fscan/Plugins/local/avdetect/auto.json
ZacharyZcR 1cfb21ed64 refactor: 将auto.json嵌入编译文件中
- 使用Go embed包将AV/EDR规则数据库嵌入到可执行文件
- 移除对外部auto.json文件的依赖
- 提高工具的便携性和独立性
- 将auto.json移动到avdetect插件目录
- 更新loadAVDatabase方法使用嵌入数据
2025-08-10 10:57:31 +08:00

2164 lines
53 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

{
"ALYac": {
"processes": [
"aylaunch.exe",
"ayupdate2.exe",
"AYRTSrv.exe",
"AYAgent.exe"
],
"url": "https://en.estsecurity.com/"
},
"AVG": {
"processes": [
"AVGSvc.exe",
"AVGUI.exe",
"avgwdsvc.exe",
"avg.exe",
"avgaurd.exe",
"avgemc.exe",
"avgrsx.exe",
"avgserv.exe",
"avgw.exe"
],
"url": "https://www.avg.com/"
},
"Acronis": {
"processes": [
"arsm.exe",
"acronis_license_service.exe"
],
"url": "https://www.acronis.com/"
},
"Ad-Aware": {
"processes": [
"AdAwareService.exe",
"Ad-Aware.exe",
"AdAware.exe"
],
"url": "https://www.adaware.com/"
},
"AhnLab-V3": {
"processes": [
"patray.exe",
"V3Svc.exe"
],
"url": "https://global.ahnlab.com/site/main.do"
},
"Arcabit": {
"processes": [
"arcavir.exe",
"arcadc.exe",
"ArcaVirMaster.exe",
"ArcaMainSV.exe",
"ArcaTasksService.exe"
],
"url": "https://www.arcabit.pl"
},
"Avast": {
"processes": [
"ashDisp.exe",
"AvastUI.exe",
"AvastSvc.exe",
"AvastBrowser.exe",
"AfwServ.exe"
],
"url": "https://www.avast.com"
},
"Avira AntiVirus(小红伞)": {
"processes": [
"avcenter.exe",
"avguard.exe",
"avgnt.exe",
"sched.exe"
],
"url": "https://www.avira.com/"
},
"Baidu AntiVirus": {
"processes": [
"BaiduSdSvc.exe",
"BaiduSdTray.exe",
"BaiduSd.exe",
"bddownloader.exe",
"baiduansvx.exe"
],
"url": "https://anquan.baidu.com/"
},
"BitDefender": {
"processes": [
"Bdagent.exe",
"BitDefenderCom.exe",
"vsserv.exe",
"bdredline.exe",
"secenter.exe",
"bdservicehost.exe",
"BITDEFENDER.exe"
],
"url": "http://www.bitdefender.com/"
},
"Bkav": {
"processes": [
"BKavService.exe",
"Bka.exe",
"BkavUtil.exe",
"BLuPro.exe"
],
"url": "https://www.bkav.com/"
},
"CAT-QuickHeal": {
"processes": [
"QUHLPSVC.exe",
"onlinent.exe",
"sapissvc.exe",
"scanwscs.exe"
],
"url": "https://www.quickheal.com/"
},
"CMC": {
"processes": [
"CMCTrayIcon.exe"
],
"url": "https://cmccybersecurity.com/"
},
"ClamAV": {
"processes": [
"freshclam.exe"
],
"url": "https://www.clamav.net"
},
"Comodo": {
"processes": [
"cpf.exe",
"cavwp.exe",
"ccavsrv.exe",
"cmdvirth.exe"
],
"url": "https://www.comodo.com"
},
"CrowdStrike Falcon(猎鹰)": {
"processes": [
"csfalconservice.exe",
"CSFalconContainer.exe"
],
"url": "https://www.crowdstrike.com"
},
"Cybereason": {
"processes": [
"CybereasonRansomFree.exe",
"CybereasonRansomFreeServiceHost.exe",
"CybereasonAV.exe"
],
"url": "https://www.cybereason.com/"
},
"Cylance": {
"processes": [
"CylanceSvc.exe"
],
"url": "https://www.cylance.com"
},
"Cyren": {
"processes": [
"vsedsps.exe",
"vseamps.exe",
"vseqrts.exe"
],
"url": "http://www.cyren.com/"
},
"DrWeb": {
"processes": [
"drwebcom.exe",
"spidernt.exe",
"drwebscd.exe",
"drweb32w.exe",
"dwengine.exes"
],
"url": "https://www.drweb.com/"
},
"Elastic Security": {
"processes": [
"elastic-endpoint.exe",
"elastic-agent.exe",
"agentbeat.exe",
"winlogbeat.exe"
],
"url": "https://www.elastic.co/endpoint-detection-response"
},
"ESET-NOD32": {
"processes": [
"egui.exe",
"ecls.exe",
"ekrn.exe",
"eguiProxy.exe",
"EShaSrv.exe"
],
"url": "https://www.eset.com/us/home/antivirus/"
},
"Trend Micro趋势科技": {
"processes": [
"tmpfw.exe",
"tmlisten.exe",
"coreServiceShell.exe",
"coreFrameworkHost.exe",
"uiWatchDog.exe",
"TMLISTEN.exe"
],
"url": "https://www.trendmicro.com"
},
"Emsisoft": {
"processes": [
"a2guard.exe",
"a2free.exe",
"a2service.exe"
],
"url": "https://www.emsisoft.com/"
},
"Endgame": {
"processes": [
"endgame.exe"
],
"url": "https://www.endgame.com/"
},
"F-Prot": {
"processes": [
"F-PROT.exe",
"FProtTray.exe",
"FPAVServer.exe",
"f-stopw.exe",
"f-prot95.exe",
"f-agnt95.exe"
],
"url": "http://f-prot.com/"
},
"F-Secure": {
"processes": [
"f-secure.exe",
"fssm32.exe",
"Fsorsp64.exe",
"fsavgui.exe",
"fameh32.exe",
"fch32.exe",
"fih32.exe",
"fnrb32.exe",
"fsav32.exe",
"fsma32.exe",
"fsmb32.exe"
],
"url": "https://www.f-secure.com"
},
"FireEye(火眼)": {
"processes": [
"xagtnotif.exe",
"xagt.exe"
],
