Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR, GenericAutorunWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, WormAutorun
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 904b66dc26193ecb044902e38b343a93
SHA1: f8de69a265af1e23b60119ebf181a303086425a6
SHA256: c2668995831e6dc65ae48385c9a3242f46e47de9ffe444cb1da0ec74f9829593
SSDeep: 6144:0JtUK/n0bR3s0saeLWYbJESy2j82qk/nBT:0JtL/nKBs9aYVEVB2qSBT
Size: 239729 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2015-03-05 23:03:47
Analyzed on: Windows7Ada SP1 64-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
| Behaviour | Description |
|---|---|
| WormAutorun | A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. |
Process activity
The Trojan creates the following process(es):
QHWatchdog.exe:2492
DXSETUP.exe:1376
regsvr32.exe:704
regsvr32.exe:1580
%original file name%.exe:2428
QHActiveDefense.exe:1168
QHActiveDefense.exe:804
nss6FC6.tmp.exe:1904
The Trojan injects its code into the following process(es):
QHSafeTray.exe:1172
PatchUp.exe:3300
nsd45AA.tmp.exe:1172
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process QHSafeTray.exe:1172 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\LocalLow\360WD\wdch.dat (557 bytes)
%Program Files% (x86)\360\Total Security\safemon\netconfig.dat (18 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdui2.dll (548 bytes)
%Program Files% (x86)\360\Total Security\safemon\safemon.dll (49 bytes)
%Program Files% (x86)\360\Total Security\safemon\SomProxy.dll (339 bytes)
%Program Files% (x86)\360\Total Security\safemon\routertp.ini (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\360WD\wdch.dat-journal (7250 bytes)
%Program Files% (x86)\360\Total Security\safemon\urlproc.dll (655 bytes)
The process PatchUp.exe:3300 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files% (x86)\360\Total Security\hotfix\som_c6cb4f5ac0255d2baf41678f26cd50cc.dat.tmp (2 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_7539e5c431f211952383e009cce4062d.dat.tmp (323 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_9909aa216b30b502f677bfff05000b0e.dat.tmp (784 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_0cd47f5d563ba06a1e44716398931a08.dat.tmp (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\360safe\360leakfixer\PatchUp.leakrepair.som.log (17020 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_e6e862c79dc156d48370cc4f389eee28.dat.tmp (3 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_dbbccf0284b1c6112444badae27b87c1.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_4ae7fb61ded98e1cd0fa51382739609d.dat.tmp (3 bytes)
%Program Files% (x86)\360\Total Security\leakrepair.dat (446 bytes)
%Program Files% (x86)\360\Total Security\deepscan\netconf.dat (4 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg (2091 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_b0586730837afd39a4c6ffc29b8b45d1.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_f3d59eaa9ff33dcbe50abb4276fbe86c.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg-journal (13458 bytes)
The process nsd45AA.tmp.exe:1172 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dcsx_42_x64.cab (49398 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx9_38_x64.cab (27487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx11_42_x64.cab (3051 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_XACT_x86.cab (3591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XAudio_x86.cab (5874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_XACT_x64.cab (4633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx10_41_x64.cab (15925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx11_42_x86.cab (1783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx11_43_x86.cab (1564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_X3DAudio_x64.cab (1391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx10_39_x86.cab (15652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XACT_x64.cab (2605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2006_XACT_x64.cab (3086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_XACT_x86.cab (3227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_xinput_x86.cab (1320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_xinput_x64.cab (1386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dsetup32.dll (27267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_MDX1_x86_Archive.cab (72546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XACT_x86.cab (1707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XAudio_x86.cab (6136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx9_36_x86.cab (26253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx9_40_x86.cab (22095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0008.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XACT_x64.cab (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_XACT_x86.cab (3849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XAudio_x86.cab (6895 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx9_35_x64.cab (27382 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_X3DAudio_x64.cab (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_XACT_x64.cab (3989 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx9_34_x86.cab (23634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx10_42_x86.cab (3771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx9_32_x64.cab (23092 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_XACT_x86.cab (3491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\FEB2007_XACT_x64.cab (3357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XACT_x86.cab (1671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XAudio_x64.cab (6518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DSETUP.dll (2598 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx10_38_x64.cab (17923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_XACT_x86.cab (2774 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_xinput_x64.cab (2061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx11_43_x64.cab (4547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2006_XACT_x86.cab (3064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_xinput_x86.cab (830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DXSETUP.exe (11136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0010.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_xinput_x86.cab (2760 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_d3dx9_30_x64.cab (19039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_D3DCompiler_42_x64.cab (14048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_XACT_x86.cab (2201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx9_33_x86.cab (23977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx10_43_x86.cab (3692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XAudio_x64.cab (6514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx9_43_x64.cab (17300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0011.tmp (12676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_XACT_x64.cab (3423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_d3dx9_29_x86.cab (17312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_X3DAudio_x64.cab (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx10_40_x86.cab (16648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XAudio_x64.cab (6012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_XACT_x64.cab (3999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx9_37_x86.cab (20364 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_X3DAudio_x64.cab (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_XACT_x86.cab (3136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_d3dx9_30_x86.cab (20278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XAudio_x64.cab (5815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx10_00_x64.cab (6385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XAudio_x86.cab (4900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx9_35_x86.cab (34733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XACT_x86.cab (1503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_X3DAudio_x86.cab (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dxupdate.cab (1849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_D3DCompiler_43_x86.cab (16808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XAudio_x86.cab (6547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx9_40_x64.cab (30555 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XAudio_x64.cab (6523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx10_37_x86.cab (14668 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dcsx_43_x86.cab (14227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XAudio_x86.cab (4920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XAudio_x64.cab (4852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2005_d3dx9_25_x64.cab (19138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_D3DCompiler_42_x86.cab (17226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx9_41_x64.cab (45112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\temp_0.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx10_35_x64.cab (15425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0002.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx9_37_x64.cab (28720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx10_35_x86.cab (16252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2005_d3dx9_25_x86.cab (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_xinput_x64.cab (3075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Dec2005_d3dx9_28_x86.cab (17231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx10_36_x86.cab (18499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2005_d3dx9_27_x86.cab (17231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XAudio_x64.cab (4945 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx10_36_x64.cab (15795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2005_d3dx9_27_x64.cab (20953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0004.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx9_43_x86.cab (12679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_X3DAudio_x64.cab (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_d3dx9_29_x64.cab (22025 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx10_43_x64.cab (6095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XAudio_x86.cab (5285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx10_40_x64.cab (16329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0006.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_X3DAudio_x86.cab (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx9_39_x64.cab (27151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_XACT_x64.cab (3624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx9_39_x86.cab (23198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx10_34_x86.cab (11482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_MDX1_x86.cab (16914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2005_d3dx9_24_x64.cab (20378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2005_d3dx9_26_x64.cab (22088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0005.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx9_36_x64.cab (29773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XACT_x64.cab (3069 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx10_33_x64.cab (12314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_X3DAudio_x86.cab (1882 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_XACT_x64.cab (4852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_XACT_x64.cab (5028 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\2.tmp (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XACT_x64.cab (3530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dcsx_43_x64.cab (14558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2005_d3dx9_26_x86.cab (19193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx10_41_x86.cab (17373 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx10_37_x64.cab (14641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_d3dx9_31_x64.cab (20272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XACT_x64.cab (3602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_D3DCompiler_43_x64.cab (17184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Oct2005_xinput_x86.cab (2114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XACT_x86.cab (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx10_34_x64.cab (12870 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_X3DAudio_x86.cab (841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XACT_x64.cab (1991 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0003.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx9_41_x86.cab (23900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx9_38_x86.cab (23827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx9_33_x64.cab (24421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XAudio_x64.cab (5217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_X3DAudio_x86.cab (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XACT_x86.cab (2715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0001.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_X3DAudio_x86.cab (1984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx10_42_x64.cab (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\15.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_XACT_x86.cab (2011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XACT_x64.cab (2426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_XACT_x64.cab (4808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx10_00_x86.cab (4730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dxdllreg_x86.cab (1424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx9_34_x64.cab (24515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_XACT_x64.cab (3659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0009.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_X3DAudio_x64.cab (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Dec2005_d3dx9_28_x64.cab (21049 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\FEB2007_XACT_x86.cab (2514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dcsx_42_x86.cab (51118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx9_32_x86.cab (23370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XACT_x64.cab (3497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XACT_x86.cab (2658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx9_42_x86.cab (12362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_XACT_x86.cab (3396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0007.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XAudio_x86.cab (6228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Oct2005_xinput_x64.cab (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx10_39_x64.cab (17527 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx10_38_x86.cab (15378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2005_d3dx9_24_x86.cab (23695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx9_42_x64.cab (20143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XACT_x86.cab (1484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_d3dx9_31_x86.cab (19019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx10_33_x86.cab (18378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XACT_x86.cab (2729 bytes)
The process DXSETUP.exe:1376 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DSETUP.dll (90 bytes)
C:\Windows\Logs\DirectX.log (256 bytes)
The process regsvr32.exe:704 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files% (x86)\360\Total Security\MenuEx64.dll (614 bytes)
The process %original file name%.exe:2428 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\StdUtils.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\license.rtf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd45AA.tmp.exe (6529759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss6FC6.tmp.exe (2170387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\collect[2].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE946.tmp (6936 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\nsDialogs.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360TS.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\Directx_9.10.11[1].exe (6103585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\inetc.dll (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\nsRichEdit.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\360TotalSecurity_Rus_Setup_0001[1].exe (2034898 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\stats.txt (140 bytes)
The process QHActiveDefense.exe:1168 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Windows\System32\drivers\360fsflt.sys (1740 bytes)
%Program Files% (x86)\360\Total Security\safemon\SelfProtectAPI2.dll (319 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360FsFlt.sys (315 bytes)
The process QHActiveDefense.exe:804 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
\\192.168.50.163\PIPE\srvsvc (14264 bytes)
%Program Files% (x86)\360\Total Security\deepscan\netconf.dat (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Camera64.sys (40 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDRecord.dll (184 bytes)
%Program Files% (x86)\360\Total Security\Logs\Administrators\ipc\galaxy2.dat (17110 bytes)
%Program Files% (x86)\360\Total Security\safemon\param.ini (24 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat (1123 bytes)
%Program Files% (x86)\360\Total Security\sites.dll (49 bytes)
