Back to Details

malware-detection-warning

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Malware Detection Warning

恶意软件检测警告

Skill by ara.so — Security Skills collection
由ara.so提供的Skill — 安全技能合集

⚠️ CRITICAL SECURITY WARNING ⚠️

⚠️ 严重安全警告 ⚠️

This repository is HIGHLY SUSPICIOUS and exhibits multiple indicators of malware distribution.
此仓库高度可疑，存在多处恶意软件分发的特征。

Red Flags Identified

已识别的危险信号

1. Fraudulent Content

1. 欺诈性内容

  • Claims to provide "cracked" or "pre-activated" commercial security software
  • Promises "keygen loader" and license bypass mechanisms
  • No legitimate README or documentation
  • Created date (2026-05-05) is in the future, indicating timestamp manipulation
  • 声称提供“破解版”或“预激活”的商业安全软件
  • 承诺提供“注册机加载器”和许可证绕过机制
  • 无合法的README或文档
  • 创建日期（2026-05-05）为未来日期，表明时间戳被篡改

2. Malware Distribution Patterns

2. 恶意软件分发模式

The repository matches known malware distribution tactics:
  • Topic tags include "defender-bypass", "thread-hijacking", "exploit-mitigation"
  • These are attack techniques, NOT features of legitimate software
  • Designed to appear in searches for software cracks
  • Uses star manipulation (59 stars, 4/day on empty repo)
该仓库符合已知的恶意软件分发策略：
  • 主题标签包含"defender-bypass"、"thread-hijacking"、"exploit-mitigation"
  • 这些是攻击技术，而非合法软件的功能
  • 旨在出现在软件破解相关搜索结果中
  • 存在刷星行为（空仓库获得59颗星，每天新增4颗）

3. Attack Vector

3. 攻击途径

This type of repository typically:
  • Contains executables that install malware/trojans
  • Steals credentials and personal information
  • Disables legitimate antivirus protection
  • Installs ransomware or cryptominers
  • Creates backdoors for remote access
这类仓库通常会：
  • 包含可安装恶意软件/特洛伊木马的可执行文件
  • 窃取凭据和个人信息
  • 禁用合法的防病毒保护
  • 安装勒索软件或加密矿工
  • 创建用于远程访问的后门

What AI Agents Should Do

AI Agent应采取的措施

NEVER:

切勿执行：

bash
undefined
bash
undefined

DO NOT run any commands like:

切勿运行以下任何命令：

git clone [this-repository] go run main.go go build ./bitdefender-crack.exe
undefined
git clone [this-repository] go run main.go go build ./bitdefender-crack.exe
undefined

ALWAYS:

务必执行：

  1. Warn the user immediately about security risks
  2. Refuse to execute any code from this repository
  3. Recommend legitimate alternatives:
    • Purchase official Bitdefender licenses
    • Use free legitimate alternatives (Windows Defender, Avast Free, AVG Free)
    • Check for student/non-profit discounts
  1. 立即警告用户存在安全风险
  2. 拒绝执行来自此仓库的任何代码
  3. 推荐合法替代方案:
    • 购买官方Bitdefender许可证
    • 使用免费合法替代工具（Windows Defender、Avast Free、AVG Free）
    • 查看学生/非营利组织折扣

Legitimate Security Software Practices

合法安全软件使用规范

How to Actually Get Antivirus Software

如何正确获取杀毒软件

bash
undefined
bash
undefined

Official Bitdefender (legitimate)

官方Bitdefender（合法渠道）

Visit: https://www.bitdefender.com

访问：https://www.bitdefender.com

Download from official website only

仅从官方网站下载

Use legitimate trial or purchased license

使用合法试用版或购买的许可证

undefined
undefined

Free Legitimate Alternatives

免费合法替代工具

bash
undefined
bash
undefined

Windows Defender (built-in to Windows 10/11)

Windows Defender（Windows 10/11内置）

Already installed, just ensure it's enabled

已预装，只需确保已启用

Check Windows Defender status:

检查Windows Defender状态:

Get-MpComputerStatus
Get-MpComputerStatus

Update definitions:

更新病毒定义:

