/tag/POP

the Guardian – 25 May 26 Pope Leo denounces ‘culture of power’ driving rise of AI Pontiff calls for ‘disarming’ of artificial intelligence and apologises for church’s delay in condemning slavery [!quote]+ 教宗呼吁 "解除 "人工智能的武装，并为教会迟迟不谴责奴隶制道歉 教皇利奥谴责了推动人工智能迅速崛起的 “权力文化”，同时警告说，随着人工智能渗透到从工作到战争的方方面面，这项技术必须受到 "最严格的 "道德约束。 他的通谕–教皇任期内第一份关于保护人类的重要文献–中，他还对天主教会长期拖延谴责奴隶制表示歉意，称其为 “基督教记忆中的一道伤口”，并谈到了数字经济带来的 “新形式奴隶制”。 利奥在去年5月当选后不久就表示，他认为人工智能是当今人类面临的最大威胁，他打破传统，于周一在梵蒂冈举行的一次活动中亲自提交了这份文件。克里斯托弗-奥拉（Christopher Olah）是美国人工智能公司Anthropic的联合创始人之一，该公司正就人工智能的伦理问题与唐纳德-特朗普（Donald Trump）政府打官司。 通谕是教皇对天主教会 14 亿成员进行教诲的最高形式之一，通常概述教皇的优先事项，同时强调社会中的主要问题。 在这份名为《伟大的人性》（Magnifica Humanitas）的文件中，出生于芝加哥、首位在美国出生的教皇利奥提到 “战争作为国际政治工具的复兴令人不安”，并称人工智能正在帮助促进 “战争正常化”。 "他写道："为此，在战争中开发和使用人工智能必须受到最严格的道德约束，以保证对人类尊严和生命神圣性的尊重，并避免竞相开发此类武器。 利奥敦促 "解除 "人工智能的武装，同时指出一些自主武器系统 “实际上是人类无法控制的”。 "他写道："解除人工智能的武装意味着将其从’武装’竞争的心态中解放出来。"裁军并不意味着拒绝技术，而是防止技术主宰人类，"他补充说，技术应该是 “对人类友好的”，所有人都可以使用，并允许讨论和辩论。 NBC News – 25 May 26 Pope Leo warns AI is fueling conflict, urges world to ‘slow’ advances The first American pontiff in history was writing in his first encyclical, a sweeping and eagerly anticipated manifesto on the subject that was released Monday. AP News – 25 May 26 Pope calls for robust regulation of AI in manifesto that ponders the future... Pope Leo XIV has called for robust regulation of artificial intelligence and for its developers to work for the common good rather than profit. 1 个帖子 - 1 位参与者 阅读完整话题