%Program Files% (x86)\360\Total Security\scanstub.dll (176 bytes)
%Program Files% (x86)\360\Total Security\safescan.dll (348 bytes)
%Program Files% (x86)\360\Total Security\safemon\filelog.db (1141 bytes)
%Program Files% (x86)\360\Total Security\ipc\qutmipc.dll (167 bytes)
%Program Files% (x86)\360\Total Security\filemon\WhiteCache.dll (49 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SoftMgr.db (1 bytes)
C:\ProgramData\360safe\LogInfo\New360_tmp_1429761230_2620.log2 (460 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TMContainer00000000000000000002.regtrans-ms (712 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker64.sys (102 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TM.blf (2654 bytes)
%Program Files% (x86)\360\Total Security\filemon\wcachedb.db (345 bytes)
%Program Files% (x86)\360\Total Security\softmgr\somkernl.dll (291 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SomAdvUtils.dll (888 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SoftMgr.db-journal (512 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg-journal (459392 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg (72144 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AVFlt64.sys (81 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat.LOG1 (1048 bytes)
%Program Files% (x86)\360\Total Security\ipc\yhregd.dll (409 bytes)
C:\Windows\System32\drivers\360Camera64.sys (40 bytes)
%Program Files% (x86)\360\Total Security\safemon\filelog.db-journal (5490 bytes)
%Program Files% (x86)\360\Total Security\filemon\wcachedb.db-journal (528 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TMContainer00000000000000000001.regtrans-ms (1224 bytes)
The process nss6FC6.tmp.exe:1904 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\udisk.locale (444 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\urllib.dat (600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360P2SP.dll (9112 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_slow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libsdi.dat (84 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\Safemon.dll.locale (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\gamemode.tpi (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsSysRepair.dll (6372 bytes)
%Program Files% (x86)\360\Total Security\ipc\appdef.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SelfProtection.sys (1691 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\Sxin64.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\UDiskScanEngine.dll.locale (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\regmon.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360liveupdate\360liveupdate_theme.ui (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image (4 bytes)
%Program Files% (x86)\360\Total Security\tools.xml (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\safescan.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_2.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\ipc\qutmipc.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\udisk.locale (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\filemon\360rp.dll (18248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1000.dat (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1005.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsr.dat (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHSafeTray.exe (10758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libaw.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360NetBase.dll (4426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\DsRes64.dll (1548 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsbs.dat (38 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appdext.dll (1726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360NetBase64.dll (4336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\DsRes.dll (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\deepscan.dll (17072 bytes)
%Program Files% (x86)\360\Total Security\scanstub.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\config\lang\hi\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome\content\main.js (2 bytes)
%Program Files% (x86)\360\Total Security\safemon\urlproc.dll (4185 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsSysRepair.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome.manifest (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDRecord.dll (1920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\regmon.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_slow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\CleanHelper64.exe (723 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\EfiMon.sys (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\ImAVEng.dll (1507 bytes)
%Program Files% (x86)\360\Total Security\scanbase.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\3G\LibOui.dat (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360AvFlt.sys (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\dynlenv.dll (4491 bytes)
%Program Files% (x86)\360\Total Security\filemon\360avflt64.sys (601 bytes)
%Program Files% (x86)\360\Total Security\DumpUper.ini (170 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\NetDefender.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\updatecfg.ini (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\drvmk.dat (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\filemgr.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\softmgr\somkernl.dll (23062 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\default_theme.ui (2321 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdui2.dll (3361 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\urlproc.dll (4863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1005.dat (1 bytes)
%Program Files% (x86)\360\Total Security\sweeper\CleanHelper64.exe (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (111 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\PopSoftEng.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\WifiAgent.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\360GuardBase.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\sweeper\SysSweeper.dat (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libdefa.dat (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\NetDefender.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libsdi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\leakrepair.dll (8648 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360TsLiveUpd.exe (8594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\qex.dll (14497 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sites.dll (10999 bytes)
%Program Files% (x86)\360\Total Security\360Common.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\360Downloads.ini (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libaw.dat (2343 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\udisk.locale (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\360Util.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\safemon\360AV.tpi (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\360uac.dat (8 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker64.sys (601 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360leakfix\360leakfix_theme.ui (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr4.dat (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\1429760925_00000000_base\360base.dll (1815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\TrashClean.dll (4180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsr.dat (87 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dswtb.dat (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr8.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360.dat (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\i18n.ini (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\deepscan\csp.dat (8 bytes)
%Program Files% (x86)\360\Total Security\rpi.dat (972 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1000.dat (607 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\DsRes64.dll (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\PatchUp.exe (6084 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libvi.dat (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\3G\3GIdentify.dll (3418 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AvFlt.dll (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\AVEngine.dll (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\MacroDef.enc (6 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\install.rdf (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsArk.sys (601 bytes)
%Program Files% (x86)\360\Total Security\360SkinView.exe (2105 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\360ShellPro.exe (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanbase.dll (1123 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\ssr.dat (53 bytes)
%Program Files% (x86)\360\Total Security\ipc\appdext.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\I18N.dll (691 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\iNetSafe.dll (2464 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Base64.dll (7247 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\NetDefender.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dswc.dat (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\NetDefender.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\feedback\FeedBack_theme.ui (87 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\LibSDI.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360ShellPro.exe (2114 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\Safemon.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CombineExt.dll (1567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\DsRes64.dll (1542 bytes)
%Program Files% (x86)\360\Total Security\ipc\clsid.dat (22 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\360Base.dll (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libaw.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\DsRes64.dll (1370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\gameidentify.dat (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\3G\LibOui.dat (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360SPTool.exe.locale (28 bytes)
%Program Files% (x86)\360\Total Security\deepscan\LibOui.dat (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\AntiAdwa.dll.locale (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\art.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\sweeper\SysSweeper.dll (4545 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_1.dat (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\SelfProtectAPI2.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360GuardBase.dll (4626 bytes)
%Program Files% (x86)\360\Total Security\MenuEx.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\AVLib.dat (360 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\Sxin.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHToasts.exe (3100 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qutmdrv.sys (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\drvmon.dat (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\zh-CN\SysSweeper.ui.dat (114 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CheckSM.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\AntiAdwa.dll.locale (38 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\safemon.dll.locale (20 bytes)
%Program Files% (x86)\360\Total Security\dynlbase.dll (6841 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1003.dat (1 bytes)
%Program Files% (x86)\360\Total Security\360DeskAna.exe (1425 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsArk.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\safemon\360drwht.dat (42 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHToasts.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\regmon.dat (46 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\Sites64.dll (15019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360zipc.dll (5513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\hookport.sys (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360uac.dat (8 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationSafe\360InternationSafe_theme.ui (55596 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360DeskAna64.exe (3906 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\ipc\DrvUtility.dll (828 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\DumpUper.ini (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wdui2.dll (7710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\router.ini (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp.7z (27684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\udiskscan.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\ptype.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\vi\SysSweeper.ui.dat (128 bytes)
%Program Files% (x86)\360\Total Security\softmgr\360SoftMgrS.dll (2321 bytes)
%Program Files% (x86)\360\Total Security\safemon\360zipc.dll (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libvi.dat (130 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AvFlt.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\udisk.locale (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360SPTool.exe.locale (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\PDown.dll (2025 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsr.dat (601 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker.dll (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SomAdvUtils.dll (8690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Util.dll (5342 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\AntiAdwa.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\360net.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360procmon.dll.locale (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DSFScan.dll (3996 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\360Base64.dll (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\LibOui.dat (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\qutmipc.dll (2626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\ipcService.dll (5373 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360skinview\360skinview_theme.ui (45 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1004.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\patt.enc (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\DsRes.dll (1406 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\DsRes.dll (64 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxld64.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\TR\SysSweeper.ui.dat (123 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\art.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsArk.dll (1796 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\cloudsec2.dll (7547 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1004.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360skinview\360skinview_theme.ui (45 bytes)
%Program Files% (x86)\360\Total Security\safemon\hookport.sys (58 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\AntiAdwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SPTool.exe (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\udisk.locale (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsr.dat (55 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\DsRes64.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\Sxin64.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\DsRes.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libvi.dat (130 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdui3.dll (5441 bytes)
%Program Files% (x86)\360\Total Security\360TsLiveUpd.exe (6841 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHWatchdog.exe (601 bytes)
%Program Files% (x86)\360\Total Security\libredlist.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360procmon.dll.locale (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHVer.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDPayPro.exe (9098 bytes)
%Program Files% (x86)\360\Total Security\config\config.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\SomProxy.dll (3594 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\softmgr\AdvUtils.ini (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_reallyfast.png (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\signbwl.dat (684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box.sys (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\NetDefender.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr4.dat (7 bytes)
%Program Files% (x86)\360\Total Security\dynlenv.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\icon64.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MenuEx.dll (3246 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libdefa.dat (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleak.dat (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_reallyfast.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\cloudsec2.dll (8633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\stsuglist.dat (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\rpi.dat (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\DsRes.dll (1465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\zh-TW\SysSweeper.ui.dat (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360QuarantPlugin.dll (4573 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\LibSDI.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\config\lang\zh-TW\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (112 bytes)