"url": "https://www.fireeye.com"
},
"Trellix EDR(McAfee && 火眼)": {
"processes": [
"macmnsvc.exe",
"macompatsvc.exe",
"masvc.exe",
"mcshield.exe",
"mctray.exe",
"mfeatp.exe",
"mfeensppl.exe",
"mfeesp.exe",
"mfefw.exe",
"mfehcs.exe",
"mfemactl.exe",
"mfemms.exe",
"mfetp.exe",
"mfevtps.exe",
"mfewch.exe",
"updaterui.exe"
],
"url": "https://www.trellix.com"
},
"Fortinet飞塔": {
"processes": [
"FortiClient.exe",
"FortiTray.exe",
"FortiScand.exe",
"FortiWF.exe",
"FortiProxy.exe",
"FortiESNAC.exe",
"FortiSSLVPNdaemon.exe",
"FortiTcs.exe",
"FctSecSvr.exe"
],
"url": "https://fortiguard.com/"
},
"GData": {
"processes": [
"AVK.exe",
"avkcl.exe",
"avkpop.exe",
"avkservice.exe",
"GDScan.exe",
"AVKWCtl.exe",
"AVKProxy.exe",
"AVKBackupService.exe"
],
"url": "https://www.gdatasoftware.com/"
},
"Ikarus": {
"processes": [
"guardxservice.exe",
"guardxkickoff.exe"
],
"url": "https://www.ikarussecurity.com/"
},
"Jiangmin": {
"processes": [
"KVFW.exe",
"KVsrvXP.exe",
"KVMonXP.exe",
"KVwsc.exe"
],
"url": "https://www.jiangmin.com/"
},
"K7AntiVirus": {
"processes": [
"K7TSecurity.exe",
"K7TSMain.Exe",
"K7TSUpdT.exe"
],
"url": "http://viruslab.k7computing.com/"
},
"Kaspersky(卡巴斯基)": {
"processes": [
"avp.exe",
"avpcc.exe",
"avpm.exe",
"kavpf.exe",
"kavfs.exe",
"klnagent.exe",
"kavtray.exe",
"kavfswp.exe",
"kaspersky.exe"
],
"url": "https://www.kaspersky.com"
},
"Max Secure Software": {
"processes": [
"SDSystemTray.exe",
"MaxRCSystemTray.exe",
"RCSystemTray.exe",
"MaxAVPlusDM.exe",
"LiveUpdateSD.exe"
],
"url": "https://www.maxpcsecure.com/"
},
"Malwarebytes": {
"processes": [
"MBAMService.exe",
"mbam.exe",
"mbamtray.exe"
],
"url": "https://www.malwarebytes.com/"
},
"McAfee(迈克菲-可能为Trellix)": {
"processes": [
"Mcshield.exe",
"Tbmon.exe",
"Frameworkservice.exe",
"firesvc.exe",
"firetray.exe",
"hipsvc.exe",
"mfevtps.exe",
"mcafeefire.exe",
"shstat.exe",
"vstskmgr.exe",
"engineserver.exe",
"alogserv.exe",
"avconsol.exe",
"cmgrdian.exe",
"cpd.exe",
"mcmnhdlr.exe",
"mcvsshld.exe",
"mcvsrte.exe",
"mghtml.exe",
"mpfservice.exe",
"mpfagent.exe",
"mpftray.exe",
"vshwin32.exe",
"vsstat.exe",
"guarddog.exe",
"mfeann.exe",
"udaterui.exe",
"naprdmgr.exe",
"mctray.exe",
"fcagate.exe",
"fcag.exe",
"fcags.exe",
"fcagswd.exe",
"macompatsvc.exe",
"masvc.exe",
"mcamnsvc.exe",
"mctary.exe",
"mfecanary.exe",
"mfeconsole.exe",
"mfeesp.exe",
"mfefire.exe",
"mfefw.exe",
"mfemms.exe",
"mfetp.exe",
"mfewc.exe",
"mfewch.exe"
],
"url": "https://www.mcafee.com/en-us"
},
"Microsoft Security Essentials": {
"processes": [
"MsMpEng.exe",
"msseces.exe",
"mssecess.exe",
"emet_agent.exe",
"emet_service.exe",
"drwatson.exe",
"MpCmdRun.exe",
"NisSrv.exe",
"MsSense.exe",
"MSASCui.exe",
"MSASCuiL.exe",
"SecurityHealthService.exe"
],
"url": "https://support.microsoft.com/en-us/help/17150/windows-7-what-is-microsoft-security-essentials"
},
"NANO-Antivirus": {
"processes": [
"nanoav.exe",
"nanoav64.exe",
"nanoreport.exe",
"nanoreportc.exe",
"nanoreportc64.exe",
"nanorst.exe",
"nanosvc.exe"
],
"url": "https://nano-av.com/"
},
"Palo Alto Networks": {
"processes": [
"PanInstaller.exe"
],
"url": "https://www.paloaltonetworks.com/"
},
"Panda Security": {
"processes": [
"remupd.exe",
"apvxdwin.exe",
"pavproxy.exe",
"pavsched.exe"
],
"url": "https://www.pandasecurity.com/"
},
"Qihoo-360": {
"processes": [
"360sd.exe",
"360tray.exe",
"ZhuDongFangYu.exe",
"360rp.exe",
"360rps.exe",
"360safe.exe",
"360safebox.exe",
"QHActiveDefense.exe",
"360skylarsvc.exe",
"LiveUpdate360.exe"
],
"url": "https://sd.360.cn/"
},
"Rising": {
"processes": [
"RavMonD.exe",
"rfwmain.exe",
"RsMgrSvc.exe",
"RavMon.exe"
],
"url": "http://antivirus.rising.com.cn/"
},
"SUPERAntiSpyware": {
"processes": [
"superantispyware.exe",
"sascore.exe",
"SAdBlock.exe",
"sabsvc.exe"
],
"url": "http://www.superadblocker.com/"
},
"SecureAge APEX": {
"processes": [
"UniversalAVService.exe",
"EverythingServer.exe",
"clamd.exe"
],
"url": "https://www.secureage.com/"
},
"Sophos AV": {
"processes": [
"SavProgress.exe",
"icmon.exe",
"SavMain.exe",
"SophosUI.exe",
"SophosFS.exe",
"SophosHealth.exe",
"SophosSafestore64.exe",
"SophosCleanM.exe",
"SophosFileScanner.exe",
"SophosNtpService.exe",
