1. {"Data":[{"pro":"NetBarClient.exe","type":0,"proc":[{"type":1,"path":"942a5b726fb82bacfc62775923ab3bfe","do":0}],"file":[{"type":1,"path":".*\\SysWOW64\\.*.exe","mktype":5,"do":0}],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"yebarclient.exe","type":0,"proc":[{"type":1,"path":"1b14c116b475bf8794021af504a78bc5","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"BarClientView.exe","type":0,"proc":[{"type":1,"path":"ab188840c68c7404bad5ed18e4e5bd32","do":0},{"type":1,"path":"b87715bb7b759749962f0fa688c93747","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"barinit.exe","type":0,"proc":[{"type":0,"path":"zmnew2.exe","do":0},{"type":0,"path":"rundll32.exe","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]}],"Black":[{"type":1,"pro":"e81591fcc19409e11f9a913728746391","rem":"暂无说明","do":0},{"type":1,"pro":"1b14c116b475bf8794021af504a78bc5","rem":"暂无说明","do":0},{"type":0,"pro":"76c8c9ceb57626513e528ba0cf564b41","rem":"暂无说明","do":0},{"type":1,"pro":"942a5b726fb82bacfc62775923ab3bfe","rem":"暂无说明","do":0},{"type":0,"pro":"flash.exe","rem":"暂无说明","do":0}],"Drive":[{"type":1,"pro":"8d1fbccaa06c8c234c996b7313999637","rem":"暂无说明","do":0},{"type":1,"pro":"65aea5b501fb49582a2b50ddccc824a4","rem":"暂无说明","do":0},{"type":1,"pro":"006d909faa6d12954a223b0788539129","rem":"暂无说明","do":0}],"Host":[]}

复制代码

1. {"Data":[{"pro":"NetBarClient.exe","type":0,"proc":[{"type":1,"path":"942a5b726fb82bacfc62775923ab3bfe","do":0}],"file":[{"type":1,"path":".*\\SysWOW64\\.*.exe","mktype":5,"do":0}],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"yebarclient.exe","type":0,"proc":[{"type":1,"path":"1b14c116b475bf8794021af504a78bc5","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"BarClientView.exe","type":0,"proc":[{"type":1,"path":"ab188840c68c7404bad5ed18e4e5bd32","do":0},{"type":1,"path":"b87715bb7b759749962f0fa688c93747","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]},{"pro":"barinit.exe","type":0,"proc":[{"type":0,"path":"zmnew2.exe","do":0},{"type":0,"path":"rundll32.exe","do":0}],"file":[],"module":[],"inject":[],"reg":[],"wind":[],"net":[],"protect":[]}],"Black":[{"type":1,"pro":"e81591fcc19409e11f9a913728746391","rem":"暂无说明","do":0},{"type":1,"pro":"1b14c116b475bf8794021af504a78bc5","rem":"暂无说明","do":0},{"type":0,"pro":"76c8c9ceb57626513e528ba0cf564b41","rem":"暂无说明","do":0},{"type":1,"pro":"942a5b726fb82bacfc62775923ab3bfe","rem":"暂无说明","do":0},{"type":0,"pro":"flash.exe","rem":"暂无说明","do":0}],"Drive":[{"type":1,"pro":"8d1fbccaa06c8c234c996b7313999637","rem":"暂无说明","do":0},{"type":1,"pro":"65aea5b501fb49582a2b50ddccc824a4","rem":"暂无说明","do":0},{"type":1,"pro":"006d909faa6d12954a223b0788539129","rem":"暂无说明","do":0}],"Host":[]}

复制代码