Be careful when the software package size is abnormal and viruses and Trojans are hidden.

We often download various tools and software on the Internet. Many software are compressed to make them smaller. For the software that turns into a compressed package, you should note that the software may be hidden in viruses, Trojans, or malware.

Recently, I want to download the unlocker1.8.5 unlocker1.8.5 tool, which can remove most viruses from normal files.

The download of this software was found in both places, and its name was "061128wgrjscqcgj", but the problem came when we saw the size. One of them is 161KB, and the other is 0.99 MB. Is it because the big compression is not compressed well, or the small one is not the full version, or is there a bigger problem, such as virus?

Download them all first, scan the compressed package with November 8.1, and there is no alarm.

Use WinRAR to open two packages, without any running commands. However, the size of the main program file in the large one is significantly larger than that in the other, which is abnormal. From the current compression technology, the size difference after compression of the same file is almost impossible, unless the same file name is the same here!

The file whose size is 0.99MB

The file with a size of 161KB

Start to decompress the package. First, start with the big one-the problem occurs, the Norton alarm, the virus "Infostealer. Lineage" is found, and the operation is "isolated successfully ". The error message is "\ 061128wgrjscqcgj_V \ 061128wgrjscqcgj \ 061128wgrjscqcgj \ 1 \ unlocker1.8.5.exe ".

Norton finally discovered the virus.

Check the folder, and the next batch of unlocker1.8.5.exe is isolated by Norton again.

Toxic files are isolated

Be careful, decompress the small one, but everything is normal.

There are a lot of virus attacks through the compressed package. This is because the virus infected the file "unlocker1.8.5.exe", which leads to an abnormal increase in size, which also aroused our vigilance.

To address the increasing spread of viruses, our code is to remain unchanged: virus firewalls, network firewalls, and file monitoring. Scan for any external files to see if they are toxic. Enable Anti-Virus Software Monitoring for the first time. Finally, back up important data. (