%Program Files% (x86)\360\Total Security\MiniUI.dll (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\drvms.dat (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\yhregd.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\UDiskScanEngine.dll.locale (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\Safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DSFScan.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SXIn.dll (5904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\ru\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\Netgm.dll (3254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dswc.dat (50 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr5.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sndw.dat (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\Cloudsec3.dll (8817 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\appd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\cloudcom2.dll (7547 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\appd.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qutmload.dll (1833 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\NetDefender.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\AVEngine.dll (8584 bytes)
%Program Files% (x86)\360\Total Security\safemon\WscReg.exe (22336 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxmain.exe (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHSafeMain.exe (29771 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\LibSDI.dat (78 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\yhregd.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toasts_waring.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\360SoftMgrS.dll (4865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360rp.dll (20395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\DsRes64.dll (377 bytes)
%Program Files% (x86)\360\Total Security\PDown.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\endata\h_3.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\art.dat (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\config.xml (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1002.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPI.dll (1526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\X64For32Lib.dll (53 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxld.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\endata\h_1.dat (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safescan.dll (2325 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CQhCltHttpW.dll (3932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360drwht.dat (42 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360wdui\360wdui_theme.ui (5441 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsr.dat (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\NetDefender.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\chrome\manifest.json (332 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\udisk.locale (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\safemon\drvms.dat (3 bytes)
%Program Files% (x86)\360\Total Security\PatchUp.exe (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker.sys (1101 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\AntiAdwa.dll (22336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome\content\main.js (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\chrome\360webshield.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libredlist.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\udisk.locale (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Verify.dll (1321 bytes)
%Program Files% (x86)\360\Total Security\safemon\chrome\manifest.json (332 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360CleanPlus\360CleanPlus_theme.ui (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\art.dat (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\WifiAgent.dll (2742 bytes)
%Program Files% (x86)\360\Total Security\ipc\cleancfg.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\EfiProc.dll (1742 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\libleakres.dat (16582 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1006.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Uninstall.exe (12812 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dserror.dat (1 bytes)
%Program Files% (x86)\360\Total Security\ipc\FileMgr.dll (2105 bytes)
%Program Files% (x86)\360\Total Security\writeable_test_495427.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SXIn64.dll (5863 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360SPTool.exe.locale (28 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\softmgr\safespeedboot.dat (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\libleak-64.dat (22575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\pt\SysSweeper.ui.dat (123 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\NetDefender.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1002.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\deepscan.dll (22163 bytes)
C:\Windows\System32\drivers\360Box64.sys (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\art.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\AVEI.dll (1750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CheckSM.exe (3191 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360netcfg.exe (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\tools.xml (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\TS.dat (748 bytes)
%Program Files% (x86)\360\Total Security\config\defaultskin\defaultskin.ui (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\UDiskScanEngine.dll (4765 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\qex.dll (11518 bytes)
%Program Files% (x86)\360\Total Security\filemon\FsrMgr.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360wdui\360wdui_theme.ui (735 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sysfilerepS.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SxWrapper.dll (1169 bytes)
%Program Files% (x86)\360\Total Security\mui\en\Strings.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libsdi.dat (1673 bytes)
%Program Files% (x86)\360\Total Security\endata\h_2.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libsdi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SafeCamera.tpi (2321 bytes)
%Program Files% (x86)\360\Total Security\ipc\SXIn.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dserror.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\NetDefender.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\Antiadwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\AntiAdwa.dll.locale (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\WiFiSafe.dll (13152 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360FsFlt.sys (1425 bytes)
%Program Files% (x86)\360\Total Security\Dumpuper.exe (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\7z.dll (50 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\art.dat (20 bytes)
%Program Files% (x86)\360\Total Security\endata\lm_1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Conf.dll (3082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\ipc\signbwl.dat (684 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes.dll (29 bytes)
%Program Files% (x86)\360\Total Security\ipc\qutmipc.sys (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360SPTool.exe.locale (31 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Camera64.sys (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\AntiAdwa.dll.locale (1279 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\appd.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\Safemon.dll.locale (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360Quarant.dll (4397 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHActiveDefense.exe (5873 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360UDisk\360UDisk_theme.ui (237 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\Antiadwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\WhiteCache.dll (12119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\Sxin.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360AvFlt.dll (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\DsRes.dll (1483 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SomAdvUtils.dll (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\cacert.pem (229 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\ssr.dat (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\cloudcom2.dll (10255 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\DsRes64.dll (58 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\Optadn.dat (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsns.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\DsRes.dll (1551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SpeedUp.dll (673 bytes)
%Program Files% (x86)\360\Total Security\netmon\360GameIdentify.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\safemon\360safemonpro.tpi (7971 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CQhCltHttpW.dll (2321 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dswtb.dat (263 bytes)
%Program Files% (x86)\360\Total Security\softmgr\Optadn.dat (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\360bps.dat (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\LibSDI.dat (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SpeedUp.dll (4095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\QHSafeMain.exe (26096 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsws.dat (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\patt.enc (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\defaultskin\MiniUI.xml (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360net.dll (4879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\execrule.dat (100 bytes)
%Program Files% (x86)\360\Total Security\MenuEx64.dll (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes64.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\safemon\360hipsPopWnd.dll (7726 bytes)
%Program Files% (x86)\360\Total Security\safemon\urllib.dat (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsr.dat (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\AntiAdwa.dll (29035 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\ssr.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\ru\SysSweeper.ui.dat (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360FsFlt.sys (2375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CrashReport.dll (4712 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\config.ini (278 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360CleanPlus\360CleanPlus_theme.ui (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPI.dll (3138 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360sandbox\360sandbox_theme.ui (1425 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome\content\browser.xul (560 bytes)
C:\Windows\System32\drivers\BAPIDRV64.SYS (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\Sxin.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1006.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\en\SysSweeper.ui.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\RemoteTrashInterface.dll (5508 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\filemgr.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker64.sys (1878 bytes)
%Program Files% (x86)\360\Total Security\sites.dll (8657 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libaw.dat (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libsdi.dat (83 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libdefa.dat (162 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\I18N.dll (280 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box64.sys (2931 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SomAdvUtilsWrap.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\DrvUtility.dll (728 bytes)
%Program Files% (x86)\360\Total Security\CrashReport.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Camera.sys (1687 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360procmon.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\netmon\Netgm.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box.dll (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qutmdrv.sys (3004 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\udisk.locale (470 bytes)
%Program Files% (x86)\360\Total Security\ipc\yhregd.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360bps.dat (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationSafe\360InternationSafe_theme.ui (1363 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\udisk.locale (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wdui3.dll (8454 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome.manifest (275 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SelfProtection.sys (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360SPTool.exe.locale (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\tools\Tools_theme.ui (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\LibSDI.dat (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SafeCamera.tpi (404 bytes)
%Program Files% (x86)\360\Total Security\config\lang\pt\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsbs.dat (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SomAdvUtilsWrap.dll (5248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CheckSM.dll (4562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libaw.dat (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360netcfg.exe (2047 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\drvmon.dat (5 bytes)
%Program Files% (x86)\360\Total Security\safemon\360Tray.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleak-64.dat (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\udisk.locale (482 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box.dll (1873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxld.exe (1209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\DsRes64.dll (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon (4 bytes)
%Program Files% (x86)\360\Total Security\safemon\SomProxy.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\DsRes64.dll (2492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\udisk.locale (486 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\safemon\dlproc.dll (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsark64.sys (1346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\art.dat (20 bytes)
%Program Files% (x86)\360\Total Security\I18N64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\drvmon.dat (5 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\LiveUpdate360.exe (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDSafeDown.exe (1726 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\NetDefender.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\icon64.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsr.dat (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\AntiAdwa.dll.locale (81 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\filemon\AVLib.dat (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Common.dll (2070 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\Sxin64.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr1.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360procmon.dll.locale (100 bytes)
%Program Files% (x86)\360\Total Security\ipc\NetDefender.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleakres.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\yhregd.dll (5739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\safemon\drvmk.dat (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appdef.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\icon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\3G\3GIdentify.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\DsRes64.dll (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360SPTool.exe.locale (30 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box64.sys (1425 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toasts_waring.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\LibSDI.dat (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\NetDefender.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxld64.exe (3243 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\DsRes64.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\TS.dat (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\writeable_test_495552.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\filemon.dat (17 bytes)
C:\Windows\System32\drivers\360AntiHacker64.sys (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\LiveUpd360.dll (4830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\filemgr.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360SPTool.exe.locale (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\Utils\ModuleUpdate.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\QVM\360QVM.dll (5873 bytes)
%Program Files% (x86)\360\Total Security\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\safemon\udiskscan.dat (3 bytes)
%Program Files% (x86)\360\Total Security\sweeper\RemoteTrashInterface.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\360Conf.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsns.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1003.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\dslw\dslw.dat (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\plugins\nptswp.dll (3914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDPayPro.exe (12859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\safemon\wduicfg.dat (10 bytes)