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

电脑会随机启动一个恶意广告弹窗程序 位置在 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\popAD.exe 是伪装搜狗输入法的广告，点击会跳转到 iii3.net 的网址 截图为 http://101.132.115.120/?explorer/share/file&hash=2abfSrDDx20YrPISmYnueseOuCpeHrhLUBpae7AILuXpQoDJUhRte31e_jzJRnciKQKV 这个是我买的阿里云的 es 搭的简易网盘，不放心可以不点击 另外这个程序还有签名 是 深圳市聚点互娱文化传媒有限公司 以为是搜狗的广告，就把搜狗输入法卸载了还是会有 把这个程序删除了，还是会随机生成并启动 用 Process Explorer 分析了下 调用链是 PerceptionSimulationService.exe->backgroundTaskHost.exe ->popAD.exe 然后 popAD.exe 的 dlls 全是 C:\Windows\System32 和 C:\Windows\SysWOW64 这两个目录的 该怎么揪出这个凶手，先谢谢各位了， 如果需要其他截图我再附上 popAD.exe 的 dlls Process: PopAD.exe Pid: 12244 Name Description Company Name Path advapi32.dll Advanced Windows 32 Base API Microsoft Corporation C:\Windows\SysWOW64\advapi32.dll bcrypt.dll Windows Cryptographic Primitives Library (Wow64) Microsoft Corporation C:\Windows\SysWOW64\bcrypt.dll bcryptprimitives.dll Windows Cryptographic Primitives Library Microsoft Corporation C:\Windows\SysWOW64\bcryptprimitives.dll C_1252.NLS C:\Windows\System32\C_1252.NLS C_20127.NLS C:\Windows\System32\C_20127.NLS clbcatq.dll COM+ Configuration Catalog Microsoft Corporation C:\Windows\SysWOW64\clbcatq.dll combase.dll Microsoft COM for Windows Microsoft Corporation C:\Windows\SysWOW64\combase.dll comctl32.dll 用户体验控件库 Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.6926_none_a862dc10867520ec\comctl32.dll CoreMessaging.dll Microsoft CoreMessaging Dll Microsoft Corporation C:\Windows\SysWOW64\CoreMessaging.dll CoreUIComponents.dll Microsoft Core UI Components Dll Microsoft Corporation C:\Windows\SysWOW64\CoreUIComponents.dll crypt32.dll Crypto API32 Microsoft Corporation C:\Windows\SysWOW64\crypt32.dll crypt32.dll.mui 加密 API32 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\crypt32.dll.mui cryptbase.dll Base cryptographic API DLL Microsoft Corporation C:\Windows\SysWOW64\cryptbase.dll cryptnet.dll Crypto Network Related API Microsoft Corporation C:\Windows\SysWOW64\cryptnet.dll cryptsp.dll Cryptographic Service Provider API Microsoft Corporation C:\Windows\SysWOW64\cryptsp.dll d3d11.dll Direct3D 11 Runtime Microsoft Corporation C:\Windows\SysWOW64\d3d11.dll DataExchange.dll Data exchange Microsoft Corporation C:\Windows\SysWOW64\DataExchange.dll dcomp.dll Microsoft DirectComposition Library Microsoft Corporation C:\Windows\SysWOW64\dcomp.dll dhcpcsvc.dll DHCP Client Service Microsoft Corporation C:\Windows\SysWOW64\dhcpcsvc.dll dnsapi.dll DNS Client API DLL Microsoft Corporation C:\Windows\SysWOW64\dnsapi.dll dpapi.dll Data Protection API Microsoft Corporation C:\Windows\SysWOW64\dpapi.dll dxgi.dll DirectX Graphics Infrastructure Microsoft Corporation C:\Windows\SysWOW64\dxgi.dll FWPUCLNT.DLL FWP/IPsec 用户模式 API Microsoft Corporation C:\Windows\SysWOW64\FWPUCLNT.DLL gdi32.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32.dll gdi32full.dll GDI Client DLL Microsoft Corporation C:\Windows\SysWOW64\gdi32full.dll GdiPlus.dll Microsoft GDI+ Microsoft Corporation C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.7291_none_d95545c5e100c6e6\GdiPlus.dll iertutil.dll Internet Explorer 的运行时实用程序 Microsoft Corporation C:\Windows\SysWOW64\iertutil.dll imm32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation C:\Windows\SysWOW64\imm32.dll IPHLPAPI.DLL IP Helper API Microsoft Corporation C:\Windows\SysWOW64\IPHLPAPI.DLL kernel.appcore.dll AppModel API Host Microsoft Corporation C:\Windows\SysWOW64\kernel.appcore.dll kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\kernel32.dll KernelBase.dll Windows NT BASE API Client DLL Microsoft Corporation C:\Windows\SysWOW64\KernelBase.dll locale.nls C:\Windows\System32\locale.nls msasn1.dll ASN.1 Runtime APIs Microsoft Corporation C:\Windows\SysWOW64\msasn1.dll msctf.dll MSCTF Server DLL Microsoft Corporation C:\Windows\SysWOW64\msctf.dll msimg32.dll GDIEXT Client DLL Microsoft Corporation C:\Windows\SysWOW64\msimg32.dll mskeyprotect.dll Microsoft Key Protection Provider Microsoft Corporation C:\Windows\SysWOW64\mskeyprotect.dll msvcp_win.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\msvcp_win.dll msvcrt.dll Windows NT CRT DLL Microsoft Corporation C:\Windows\SysWOW64\msvcrt.dll mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation C:\Windows\SysWOW64\mswsock.dll mswsock.dll.mui Microsoft Windows Sockets 2.0 服务提供程序 Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\mswsock.dll.mui ncrypt.dll Windows NCrypt Router Microsoft Corporation C:\Windows\SysWOW64\ncrypt.dll ncryptsslp.dll Microsoft SChannel Provider Microsoft Corporation C:\Windows\SysWOW64\ncryptsslp.dll netutils.dll Net Win32 API Helpers DLL Microsoft Corporation C:\Windows\SysWOW64\netutils.dll nsi.dll NSI User-mode interface DLL Microsoft Corporation C:\Windows\SysWOW64\nsi.dll ntasn1.dll Microsoft ASN.1 API Microsoft Corporation C:\Windows\SysWOW64\ntasn1.