"SophosOsquery.exe",
"Sophos UI.exe"
],
"url": "https://www.sophos.com/"
},
"TACHYON": {
"processes": [],
"url": "https://www.tachyonlab.com/en/index.html"
},
"Tencent": {
"processes": [
"QQPCRTP.exe",
"QQPCTray.exe",
"QQPCMgr.exe",
"QQPCNetFlow.exe",
"QQPCRealTimeSpeedup.exe"
],
"url": "https://guanjia.qq.com"
},
"TotalDefense": {
"processes": [
"AMRT.exe",
"SWatcherSrv.exe",
"Prd.ManagementConsole.exe"
],
"url": "https://www.totaldefense.com"
},
"Trapmine": {
"processes": [
"TrapmineEnterpriseService.exe",
"TrapmineEnterpriseConfig.exe",
"TrapmineDeployer.exe",
"TrapmineUpgradeService.exe"
],
"url": "https://trapmine.com/"
},
"TrendMicro": {
"processes": [
"TMBMSRV.exe",
"ntrtscan.exe",
"Pop3Trap.exe",
"WebTrap.exe",
"PccNTMon.exe"
],
"url": "http://careers.trendmicro.com.cn/"
},
"VIPRE": {
"processes": [
"SBAMSvc.exe",
"VipreEdgeProtection.exe",
"SBAMTray.exe"
],
"url": "https://www.vipre.com"
},
"ViRobot": {
"processes": [
"vrmonnt.exe",
"vrmonsvc.exe",
"Vrproxyd.exe"
],
"url": "http://www.hauri.net/"
},
"Webroot": {
"processes": [
"npwebroot.exe",
"WRSA.exe",
"spysweeperui.exe"
],
"url": "https://www.webroot.com/us/en"
},
"Yandex": {
"processes": [
"Yandex.exe",
"YandexDisk.exe",
"yandesk.exe"
],
"url": "https://yandex.com/support/common/security/antiviruses-free.html"
},
"Zillya": {
"processes": [
"zillya.exe",
"ZAVAux.exe",
"ZAVCore.exe"
],
"url": "https://zillya.com"
},
"ZoneAlarm": {
"processes": [
"vsmon.exe",
"zapro.exe",
"zonealarm.exe"
],
"url": "https://www.zonealarm.com/"
},
"Zoner": {
"processes": [
"ZPSTray.exe"
],
"url": "https://zonerantivirus.com/"
},
"eGambit": {
"processes": [
"dasc.exe",
"memscan64.exe",
"dastray.exe"
],
"url": "https://egambit.app/en/"
},
"eScan": {
"processes": [
"consctl.exe",
"mwaser.exe",
"avpmapp.exe"
],
"url": "https://www.escanav.com/"
},
"Lavasoft": {
"processes": [
"AAWTray.exe",
"LavasoftTcpService.exe",
"AdAwareTray.exe",
"WebCompanion.exe",
"WebCompanionInstaller.exe",
"adawarebp.exe",
"ad-watch.exe"
],
"url": "https://www.lavasoft.com/"
},
"The Cleaner": {
"processes": [
"cleaner8.exe"
],
"url": ""
},
"VBA32": {
"processes": [
"vba32lder.exe"
],
"url": "http://www.anti-virus.by/en/index.shtml"
},
"Mongoosa": {
"processes": [
"MongoosaGUI.exe",
"mongoose.exe"
],
"url": "https://www.securitymongoose.com/"
},
"Coranti2012": {
"processes": [
"CorantiControlCenter32.exe"
],
"url": "https://www.coranti.com"
},
"UnThreat": {
"processes": [
"UnThreat.exe",
"utsvc.exe"
],
"url": "https://softplanet.com/UnThreat-AntiVirus"
},
"Shield Antivirus": {
"processes": [
"CKSoftShiedAntivirus4.exe",
"shieldtray.exe"
],
"url": "https://shieldapps.com/supportmain/shield-antivirus-support/"
},
"VIRUSfighter": {
"processes": [
"AVWatchService.exe",
"vfproTray.exe"
],
"url": "https://www.spamfighter.com/VIRUSfighter/"
},
"Immunet": {
"processes": [
"iptray.exe"
],
"url": "https://www.immunet.com/index"
},
"PSafe": {
"processes": [
"PSafeSysTray.exe",
"PSafeCategoryFinder.exe",
"psafesvc.exe"
],
"url": "https://www.psafe.com/"
},
"nProtect": {
"processes": [
"nspupsvc.exe",
"Npkcmsvc.exe",
"npnj5Agent.exe"
],
"url": "http://nos.nprotect.com/"
},
"Spyware Terminator": {
"processes": [
"SpywareTerminatorShield.exe",
"SpywareTerminator.exe"
],
"url": "http://www.spywareterminator.com/Default.aspx"
},
"Norton赛门铁克": {
"processes": [
"ccSvcHst.exe",
"rtvscan.exe",
"ccapp.exe",
"NPFMntor.exe",
"ccRegVfy.exe",
"vptray.exe",
"iamapp.exe",
"nav.exe",
"navapw32.exe",
"navapsvc.exe",
"nisum.exe",
"nmain.exe",
"nprotect.exe",
"smcGui.exe",
"ns.exe",
"nortonsecurity.exe"
],
"url": "https://us.norton.com/"
},
"Norton V25Avast": {
"processes": [
"afwServ.exe",
"aswEngSrv.exe",
"aswidsagent.exe",
"AvDump.exe",
"nllToolsSvc.exe",
"NortonSvc.exe",
"wsc_proxy.exe"
],
"url": "https://us.norton.com/"
},
"Symantec赛门铁克": {
"processes": [
"ccSetMgr.exe",
"ccapp.exe",
"vptray.exe",
"ccpxysvc.exe",
"cfgwiz.exe",
"smc.exe",
"symproxysvc.exe",
"vpc32.exe",
"lsetup.exe",
"luall.exe",
"lucomserver.exe",
"sbserv.exe",
"ccEvtMgr.exe",
"smcGui.exe",
"snac.exe",
"SymCorpUI.exe",
"sepWscSvc64.exe"
],
"url": "http://www.symantec.com/"
},
"可牛杀毒": {