%Program Files% (x86)\360\Total Security\safemon\360procmon.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\Safemon.dll.locale (18 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\AVEI.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libdefa.dat (162 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\FeedBack.exe (7209 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPIDRV.sys (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\Antiadwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Camera64.sys (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\QHVer.dll (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\Antiadwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\clsid.dat (22 bytes)
%Program Files% (x86)\360\Total Security\safemon\SelfProtectAPI2.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wpz.dat (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Utils\ModuleUpdate.exe (6238 bytes)
%Program Files% (x86)\360\Total Security\config\lang\es\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsr.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\AntiAdwa.dll.locale (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\ssr.dat (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\AntiAdwa.dll.locale (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360SPTool.exe.locale (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\appd.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360procmon.dll.locale (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MenuEx64.dll (8092 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\theme.xml (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus.dll (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\DsRes.dll (748 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360UDisk\360UDisk_theme.ui (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CheckSM.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libvi.dat (521 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\tools\Tools_theme.ui (7385 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\udisk.locale (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\updatecfg.ini (623720 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_medium.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360Tray.exe (4650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\en\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\AntiAdwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\dynlbase.dll (8581 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360liveupdate\360liveupdate_theme.ui (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\DataDriv.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360compro.dll (5083 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\DsRes64.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\ipc\SXIn64.dll (3361 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\chrome\360webshield.exe (1676 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\plugins\nptswp.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\sbmon.dll (3836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libaw.dat (1385 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\360InternationTray_theme.ui (673 bytes)
%Program Files% (x86)\360\Total Security\Uninstall.exe (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360DeskAna.exe (4315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360AV\360AV_theme.ui (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\icon.png (6 bytes)
%Program Files% (x86)\360\Total Security\safemon\gamemode.tpi (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360UDisk.tpi (1524 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsark64.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\SysSweeper.dll (8234 bytes)
%Program Files% (x86)\360\Total Security\CombineExt.dll (673 bytes)
%Program Files% (x86)\360\Total Security\safemon\360compro.dll (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\appd.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\yhregd.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\safemon\360.dat (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsArk.sys (835 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\art.dat (16 bytes)
C:\Windows\System32\drivers\360AvFlt.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\art.dat (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\MacroDef.enc (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360avflt64.sys (2419 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\360ave_ex.def (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\somkernl.dll (27085 bytes)
%Program Files% (x86)\360\Total Security\360NetBase64.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\install.rdf (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\FeedBack.ini (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\DsRes64.dll (1438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_medium.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sc.con (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\AVCheck.dll (2130 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360SPTool.exe.locale (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\Qshieldz.dat (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\safemon.dll.locale (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\ipc\ipcService.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHWatchdog.exe (1043 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\LiveUpdate360.exe (6582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\csp.dat (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\cacert.pem (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\FeedBack.ini (263 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\filemon.dat (18 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WscReg.exe (26008 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanproxy.dll (5928 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\SelfProtectAPI2.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\wd.ini (7 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\udisk.locale (550 bytes)
%Program Files% (x86)\360\Total Security\safemon\router.ini (274 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Sites64.dll (20376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanstub.dll (1216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr8.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus64.exe (10117 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\regmon.dat (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\udisk.locale (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libdefa.dat (162 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360SafeCamera.tpi.locale (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\SxWrapper.dll (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\sweeper\TrashClean.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\scanproxy.dll (3361 bytes)
%Program Files% (x86)\360\Total Security\softmgr\360Downloads.ini (269 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\udisk.locale (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\safemon.dll.locale (19 bytes)
%Program Files% (x86)\360\Total Security\softmgr\stsuglist.dat (601 bytes)
%Program Files% (x86)\360\Total Security\FeedBack.exe (6841 bytes)
C:\Users\Public\Desktop\360 Total Security.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\DsRes.dll (637 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libsdi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\appd.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wifisafeEncrypt.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\dslw\dslw.dat (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MiniUI.dll (9134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\appd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sc.con (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxmain.exe (5580 bytes)
%Program Files% (x86)\360\Total Security\netmon\gameidentify.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\SysSweeper.dat (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box.sys (1417 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDRecord.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\ssr.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\qutmipc.sys (185 bytes)
%Program Files% (x86)\360\Total Security\deepscan\Cloudsec3.dll (7385 bytes)
%Program Files% (x86)\360\Total Security\config\defaultskin\MiniUI.xml (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\feedback\FeedBack_theme.ui (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sndw.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\FsrMgr.dll (4112 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\EfiProc.dll (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPIDRV.sys (1729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\defaultskin\defaultskin.ui (198 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\QHSafeScanner.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus.exe (7161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\heavygate.dll (7402 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\drvmon.dat (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\PopSoftEng.dll (5139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wduicfg.dat (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\EfiMon.sys (23 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360SPTool.exe.locale (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\safespeedboot.dat (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\I18N64.dll (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\qex.vdb.enc (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\7z.dll (9721 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\writeable_test_495427.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360procmon.dll.locale (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\LiveUpd360.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\SelfProtectAPI2.dll (3279 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHSafeScanner.exe (8221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\acls.ini (1 bytes)
%Program Files% (x86)\360\Total Security\360P2SP.dll (5873 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\libleak.dat (46325 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Base.dll (9004 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_veryfast.png (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\360NetBase.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\Safemon.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360leakfix\360leakfix_theme.ui (1887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sysfilerepS.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\udisk.locale (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\DsRes.dll (1146 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\ImAVEng.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\safemon\iNetSafe.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus64.exe (7385 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\Uninstall.lnk (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\zh-CN\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\filemon\AVCheck.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\es\SysSweeper.ui.dat (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\theme.xml (63 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker.dll (62 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360Quarant.dll (2105 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\heavygate.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SPTool.exe (2476 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\safemon\execrule.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\safemon\UDiskScanEngine.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\360Verify.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\DsRes.dll (1655 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360procmon.dll (3549 bytes)
%Program Files% (x86)\360\Total Security\safemon\7z.dll (7433 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDSafeDown.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsws.dat (287 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_veryfast.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\360InternationTray_theme.ui (186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_3.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\dlproc.dll (5955 bytes)
%Program Files% (x86)\360\Total Security\Safelive.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\LibSDI.dat (81 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\filemgr.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360procmon.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\udisk.locale (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360sandbox\360sandbox_theme.ui (268 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\LibSDI.dat (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome\content\browser.xul (560 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus64.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360QuarantPlugin.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Safelive.dll (3935 bytes)
%Program Files% (x86)\360\Total Security\filemon\DataDriv.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appd.dll (7615 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr5.dat (9 bytes)
%Program Files% (x86)\360\Total Security\ipc\X64For32Lib.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\hi\SysSweeper.ui.dat (1170 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\360DeskAna64.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr (4 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\360 Total Security.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\Qshieldz.dat (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\cleancfg.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360hipsPopWnd.dll (10184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\safemon.dll (11070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wifisafeEncrypt.js (5 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\config\lang\vi\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\Sxin64.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\ipc\appd.dll (5441 bytes)
%Program Files% (x86)\360\Total Security\safemon\acls.ini (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPIDRV64.sys (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360SkinView.exe (3349 bytes)
%Program Files% (x86)\360\Total Security\filemon\WhiteCache.dll (9098 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Camera.sys (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\art.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\QVM\360QVM.dll (6596 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360procmon.dll.locale (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\yhregd.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\lm_1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHActiveDefense.exe (6898 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\360ave_ex.def (577 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc (4 bytes)
%Program Files% (x86)\360\Total Security\leakrepair.dll (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\TR\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\FileMgr.dll (4470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\mui\en\Strings.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360safemonpro.tpi (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\AntiAdwa.dll.locale (601 bytes)
C:\Windows\System32\drivers\360Camera64.sys (40 bytes)
%Program Files% (x86)\360\Total Security\safemon\safemon.dll (8657 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPIDRV64.sys (2116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Dumpuper.exe (5146 bytes)
%Program Files% (x86)\360\Total Security\safemon\360UDisk.tpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus64.dll (2209 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\NetDefender.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\filemon\ptype.dat (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\sbmon.dll (2469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\NetDefender.dll (1921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wpz.dat (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\default_theme.ui (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libdefa.dat (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\ssr.dat (32 bytes)
%Program Files% (x86)\360\Total Security\deepscan\WiFiSafe.dll (10177 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\360GameIdentify.dll (2954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\safemon.dll.locale (20 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\qex.vdb.enc (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qutmload.dll (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360AV\360AV_theme.ui (190 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\udisk.locale (338 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr1.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360AV.tpi (321 bytes)
Registry activity
The process QHSafeTray.exe:1172 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\360SAFE\KeepAlive\360PayInsure]
"ImagePath" = "%Program Files% (x86)\360\Total Security\safemon\SomProxy.dll"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"NetMonAccess" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"KPRSNS" = "0"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Leak]