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\SysWOW64\ntdll.dll ntdll.dll NT 层 DLL Microsoft Corporation C:\Windows\System32\ntdll.dll ntmarta.dll Windows NT MARTA provider Microsoft Corporation C:\Windows\SysWOW64\ntmarta.dll ole32.dll Microsoft OLE for Windows Microsoft Corporation C:\Windows\SysWOW64\ole32.dll oleacc.dll Active Accessibility Core Component Microsoft Corporation C:\Windows\SysWOW64\oleacc.dll oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation C:\Windows\SysWOW64\oleaccrc.dll oleaut32.dll OLEAUT32.DLL Microsoft Corporation C:\Windows\SysWOW64\oleaut32.dll OnDemandConnRouteHelper.dll On Demand Connctiond Route Helper Microsoft Corporation C:\Windows\SysWOW64\OnDemandConnRouteHelper.dll PopAD.exe C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\PopAD.exe profapi.dll User Profile Basic API Microsoft Corporation C:\Windows\SysWOW64\profapi.dll rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation C:\Windows\SysWOW64\rasadhlp.dll rpcrt4.dll Remote Procedure Call Runtime Microsoft Corporation C:\Windows\SysWOW64\rpcrt4.dll rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation C:\Windows\SysWOW64\rsaenh.dll schannel.dll TLS / SSL Security Provider Microsoft Corporation C:\Windows\SysWOW64\schannel.dll sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation C:\Windows\SysWOW64\sechost.dll SHCore.dll SHCORE Microsoft Corporation C:\Windows\SysWOW64\SHCore.dll shell32.dll Windows Shell Common Dll Microsoft Corporation C:\Windows\SysWOW64\shell32.dll shlwapi.dll Shell Light-weight Utility Library Microsoft Corporation C:\Windows\SysWOW64\shlwapi.dll SortDefault.nls C:\Windows\Globalization\Sorting\SortDefault.nls srvcli.dll Server Service Client DLL Microsoft Corporation C:\Windows\SysWOW64\srvcli.dll sspicli.dll Security Support Provider Interface Microsoft Corporation C:\Windows\SysWOW64\sspicli.dll TextInputFramework.dll "TextInputFramework.DYNLINK" Microsoft Corporation C:\Windows\SysWOW64\TextInputFramework.dll twinapi.appcore.dll twinapi.appcore Microsoft Corporation C:\Windows\SysWOW64\twinapi.appcore.dll ucrtbase.dll Microsoft® C Runtime Library Microsoft Corporation C:\Windows\SysWOW64\ucrtbase.dll urlmon.dll Win32 的 OLE32 扩展 Microsoft Corporation C:\Windows\SysWOW64\urlmon.dll user32.dll 多用户 Windows 用户 API 客户端 DLL Microsoft Corporation C:\Windows\SysWOW64\user32.dll uxtheme.dll Microsoft UxTheme Library Microsoft Corporation C:\Windows\SysWOW64\uxtheme.dll webio.dll Web Transfer Protocols API Microsoft Corporation C:\Windows\SysWOW64\webio.dll win32u.dll Win32u Microsoft Corporation C:\Windows\SysWOW64\win32u.dll windows.storage.dll Microsoft WinRT Storage API Microsoft Corporation C:\Windows\SysWOW64\windows.storage.dll WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation C:\Windows\SysWOW64\WindowsCodecs.dll winhttp.dll Windows HTTP Services Microsoft Corporation C:\Windows\SysWOW64\winhttp.dll wininet.dll Internet Extensions for Win32 Microsoft Corporation C:\Windows\SysWOW64\wininet.dll winmm.dll MCI API DLL Microsoft Corporation C:\Windows\SysWOW64\winmm.dll winnlsres.dll NLSBuild resource DLL Microsoft Corporation C:\Windows\SysWOW64\winnlsres.dll winnlsres.dll.mui NLSBuild 资源 DLL Microsoft Corporation C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackzh-CN_19041.81.277.0_neutral__8wekyb3d8bbwe\Windows\System32\zh-CN\winnlsres.dll.mui winnsi.dll Network Store Information RPC interface Microsoft Corporation C:\Windows\SysWOW64\winnsi.dll winspool.drv Windows Spooler Driver Microsoft Corporation C:\Windows\SysWOW64\winspool.drv wintrust.dll Microsoft Trust Verification APIs Microsoft Corporation C:\Windows\SysWOW64\wintrust.dll WinTypes.dll Windows Base Types DLL Microsoft Corporation C:\Windows\SysWOW64\WinTypes.dll wldp.dll Windows Lockdown Policy Microsoft Corporation C:\Windows\SysWOW64\wldp.dll wow64.dll Win32 Emulation on NT64 Microsoft Corporation C:\Windows\System32\wow64.dll wow64cpu.dll AMD64 Wow64 CPU Microsoft Corporation C:\Windows\System32\wow64cpu.dll wow64win.dll Wow64 Console and Win32 API Logging Microsoft Corporation C:\Windows\System32\wow64win.dll ws2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation C:\Windows\SysWOW64\ws2_32.dll