"processes": [
"knsdtray.exe"
],
"url": "https://baike.baidu.com/item/%E5%8F%AF%E7%89%9B%E5%85%8D%E8%B4%B9%E6%9D%80%E6%AF%92%E8%BD%AF%E4%BB%B6"
},
"流量矿石": {
"processes": [
"Miner.exe"
],
"url": "https://jiaoyi.yunfan.com/"
},
"SafeDog(安全狗)": {
"processes": [
"safedog.exe",
"SafeDogGuardCenter.exe",
"SafeDogSiteIIS.exe",
"SafeDogTray.exe",
"SafeDogServerUI.exe",
"SafeDogSiteApache.exe",
"CloudHelper.exe",
"SafeDogUpdateCenter.exe"
],
"url": "http://www.safedog.cn/"
},
"木马克星": {
"processes": [
"parmor.exe",
"Iparmor.exe"
],
"url": "https://baike.baidu.com/item/%E6%9C%A8%E9%A9%AC%E5%85%8B%E6%98%9F/2979824?fr=aladdin"
},
"贝壳云安全": {
"processes": [
"beikesan.exe"
],
"url": ""
},
"木马猎手": {
"processes": [
"TrojanHunter.exe"
],
"url": ""
},
"巨盾网游安全盾": {
"processes": [
"GG.exe"
],
"url": ""
},
"绿鹰安全精灵": {
"processes": [
"adam.exe"
],
"url": "https://baike.baidu.com/item/%E7%BB%BF%E9%B9%B0%E5%AE%89%E5%85%A8%E7%B2%BE%E7%81%B5"
},
"超级巡警": {
"processes": [
"AST.exe"
],
"url": ""
},
"墨者安全专家": {
"processes": [
"ananwidget.exe"
],
"url": ""
},
"风云防火墙": {
"processes": [
"FYFireWall.exe"
],
"url": ""
},
"微点主动防御": {
"processes": [
"MPMon.exe"
],
"url": "http://www.micropoint.com.cn/"
},
"天网防火墙": {
"processes": [
"pfw.exe"
],
"url": ""
},
"D 盾": {
"processes": [
"D_Safe_Manage.exe",
"d_manage.exe"
],
"url": "http://www.d99net.net/"
},
"云锁": {
"processes": [
"yunsuo_agent_service.exe",
"yunsuo_agent_daemon.exe"
],
"url": "https://www.yunsuo.com.cn/"
},
"护卫神": {
"processes": [
"HwsPanel.exe",
"hws_ui.exe",
"hws.exe",
"hwsd.exe",
"HwsHostPanel.exe",
"HwsHostMaster.exe"
],
"url": "https://www.hws.com/"
},
"火绒安全": {
"processes": [
"hipstray.exe",
"wsctrl.exe",
"usysdiag.exe",
"HipsDaemon.exe",
"HipsLog.exe",
"HipsMain.exe",
"wsctrlsvc.exe"
],
"url": "https://www.huorong.cn/"
},
"网络病毒克星": {
"processes": [
"WEBSCANX.exe"
],
"url": ""
},
"SPHINX防火墙": {
"processes": [
"SPHINX.exe"
],
"url": ""
},
"奇安信天擎": {
"processes": [
"TQClient.exe",
"TQTray.exe",
"QaxEngManager.exe",
"TQDefender.exe"
],
"url": "https://www.qianxin.com/product/detail/pid/330"
},
"H+BEDV Datentechnik GmbH": {
"processes": [
"avwin.exe",
"avwupsrv.exe"
],
"url": "http://www.free-av.com/"
},
"IBM ISS Proventia": {
"processes": [
"blackd.exe",
"rapapp.exe"
],
"url": ""
},
"eEye Digital Security": {
"processes": [
"eeyeevnt.exe",
"blink.exe"
],
"url": ""
},
"TamoSoft": {
"processes": [
"cv.exe",
"ent.exe"
],
"url": "https://www.tamos.com/"
},
"Kerio Personal Firewall": {
"processes": [
"persfw.exe",
"wrctrl.exe"
],
"url": "http://www.kerio.com/"
},
"Simplysup": {
"processes": [
"Trjscan.exe"
],
"url": "https://www.simplysup.com/"
},
"PC Tools AntiVirus": {
"processes": [
"PCTAV.exe",
"pctsGui.exe"
],
"url": "http://www.pctools.com"
},
"VirusBuster Professional": {
"processes": [
"vbcmserv.exe"
],
"url": "http://www.virusbuster.hu"
},
"ClamWin": {
"processes": [
"ClamTray.exe",
"clamscan.exe"
],
"url": "http://www.clamwin.com/"
},
"安天智甲": {
"processes": [
"kxetray.exe",
"kscan.exe",
"AMediumManager.exe",
"kismain.exe"
],
"url": "https://antiy.cn/"
},
"CMC Endpoint Security": {
"processes": [
"CMCNECore.exe",
"cmcepagent.exe",
"cmccore.exe",
"CMCLog.exe",
"CMCFMon.exe"
],
"url": "https://cmccybersecurity.com/giai-phap/"
},
"金山毒霸": {
"processes": [
"kxetray.exe",
"kxescore.exe",
"kupdata.exe",
"kwsprotect64.exe",
"kislive.exe",
"knewvip.exe",
"kscan.exe",
"kxecenter.exe",
"kxemain.exe",
"KWatch.exe",
"KSafeSvc.exe",
"KSafeTray.exe"
],
"url": "http://www.ijinshan.com/"
},
"Agnitum outpost (Outpost Firewall)": {
"processes": [
"outpost.exe",
"acs.exe"
],
"url": "https://agnitum-outpost-security-suite.en.softonic.com/"
},
"Cynet": {
"processes": [
"CynetLauncher.exe",
"CynetDS.exe",
"CynetEPS.exe",
"CynetMS.exe",
"CynetAR.exe",
"CynetGW.exe",
"CynetSD64.exe"
],
"url": "https://www.cynet.com/"
},
"金山网盾": {
"processes": [
"KSWebShield.exe"
],
"url": ""
},
"G Data安全软件客户端": {
"processes": [
"AVK.exe"
],
"url": ""
},
"金山网镖": {
"processes": [
"kpfwtray.exe"
],
"url": ""
},
"在扫1433": {
"processes": [
"1433.exe"
],
"url": ""
},
"在爆破": {
"processes": [
"DUB.exe"
],
"url": ""
},
"发现S-U": {
"processes": [
"ServUDaemon.exe"