"BootTime" = "Type: REG_QWORD, Length: 8"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"NetPayProtect" = "1"
"FileMonAccess" = "1"
"AL_Keylogger" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"AVMonitor" = "2"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"RTRAYING" = "1"
"DrvFWAccess2" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"level" = "2"
"AVHandle" = "1"
"AVWriteProtectEnable" = "1"
"AVEngine" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"SiteAccess" = "1"
"AppMonAccess" = "1"
[HKCU\Software\360\360Speedld]
"last_optimized" = "4294967295"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon\safecamera]
"upref" = "1"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Experience]
"Session1" = "0"
[HKCU\Software\360\360Speedld]
"not_optimized" = "4294967295"
"last_not_optimized" = "4294967295"
[HKLM\SOFTWARE\Wow6432Node\360TOTALSECURITY\ACTIVEPROTECTION]
"Flags" = "805388039"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"ProcIM" = "1"
[HKCU\Software\360\360Speedld]
"Optimized" = "4294967295"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"MonAccess" = "1"
"WDSBSupport" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"AVReadProtectEnable" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"ProcDownload" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"AVEnable" = "1"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Experience]
"Session1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"WOW64"
"DeleteFlag"
The process PatchUp.exe:3300 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PatchUp_RASAPI32]
"MaxFileSize" = "1048576"
"ConsoleTracingMask" = "4294901760"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Leak]
"LastPopTime" = "2015-04-23"
[HKLM\SOFTWARE\Wow6432Node\LiveUpdate360]
"IsLowPC" = "0"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PatchUp_RASAPI32]
"FileTracingMask" = "4294901760"
"EnableFileTracing" = "0"
"EnableConsoleTracing" = "0"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Leak]
"CT" = "7"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PatchUp_RASAPI32]
"FileDirectory" = "%windir%\tracing"
The Trojan deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"WOW64"
"DeleteFlag"
The process QHWatchdog.exe:2492 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\360SAFE]
"keepalive" = "0"
The process nsd45AA.tmp.exe:1172 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "37"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"
The Trojan deletes the following value(s) in system registry:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
The process DXSETUP.exe:1376 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\DirectX]
"DXSetup" = "0"
"Command" = "0"
The process regsvr32.exe:1580 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCR\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCR\Directory\shellex\ContextMenuHandlers\SD360]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}]
"(Default)" = "SD360MN Class"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}\InprocServer32]
"(Default)" = "%Program Files% (x86)\360\Total Security\MenuEx64.dll"
[HKCR\Wow6432Node\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\TypeLib]
"(Default)" = "{FF9EAEBA-7783-4904-99E3-F3E322C0F648}"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}\VersionIndependentProgID]
"(Default)" = "MenuEx.SD360MN"
[HKCR\Folder\ShellEx\ContextMenuHandlers\SD360]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
[HKCR\Wow6432Node\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"
[HKCR\MenuEx.SD360MN]
"(Default)" = "SD360MN Class"
[HKCR\MenuEx.SD360MN.1]
"(Default)" = "SD360MN Class"
[HKCR\TypeLib\{FF9EAEBA-7783-4904-99E3-F3E322C0F648}\1.0]
"(Default)" = "MenuEx 1.0 Type Library"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}\TypeLib]
"(Default)" = "{FF9EAEBA-7783-4904-99E3-F3E322C0F648}"
[HKCR\TypeLib\{FF9EAEBA-7783-4904-99E3-F3E322C0F648}\1.0\FLAGS]
"(Default)" = "0"
[HKCR\Wow6432Node\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}]
"(Default)" = "ISD360MN"
[HKCR\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\TypeLib]
"(Default)" = "{FF9EAEBA-7783-4904-99E3-F3E322C0F648}"
[HKCR\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}]
"(Default)" = "ISD360MN"
[HKCR\MenuEx.SD360MN.1\CLSID]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
[HKCR\MenuEx.SD360MN\CLSID]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
[HKCR\*\shellex\ContextMenuHandlers\SD360]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}\InprocServer32]
"ThreadingModel" = "Apartment"
[HKCR\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\TypeLib]
"Version" = "1.0"
[HKCR\TypeLib\{FF9EAEBA-7783-4904-99E3-F3E322C0F648}\1.0\HELPDIR]
"(Default)" = "%Program Files% (x86)\360\Total Security"
[HKCR\CLSID\{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}\ProgID]
"(Default)" = "MenuEx.SD360MN.1"
[HKCR\TypeLib\{FF9EAEBA-7783-4904-99E3-F3E322C0F648}\1.0\0\win64]
"(Default)" = "%Program Files% (x86)\360\Total Security\MenuEx64.dll"
[HKCR\Wow6432Node\Interface\{B09C75BE-F1AE-47BA-BC47-19F5C0A15B33}\TypeLib]
"Version" = "1.0"
[HKCR\MenuEx.SD360MN\CurVer]
"(Default)" = "MenuEx.SD360MN.1"
[HKCR\lnkfile\shellex\ContextMenuHandlers\SD360]
"(Default)" = "{086F171D-5ED1-4ED2-B736-CFF3AD6A128E}"
The process %original file name%.exe:2428 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "2D 85 33 3A 90 73 D0 01"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecision" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadNetworkName" = "Network 4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 48 00 00 00 09 00 00 00 00 00 00 00"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDecisionReason" = "1"
"WpadDecisionTime" = "84 6E E0 4A 78 7D D0 01"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"
"AutoDetect"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{9BA14452-3A93-4712-8A0D-BF6CFCC6695B}]
"WpadDetectedUrl"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
The process QHActiveDefense.exe:1168 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\System\CurrentControlSet\services\360FsFlt]
"WorkConfig" = "29"
"Group" = "FSFilter Activity Monitor"
"ErrorControl" = "0"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances\360TopInstance]
"Altitude" = "382300"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"restag" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"ImagePath" = "system32\DRIVERS\360FsFlt.sys"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances\360TopInstance]
"Flags" = "0"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"Start" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances]
"DefaultInstance" = "360TopInstance"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"DependOnService" = "FltMgr"
"DisplayName" = "360FsFlt mini-filter driver"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360Safe.exe]
"Path" = "%Program Files% (x86)\360\Total Security"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"Type" = "2"
The Trojan deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\services\360FsFlt]
"WOW64"
"DeleteFlag"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"NeedReboot"
The process QHActiveDefense.exe:804 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"DrvFWAccess2" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"ErrorControl" = "0"
[HKLM\System\CurrentControlSet\services\360Camera]
"ErrorControl" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances]
"DefaultInstance" = "360TopInstance"
[HKU\FILECACHE\D89B41B5ECC0C91152383CD8621D0B6A]
"SymbolicLinkValue" = "Type: REG_LINK, Length: 182"
[HKLM\System\CurrentControlSet\services\360Camera]
"ImagePath" = "System32\Drivers\360Camera64.sys"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"ImagePath" = "system32\DRIVERS\360FsFlt.sys"
[HKU\FILECACHE\B239248D1B7FFEF30A0C80CA49DC7D55]
"SymbolicLinkValue" = "Type: REG_LINK, Length: 182"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"ImagePath" = "System32\Drivers\360AntiHacker64.sys"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\ipc]
"rrm" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"DisplayName" = "360FsFlt mini-filter driver"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances\360TopInstance]
"Flags" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"NetMonAccess" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt\Instances\360TopInstance]
"Altitude" = "382300"
[HKLM\System\CurrentControlSet\services\360Box64]
"Start" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"level" = "2"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon\safecamera]
"Enable" = "1"
"Status" = "2147876882"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"Group" = "FSFilter Activity Monitor"
[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"Start" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"FileMonAccess" = "1"
"AVEnable" = "1"
"SB_FreePercent" = "25"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"DisplayName" = "360Safe Anti Hacker Service"
[HKLM\System\CurrentControlSet\services\360Camera]
"Tag" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"restag" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\ipc]
"frm" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon\safecamera]
"Enable" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\ipc]
"lnk" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"MonAccess" = "1"
"DefaultBrowserPro" = "0"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"ErrorControl" = "0"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"Start" = "1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QHActiveDefense_RASAPI32]
"MaxFileSize" = "1048576"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"Tag" = "0"
"Type" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"NetDefender" = "1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QHActiveDefense_RASAPI32]
"FileTracingMask" = "4294901760"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"DependOnService" = "FltMgr"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"AppMonAccess" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE]
"keepalive" = "0"
[HKLM\System\CurrentControlSet\services\360Camera]
"DisplayName" = "360Safe Camera Filter Service"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\FILEMON]
"AVEnable" = "1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QHActiveDefense_RASAPI32]
"EnableFileTracing" = "0"
"EnableConsoleTracing" = "0"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"DrvFWAccess2" = "1"
"DesktopIcon" = "0"
"NewExec" = "1"
"ExecAccess" = "0"
[HKU\.DEFAULT\SOFTWARE\Microsoft\ActiveMovie\devenum]
"Version" = "7"
[HKLM\System\CurrentControlSet\services\360Camera]
"Start" = "3"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\ipc]
"rrm" = "1"
[HKLM\System\CurrentControlSet\services\360Camera]
"Type" = "1"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"Type" = "2"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QHActiveDefense_RASAPI32]
"ConsoleTracingMask" = "4294901760"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"SB_InternalState" = "1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QHActiveDefense_RASAPI32]
"FileDirectory" = "%windir%\tracing"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QHSafeTray" = "%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe /start"
The Trojan deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"WOW64"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"DeleteFlag"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKLM\System\CurrentControlSet\services\360Camera]
"DeleteFlag"
[HKLM\System\CurrentControlSet\services\360FsFlt]
"WOW64"
[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\360krnlsvc]
"CFlags"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"DeleteFlag"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"
[HKLM\System\CurrentControlSet\services\360FsFlt\Enum]
"INITSTARTFAILED"
[HKLM\System\CurrentControlSet\services\360Camera]
"WOW64"
[HKLM\System\CurrentControlSet\services\360AntiHacker]
"WOW64"
"DeleteFlag"
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QQPCHint"
The process nss6FC6.tmp.exe:1904 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\UserProfile]
"MenuScan" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
[HKLM\System\CurrentControlSet\services\360Box64]
"WorkConfig" = "29"
[HKLM\SOFTWARE\Wow6432Node\360Safe\Liveup]
"mid" = "09bcd29b60133ba15b849679a9d82fa3d58b9ea7f26f9fe70d4e0799db5b2e7b"
[HKLM\System\CurrentControlSet\services\360Box64]
"Type" = "2"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"SB_State" = "1"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\UserProfile]
"MaskFlags" = "1"
[HKLM\SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions]
"WebProtection@360safe.com" = "%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer]
"GlobalAssocChangedCounter" = "38"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDetectedUrl" = ""
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe]
"(Default)" = "%Program Files% (x86)\360\Total Security\QHSafeMain.exe"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\UserProfile]
"InstallDate" = "1429760936"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
"CachePrefix" = "Visited:"
[HKLM\System\CurrentControlSet\services\360AvFlt]
"Group" = "FSFilter Activity Monitor"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"ErrorControl" = "0"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"UninstallString" = "%Program Files% (x86)\360\Total Security\Uninstall.exe"
"EstimatedSize" = "102400"
[HKLM\System\CurrentControlSet\services\360Box64]
"Start" = "3"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"SB_Entry_Known" = "0"
[HKLM\System\CurrentControlSet\services\360Box64]
"ErrorControl" = "0"
[HKLM\SOFTWARE\Wow6432Node\360SAFE\safemon]
"SB_RightMenu" = "1"
[HKLM\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\com.google.chrome.wdwedpro]
"(Default)" = "%Program Files% (x86)\360\Total Security\safemon\chrome\manifest.json"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"DisplayName" = "360 Total Security"
[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\Users\"%CurrentUserName%"\AppData\Roaming\Mozilla\Firefox\Profiles\zwvbr04l.default\extensions\webshield@360safe.com,"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"DisplayIcon" = "%Program Files% (x86)\360\Total Security\QHSafeMain.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]
"CachePrefix" = ""
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"InstallLocation" = "%Program Files% (x86)\360\Total Security"
[HKLM\System\CurrentControlSet\services\360Box64\Instances\360TopInstance64]
"Altitude" = "382310"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeTray.exe]
"Path" = "%Program Files% (x86)\360\Total Security"
[HKLM\System\CurrentControlSet\services\360AvFlt\Instances\360SDInstance]
"Altitude" = "327400"
[HKLM\System\CurrentControlSet\services\360Box64]
"DependOnService" = "FltMgr"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"ImagePath" = "system32\DRIVERS\BAPIDRV64.sys"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\srvtpi\360SafeCamera]
"STARTTYPE" = "2"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"Edition" = "Professional"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\srvtpi\360SafeCamera]
"ImagePath" = "safemon\360SafeCamera.tpi"
[HKLM\System\CurrentControlSet\services\360AvFlt]
"Start" = "1"
"ImagePath" = "system32\DRIVERS\360AvFlt.sys"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionTime" = "84 6E E0 4A 78 7D D0 01"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"Type" = "1"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"Publisher" = "360 Security Center"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"Start" = "1"
[HKLM\System\CurrentControlSet\services\360AvFlt\Instances\360SDInstance]
"Flags" = "0"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity]
"DisplayVersion" = "6.2.0.1027"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 49 00 00 00 09 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeTray.exe]
"(Default)" = "%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360Safe.exe]
"Path" = "%Program Files% (x86)\360\Total Security"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]
"CachePrefix" = "Cookie:"
[HKLM\System\CurrentControlSet\services\360AvFlt]
"DependOnService" = "FltMgr"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe]
"Path" = "%Program Files% (x86)\360\Total Security"
[HKLM\System\CurrentControlSet\services\360AvFlt]
"WorkConfig" = "29"
[HKLM\System\CurrentControlSet\services\360Box64]
"ImagePath" = "system32\DRIVERS\360Box64.sys"
[HKLM\System\CurrentControlSet\services\360AvFlt\Instances]
"DefaultInstance" = "360SDInstance"
[HKLM\SOFTWARE\Wow6432Node\360Safe\360krnlsvc\softmgrs]
"ImagePath" = "%Program Files% (x86)\360\Total Security\SoftMgr\360SoftMgrS.dll"
[HKLM\System\CurrentControlSet\services\360Box64\Instances]
"DefaultInstance" = "360TopInstance64"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Firefox]
"nptswp_countdown" = "2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360Safe.exe]
"(Default)" = "%Program Files% (x86)\360\Total Security\QHSafeMain.exe"
[HKLM\System\CurrentControlSet\services\360Box64]
"DisplayName" = "360Box mini-filter driver"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecisionReason" = "1"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"DisplayName" = "BAPIDRV"
[HKLM\SOFTWARE\Wow6432Node\360TotalSecurity\Firefox]
"nptswp_status" = "1"
[HKLM\SOFTWARE\Wow6432Node\360TOTALSECURITY\ACTIVEPROTECTION]