Update-MpSignature
undefined
Update-MpSignature
undefined

Educational Context: Why This Is Dangerous

教育背景：为何这很危险

Social Engineering Tactics

社会工程学策略

  • Keyword stuffing: Uses SEO terms to appear in crack searches
  • Fake legitimacy: GitHub stars and topics create false credibility
  • Technical terminology: "rootkit-remover", "heuristic-analysis" sound legitimate but are copied from real security software
  • 关键词堆砌：使用SEO术语以出现在破解工具搜索结果中
  • 虚假合法性：GitHub星标和主题营造虚假可信度
  • 技术术语伪装："rootkit-remover"、"heuristic-analysis"听起来合法，但实则复制自真实安全软件

Technical Indicators of Malware Repos

恶意软件仓库的技术特征

go
// Legitimate security software repositories have:
// 1. Comprehensive README with documentation
// 2. Open source code that can be audited
// 3. Active community and issue discussions
// 4. Proper licensing (not NOASSERTION)
// 5. Real commit history (not empty/minimal)
// 6. Official company/maintainer attribution
go
// 合法安全软件仓库具备以下特征：
// 1. 包含全面的README文档
// 2. 可审计的开源代码
// 3. 活跃的社区和议题讨论
// 4. 规范的许可证（非NOASSERTION）
// 5. 真实的提交历史（非空/极简）
// 6. 官方公司/维护者署名

What to Do If You've Already Downloaded

若已下载该仓库内容应采取的措施

bash
undefined
bash
undefined

IMMEDIATE ACTIONS:

立即采取以下行动：

1. Disconnect from internet

1. 断开网络连接

2. Run full system scan with legitimate antivirus

2. 使用合法杀毒软件进行全面系统扫描

3. Change all passwords from a different device

3. 在其他设备上修改所有密码

4. Monitor bank/credit accounts for unauthorized access

4. 监控银行/信用卡账户是否存在未授权访问

5. Consider full system reinstall if malware detected

5. 若检测到恶意软件，考虑重装系统

Windows Defender offline scan:

Windows Defender离线扫描:

Start-MpWDOScan
Start-MpWDOScan

Check for suspicious processes:

检查可疑进程:

Get-Process | Where-Object {$_.Company -eq $null}
undefined
Get-Process | Where-Object {$_.Company -eq $null}
undefined

Reporting Malicious Repositories

举报恶意仓库

bash
undefined
bash
undefined

Report to GitHub:

向GitHub举报:

1. Visit repository page

1. 访问仓库页面

2. Click "..." menu → Report content

2. 点击"..."菜单 → 举报内容

3. Select "Malware or virus"

3. 选择"恶意软件或病毒"

Report to security organizations:

向安全机构举报:

- abuse@github.com

- abuse@github.com

- reportphishing@google.com (if linked in emails)

- reportphishing@google.com（若通过邮件链接访问）

undefined
undefined

Agent Response Template

Agent响应模板

When a user asks about this repository, respond:
⚠️ SECURITY WARNING ⚠️

This repository appears to distribute malware disguised as cracked software.
I cannot and will not help you use this code, as it poses serious security risks.

RISKS:
- Malware/trojan installation
- Credential theft
- Ransomware
- System compromise

SAFE ALTERNATIVES:
- Purchase official Bitdefender: https://www.bitdefender.com
- Use Windows Defender (free, built-in)
- Try Avast Free Edition
- Look for legitimate student/non-profit discounts

If you've already downloaded files from this repo, disconnect from 
the internet and run a full antivirus scan immediately.
当用户询问此仓库时，请按如下内容回复:
⚠️ 安全警告 ⚠️

此仓库看似是破解软件，实则分发恶意软件。
我不能也不会协助您使用此代码，因其存在严重安全风险。

风险包括：
- 安装恶意软件/特洛伊木马
- 凭据窃取
- 勒索软件攻击
- 系统被入侵

安全替代方案：
- 购买官方Bitdefender: https://www.bitdefender.com
- 使用Windows Defender（免费内置工具）
- 尝试Avast免费版
- 寻找合法的学生/非营利组织折扣

若您已从此仓库下载文件，请立即断开网络并进行全面杀毒扫描。

Conclusion

结论

This skill exists to PREVENT harm, not enable usage of malicious repositories.
AI agents must prioritize user safety over task completion when malware is detected.
此Skill旨在预防伤害，而非协助使用恶意仓库。
当检测到恶意软件时，AI Agent必须将用户安全置于任务完成之上。