],
"url": ""
},
"百度卫士": {
"processes": [
"bddownloader.exe",
"baiduSafeTray.exe"
],
"url": ""
},
"百度卫士-主进程": {
"processes": [
"baiduansvx.exe"
],
"url": ""
},
"已知杀软进程,名称暂未收录": {
"processes": [
"scan32.exe",
"mcscript.exe",
"cleanup.exe",
"cmdagent.exe",
"frminst.exe",
"mcscript_inuse.exe",
"_avp32.exe",
"_avpcc.exe",
"_avpm.exe",
"aAvgApi.exe",
"ackwin32.exe",
"advxdwin.exe",
"agentsvr.exe",
"agentw.exe",
"alertsvc.exe",
"alevir.exe",
"amon9x.exe",
"anti-trojan.exe",
"antivirus.exe",
"ants.exe",
"apimonitor.exe",
"aplica32.exe",
"arr.exe",
"atcon.exe",
"atguard.exe",
"atro55en.exe",
"atupdater.exe",
"atwatch.exe",
"au.exe",
"aupdate.exe",
"auto-protect.nav80try.exe",
"autodown.exe",
"autotrace.exe",
"autoupdate.exe",
"ave32.exe",
"avgcc32.exe",
"avgctrl.exe",
"avgserv9.exe",
"avkpop.exe",
"avkserv.exe",
"avkservice.exe",
"avltmain.exe",
"avnt.exe",
"avp32.exe",
"avpdos32.exe",
"avptc32.exe",
"avpupd.exe",
"avsched32.exe",
"avsynmgr.exe",
"avwin95.exe",
"avwinnt.exe",
"avwupd.exe",
"avwupd32.exe",
"avxmonitor9x.exe",
"avxmonitornt.exe",
"avxquar.exe",
"backweb.exe",
"bargains.exe",
"bd_professional.exe",
"beagle.exe",
"belt.exe",
"bidef.exe",
"bidserver.exe",
"bipcp.exe",
"bipcpevalsetup.exe",
"bisp.exe",
"blackice.exe",
"blss.exe",
"bootconf.exe",
"bootwarn.exe",
"borg2.exe",
"bpc.exe",
"brasil.exe",
"bs120.exe",
"bundle.exe",
"bvt.exe",
"cdp.exe",
"cfd.exe",
"cfiadmin.exe",
"cfiaudit.exe",
"cfinet.exe",
"cfinet32.exe",
"claw95.exe",
"claw95cf.exe",
"clean.exe",
"cleaner.exe",
"cleaner3.exe",
"cleanpc.exe",
"click.exe",
"cmesys.exe",
"cmon016.exe",
"connectionmonitor.exe",
"cpf9x206.exe",
"cpfnt206.exe",
"ctrl.exe",
"cwnb181.exe",
"cwntdwmo.exe",
"datemanager.exe",
"dcomx.exe",
"defalert.exe",
"defscangui.exe",
"defwatch.exe",
"deputy.exe",
"divx.exe",
"dllcache.exe",
"dllreg.exe",
"doors.exe",
"dpf.exe",
"dpfsetup.exe",
"dpps2.exe",
"drweb32.exe",
"drwebupw.exe",
"dssagent.exe",
"dvp95.exe",
"dvp95_0.exe",
"ecengine.exe",
"efpeadm.exe",
"emsw.exe",
"ent.exe",
"esafe.exe",
"escanhnt.exe",
"escanv95.exe",
"espwatch.exe",
"ethereal.exe",
"etrustcipe.exe",
"evpn.exe",
"exantivirus-cnet.exe",
"exe.avxw.exe",
"expert.exe",
"explore.exe",
"fast.exe",
"findviru.exe",
"firewall.exe",
"fp-win.exe",
"fp-win_trial.exe",
"fprot.exe",
"frw.exe",
"fsaa.exe",
"fsav.exe",
"fsav530stbyb.exe",
"fsav530wtbyb.exe",
"fsav95.exe",
"fsgk32.exe",
"fsm32.exe",
"gator.exe",
"gbmenu.exe",
"gbpoll.exe",
"generics.exe",
"gmt.exe",
"guard.exe",
"hacktracersetup.exe",
"hbinst.exe",
"hbsrv.exe",
"hotactio.exe",
"hotpatch.exe",
"htlog.exe",
"htpatch.exe",
"hwpe.exe",
"hxdl.exe",
"hxiul.exe",
"iamserv.exe",
"iamstats.exe",
"ibmasn.exe",
"ibmavsp.exe",
"icload95.exe",
"icloadnt.exe",
"icmon.exe",
"icsupp95.exe",
"icsuppnt.exe",
"idle.exe",
"iedll.exe",
"iedriver.exe",
"iface.exe",
"ifw2000.exe",
"inetlnfo.exe",
"infus.exe",
"infwin.exe",
"init.exe",
"intdel.exe",
"intren.exe",
"iomon98.exe",
"istsvc.exe",
"jammer.exe",
"jdbgmrg.exe",
"jedi.exe",
"kavlite40eng.exe",
"kavpers40eng.exe",
"kazza.exe",
"keenvalue.exe",
"kerio-pf-213-en-win.exe",
"kerio-wrl-421-en-win.exe",
"kerio-wrp-421-en-win.exe",
"kernel32.exe",
"killprocesssetup161.exe",
"launcher.exe",
"ldnetmon.exe",
"ldpro.exe",
"ldpromenu.exe",
"ldscan.exe",
"lnetinfo.exe",
"loader.exe",
"localnet.exe",
"lockdown.exe",
"lockdown2000.exe",
"lookout.exe",
"lordpe.exe",
"luau.exe",
"luinit.exe",
"luspt.exe",
"mapisvc32.exe",
"mcagent.exe",
"mctool.exe",
"mcupdate.exe",
"mfin32.exe",
"mfw2en.exe",
"mfweng3.02d30.exe",
"mgavrtcl.exe",
"mgavrte.exe",
"mgui.exe",
"minilog.exe",
"mmod.exe",
"monitor.exe",
"moolive.exe",
"mostat.exe",
"mrflux.exe",
"msapp.exe",
"msbb.exe",
"msblast.exe",
"mscache.exe",
"msccn32.exe",
"mscman.exe",
"msconfig.exe",
"msdm.exe",
"msdos.exe",
"msiexec16.exe",
"msinfo32.exe",
"mslaugh.exe",
"msmgt.exe",
"msmsgri32.exe",
"mssmmc32.exe",
"mssys.exe",
"msvxd.exe",
"mu0311ad.exe",
"mwatch.exe",
"n32scanw.exe",
"navap.navapsvc.exe",
"navdx.exe",
"navlu32.exe",
"navnt.exe",
"navstub.exe",
"navw32.exe",
"navwnt.exe",
"nc2000.exe",
"ncinst4.exe",
"ndd32.exe",
"neomonitor.exe",
"neowatchlog.exe",
"netarmor.exe",