IT之家 5 月 13 日消息，制造商 SoundPEATS 宣布推出一款 POP Clip2 开放式耳机，定价为 321 元， 首发价 289 元 。 该耳机使用开放式耳夹式设计，提供 IPX5 认证，佩戴轻盈无感，适合长时间使用及高强度运动。提供 12mm 单元，搭载声学腔体与 360° 空间音效技术，提供四麦克风 ENC 降噪，延时低至 0.06ms，耳机单耳续航 10 小时，在配合充电盒的情况下提供 42 小时续航。 IT之家附耳机参数： 京东 SoundPEATS 泥炭 POP Clip2 耳机 289 元 直达链接 京东 618 无门槛红包 面额至高 26618 元，每天抽 3 次： 点此抽红包 淘宝 618 无门槛红包 面额至高 26888 元，每天抽 1 次： 点此抽红包

IT之家 5 月 8 日消息，微软子公司 Playground Games 今天公布了《极限竞速：地平线 6》游戏的车载电台曲目列表， 收录 Ado、YOASOBI、Creepy Nuts、宇多田光、樱坂 46 等日本艺人的代表 J-Pop 歌曲 。 《极限竞速：地平线 6》共设有 9 个广播电台 ，是系列游戏史上曲目最多的一作。IT之家附上主要歌曲如下： Ado：《New Genesis（新時代）》 宇多田光（宇多田ヒカル）：《Electricity（Salute Remix）》 YOASOBI：《Idol（アイドル）》 Creepy Nuts：《Bling-Bang-Bang-Born》 小野贤章：《Night Drivin'》 樱坂 46（櫻坂 46）：《Shoninyokkyu（承認欲求）》 Maiki P：《Darling Game Over Love（ダーリンゲームオーバーラブ）》 Pilaf 星人（ピラフ星人）：《TETETE》 永远是深夜有多好。（ずっと真夜中でいいのに。）：《TAIDADA》 潘野实々美、KOTONOHOUSE：《Take You Higher》 KANA-BOON：《Song of the Dead（ソングオブザデッド）》 七音阿卡莉（ナナヲアカリ）：《Good luck to me tomorrow（明日の私に幸あれ）》《恋愛脳》 DÉ DÉ MOUSE、Pa’s Lam System：《Carry On》 YELLOW MAGIC ORCHESTRA：《RYDEEN /TECHNOPOLIS》 10-FEET：《Dai Zero Kan （第ゼロ感）》 GATSA!：《Atomboys（鉄腕アトム）》 缶缶、yowenecity：《Curtain Call（カーテンコール）》 DE DE MOUSE & 一十三十一：《摩天楼 Starlight》 一十三十一：《KOIWA OMOINO MAMA（恋は思いのまま）》 新理澄（シンリズム）：《POPSONG》 ウワノソラ：《Spin the Marvin（マーヴィンかけて）》 STUTS：《Changes (feat. JJJ)》 HUNGER：《わ道 (WADOU) (DJ Mitsu The Beats Remix)》 GAGLE：《BFFB / 千代（SENDAI）》 小濑村晶：《Knew Who I Was Going To Hurt》

jpopsuki：以Jpop相关资源为主，喜欢日音的推荐，缺点是访问速度比较慢，全日语界面。 馒头：比较综合的影音站点，目前PT第一大站？适合有一定PT经验的入。 需要的佬友留邮箱和预注册id，馒头需要留低隐链接或者PTD图或者已有站点个人主页截图，证明有PT经验 (可私信)，最低要求是过新手考核和不能玩死。 顺便自己也求一个U2的 ，可以发动画浓度验证和实体周边图，有NAS可长期稳定保种，如果佬友刚好看到的话可以私信联系，感谢。 1 个帖子 - 1 位参与者 阅读完整话题