"Mode" = "2"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\00-50-56-f5-e5-a3]
"WpadDecision" = "0"
[HKLM\System\CurrentControlSet\services\360Box64]
"Group" = "FSFilter Activity Monitor"
[HKLM\System\CurrentControlSet\services\BAPIDRV\Enum]
"Status" = "1"
[HKLM\System\CurrentControlSet\services\360Box64\Instances\360TopInstance64]
"Flags" = "0"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QHSafeTray" = "%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe /start"
The Trojan deletes the following value(s) in system registry:
[HKLM\System\CurrentControlSet\services\360AvFlt]
"DeleteFlag"
"WOW64"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"WOW64"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"ProxyOverride"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKLM\System\CurrentControlSet\services\360Box64]
"DeleteFlag"
[HKLM\System\CurrentControlSet\services\BAPIDRV]
"DeleteFlag"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
[HKLM\System\CurrentControlSet\services\360Box64]
"WOW64"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoDetect"
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"360safeuninst_1f0fb7c2d13cc0c07ff2ca40747bc03e"
Dropped PE files
| MD5 | File path |
|---|---|
| 8c42fc725106cf8276e625b4f97861bc | c:\Program Files (x86)\360\Total Security\360Base.dll |
| dee726f4d7f448bda80d5fc7ab7fb7fe | c:\Program Files (x86)\360\Total Security\360Base64.dll |
| fc9479cf652caa626145d8345f3a28c9 | c:\Program Files (x86)\360\Total Security\360Common.dll |
| b40b855a43034bef97f8ed97d6df57e1 | c:\Program Files (x86)\360\Total Security\360Conf.dll |
| 92dbc106aba53b59d1c121f06cca9d75 | c:\Program Files (x86)\360\Total Security\360DeskAna.exe |
| b5049a133b4b6b67abd5e41d2f36a087 | c:\Program Files (x86)\360\Total Security\360DeskAna64.exe |
| d778bbd5284a033738ab7eee3b5e3973 | c:\Program Files (x86)\360\Total Security\360NetBase.dll |
| 7fc6afafd1aa883e1dc41f5119b06474 | c:\Program Files (x86)\360\Total Security\360NetBase64.dll |
| ce2ec7601d88cd377671a9f0f52f6942 | c:\Program Files (x86)\360\Total Security\360P2SP.dll |
| 7bbe0536929e98c8ceb61e4fe11507a9 | c:\Program Files (x86)\360\Total Security\360ShellPro.exe |
| 706205d2b76d73e43f145869fcbc074c | c:\Program Files (x86)\360\Total Security\360SkinView.exe |
| 4918c4906b339e89577a49aa59d2d696 | c:\Program Files (x86)\360\Total Security\360TsLiveUpd.exe |
| 0f482dcaa174e7f921aa74cf42c27018 | c:\Program Files (x86)\360\Total Security\360Util.dll |
| 6a805c15a92dc7f7e3effe2696f10935 | c:\Program Files (x86)\360\Total Security\360Verify.dll |
| e44af3441536db72b7deec0200a36f7a | c:\Program Files (x86)\360\Total Security\360net.dll |
| f2b8f1a361b07ae1d951b43de861b8d3 | c:\Program Files (x86)\360\Total Security\3G\3GIdentify.dll |
| 495dba6f0b7dcbb59d97a0c0b1617c7c | c:\Program Files (x86)\360\Total Security\AntiAdwa.dll |
| 75c163916b4b75a0b2081922521cc04e | c:\Program Files (x86)\360\Total Security\CleanPlus.dll |
| efb463c26727c345b2da03f027447238 | c:\Program Files (x86)\360\Total Security\CleanPlus.exe |
| dd3089733f5336d9f927dedab9bbda58 | c:\Program Files (x86)\360\Total Security\CleanPlus64.dll |
| 6702fabd51309de6cdc85477b1b5e397 | c:\Program Files (x86)\360\Total Security\CleanPlus64.exe |
| 80e2f9967f757a6a7c5e0cb2d0196160 | c:\Program Files (x86)\360\Total Security\CombineExt.dll |
| fa3669a751d68771a0b358d279ddfa4c | c:\Program Files (x86)\360\Total Security\CrashReport.dll |
| 526759ab21a01d4758260bd53dc71642 | c:\Program Files (x86)\360\Total Security\Dumpuper.exe |
| 1ee5f9f327d19074da82b58d8252a749 | c:\Program Files (x86)\360\Total Security\EfiMon.sys |
| b35949c5a90f1503ca2ee31fa0c4914b | c:\Program Files (x86)\360\Total Security\EfiProc.dll |
| 9df514ab0fd23dd98a64b5405eb679ed | c:\Program Files (x86)\360\Total Security\FeedBack.exe |
| dee14c4058eb2af2ebfccb4a8a0dd4b0 | c:\Program Files (x86)\360\Total Security\I18N.dll |
| 52ed80a97ab6fb42fe93beebb46b5f23 | c:\Program Files (x86)\360\Total Security\I18N64.dll |
| 2c60c2da4575fc666ef3d28072cad20f | c:\Program Files (x86)\360\Total Security\LiveUpd360.dll |
| 3bb79961050d2acc8e832f768ab99a29 | c:\Program Files (x86)\360\Total Security\LiveUpdate360.exe |
| 2a245a2c67a08865e74893c706c47b68 | c:\Program Files (x86)\360\Total Security\MenuEx.dll |
| e8adea08edabef8c08c2eadd9d252ae0 | c:\Program Files (x86)\360\Total Security\MenuEx64.dll |
| db2b7a54df401e07d76e6481755fd79b | c:\Program Files (x86)\360\Total Security\MiniUI.dll |
| f83126cfb0d4d04c4b7421968315da15 | c:\Program Files (x86)\360\Total Security\PDown.dll |
| c515155ddf5425120acc9692333851d9 | c:\Program Files (x86)\360\Total Security\PatchUp.exe |
| 004f4f331bb578ff75ec89f8f7f4a86c | c:\Program Files (x86)\360\Total Security\QHSafeMain.exe |
| b8956b7d7adc04c50fd0a0367b514a6f | c:\Program Files (x86)\360\Total Security\QHSafeScanner.exe |
| 3095f8d426c44d85588d49b5c9436856 | c:\Program Files (x86)\360\Total Security\QHVer.dll |
| 6cc06e2b14585b6966c9d24a90b32c7b | c:\Program Files (x86)\360\Total Security\Safelive.dll |
| 8c7ff39fbe594a9e81969e969dd37075 | c:\Program Files (x86)\360\Total Security\Sites64.dll |
| d5eafe209a61b37358114a1aec859d39 | c:\Program Files (x86)\360\Total Security\Uninstall.exe |
| 34944c8d8ac72fd205fcc0821de50ba0 | c:\Program Files (x86)\360\Total Security\Utils\ModuleUpdate.exe |
| 6d7bfd4c4ec63f417499152a4f7f810b | c:\Program Files (x86)\360\Total Security\deepscan\360FsFlt.sys |
| d45ceae2f76627f054480190fbc0e54e | c:\Program Files (x86)\360\Total Security\deepscan\360Quarant.dll |
| 712a07ce43de6ca50dc7a857338aecf9 | c:\Program Files (x86)\360\Total Security\deepscan\360QuarantPlugin.dll |
| c03f3809246fbb9e04835c37b9770541 | c:\Program Files (x86)\360\Total Security\deepscan\360netcfg.exe |
| b187a6ab7406679d3fdf40bfe12009a3 | c:\Program Files (x86)\360\Total Security\deepscan\AVE\AVEI.dll |
| 5d307fec2918cad0c4b5e5c7b83ed593 | c:\Program Files (x86)\360\Total Security\deepscan\AVE\AVEngine.dll |
| 3f9d1f28f72c6abfddad9cf2f6dcf471 | c:\Program Files (x86)\360\Total Security\deepscan\BAPI.dll |
| 626f61cd7a1599df4c10b880cbbe0a22 | c:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV.sys |
| f29557e06773b97d36341b4adc7ef472 | c:\Program Files (x86)\360\Total Security\deepscan\BAPIDRV64.sys |
| a7bf09c3f37923c087bbbdc70b5be2db | c:\Program Files (x86)\360\Total Security\deepscan\CQhCltHttpW.dll |
| 4edc33d7f63fff234a72eab0692fae52 | c:\Program Files (x86)\360\Total Security\deepscan\CheckSM.dll |
| f9e571c26638e134e279027990b5ad68 | c:\Program Files (x86)\360\Total Security\deepscan\CheckSM.exe |
| a66c668e2aa5ac1b8920a192ef500ee0 | c:\Program Files (x86)\360\Total Security\deepscan\Cloudsec3.dll |
| bfe0d80f83f9a55610dd55a69e59b3d6 | c:\Program Files (x86)\360\Total Security\deepscan\DSFScan.dll |
| e90628c1b6f117f328ad120c163804f7 | c:\Program Files (x86)\360\Total Security\deepscan\DsArk.dll |
| f443435fb5676287b5ab97287c3e8868 | c:\Program Files (x86)\360\Total Security\deepscan\DsArk.sys |
| 919a152cd6d2751c4c541636435d5399 | c:\Program Files (x86)\360\Total Security\deepscan\DsSysRepair.dll |
| b8fdc03b9b84a62c5c541524dca2e723 | c:\Program Files (x86)\360\Total Security\deepscan\ImAVEng.dll |
| f3216ea8aaa374be7ad86eee9a74175c | c:\Program Files (x86)\360\Total Security\deepscan\PopSoftEng.dll |
| c96f74f8d9f7d843072b06d55fd2b2e6 | c:\Program Files (x86)\360\Total Security\deepscan\QVM\360QVM.dll |
| 5d0b987e912636f0f0ef025dbc362d59 | c:\Program Files (x86)\360\Total Security\deepscan\WiFiSafe.dll |
| 8a726f4f4640c2a2361b5e41d124f0fc | c:\Program Files (x86)\360\Total Security\deepscan\WifiAgent.dll |
| fe958c80818e948d25f3c2edb27295eb | c:\Program Files (x86)\360\Total Security\deepscan\cloudcom2.dll |
| a8428cfa32fd4a80fc74068d26baf8da | c:\Program Files (x86)\360\Total Security\deepscan\cloudsec2.dll |
| 2111c4cb0e2a4995365f14085a676a6a | c:\Program Files (x86)\360\Total Security\deepscan\deepscan.dll |
| e833a7b5bae2fc13bad8a99a879c390d | c:\Program Files (x86)\360\Total Security\deepscan\dsark64.sys |
| d40092b743cbad6a276589485d1c380d | c:\Program Files (x86)\360\Total Security\deepscan\heavygate.dll |
| 534c2f064f540abc9f96e7d4dc18bb2a | c:\Program Files (x86)\360\Total Security\deepscan\qex\qex.dll |
| bf10e282e7e8034298c435574e947358 | c:\Program Files (x86)\360\Total Security\deepscan\qutmdrv.sys |
| bd47f98bdb35ec643b427ce8eca86e9b | c:\Program Files (x86)\360\Total Security\deepscan\qutmload.dll |
| ecc561c9a29f16a2c684ecbbe051215b | c:\Program Files (x86)\360\Total Security\deepscan\sysfilerepS.dll |
| da433a919154394953b5c925d6c7946b | c:\Program Files (x86)\360\Total Security\dynlbase.dll |
| 61bda655c88ce843905ce63a2d5669e4 | c:\Program Files (x86)\360\Total Security\dynlenv.dll |
| 33c9ce88131a3adcb663fdef455e01eb | c:\Program Files (x86)\360\Total Security\filemon\360AvFlt.dll |
| d8dee0f3bd03f49ccc30b761e42ee96f | c:\Program Files (x86)\360\Total Security\filemon\360AvFlt.sys |
| 0aaba03736666b85ac37c01467e89578 | c:\Program Files (x86)\360\Total Security\filemon\360avflt64.sys |
| 23b1615a62e9c42952e8693b7ce5e242 | c:\Program Files (x86)\360\Total Security\filemon\360rp.dll |
| f1128cb2b327e584f43dfd0a7a010c86 | c:\Program Files (x86)\360\Total Security\filemon\AVCheck.dll |
| 9e3383566f4b5ce5540ad9b94c37d14d | c:\Program Files (x86)\360\Total Security\filemon\FsrMgr.dll |
| 74e3eec26c2db6c18210bd181935953f | c:\Program Files (x86)\360\Total Security\filemon\WhiteCache.dll |
| 4797aa6c47ab3f6acf80eb5b5aabd981 | c:\Program Files (x86)\360\Total Security\i18n\en\AntiAdwa.dll.locale |
| 36080a60f9815ea532bf48c0c9cadde0 | c:\Program Files (x86)\360\Total Security\i18n\en\UrlSettings.dll.locale |
| b2d9c335f06008c6d5e3bd421ccda414 | c:\Program Files (x86)\360\Total Security\i18n\en\deepscan\DsRes.dll |
| 8319ee4511fa12f630258c2baff03987 | c:\Program Files (x86)\360\Total Security\i18n\en\deepscan\DsRes64.dll |
| 71504cc23a6d0e4edc380fd11aca4d56 | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\NetDefender.dll.locale |
| fd9a494a6c37a13554956338ed06c4bc | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\Sxin.dll.locale |
| 7365ba2697fde076aa72a42717035925 | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\Sxin64.dll.locale |
| 1bec7d58d7f5b28505ffb8515abf86b2 | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\appd.dll.locale |
| cf2931da32cedf69a9303b877dc13d95 | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\filemgr.dll.locale |
| bf04aa0738d5d7d89b2c8f92074fda45 | c:\Program Files (x86)\360\Total Security\i18n\en\ipc\yhregd.dll.locale |
| 9259b466481a1ad9feed18f6564a210b | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\360SPTool.exe.locale |
| 6e6c4a76fa3dea52b9960aed5e366eee | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\360procmon.dll.locale |
| 178f9c26339c1981197975405a80b173 | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\SelfProtectAPI2.dll.locale |
| d3911a727a01a3b0ad88965ad3db526b | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\UDiskScanEngine.dll.locale |
| c6bf7f392c935bb818fcdd55f089ac53 | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\chrome\360webshield.exe.locale |
| 41326c9d767c4539021c723ecf76f5fb | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\safemon.dll.locale |
| 5efd82b0e517230c5fcbbb4f02936ed0 | c:\Program Files (x86)\360\Total Security\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| fc6b9df77d844f84f54d21f3a0cf1c03 | c:\Program Files (x86)\360\Total Security\i18n\es\Antiadwa.dll.locale |
| 50d76fe0db91d4883986dc56ad9b7613 | c:\Program Files (x86)\360\Total Security\i18n\es\UrlSettings.dll.locale |
| 8e7a4c730f27bdecb7e012d7efebe4ca | c:\Program Files (x86)\360\Total Security\i18n\es\deepscan\DsRes.dll |
| 0ce10fa0f10d85fc5dd4332c37485dff | c:\Program Files (x86)\360\Total Security\i18n\es\deepscan\DsRes64.dll |
| 146a12ebaf0243fce4b943f55a1772fb | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\NetDefender.dll.locale |
| 7efd25c0f05e9917d71dbaff60cc1ef8 | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\Sxin.dll.locale |
| 580bdfafe333f368fead0875ad9ab423 | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\Sxin64.dll.locale |
| 49e3c8c9b07f6a16c19b9cc261b6a38e | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\appd.dll.locale |
| 221846a22c60c2be6e4bada72965540a | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\filemgr.dll.locale |
| f99322d307eee9ab1a00c6f65debeb09 | c:\Program Files (x86)\360\Total Security\i18n\es\ipc\yhregd.dll.locale |
| 8de86436c6006f573336bd3fffd22d10 | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\360SPTool.exe.locale |
| bc5c78db880c1bd2a0c3aa731e6b5c67 | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\360procmon.dll.locale |
| 69d5154961971c19cb048adffabd3dd5 | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\Safemon.dll.locale |
| 8ece4a2c7ce4ed2c67f20d1a4b8619dc | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\SelfProtectAPI2.dll.locale |
| 42174707dd42b57ee752740252f9a772 | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\UDiskScanEngine.dll.locale |
| 6710827a43c51a34488c92e5b24af9ba | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\chrome\360webshield.exe.locale |
| 86480218b103a3471e0322adbf15f50d | c:\Program Files (x86)\360\Total Security\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| 61c163c16946f4ca7039deae4b850371 | c:\Program Files (x86)\360\Total Security\i18n\hi\AntiAdwa.dll.locale |
| 97838d59982c4c8f249bead28dc7bddd | c:\Program Files (x86)\360\Total Security\i18n\hi\UrlSettings.dll.locale |
| d9c303928257e9b5fdea57409932c20f | c:\Program Files (x86)\360\Total Security\i18n\hi\deepscan\DsRes.dll |
| 8f101c524bb13c51f743f7b7ed425bc4 | c:\Program Files (x86)\360\Total Security\i18n\hi\deepscan\DsRes64.dll |
| 13dab266bb4bb8851a020b795d2bcd40 | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\NetDefender.dll.locale |
| 0a9979f973e3c472fcb60eb829845076 | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\Sxin.dll.locale |
| 57a6893e30aa30dea6b85adcce594731 | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\Sxin64.dll.locale |
| a2292a121723233de7354ba6a19c4c96 | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\appd.dll.locale |
| f0584639cbc83cba9f6a391f28a69235 | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\filemgr.dll.locale |
| 8832a1eaa25429a66f9a53c14a58865e | c:\Program Files (x86)\360\Total Security\i18n\hi\ipc\yhregd.dll.locale |
| 44d6531aa7031c983d8de709d8319bde | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\360SPTool.exe.locale |
| 184345e22462199c88b50871013b8f6c | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\360procmon.dll.locale |
| 6c7a17405ea030d79f8a65c9afccba59 | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\SelfProtectAPI2.dll.locale |
| 38ce7430c5cc2c897f475ff921ba7945 | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\UDiskScanEngine.dll.locale |
| 1e0bdf33b5e1125563d371d355e20959 | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\chrome\360webshield.exe.locale |
| aac382748a707f4d29f5bce9b6ddffa7 | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\safemon.dll.locale |
| 3617d3c0a4511ac8108050d7bbf0341c | c:\Program Files (x86)\360\Total Security\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| 39caa308c66c66f83a66e82634d401d7 | c:\Program Files (x86)\360\Total Security\i18n\pt\Antiadwa.dll.locale |
| 602ca1c8baf48fafb2284b4b411fd81c | c:\Program Files (x86)\360\Total Security\i18n\pt\UrlSettings.dll.locale |
| 3fc8481e902c532038ca787b7fd39e99 | c:\Program Files (x86)\360\Total Security\i18n\pt\deepscan\DsRes.dll |
| c1ac20a0b6bae4008af1c9aa6656221c | c:\Program Files (x86)\360\Total Security\i18n\pt\deepscan\DsRes64.dll |
| b71912123cd7d2b5de1396d3f4897263 | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\NetDefender.dll.locale |
| 41ad76774d31ca6c1c92217c28a9143b | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\Sxin.dll.locale |
| ec9e938695ad014f925c8f206951f9cb | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\Sxin64.dll.locale |
| da3edad29ada20bcb580a4895b6c4650 | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\appd.dll.locale |
| 9305aa90434d48e4a349462eb95e4d8b | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\filemgr.dll.locale |
| 58c91d3ea097a9741cb1e33fc2e24c1f | c:\Program Files (x86)\360\Total Security\i18n\pt\ipc\yhregd.dll.locale |
| 1ff00e554380f0bca88745c272759993 | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\360SPTool.exe.locale |
| eddf7bafdea2fc0298f6e0c9529210f5 | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\360procmon.dll.locale |
| 8305b78dd83a210591296265faa45a14 | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\Safemon.dll.locale |
| 363b6f498260984d4d1c36c017560cce | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\SelfProtectAPI2.dll.locale |
| 4b7ecec7e6f0f30fd6540e6b21bfdfa1 | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\UDiskScanEngine.dll.locale |
| e7e563ace57bcff5a6a1ae284d12d9ab | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\chrome\360webshield.exe.locale |
| 9d946a13e391badcbff0ce2703ef0766 | c:\Program Files (x86)\360\Total Security\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| b6cf134aac06414be34abca411a23f78 | c:\Program Files (x86)\360\Total Security\i18n\ru\AntiAdwa.dll.locale |
| e8265e61415a7a5e41d5c38ef771d025 | c:\Program Files (x86)\360\Total Security\i18n\ru\UrlSettings.dll.locale |
| 6b9172df50085c3fadbc73a61e152208 | c:\Program Files (x86)\360\Total Security\i18n\ru\deepscan\DsRes.dll |
| 64a6ddf703a3e1e2f254e639d0d1bae7 | c:\Program Files (x86)\360\Total Security\i18n\ru\deepscan\DsRes64.dll |
| fb86134950ca839033705065f56c2f8b | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\NetDefender.dll.locale |