"netd32.exe",
"netinfo.exe",
"netmon.exe",
"netscanpro.exe",
"netspyhunter-1.2.exe",
"netstat.exe",
"netutils.exe",
"nisserv.exe",
"nod32.exe",
"normist.exe",
"norton_internet_secu_3.0_407.exe",
"notstart.exe",
"npf40_tw_98_nt_me_2k.exe",
"npfmessenger.exe",
"npscheck.exe",
"npssvc.exe",
"nsched32.exe",
"nssys32.exe",
"nstask32.exe",
"nsupdate.exe",
"nt.exe",
"ntvdm.exe",
"ntxconfig.exe",
"nui.exe",
"nupgrade.exe",
"nvarch16.exe",
"nvc95.exe",
"nvsvc32.exe",
"nwinst4.exe",
"nwservice.exe",
"nwtool16.exe",
"ollydbg.exe",
"onsrvr.exe",
"optimize.exe",
"ostronet.exe",
"otfix.exe",
"outpostinstall.exe",
"outpostproinstall.exe",
"padmin.exe",
"panixk.exe",
"patch.exe",
"pavcl.exe",
"pavw.exe",
"pccwin98.exe",
"pcfwallicon.exe",
"pcip10117_0.exe",
"pcscan.exe",
"pdsetup.exe",
"periscope.exe",
"perswf.exe",
"pf2.exe",
"pfwadmin.exe",
"pgmonitr.exe",
"pingscan.exe",
"platin.exe",
"poproxy.exe",
"popscan.exe",
"portdetective.exe",
"portmonitor.exe",
"powerscan.exe",
"ppinupdt.exe",
"pptbc.exe",
"ppvstop.exe",
"prizesurfer.exe",
"prmt.exe",
"prmvr.exe",
"procdump.exe",
"processmonitor.exe",
"procexplorerv1.0.exe",
"programauditor.exe",
"proport.exe",
"protectx.exe",
"pspf.exe",
"purge.exe",
"qconsole.exe",
"qserver.exe",
"rav7.exe",
"rav7win.exe",
"rav8win32eng.exe",
"ray.exe",
"rb32.exe",
"rcsync.exe",
"realmon.exe",
"reged.exe",
"regedit.exe",
"regedt32.exe",
"rescue.exe",
"rescue32.exe",
"rrguard.exe",
"rshell.exe",
"rtvscn95.exe",
"rulaunch.exe",
"run32dll.exe",
"rundll.exe",
"rundll16.exe",
"ruxdll32.exe",
"safeweb.exe",
"sahagent.exe",
"save.exe",
"savenow.exe",
"sc.exe",
"scam32.exe",
"scan95.exe",
"scanpm.exe",
"scrscan.exe",
"serv95.exe",
"setup_flowprotector_us.exe",
"setupvameeval.exe",
"sfc.exe",
"sgssfw32.exe",
"sh.exe",
"shellspyinstall.exe",
"shn.exe",
"showbehind.exe",
"sms.exe",
"smss32.exe",
"soap.exe",
"sofi.exe",
"sperm.exe",
"spf.exe",
"spoler.exe",
"spoolcv.exe",
"spoolsv32.exe",
"spyxx.exe",
"srexe.exe",
"srng.exe",
"ss3edit.exe",
"ssg_4104.exe",
"ssgrate.exe",
"st2.exe",
"start.exe",
"stcloader.exe",
"supftrl.exe",
"support.exe",
"supporter5.exe",
"svchostc.exe",
"svchosts.exe",
"sweep95.exe",
"sweepnet.sweepsrv.sys.swnetsup.exe",
"symtray.exe",
"sysedit.exe",
"sysupd.exe",
"taskmg.exe",
"taskmo.exe",
"taumon.exe",
"tbscan.exe",
"tc.exe",
"tca.exe",
"tcm.exe",
"tds-3.exe",
"tds2-98.exe",
"tds2-nt.exe",
"teekids.exe",
"tfak.exe",
"tfak5.exe",
"tgbob.exe",
"titanin.exe",
"titaninxp.exe",
"tracert.exe",
"trickler.exe",
"trjsetup.exe",
"trojantrap3.exe",
"tsadbot.exe",
"tvmd.exe",
"tvtmd.exe",
"undoboot.exe",
"updat.exe",
"update.exe",
"upgrad.exe",
"utpost.exe",
"vbcons.exe",
"vbust.exe",
"vbwin9x.exe",
"vbwinntw.exe",
"vcsetup.exe",
"vet32.exe",
"vet95.exe",
"vettray.exe",
"vfsetup.exe",
"vir-help.exe",
"virusmdpersonalfirewall.exe",
"vnlan300.exe",
"vnpc3000.exe",
"vpc42.exe",
"vpfw30s.exe",
"vscan40.exe",
"vscenu6.02d30.exe",
"vsched.exe",
"vsecomr.exe",
"vsisetup.exe",
"vsmain.exe",
"vswin9xe.exe",
"vswinntse.exe",
"vswinperse.exe",
"w32dsm89.exe",
"w9x.exe",
"watchdog.exe",
"webdav.exe",
"wfindv32.exe",
"whoswatchingme.exe",
"wimmun32.exe",
"win-bugsfix.exe",
"win32.exe",
"win32us.exe",
"winactive.exe",
"window.exe",
"windows.exe",
"wininetd.exe",
"wininitx.exe",
"winlogin.exe",
"winmain.exe",
"winnet.exe",
"winppr32.exe",
"winrecon.exe",
"winservn.exe",
"winssk32.exe",
"winstart.exe",
"winstart001.exe",
"wintsk32.exe",
"winupdate.exe",
"wkufind.exe",
"wnad.exe",
"wnt.exe",
"wradmin.exe",
"wsbgate.exe",
"wupdater.exe",
"wupdt.exe",
"wyvernworksfirewall.exe",
"xpf202en.exe",
"zapsetup3001.exe",
"zatutor.exe",
"zonalm2601.exe",
"A2CMD.exe",
"ADVCHK.exe",
"AGB.exe",
"AKRNL.exe",
"AHPROCMONSERVER.exe",
"AIRDEFENSE.exe",
"ALERTSVC.exe",
"AVIRA.exe",
"AMON.exe",
"TROJAN.exe",
"AVZ.exe",
"ANTIVIR.exe",
"ARMOR2NET.exe",
"ASH.exeexe.exe",
"ASHENHCD.exe",
"ASHMAISV.exe",
"ASHPOPWZ.exe",
"ASHSERV.exe",
"ASHSIMPL.exe",
"ASHSKPCK.exe",
"ASHWEBSV.exe",
"ASWUPDSV.exe",
"ASWSCAN.exe",
"AVCIMAN.exe",
"AVENGINE.exe",
"AVESVC.exe",
"AVEVAL.exe",
"AVEVL32.exe",
"AVGAM.exe",
"AVGCC.exe",
"AVGCHSVX.exe",
"AVGCSRVX.exe",
"AVGNSX.exe",
"AVGCC32.exe",