IT之家 4 月 30 日消息，Fractal Design（分形工艺）昨日推出了 Pop 2 Vision 机箱。这款中塔型号采用了流行的左右分舱 270°“无柱”全视海景房结构，整体设计干净利落。 令人欣喜的是，分形工艺并未止步于行业范式，而是在此基础上多跨了一步： 其顶部和右侧前方的风扇安装位配备隐藏线材遮板 ，彰显了品牌的北欧简约风格。 这款机箱具备可拆卸式玻璃面板，搭配通风右侧板与顶部 MESH 磁吸滤网；内部有专属走线空间、大理线孔、模块化电源位。 其兼容到 280mm 宽度的 E-ATX 主板，支持背插型号，可容纳 412mm 长度的显卡、190mm 长度的 ATX 电源、172mm 高度的处理器散热器，上方提供 360 / 280 冷排安装位。 分形工艺 Pop 2 Vision 机箱标准配置四颗 120mm 反向扇叶风扇，提供黑色无光 / 黑色 ARGB / 白色 ARGB 三种版本， 售价 649 元起 。 京东 分形工艺 Pop 2 Vision 机箱 649 元 直达链接

https://github.com/blindFS/Glyphlow

https://www.axios.com/2026/04/24/catholics-pope-vatican-artificial-intelligence 4 个帖子 - 3 位参与者 阅读完整话题

如图，在微信小程序中popup弹出层的表格 在ios上滑动的时候总是会出现卡顿现象（具体表现为滑动事件直接停止，多次滑动屏幕后才能继续滑动，且触碰到边界的时候触发较为频繁） 各位佬们有没有什么好的解决方案（求求了 ）。 ps：小程序开发官网都翻烂了 4 个帖子 - 2 位参与者 阅读完整话题

IT之家 4 月 20 日消息，据科技媒体 GSMArena 今天报道，传音现已在海外市场推出 Tecno Pop X 5G 手机， 新机搭载联发科天玑 6400 芯片 ，背部带有横向相机模组，可选 4GB+128GB 和 6GB+128GB 两种配置。 据介绍，这款手机配备 6.78 英寸 IPS LCD 屏幕， 分辨率为 720*1576 ，支持 120Hz 高刷，峰值亮度可达 560 尼特，采用挖孔设计，内置 800 万像素前置摄像头。 规格方面，这款手机配备 1300 万像素后置主摄、LED 闪光灯，相机模组部分采用 6 系航空铝材打造，具备 IP64 防尘防水，机身厚度 8.2mm。 此外，这款手机还带有侧边指纹识别、3.5mm 耳机接口，运行基于 Android 16 的 HiOS 16 操作系统，拥有 AI 降噪、AI 写作助理、AI 抠图等功能，支持无网通信，可在没有任何网络连接的情况下，与同品牌机型直接收发短信、通话。 目前这款手机已在海外开售，售价 15999 印度卢比（IT之家注：现汇率约合 1172 元人民币）起。

BBC News Pope says 'tyrants' speech was not aimed at Trump The pontiff says his remarks have been misinterpreted after a spat with the US president. [!quote]+ 教皇利奥在本周早些时候的一次演讲中批评 "暴君 "将数十亿美元用于战争，他说他并不是要与唐纳德-特朗普辩论。 教皇说，这番话是在与美国总统发生备受瞩目的争吵几天后发表的，两星期前就已经写好了–“远在总统对我发表评论之前”。 "他在周六飞往安哥拉的航班上对记者说："然而，就像我试图与总统辩论一样，这完全不符合我的利益。 3 个帖子 - 3 位参与者 阅读完整话题

fedora pop_os! debian cachyos opensuse arch linux 点击以查看投票。 6 个帖子 - 5 位参与者 阅读完整话题

IT之家 4 月 17 日消息，据科技媒体 GSMArena 今天报道，传音现已官宣 Tecno Pop X 5G 手机将在 4 月 20 日发布，部分参数已经在亚马逊商品页面曝光。 据介绍， 这款手机将配备 6500mAh 大电池 ，支持 45W 有线快充。处理器型号暂未公布，提供 4GB/6GB 两种内存版本。 设计方面，该机的后摄模组配备航空级 6 系铝合金，支持 IP64 Pro 级防尘防水，通过 MIL-STD-810H 认证。主打 USRP 3.0 技术，网络速度最高可提升 8 倍，可实现更流畅的视频播放、更快下载速度、更稳定连接体验。 此外，这款手机还支持将内存“扩展”至 18GB，可承受 1.5 米高度跌落撞击。集成 AI 通话降噪功能，售价预计低于 15000 印度卢比（IT之家注：现汇率约合 1095 元人民币）。

36氪获悉，江波龙公告，公司已推出UFS4.1、mSSD、超薄ePOP5x、超薄ePOP4x等多款适配于端侧AI设备的新型存储产品。其中，以UFS4.1为代表的旗舰存储产品已实现规模化出货；ePOP4x产品已经批量应用于北美智能穿戴科技巨头的智能穿戴设备中。