    4楼

    你这网站，只剩半口气的卡巴斯基都拦住了

    开始抢救数据就完事了 ^-^

  • 古明地恋 06-20 11:02
    5楼

    虽然银狐防不胜防，但必应搜索也是越来越一坨了，把默认搜索引擎切谷歌吧或者至少用必应国际版，再装一个类似Adguard的广告拦截插件，效果会稍微好一些。


    清理病毒的话，先断网，再装个杀毒软件全盘扫，最优卡巴斯基或者360，打不开就上急救版。

  • 550W 06-20 11:04
    6楼

    这什么病毒啊，卡巴斯基都扫出来了

    还有这个ai味的东西怎么敢信的啊

    有签名吗就跑

    .com.cn最近名声不太好啊，刚才还有个帖子说是有冒充豆包输入法的

  • wxk666 楼主 06-20 11:05
    7楼

    中招的特征是什么啊

    而且360无法启动怎么办 重装360也不让装

  • handsomelong 06-20 11:13
    8楼

    你从这个网站下载的应该是一个压缩包，而不是可以直接运行的 EXE 可执行文件，是吗？把这个压缩包解压之后，电脑屏幕就会出现闪动一下。随后电脑的系统资源占用会变高。这个时候如果去 C 盘的有一个文件夹下查看，会发现一个 TXT 文本文件。这个文件里会记录你目前所有的键盘操作，包括你输入的具体内容、按下的所有字母按键，以及详细的时间记录。如果是的话，那就是百分之百中招了。一般来说，遇到这种情况就需要下载 360 急救箱加强版来进行修复，或者直接重装系统最安全。

  • 550W 06-20 11:14
    9楼

    样本分析报告.zip (1.2 MB)

    云沙箱结果，银狐石锤了，断网+重装吧

  • 松雨 06-20 11:16
    10楼

    问下只是解压压缩包为什么会中病毒啊？

  • wydykh 06-20 11:17
    11楼

    这个病毒是什么原因中的呢，好奇知道一下

  • wxk666 楼主 06-20 11:21
    12楼

    怎么修复呢 不想重装系统 不好备份啊

  • www-data 06-20 11:23
    13楼

    建议老老实实重装。如果不想重装，pe环境下运行360急救箱，先干掉一部分。然后断网情况下安装360在干掉一部分。最后联网在来次全盘

  • 550W 06-20 11:24
    14楼 
    删除文件
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\exceptions.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\licenses\LICENSE
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\hmac.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\backends\openssl\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\backends\openssl\backend.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\ed448.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\__about__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\cmac.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\dh.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\VCRUNTIME140.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\hpke.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\__init__.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_decimal.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_bz2.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\licenses\LICENSE.APACHE
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_socket.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\base_library.zip
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\REQUESTED
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\asn1\asn1.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\INSTALLER
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\WHEEL
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\sboms\cryptography-rust.cyclonedx.json
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\asn1\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\backends\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_hashlib.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\aead.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\_oid.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\licenses\LICENSE.BSD
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_lzma.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\ec.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_ctypes.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\asn1.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\ed25519.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\sboms\sbom.json
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\__init__.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\METADATA
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography-48.0.0.dist-info\RECORD
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\__init__.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\fernet.py
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\hashes.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\_openssl.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\dsa.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\ocsp.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\exceptions.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\declarative_asn1.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_cffi_backend.cp312-win_amd64.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust\openssl\ciphers.pyi
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\InstallEntry.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\avcodec-58.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\GameBox.exe
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\XunLeiWebSetup12.4.10.3940xl11.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libexpat.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\libcrypto-3.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\upnp.exe
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_hashlib.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLBugReport.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\AssistantTools.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\Utility.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_lzma.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDKProxy.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\select.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\xlstat4.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libeay32.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_ctypes.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\ssleay32.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\VCRUNTIME140.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDK.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_decimal.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_bz2.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\Ftp.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\python312.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_socket.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\python3.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DHT.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLFileAssistant.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\zlib1.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDKServer.exe
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\cryptography\hazmat\bindings\_rust.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\DuiLib_u.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\_cffi_backend.cp312-win_amd64.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\libffi-8.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\unicodedata.pyd
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libcurl.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\InstallEntry.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libexpat.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\upnp.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\zlib1.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\TcpImpl.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLTaskUpgrade.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLLiveUDownload.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\X509Cert.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\msvcp90.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\ssleay32.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\VCRUNTIME140.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\Xdt.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\msvcr90.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PTarget.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XUdt.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLReImport.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PBase.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XBT.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLFileAssistant.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DHT.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDKServer.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\zlib1.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\libffi-8.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLBugHandler.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\mini_unzip_dll.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\GameBox.exe
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\avcodec-58.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\XunLeiWebSetup12.4.10.3940xl11.exe
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\xlnr.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PFramework.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\libexpat.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\xsdn.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\libcrypto-3.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\XLBugReport.exe
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\Utility.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDKProxy.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\xlstat4.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\minizip.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libeay32.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\DownloadSDK.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\Ftp.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\python312.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PCommonObjects.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\Http.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PIO.dll
    
•C:\Users\Administrator\AppData\Local\Temp\_MEI37042\python3.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\P2PStat.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\sdk\ProxyVerifier.dll
    
•C:\Users\Administrator\AppData\Local\Temp\FileOrganizer\DuiLib_u.dll
    
•C:\Users\Administrator\AppData\Local\Temp\OnlineInstall\12.4.10.3940\OnlineResource\libcurl.dll

    然后360急救箱强力模式+全盘扫描最后重启一次看看救不救的回来吧

  • handsomelong 06-20 11:25
    15楼

    压缩包里面有一个和官网一毛一样的exe文件，只要双击就会导致系统中毒，正常官网也不会把 EXE 文件放在压缩包里面呀

  • www-data 06-20 11:25
    16楼

    这样删除没用的，现在我估计早就被植入奇奇怪怪后门了。

  • 白菜 06-20 11:25
    17楼

    去年我上次也中招过一次， 360和火绒全盘扫描也没用，只能检测到被感染的，但是找不到本体，杀不掉，银狐新进展：多Rootkit配合，内核InfinityHook+穿透读写 | CN-SEC 中文网，我中招的银狐病毒和这篇文章里面的一模一样，不知道现在迭代没有，你可以参考文章一下，然后最后找了淘宝花了50块钱清理的，但还是不放心，最后又重装了系统 ^-^

  • SGY 06-20 11:26
    18楼

    360急救箱应该是可以帮到你的，上次我下了盗版WPS后担心也是弄了弄

  • 550W 06-20 11:26
    19楼

    所以只能寄希望于360急救箱强力模式+全盘扫描了

* 帖子来源Linux.do
附近帖子
返回
飞读
随机推荐