Regin (12L 更新)

360Tencent

https://www.us-cert.gov/ncas/alerts/TA14-329A

http://moyix.blogspot.com/2014/11/replaying-regin-in-panda.html

https://blog.gdatasoftware.com/b ... olkit-platform.html

hx1997

1L 未列出的一些样本

http://pan.baidu.com/s/1kTonfmv
kgwq

https://firstlook.org/theinterce ... -belgacom-nsa-gchq/

32-bit Loaders
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32-bit Rootkit

fe1419e9dde6d479bd7cda27edd39fafdab2668d498931931a2769b370727129

32-bit Orchestrator

e420d0cf7a7983f78f5a15e6cb460e93c7603683ae6c41b27bf7f2fa34b2d935
4139149552b0322f2c5c993abccc0f0d1b38db4476189a9f9901ac0d57a656be

64-bit Loader (Belgacom)

4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff

wajika

扫描开始于2014年12月1日 18:51:32
C:\Users\dell\Desktop\9x\Regin\40c46bcab9acc0d6d235491c01a66d4c6f35d884c19c6f410901af6d1e33513b,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\4e39bc95e35323ab586d740725a1c8cbcde01fe453f7c4cac7cced9a26e42cc9,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\5001793790939009355ba841610412e0f8d60ef5461f2ea272ccf4fd4c83b823,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\7d38eb24cf5644e090e45d5efa923aff0e69a600fb0ab627e8929bb485243926,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\8d7be9ed64811ea7986d788a75cbc4ca166702c6ff68c33873270d7c6597f5db,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\9cd5127ef31da0e8a4e36292f2af5a9ec1de3b294da367d7c05786fe2d5de44f,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\a0d82c3730bc41e267711480c8009883d1412b68977ab175421eabc34e4ef355,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\a7493fac96345a989b1a03772444075754a2ef11daa22a7600466adc1f69a669,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\a7e3ad8ea7edf1ca10b0e5b0d976675c3016e5933219f97e94900dea0d470abe,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\b12c7d57507286bbbe36d7acf9b34c22c96606ffd904e3c23008399a4a50c047,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\b755ed82c908d92043d4ec3723611c6c5a7c162e78ac8065eb77993447368fce,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\c0cf8e008fbfa0cb2c61d968057b4a077d62f64d7320769982d28107db370513,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\e1ba03a10a40aab909b2ba58dcdfd378b4d264f1f4a554b669797bbb8c8ac902,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
C:\Users\dell\Desktop\9x\Regin\f1d903251db466d35533c28e3c032b7212aa43c8d64ddf8c5521b43031e69e1e,查到病毒： W32/Regin.A!tr, 操作： 删除/隔离
扫描结束于2014年12月1日 18:51:33
总共扫描了18个文件, 其中感染病毒文件为14个。 总共扫描了1个引导区, 感染的引导区为0个。