"AVGCTRL.exe",
"AVGFWSRV.exe",
"AVGNTMGR.exe",
"AVGTRAY.exe",
"AVGUPSVC.exe",
"AVINITNT.exe",
"AVKSERV.exe",
"AVKSERVICE.exe",
"AVP32.exe",
"AVSERVER.exe",
"AVSCHED32.exe",
"AVSYNMGR.exe",
"AVWUPD32.exe",
"AVXMONITOR.exe",
"AVXQUAR.exe",
"BDSWITCH.exe",
"BLACKICE.exe",
"CAFIX.exe",
"CFP.exe",
"CFPCONFIG.exe",
"CFIAUDIT.exe",
"CLAMWIN.exe",
"CUREIT.exe",
"DEFWATCH.exe",
"DRVIRUS.exe",
"DRWADINS.exe",
"DRWEB.exe",
"DEFENDERDAEMON.exe",
"DWEBLLIO.exe",
"DWEBIO.exe",
"ESCANH95.exe",
"ESCANHNT.exe",
"EWIDOCTRL.exe",
"EZANTIVIRUSREGISTRATIONCHECK.exe",
"FILEMON.exe",
"FIREWALL.exe",
"FORTISCAN.exe",
"FPWIN.exe",
"FSBWSYS.exe",
"F-SCHED.exe",
"FSDFWD.exe",
"FSGK32.exe",
"FSGK32ST.exe",
"FSGUIEXE.exe",
"FSPEX.exe",
"GCASDTSERV.exe",
"GCASSERV.exe",
"GIANTANTISPYWARE.exe",
"GUARDGUI.exe",
"GUARDNT.exe",
"HREGMON.exe",
"HRRES.exe",
"HSOCKPE.exe",
"HUPDATE.exe",
"IAMSERV.exe",
"ICLOAD95.exe",
"ICLOADNT.exe",
"ICMON.exe",
"ICSSUPPNT.exe",
"ICSUPP95.exe",
"ICSUPPNT.exe",
"INETUPD.exe",
"INOCIT.exe",
"INORPC.exe",
"INORT.exe",
"INOTASK.exe",
"INOUPTNG.exe",
"IOMON98.exe",
"ISAFE.exe",
"ISATRAY.exe",
"KAV.exe",
"KAVMM.exe",
"KAVPFW.exe",
"KAVSTART.exe",
"KAVSVC.exe",
"KAVSVCUI.exe",
"KMAILMON.exe",
"MAMUTU.exe",
"MCAGENT.exe",
"MCREGWIZ.exe",
"MCUPDATE.exe",
"MINILOG.exe",
"MYAGTSVC.exe",
"MYAGTTRY.exe",
"NAVLU32.exe",
"NAVW32.exe",
"NEOWATCHLOG.exe",
"NEOWATCHTRAY.exe",
"NISSERV.exe",
"NOD32.exe",
"NORMIST.exe",
"NOTSTART.exe",
"NPAVTRAY.exe",
"NPFMSG.exe",
"NSCHED32.exe",
"NSMDTR.exe",
"NSSSERV.exe",
"NSSTRAY.exe",
"NTOS.exe",
"NTXCONFIG.exe",
"NUPGRADE.exe",
"NVCOD.exe",
"NVCTE.exe",
"NVCUT.exe",
"NWSERVICE.exe",
"OFCPFWSVC.exe",
"OPSSVC.exe",
"OP_MON.exe",
"PAVFIRES.exe",
"PAVFNSVR.exe",
"PAVKRE.exe",
"PAVPROT.exe",
"PAVPRSRV.exe",
"PAVSRV51.exe",
"PAVSS.exe",
"PCCGUIDE.exe",
"PCCIOMON.exe",
"PCCPFW.exe",
"PCCTLCOM.exe",
"PERTSK.exe",
"PERVAC.exe",
"PESTPATROL.exe",
"PNMSRV.exe",
"PREVSRV.exe",
"PREVX.exe",
"PSIMSVC.exe",
"QHONLINE.exe",
"QHONSVC.exe",
"QHWSCSVC.exe",
"QHSET.exe",
"RTVSCN95.exe",
"SALITY.exe",
"SAVADMINSERVICE.exe",
"SAVSCAN.exe",
"SCANNINGPROCESS.exe",
"SDRA64.exe",
"SDHELP.exe",
"SITECLI.exe",
"SPBBCSVC.exe",
"SPIDERCPL.exe",
"SPIDERML.exe",
"SPIDERUI.exe",
"SPYBOTSD.exe",
"SPYXX.exe",
"SS3EDIT.exe",
"STOPSIGNAV.exe",
"SWAGENT.exe",
"SWDOCTOR.exe",
"SWNETSUP.exe",
"SYMLCSVC.exe",
"SYMSPORT.exe",
"SYMWSC.exe",
"SYNMGR.exe",
"TAUMON.exe",
"TMNTSRV.exe",
"TMPROXY.exe",
"TNBUTIL.exe",
"VBA32ECM.exe",
"VBA32IFS.exe",
"VBA32LDR.exe",
"VBA32PP3.exe",
"VBSNTW.exe",
"VCRMON.exe",
"VRFWSVC.exe",
"VRRW32.exe",
"VSECOMR.exe",
"WATCHDOG.exe",
"WINSSNOTIFY.exe",
"XCOMMSVR.exe",
"ZLCLIENT.exe",
"navap.exe",
"sahagent.exe"
],
"url": ""
},
"G Data文件系统实时监控": {
"processes": [
"avkwctl9.exe",
"AVKWCTL.exe"
],
"url": ""
},
"Sophos Anti-Virus": {
"processes": [
"SAVMAIN.exe"
],
"url": ""
},
"360保险箱": {
"processes": [
"safeboxTray.exe",
"360safebox.exe"
],
"url": ""
},
"G Data扫描器": {
"processes": [
"GDScan.exe"
],
"url": ""
},
"G Data杀毒代理": {
"processes": [
"AVKProxy.exe"
],
"url": ""
},
"G Data备份服务": {
"processes": [
"AVKBackupService.exe"
],
"url": ""
},
"亚信安全服务器深度安全防护系统": {
"processes": [
"Notifier.exe"
],
"url": ""
},
"阿里云盾": {
"processes": [
"AliYunDun.exe",
"AliYunDunUpdate.exe",
"aliyun_assist_service.exe",
"/usr/local/aegis/aegis_client/"
],
"url": ""
},
"腾讯云安全": {
"processes": [
"BaradAgent.exe",
"sgagent.exe",
"YDService.exe",
"YDLive.exe",
"YDEdr.exe"
],
"url": ""
},
"360主机卫士Web": {
"processes": [
"360WebSafe.exe",
"QHSrv.exe",
"QHWebshellGuard.exe"
],
"url": ""
},
"网防G01": {
"processes": [
"gov_defence_service.exe",
"gov_defence_daemon.exe"
],
"url": ""
},
"云锁客户端": {
"processes": [
"PC.exe"
],
"url": ""
},
"Symantec Shared诺顿邮件防火墙软件": {
"processes": [
"SNDSrvc.exe"
],
"url": ""
},
"U盘杀毒专家": {
"processes": [
"USBKiller.exe"
],
"url": ""
},
"天擎EDRAgent": {
"processes": [
"360EntClient.exe"
],
"url": ""
},
"360(奇安信)天擎": {
"processes": [
"360EntMisc.exe"
],
"url": ""
},
"阿里云-云盾": {
"processes": [
"alisecguard.exe"
],
"url": ""
},
"Sophos AutoUpdate Service": {
"processes": [
"ALsvc.exe"
],
"url": ""
},
"阿里云监控": {
"processes": [
"CmsGoAgent.windows-amd64."