| b91dd8dd773a332d95479a736c4e878a | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\Sxin.dll.locale |
| 9ae4809d9020396a2a67516d8d3d88e7 | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\Sxin64.dll.locale |
| ab7a9ce51e00cb8a194762d7065e5a97 | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\appd.dll.locale |
| 669ce4e6a41a4dd299ffb67b4ec236e0 | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\filemgr.dll.locale |
| 20ccb9f6517eb5c7aafe34004855e8af | c:\Program Files (x86)\360\Total Security\i18n\ru\ipc\yhregd.dll.locale |
| b73a74ebf7c30079dbb1d1fcb370c956 | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\360SPTool.exe.locale |
| 5dbb5e1feaacc9f097491fdea7a3deaa | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\360procmon.dll.locale |
| d0a825cba20b18f96c975f74128e1932 | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\Safemon.dll.locale |
| 37fd6ad1242108535999c58be840f97a | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\SelfProtectAPI2.dll.locale |
| 91ebdd3701bd1834802384b728abd0cb | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\UDiskScanEngine.dll.locale |
| 8768617f4c8488cbbc23e50c30e2af15 | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\chrome\360webshield.exe.locale |
| 2ccb1135a31d4502cff25d0e53da89e2 | c:\Program Files (x86)\360\Total Security\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| 7f0cbe734fec8cf4034faafc5490e83b | c:\Program Files (x86)\360\Total Security\i18n\tr\AntiAdwa.dll.locale |
| 5eba678c5b96d16373e99dbdfeab0471 | c:\Program Files (x86)\360\Total Security\i18n\tr\UrlSettings.dll.locale |
| df363d23852fe94a70fab9b5001920cd | c:\Program Files (x86)\360\Total Security\i18n\tr\deepscan\DsRes.dll |
| 7d11b3a7f7053c5853c2c9fc98bef46c | c:\Program Files (x86)\360\Total Security\i18n\tr\deepscan\DsRes64.dll |
| b698e7cc1e7610362cf15039d0d842e8 | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\NetDefender.dll.locale |
| 8597b8851698fde9dcff358af4f74b90 | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\Sxin.dll.locale |
| a21a981e7a0adfff351c6a9ed115f25f | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\Sxin64.dll.locale |
| a0c88fc5174375b607da9b661ade7f9e | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\appd.dll.locale |
| 4996648fa4751525838465d25bd1fef9 | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\filemgr.dll.locale |
| 864ef75cfbdbe14d5d0a90c2cc0d245e | c:\Program Files (x86)\360\Total Security\i18n\tr\ipc\yhregd.dll.locale |
| a849ce96427191f49a0c091624d415f7 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\360SPTool.exe.locale |
| cd1df97454bade57b601dbb6fd2e335e | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\360procmon.dll.locale |
| 42a833746f6feacd0806012bf54bd091 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\SelfProtectAPI2.dll.locale |
| 4eccfb3ddbbf5aa9174ced7d380bf1a5 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\UDiskScanEngine.dll.locale |
| 7d1639e3feea5586c7f132b930b53f44 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\chrome\360webshield.exe.locale |
| bc580d57c56e67924dc493d0a0f0d546 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\safemon.dll.locale |
| 5efd82b0e517230c5fcbbb4f02936ed0 | c:\Program Files (x86)\360\Total Security\i18n\tr\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| ad7780222bca673975bbc7bdbf4587e4 | c:\Program Files (x86)\360\Total Security\i18n\vi\AntiAdwa.dll.locale |
| 3b237a30af209ea0c5e2bf041614946b | c:\Program Files (x86)\360\Total Security\i18n\vi\UrlSettings.dll.locale |
| 0fa04f7147b7d58e019f8461d354ad40 | c:\Program Files (x86)\360\Total Security\i18n\vi\deepscan\DsRes.dll |
| b1f532abc4da80899e3f93983830ea12 | c:\Program Files (x86)\360\Total Security\i18n\vi\deepscan\DsRes64.dll |
| b3640f8eb5dc2e83f617b5c8cba9f8e1 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\NetDefender.dll.locale |
| a7270cca11efc4fafef55a15695a7b54 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\Sxin.dll.locale |
| d6194d16acc8686082087ab4b0356ab5 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\Sxin64.dll.locale |
| 4eb2e0bbf92f7d1ecfdd69b2f5d3f163 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\appd.dll.locale |
| 39425f1503d863a2a187be7640ede8e9 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\filemgr.dll.locale |
| a9cbdc4907bbf0e6366a74f1064677d7 | c:\Program Files (x86)\360\Total Security\i18n\vi\ipc\yhregd.dll.locale |
| 8f6e965a4fe38c5f1c35b6bb903f795d | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\360SPTool.exe.locale |
| 722a770a5746314fc7475ccdf0b10859 | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\360procmon.dll.locale |
| d4e86d27d044a4fe08cf924d6fc78bde | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\SelfProtectAPI2.dll.locale |
| 5ec0bfe71a79de1348bd0613ecd6da6e | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\UDiskScanEngine.dll.locale |
| e6efb8a7bd18f4101fee9dcd877f3d01 | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\chrome\360webshield.exe.locale |
| 8bf196034f4af8ee9cf88bcae6e134e3 | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\safemon.dll.locale |
| 0fdedf23f925021a4454665fbedd49cd | c:\Program Files (x86)\360\Total Security\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| 7ecc68e7f634afe5076d61bcc8b8f73d | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\AntiAdwa.dll.locale |
| 8cb0bf9367c0e23f1c0b30bd70682f1c | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\UrlSettings.dll.locale |
| e6b53f645278ea1a45093db4f37497d5 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes.dll |
| 66171cf0474220e4be51282450afcd75 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes64.dll |
| f133ddbd2619edf8cacf47caa3aa1b5d | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\NetDefender.dll.locale |
| c6ea80ca114c4885fb41b16a124ea841 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin.dll.locale |
| 8c27992c3502254ed6f92a02cb432373 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin64.dll.locale |
| b69de4572d3070a146c4420b4e5fb72e | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\appd.dll.locale |
| 45b862670d3c8bc8122407506d1fe052 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\filemgr.dll.locale |
| ca514ea34867da1e371d6dae31f9b518 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\ipc\yhregd.dll.locale |
| b26f96bd732e122906a05979549f84f6 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\360SPTool.exe.locale |
| b5674a9b8183d7e98420977dce1760dc | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\360procmon.dll.locale |
| 2acd4e6941d209a5df226870f6688b90 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\Safemon.dll.locale |
| f9e52406ef1707ef839068bfb6334c20 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale |
| a7ad4257d9eaa1941acc76a7c2f166cd | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale |
| bbada95fbbbceefba22dc8a1fd6b95b5 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\chrome\360webshield.exe.locale |
| 37a82af097f424199884182d0096c325 | c:\Program Files (x86)\360\Total Security\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| cb66c5314e5c5bb1a1f0a4769422a2b5 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\AntiAdwa.dll.locale |
| 16ede4dc56f1957f2a9f6d9e6988df6a | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\UrlSettings.dll.locale |
| e4734970e15679754d7b5332b2f525fb | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes.dll |
| 0959f9f8dafd121bc109dc0f349d5e9a | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes64.dll |
| c707a9e296705ea27d99438f1dd9f2e2 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\NetDefender.dll.locale |
| a1896c538b3817ef6d3d8f195c7d36e2 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin.dll.locale |
| 6608d2bd79b716dba6807fa7d8799f41 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin64.dll.locale |
| ae795d7f330f851cb166295b3a4ca79f | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\appd.dll.locale |
| 1a3eb4b4806dac5d3e0049e471748e7b | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\filemgr.dll.locale |
| 94171ad0a5b0fa51120f769dcba1b39b | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\ipc\yhregd.dll.locale |
| c5a8221323db32593e971ea588e4d055 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\360SPTool.exe.locale |
| 51557349730e3426817abdb9cf998903 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\360procmon.dll.locale |
| ba62b0a07b8fb65f09005ae532eae074 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\Safemon.dll.locale |
| 391bb5f09f663286495e98c13bc73230 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale |
| bd45fac3eafc5164e05d86cb0b2e0da1 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale |
| be1f295eab9f6af2c09cf6b2f707f2f6 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\chrome\360webshield.exe.locale |
| d782b07838b80666b980623ca178d375 | c:\Program Files (x86)\360\Total Security\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale |
| fa02b2c4d2091e841cd87a672a293be6 | c:\Program Files (x86)\360\Total Security\ipc\360AntiHacker.dll |
| 52595955f119578e4ed54b5dd528e589 | c:\Program Files (x86)\360\Total Security\ipc\360AntiHacker.sys |
| 15fe196a71357ac9ff6e5a4b360bdb20 | c:\Program Files (x86)\360\Total Security\ipc\360AntiHacker64.sys |
| 560651624ed7e32627d4c61e46c10fc2 | c:\Program Files (x86)\360\Total Security\ipc\360Box.dll |
| ecfed10d908aad82bebc1581c185473e | c:\Program Files (x86)\360\Total Security\ipc\360Box.sys |
| a583f4daaa4db87bf92fd033966abc4b | c:\Program Files (x86)\360\Total Security\ipc\360Box64.sys |
| 2255330a69644f179d0438666eef1861 | c:\Program Files (x86)\360\Total Security\ipc\360Camera.sys |
| d31541708a595bca380105d44c2c2ad5 | c:\Program Files (x86)\360\Total Security\ipc\360Camera64.sys |
| 7a08b9ac69a1d538d514007ea9d3a719 | c:\Program Files (x86)\360\Total Security\ipc\360boxld.exe |
| 8c680010ced9087e7565cc5e9f9c11fb | c:\Program Files (x86)\360\Total Security\ipc\360boxld64.exe |
| 202cd3ec01e80b4fa963f0f5f007dd79 | c:\Program Files (x86)\360\Total Security\ipc\360boxmain.exe |
| 629e215120534dcc5a480932a081cc04 | c:\Program Files (x86)\360\Total Security\ipc\DrvUtility.dll |
| 2a3019a9536a275c51832058aeae2be4 | c:\Program Files (x86)\360\Total Security\ipc\FileMgr.dll |
| 20a95217f6bb7d46cfcde42610430d18 | c:\Program Files (x86)\360\Total Security\ipc\NetDefender.dll |
| de5389c0b14f2e61da7aecb7f5df0d0f | c:\Program Files (x86)\360\Total Security\ipc\SXIn.dll |
| b6e52418fc69c246698499b1fba04ffa | c:\Program Files (x86)\360\Total Security\ipc\SXIn64.dll |
| 263e382351c16a7bf904172531adf5f7 | c:\Program Files (x86)\360\Total Security\ipc\SxWrapper.dll |
| ee6ec397b817b3ac3cf418e593e9bc1d | c:\Program Files (x86)\360\Total Security\ipc\X64For32Lib.dll |
| 9b1cdaf49a6af4f7c7ffeb040723208c | c:\Program Files (x86)\360\Total Security\ipc\appd.dll |
| aafd535daf5c50c68e29165155e1d726 | c:\Program Files (x86)\360\Total Security\ipc\appdext.dll |
| 4b89182be351b3a69aa5d723495ae6c7 | c:\Program Files (x86)\360\Total Security\ipc\ipcService.dll |
| d9d066dfa4f62817236d310d0986ab68 | c:\Program Files (x86)\360\Total Security\ipc\qutmipc.dll |
| 6358934b6cbde5d03a39865d67421404 | c:\Program Files (x86)\360\Total Security\ipc\qutmipc.sys |
| cd58bda4e8b0ac5c7fb32f5d6d66df00 | c:\Program Files (x86)\360\Total Security\ipc\sbmon.dll |
| 0bdbcd1c97e174fb71eab6c0dd7fee02 | c:\Program Files (x86)\360\Total Security\ipc\yhregd.dll |
| 7fde62e513d0640239c54d49f3904f2b | c:\Program Files (x86)\360\Total Security\leakrepair.dll |
| 634154f9b970e3e419d6bfa39322fbc0 | c:\Program Files (x86)\360\Total Security\netmon\360GameIdentify.dll |
| bac04c07ed042d9ffe51bafdda529236 | c:\Program Files (x86)\360\Total Security\netmon\Netgm.dll |
| 1777732c31b70324d02e2b45232830a5 | c:\Program Files (x86)\360\Total Security\safemon\360AV.tpi |
| d379cc6ef1c3ef89edb92aaf16169c23 | c:\Program Files (x86)\360\Total Security\safemon\360GuardBase.dll |
| 2041813175353dda6fc7dfc4dbac7970 | c:\Program Files (x86)\360\Total Security\safemon\360SPTool.exe |
| 5e1c49803e42a1adf5569fb6c3576fd5 | c:\Program Files (x86)\360\Total Security\safemon\360SafeCamera.tpi |
| 0bbdac6662a660776c126109296f2043 | c:\Program Files (x86)\360\Total Security\safemon\360SelfProtection.sys |
| dafa2c8b54a617e253aab366f8459d7a | c:\Program Files (x86)\360\Total Security\safemon\360Tray.exe |
| 7506457f57ed209f39ca5dd7e6d2bd20 | c:\Program Files (x86)\360\Total Security\safemon\360UDisk.tpi |
| 7d4c79291cc614ed8840497334a53195 | c:\Program Files (x86)\360\Total Security\safemon\360compro.dll |
| 36852a7345c57ada1c2c4e9fd36dec45 | c:\Program Files (x86)\360\Total Security\safemon\360hipsPopWnd.dll |
| 2532e778883285c803456b6e859a52ed | c:\Program Files (x86)\360\Total Security\safemon\360procmon.dll |
| 142c2df8cb64c41ecc3d760e4a1ce064 | c:\Program Files (x86)\360\Total Security\safemon\360safemonpro.tpi |
| a10415ccc5dfbe9015ed6cbeec7ace91 | c:\Program Files (x86)\360\Total Security\safemon\360zipc.dll |
| 34d201db838c733d54358184a5116192 | c:\Program Files (x86)\360\Total Security\safemon\7z.dll |
| 12d2e17fd5dcd04a066c0e719b18e656 | c:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe |
| 036f4bc6ab6fce17f886993fb7c8abf9 | c:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe |
| 776361a68ad6c3449adbca07e135119c | c:\Program Files (x86)\360\Total Security\safemon\QHToasts.exe |
| 2571b45b9573c5b42ae04d48e36118cb | c:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe |
| 775fe6177fce4c9fcb6f50af336e13a3 | c:\Program Files (x86)\360\Total Security\safemon\SelfProtectAPI2.dll |
| b1dec6aeaf9ecb3e5ec8703d5978cda1 | c:\Program Files (x86)\360\Total Security\safemon\SomProxy.dll |
| 7f14cfee39dfd7e67a541b67470cb334 | c:\Program Files (x86)\360\Total Security\safemon\UDiskScanEngine.dll |
| e6ac7afc9d5b4f257001f8a4081b2c95 | c:\Program Files (x86)\360\Total Security\safemon\WDPayPro.exe |
| 8b3b79e6df8a90562899400f787cfe78 | c:\Program Files (x86)\360\Total Security\safemon\WDRecord.dll |
| c19637b4da07de8d2a89a752cd751932 | c:\Program Files (x86)\360\Total Security\safemon\WDSafeDown.exe |
| 318175681fb78fc3ed2439822dc2b971 | c:\Program Files (x86)\360\Total Security\safemon\WscReg.exe |
| 7c60cf4a939f2137704a4f167d35a656 | c:\Program Files (x86)\360\Total Security\safemon\chrome\360webshield.exe |
| 64f2427bab6f7b0f521a1c60dd4ba55a | c:\Program Files (x86)\360\Total Security\safemon\dlproc.dll |
| c369978dbcf5e6b18bf595cc30c6a5f3 | c:\Program Files (x86)\360\Total Security\safemon\gamemode.tpi |
| a377dac0a2443f5301e97fa76096e609 | c:\Program Files (x86)\360\Total Security\safemon\hookport.sys |
| bbe58d8ba07ebb6bc9db38d147df9009 | c:\Program Files (x86)\360\Total Security\safemon\iNetSafe.dll |
| 796c20ab08d42d96bce1b9dbcdf272d2 | c:\Program Files (x86)\360\Total Security\safemon\safemon.dll |
| 7691da40a547e6d33c1e493486b0ded1 | c:\Program Files (x86)\360\Total Security\safemon\urlproc.dll |
| 5ef30201a552721749200e7278f06478 | c:\Program Files (x86)\360\Total Security\safemon\wdui2.dll |
| a88d64734dd2b88fa45a83cca38db260 | c:\Program Files (x86)\360\Total Security\safemon\wdui3.dll |
| 4fe01dc65902fff76805aa735043142a | c:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox\plugins\nptswp.dll |
| 012b352afa4cc7fbf954bcc059c38ff6 | c:\Program Files (x86)\360\Total Security\safescan.dll |
| a46da3ce2f11102850711ecdda8046e1 | c:\Program Files (x86)\360\Total Security\scanbase.dll |
| 7f186173e147c6f636648f405fe015a8 | c:\Program Files (x86)\360\Total Security\scanproxy.dll |
| 0afa636081aa1bfa48d2da8acf47655e | c:\Program Files (x86)\360\Total Security\scanstub.dll |
| 04a2b5758fc8ca6897b0e7243569dd77 | c:\Program Files (x86)\360\Total Security\sites.dll |
| a976147886932652f8bb0dd2df69ed92 | c:\Program Files (x86)\360\Total Security\softmgr\360SoftMgrS.dll |
| f5b75a82fcae6c253c38b9f3003ded55 | c:\Program Files (x86)\360\Total Security\softmgr\SomAdvUtils.dll |
| 9d16e935943e16dc5f84e3b848a95a0f | c:\Program Files (x86)\360\Total Security\softmgr\SomAdvUtilsWrap.dll |
| 7efb7d4089abbe163d726149195fbd95 | c:\Program Files (x86)\360\Total Security\softmgr\SpeedUp.dll |
| 0104db298800fb97f13f229314738a08 | c:\Program Files (x86)\360\Total Security\softmgr\somkernl.dll |
| 5555730dd02f3cca685226e27dbcd2c0 | c:\Program Files (x86)\360\Total Security\sweeper\CleanHelper64.exe |
| 3a604f30d608cb71a441e7fd2223ecea | c:\Program Files (x86)\360\Total Security\sweeper\RemoteTrashInterface.dll |
| a19209ad7e35b4ca20e2737b6a4d1740 | c:\Program Files (x86)\360\Total Security\sweeper\SysSweeper.dll |
| 7ae14956462a73e308bf80ec8d00f652 | c:\Program Files (x86)\360\Total Security\sweeper\TrashClean.dll |
| f54ae50f78f883a0da90f96ec94b8736 | c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\360TotalSecurity_Rus_Setup_0001[1].exe |
| a5dbd83383fae13d2de6a4acab62aaa3 | c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\Directx_9.10.11[1].exe |
| 8c42fc725106cf8276e625b4f97861bc | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\1429760925_00000000_base\360base.dll |
| a5dbd83383fae13d2de6a4acab62aaa3 | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd45AA.tmp.exe |
| 9e0711bed229b60a853bcc5d10deaafc | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DSETUP.dll |
| ddce338bb173b32024679d61fb4f2ba6 | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DXSETUP.exe |
| 0f58ccd58a29827b5d406874360e4c08 | c:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dsetup32.dll |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
A worm can spread via removable drives. It writes its executable and creates "autorun.inf" scripts on all removable drives. The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer.