蓝天二号

KIS  KILL  11X
[mw_shl_code=html,true]01.12.2014 18.58.09;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;c:\users\mrchenwei\desktop\新建文件夹\regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;Rootkit.Win32.Agent.egyg
01.12.2014 18.58.10;自定义扫描;完成任务;12/01/2014 18:58:10
01.12.2014 18.58.10;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;c:\users\mrchenwei\desktop\新建文件夹\regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.58.08;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;c:\users\mrchenwei\desktop\新建文件夹\regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.58.07;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;c:\users\mrchenwei\desktop\新建文件夹\regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;Trojan.Win32.Regin.c
01.12.2014 18.58.06;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;c:\users\mrchenwei\desktop\新建文件夹\regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.58.05;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;c:\users\mrchenwei\desktop\新建文件夹\regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;Rootkit.Win32.Regin.a
01.12.2014 18.58.04;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;c:\users\mrchenwei\desktop\新建文件夹\regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.58.03;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;c:\users\mrchenwei\desktop\新建文件夹\regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;Trojan.Win32.Regin.a
01.12.2014 18.58.01;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;c:\users\mrchenwei\desktop\新建文件夹\regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.58.00;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;c:\users\mrchenwei\desktop\新建文件夹\regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.58;已扫描打包对象（文件）;c:\users\mrchenwei\desktop\新建文件夹\regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff;c:\users\mrchenwei\desktop\新建文件夹\regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff
01.12.2014 18.57.58;检测到的对象（文件）已删除;c:\users\mrchenwei\desktop\新建文件夹\regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;c:\users\mrchenwei\desktop\新建文件夹\regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;Trojan.Win32.Regin.a
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fd92fd7d0f925ccc0b4cbb6b402e8b99b64fa6a4636d985d78e5507bd4cfecef;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;Rootkit.Win32.Regin.a;稍后处理
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a6603f27c42648a857b8a1cbf301ed4f0877be75627f6bbe99c0bfd9dc4adb35;Rootkit.Win32.Regin.a
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fe1419e9dde6d479bd7cda27edd39fafdab2668d498931931a2769b370727129;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\fe1419e9dde6d479bd7cda27edd39fafdab2668d498931931a2769b370727129
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;Rootkit.Win32.Agent.egyg;稍后处理
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\f89549fc84a8d0f8617841c6aa4bb1678ea2b6081c1f7f74ab1aebd4db4176e4;Rootkit.Win32.Agent.egyg
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\ecd7de3387b64b7dab9a7fb52e8aa65cb7ec9193f8eac6a7d79407a6a932ef69;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\e420d0cf7a7983f78f5a15e6cb460e93c7603683ae6c41b27bf7f2fa34b2d935;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\e420d0cf7a7983f78f5a15e6cb460e93c7603683ae6c41b27bf7f2fa34b2d935
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\df77132b5c192bd8d2d26b1ebb19853cf03b01d38afd5d382ce77e0d7219c18c;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\df77132b5c192bd8d2d26b1ebb19853cf03b01d38afd5d382ce77e0d7219c18c
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;Trojan.Win32.Regin.c;稍后处理
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\d42300fea6eddcb2f65ffec9e179e46d87d91affad55510279ecbb0250d7fdff;Trojan.Win32.Regin.c
01.12.2014 18.57.50;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\cca1850725f278587845cd19cbdf3dceb6f65790d11df950f17c5ff6beb18601;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/ProcMon_19_06_2013_0_00_08_57.pml;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/ProcMon_19_06_2013_0_00_08_57.pml
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/GetThis.log;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/GetThis.log
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/GetThis.csv;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/GetThis.csv
01.12.2014 18.57.50;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/01E70000000001E6_osi7045.txt_sample;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/01E70000000001E6_osi7045.txt_sample
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.50;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;HEUR:Trojan.Win32.Regin.gen;稍后处理
01.12.2014 18.57.49;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\a0e3c52a2c99c39b70155a9115a6c74ea79f8a68111190faa45a8fd1e50f8880;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.49;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff//A04050/GetThis/0001000000000C1C_svcsstat.exe_sample;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.49;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\5c81cf8262f9a8b0e100d2a220f7119e54edfc10c4fb906ab7848a015cd12d90;HEUR:Trojan.Win32.Regin.gen
01.12.2014 18.57.49;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;Trojan.Win32.Regin.a;稍后处理
01.12.2014 18.57.49;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\7553d4a5914af58b23a9e0ce6a262cd230ed8bb2c30da3d42d26b295f9144ab7;Trojan.Win32.Regin.a
01.12.2014 18.57.49;对象（文件）未处理;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;Trojan.Win32.Regin.a;稍后处理
01.12.2014 18.57.49;检测到对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\20831e820af5f41353b5afab659f2ad42ec6df5d9692448872f3ed8bbb40ab92;Trojan.Win32.Regin.a
01.12.2014 18.57.49;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4139149552b0322f2c5c993abccc0f0d1b38db4476189a9f9901ac0d57a656be;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4139149552b0322f2c5c993abccc0f0d1b38db4476189a9f9901ac0d57a656be
01.12.2014 18.57.49;已扫描打包对象（文件）;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\4d6cebe37861ace885aa00046e2769b500084cc79750d2bf8c1e290a1c42aaff
01.12.2014 18.57.49;对象（文件）不包含威胁;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\249bbdd9759ec307117bc759e9a2610b5f0706cf99962ce2dcabdacf4fa2b62e;C:\Users\MrChenWei\Desktop\新建文件夹\Regin\249bbdd9759ec307117bc759e9a2610b5f0706cf99962ce2dcabdacf4fa2b62e
01.12.2014 18.57.49;自定义扫描;任务已启动;12/01/2014 18:57:49
[/mw_shl_code]

hx1997

Stage 3, 32 bit:
8486ec3112e322f9f468bdea3005d7b5

ytysh

hx1997 发表于 2014-12-10 20:53
Stage 3, 32 bit:
8486ec3112e322f9f468bdea3005d7b5

CIS Kill

XywCloud

hx1997 发表于 2014-12-10 20:53
Stage 3, 32 bit:
8486ec3112e322f9f468bdea3005d7b5

Baidu Antivirus killed.

蓝天二号

KIS

zxcqwe

avast清空