],
"url": ""
},
"深信服EDRAgent": {
"processes": [
"edr_agent.exe",
"edr_monitor.exe",
"edr_sec_plan.exe"
],
"url": "https://edr.sangfor.com.cn"
},
"戎码翼龙 NG-EDR": {
"processes": [
"rm_service.exe",
"rm_live.exe",
"rm_tray.exe",
"rm_hips.exe"
],
"url": "https://www.rongma.com"
},
"启明星辰天珣EDRAgent": {
"processes": [
"ESAV.exe",
"ESCCControl.exe",
"ESCC.exe",
"ESCCIndex.exe"
],
"url": ""
},
"蓝鲸Agent": {
"processes": [
"gse_win_agent.exe",
"gse_win_daemon.exe"
],
"url": ""
},
"联想电脑管家": {
"processes": [
"LAVService.exe"
],
"url": ""
},
"Sophos MCS Agent": {
"processes": [
"McsAgent.exe"
],
"url": ""
},
"Sophos MCS Client": {
"processes": [
"McsClient.exe"
],
"url": ""
},
"360TotalSecurity(360国际版)": {
"processes": [
"QHSafeMain.exe",
"QHSafeTray.exe",
"QHWatchdog.exe",
"QHActiveDefense.exe"
],
"url": ""
},
"Sophos Device Control Service": {
"processes": [
"sdcservice.exe"
],
"url": ""
},
"Sophos Endpoint Defense Service": {
"processes": [
"SEDService.exe"
],
"url": ""
},
"Windows Defender SmartScreen": {
"processes": [
"smartscreen.exe"
],
"url": "https://learn.microsoft.com/zh-cn/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/"
},
"Sophos Clean Service": {
"processes": [
"SophosCleanM64.exe"
],
"url": ""
},
"Sophos FIM": {
"processes": [
"SophosFIMService.exe"
],
"url": ""
},
"Sophos System Protection Service": {
"processes": [
"SSPService.exe"
],
"url": ""
},
"Sophos Web Control Service": {
"processes": [
"swc_service.exe"
],
"url": ""
},
"天眼云镜": {
"processes": [
"TitanAgent.exe",
"TitanMonitor.exe"
],
"url": ""
},
"天融信终端防御": {
"processes": [
"TopsecMain.exe",
"TopsecTray.exe"
],
"url": ""
},
"360杀毒-网盾": {
"processes": [
"wdswfsafe.exe"
],
"url": ""
},
"智量安全": {
"processes": [
"WiseVector.exe",
"WiseVectorSvc.exe"
],
"url": ""
},
"天擎": {
"processes": [
"QAXEntClient.exe",
"QAXTray.exe"
],
"url": ""
},
"安恒主机卫士": {
"processes": [
"AgentService.exe",
"ProtectMain.exe"
],
"url": ""
},
"亚信DS服务端": {
"processes": [
"Deep Security Manager.exe"
],
"url": "https://www.asiainfo-sec.com/product/detail-148.html"
},
"亚信DS客户端": {
"processes": [
"dsa.exe",
"UniAccessAgent.exe",
"dsvp.exe"
],
"url": "https://www.asiainfo-sec.com/product/detail-148.html"
},
"深信服EDR": {
"processes": [
"/sangfor/edr/agent"
],
"url": "https://edr.sangfor.com.cn"
},
"阿里云云助手守护进程": {
"processes": [
"/assist-daemon/assist_daemon"
],
"url": ""
},
"zabbix agen端": {
"processes": [
"zabbix_agentd"
],
"url": ""
},
"阿里云盾升级": {
"processes": [
"/usr/local/aegis/aegis_update/AliYunDunUpdate"
],
"url": ""
},
"阿里云助手": {
"processes": [
"/usr/local/share/aliyun-assist"
],
"url": ""
},
"阿里系监控": {
"processes": [
"AliHips",
"AliNet",
"AliDetect",
"AliScriptEngine"
],
"url": ""
},
"腾讯系监控": {
"processes": [
"secu-tcs-agent",
"/usr/local/qcloud/stargate/",
"/usr/local/qcloud/monitor/",
"/usr/local/qcloud/YunJing/"
],
"url": ""
},
"腾讯自动化助手TAT产品": {
"processes": [
"/usr/local/qcloud/tat_agent/"
],
"url": ""
},
"SentinelOne(哨兵一号)": {
"processes": [
"SentinelServiceHost.exe",
"SentinelStaticEngine.exe",
"SentinelStaticEngineScanner.exe",
"SentinelMemoryScanner.exe",
"SentinelAgent.exe",
"SentinelAgentWorker.exe",
"SentinelUI.exe"
],
"url": "https://www.sentinelone.com/"
},
"OneSec(微步)": {
"processes": [
"tbAgent.exe",
"tbAgentSrv.exe",
"tbGuard.exe"
],
"url": "https://threatbook.cn/onesec"
},
"亚信安全防毒墙网络版": {
"processes": [
"PccNT.exe",
"PccNTMon.exe",
"PccNTUpd.exe"
],
"url": "https://asiainfo-sec.com/product/detail-122.html"
},
"Illumio ZTS": {
"processes": [
"venVtapServer.exe",
"venPlatformHandler.exe",
"venAgentMonitor.exe",
"venAgentMgr.exe"
],
"url": "https://www.illumio.com/"
},
"奇安信统一服务器安全": {
"processes": [
"NuboshEndpoint.exe"
],
"url": "https://www.qianxin.com/product/detail/pid/394"
},
"IObit Malware Fighter": {
"processes": [
"IMF.exe",
"IMFCore.exe",
"IMFsrv.exe",
"IMFSrvWsc.exe"
],
"url":"https://www.iobit.com/en/malware-fighter.php"
}
}