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
QHWatchdog.exe:2492
DXSETUP.exe:1376
regsvr32.exe:704
regsvr32.exe:1580
%original file name%.exe:2428
QHActiveDefense.exe:1168
QHActiveDefense.exe:804
nss6FC6.tmp.exe:1904 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
C:\Users\"%CurrentUserName%"\AppData\LocalLow\360WD\wdch.dat (557 bytes)
%Program Files% (x86)\360\Total Security\safemon\netconfig.dat (18 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdui2.dll (548 bytes)
%Program Files% (x86)\360\Total Security\safemon\safemon.dll (49 bytes)
%Program Files% (x86)\360\Total Security\safemon\SomProxy.dll (339 bytes)
%Program Files% (x86)\360\Total Security\safemon\routertp.ini (56 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\360WD\wdch.dat-journal (7250 bytes)
%Program Files% (x86)\360\Total Security\safemon\urlproc.dll (655 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_c6cb4f5ac0255d2baf41678f26cd50cc.dat.tmp (2 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_7539e5c431f211952383e009cce4062d.dat.tmp (323 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_9909aa216b30b502f677bfff05000b0e.dat.tmp (784 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_0cd47f5d563ba06a1e44716398931a08.dat.tmp (323 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\360safe\360leakfixer\PatchUp.leakrepair.som.log (17020 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_e6e862c79dc156d48370cc4f389eee28.dat.tmp (3 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_dbbccf0284b1c6112444badae27b87c1.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_4ae7fb61ded98e1cd0fa51382739609d.dat.tmp (3 bytes)
%Program Files% (x86)\360\Total Security\leakrepair.dat (446 bytes)
%Program Files% (x86)\360\Total Security\deepscan\netconf.dat (4 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg (2091 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_b0586730837afd39a4c6ffc29b8b45d1.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\hotfix\som_f3d59eaa9ff33dcbe50abb4276fbe86c.dat.tmp (49 bytes)
%Program Files% (x86)\360\Total Security\deepscan\speedmem2.hg-journal (13458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dcsx_42_x64.cab (49398 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx9_38_x64.cab (27487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx11_42_x64.cab (3051 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_XACT_x86.cab (3591 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XAudio_x86.cab (5874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_XACT_x64.cab (4633 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx10_41_x64.cab (15925 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx11_42_x86.cab (1783 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx11_43_x86.cab (1564 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_X3DAudio_x64.cab (1391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx10_39_x86.cab (15652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XACT_x64.cab (2605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2006_XACT_x64.cab (3086 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_XACT_x86.cab (3227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_xinput_x86.cab (1320 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_xinput_x64.cab (1386 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dsetup32.dll (27267 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_MDX1_x86_Archive.cab (72546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XACT_x86.cab (1707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XAudio_x86.cab (6136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx9_36_x86.cab (26253 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx9_40_x86.cab (22095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0008.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XACT_x64.cab (2473 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_XACT_x86.cab (3849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XAudio_x86.cab (6895 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx9_35_x64.cab (27382 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_X3DAudio_x64.cab (1985 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_XACT_x64.cab (3989 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx9_34_x86.cab (23634 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx10_42_x86.cab (3771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx9_32_x64.cab (23092 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_XACT_x86.cab (3491 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\FEB2007_XACT_x64.cab (3357 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XACT_x86.cab (1671 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XAudio_x64.cab (6518 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DSETUP.dll (2598 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx10_38_x64.cab (17923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_XACT_x86.cab (2774 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_xinput_x64.cab (2061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx11_43_x64.cab (4547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2006_XACT_x86.cab (3064 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_xinput_x86.cab (830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DXSETUP.exe (11136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0010.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_xinput_x86.cab (2760 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_d3dx9_30_x64.cab (19039 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_D3DCompiler_42_x64.cab (14048 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_XACT_x86.cab (2201 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx9_33_x86.cab (23977 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx10_43_x86.cab (3692 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XAudio_x64.cab (6514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx9_43_x64.cab (17300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0011.tmp (12676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_XACT_x64.cab (3423 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_d3dx9_29_x86.cab (17312 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_X3DAudio_x64.cab (1568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx10_40_x86.cab (16648 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XAudio_x64.cab (6012 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_XACT_x64.cab (3999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx9_37_x86.cab (20364 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_X3DAudio_x64.cab (581 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_XACT_x86.cab (3136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_d3dx9_30_x86.cab (20278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XAudio_x64.cab (5815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx10_00_x64.cab (6385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XAudio_x86.cab (4900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx9_35_x86.cab (34733 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XACT_x86.cab (1503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_X3DAudio_x86.cab (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dxupdate.cab (1849 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_D3DCompiler_43_x86.cab (16808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XAudio_x86.cab (6547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx9_40_x64.cab (30555 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XAudio_x64.cab (6523 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx10_37_x86.cab (14668 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dcsx_43_x86.cab (14227 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XAudio_x86.cab (4920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XAudio_x64.cab (4852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2005_d3dx9_25_x64.cab (19138 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_D3DCompiler_42_x86.cab (17226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx9_41_x64.cab (45112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\temp_0.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx10_35_x64.cab (15425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0002.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx9_37_x64.cab (28720 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_d3dx10_35_x86.cab (16252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2005_d3dx9_25_x86.cab (17848 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_xinput_x64.cab (3075 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Dec2005_d3dx9_28_x86.cab (17231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx10_36_x86.cab (18499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2005_d3dx9_27_x86.cab (17231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XAudio_x64.cab (4945 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx10_36_x64.cab (15795 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2005_d3dx9_27_x64.cab (20953 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0004.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx9_43_x86.cab (12679 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_X3DAudio_x64.cab (683 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_d3dx9_29_x64.cab (22025 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dx10_43_x64.cab (6095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XAudio_x86.cab (5285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_d3dx10_40_x64.cab (16329 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0006.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_X3DAudio_x86.cab (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx9_39_x64.cab (27151 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_XACT_x64.cab (3624 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx9_39_x86.cab (23198 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx10_34_x86.cab (11482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_MDX1_x86.cab (16914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2005_d3dx9_24_x64.cab (20378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2005_d3dx9_26_x64.cab (22088 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0005.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2007_d3dx9_36_x64.cab (29773 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XACT_x64.cab (3069 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx10_33_x64.cab (12314 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_X3DAudio_x86.cab (1882 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_XACT_x64.cab (4852 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2007_XACT_x64.cab (5028 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\2.tmp (418 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XACT_x64.cab (3530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_d3dcsx_43_x64.cab (14558 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2005_d3dx9_26_x86.cab (19193 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx10_41_x86.cab (17373 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_d3dx10_37_x64.cab (14641 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_d3dx9_31_x64.cab (20272 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XACT_x64.cab (3602 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_D3DCompiler_43_x64.cab (17184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Oct2005_xinput_x86.cab (2114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XACT_x86.cab (1089 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx10_34_x64.cab (12870 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_X3DAudio_x86.cab (841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2010_XACT_x64.cab (1991 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0003.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_d3dx9_41_x86.cab (23900 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx9_38_x86.cab (23827 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx9_33_x64.cab (24421 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XAudio_x64.cab (5217 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_X3DAudio_x86.cab (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2009_XACT_x86.cab (2715 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0001.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_X3DAudio_x86.cab (1984 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx10_42_x64.cab (4254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\15.tmp (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Apr2006_XACT_x86.cab (2011 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_XACT_x64.cab (2426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\NOV2007_XACT_x64.cab (4808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx10_00_x86.cab (4730 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\dxdllreg_x86.cab (1424 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2007_d3dx9_34_x64.cab (24515 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\AUG2006_XACT_x64.cab (3659 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0009.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_X3DAudio_x64.cab (587 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Dec2005_d3dx9_28_x64.cab (21049 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\FEB2007_XACT_x86.cab (2514 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dcsx_42_x86.cab (51118 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DEC2006_d3dx9_32_x86.cab (23370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Mar2008_XACT_x64.cab (3497 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_XACT_x86.cab (2658 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx9_42_x86.cab (12362 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2006_XACT_x86.cab (3396 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\$inst\0007.tmp (14404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Jun2010_XAudio_x86.cab (6228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Oct2005_xinput_x64.cab (638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2008_d3dx10_39_x64.cab (17527 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\JUN2008_d3dx10_38_x86.cab (15378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Feb2005_d3dx9_24_x86.cab (23695 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_d3dx9_42_x64.cab (20143 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Aug2009_XACT_x86.cab (1484 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\OCT2006_d3dx9_31_x86.cab (19019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\APR2007_d3dx10_33_x86.cab (18378 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\Nov2008_XACT_x86.cab (2729 bytes)
C:\Windows\Logs\DirectX.log (256 bytes)
%Program Files% (x86)\360\Total Security\MenuEx64.dll (614 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D285HURO\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\StdUtils.dll (804 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\System.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\license.rtf (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsd45AA.tmp.exe (6529759 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nss6FC6.tmp.exe (2170387 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUC72OXY\collect[2].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE946.tmp (6936 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\nsDialogs.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360TS.jpg (1552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\collect[1].gif (35 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDZ3KS6S\Directx_9.10.11[1].exe (6103585 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\inetc.dll (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsnE947.tmp\nsRichEdit.dll (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6HVGFTJ0\360TotalSecurity_Rus_Setup_0001[1].exe (2034898 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\stats.txt (140 bytes)
C:\Windows\System32\drivers\360fsflt.sys (1740 bytes)
%Program Files% (x86)\360\Total Security\safemon\SelfProtectAPI2.dll (319 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360FsFlt.sys (315 bytes)
\\192.168.50.163\PIPE\srvsvc (14264 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Camera64.sys (40 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDRecord.dll (184 bytes)
%Program Files% (x86)\360\Total Security\Logs\Administrators\ipc\galaxy2.dat (17110 bytes)
%Program Files% (x86)\360\Total Security\safemon\param.ini (24 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat (1123 bytes)
%Program Files% (x86)\360\Total Security\sites.dll (49 bytes)
%Program Files% (x86)\360\Total Security\scanstub.dll (176 bytes)
%Program Files% (x86)\360\Total Security\safescan.dll (348 bytes)
%Program Files% (x86)\360\Total Security\safemon\filelog.db (1141 bytes)
%Program Files% (x86)\360\Total Security\ipc\qutmipc.dll (167 bytes)
%Program Files% (x86)\360\Total Security\filemon\WhiteCache.dll (49 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SoftMgr.db (1 bytes)
C:\ProgramData\360safe\LogInfo\New360_tmp_1429761230_2620.log2 (460 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TMContainer00000000000000000002.regtrans-ms (712 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker64.sys (102 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TM.blf (2654 bytes)
%Program Files% (x86)\360\Total Security\filemon\wcachedb.db (345 bytes)
%Program Files% (x86)\360\Total Security\softmgr\somkernl.dll (291 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SomAdvUtils.dll (888 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SoftMgr.db-journal (512 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AVFlt64.sys (81 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat.LOG1 (1048 bytes)
%Program Files% (x86)\360\Total Security\ipc\yhregd.dll (409 bytes)
C:\Windows\System32\drivers\360Camera64.sys (40 bytes)
%Program Files% (x86)\360\Total Security\safemon\filelog.db-journal (5490 bytes)
%Program Files% (x86)\360\Total Security\filemon\wcachedb.db-journal (528 bytes)
%Program Files% (x86)\360\Total Security\ipc\filecache\FileCache.dat{488f2569-df83-11e4-91a7-0050562b2045}.TMContainer00000000000000000001.regtrans-ms (1224 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\udisk.locale (444 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\urllib.dat (600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360P2SP.dll (9112 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_slow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libsdi.dat (84 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\Safemon.dll.locale (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\gamemode.tpi (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsSysRepair.dll (6372 bytes)
%Program Files% (x86)\360\Total Security\ipc\appdef.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SelfProtection.sys (1691 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\Sxin64.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\UDiskScanEngine.dll.locale (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\regmon.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360liveupdate\360liveupdate_theme.ui (137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image (4 bytes)
%Program Files% (x86)\360\Total Security\tools.xml (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_2.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\udisk.locale (486 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\filemon\360rp.dll (18248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1000.dat (607 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1005.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsr.dat (1020 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHSafeTray.exe (10758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libaw.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360NetBase.dll (4426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\DsRes64.dll (1548 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsbs.dat (38 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appdext.dll (1726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360NetBase64.dll (4336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\DsRes.dll (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\deepscan.dll (17072 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\config\lang\hi\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome\content\main.js (2 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsSysRepair.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome.manifest (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDRecord.dll (1920 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\regmon.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_slow.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\CleanHelper64.exe (723 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\EfiMon.sys (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\ImAVEng.dll (1507 bytes)
%Program Files% (x86)\360\Total Security\scanbase.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\3G\LibOui.dat (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360AvFlt.sys (68 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\dynlenv.dll (4491 bytes)
%Program Files% (x86)\360\Total Security\filemon\360avflt64.sys (601 bytes)
%Program Files% (x86)\360\Total Security\DumpUper.ini (170 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\NetDefender.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\updatecfg.ini (128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\drvmk.dat (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\filemgr.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\default_theme.ui (2321 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\urlproc.dll (4863 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1005.dat (1 bytes)
%Program Files% (x86)\360\Total Security\sweeper\CleanHelper64.exe (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (111 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\PopSoftEng.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\WifiAgent.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\360GuardBase.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\sweeper\SysSweeper.dat (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libdefa.dat (213 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\NetDefender.dll.locale (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libsdi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\leakrepair.dll (8648 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360TsLiveUpd.exe (8594 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\qex.dll (14497 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sites.dll (10999 bytes)
%Program Files% (x86)\360\Total Security\360Common.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\360Downloads.ini (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libaw.dat (2343 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\udisk.locale (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\360Util.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\safemon\360AV.tpi (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\360uac.dat (8 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360leakfix\360leakfix_theme.ui (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr4.dat (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\1429760925_00000000_base\360base.dll (1815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\TrashClean.dll (4180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsr.dat (87 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dswtb.dat (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr8.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360.dat (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\i18n.ini (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\deepscan\csp.dat (8 bytes)
%Program Files% (x86)\360\Total Security\rpi.dat (972 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1000.dat (607 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\DsRes64.dll (64 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\PatchUp.exe (6084 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libvi.dat (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\3G\3GIdentify.dll (3418 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AvFlt.dll (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\AVEngine.dll (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\MacroDef.enc (6 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\install.rdf (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsArk.sys (601 bytes)
%Program Files% (x86)\360\Total Security\360SkinView.exe (2105 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\360ShellPro.exe (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanbase.dll (1123 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\ssr.dat (53 bytes)
%Program Files% (x86)\360\Total Security\ipc\appdext.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\I18N.dll (691 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\iNetSafe.dll (2464 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Base64.dll (7247 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\NetDefender.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dswc.dat (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\NetDefender.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\feedback\FeedBack_theme.ui (87 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\LibSDI.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360ShellPro.exe (2114 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\Safemon.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CombineExt.dll (1567 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\DsRes64.dll (1542 bytes)
%Program Files% (x86)\360\Total Security\ipc\clsid.dat (22 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\360Base.dll (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libaw.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\DsRes64.dll (1370 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\gameidentify.dat (91 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\3G\LibOui.dat (365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360SPTool.exe.locale (28 bytes)
%Program Files% (x86)\360\Total Security\deepscan\LibOui.dat (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\AntiAdwa.dll.locale (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\art.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\sweeper\SysSweeper.dll (4545 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_1.dat (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\SelfProtectAPI2.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360GuardBase.dll (4626 bytes)
%Program Files% (x86)\360\Total Security\MenuEx.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\AVLib.dat (360 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\Sxin.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHToasts.exe (3100 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qutmdrv.sys (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\drvmon.dat (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\zh-CN\SysSweeper.ui.dat (114 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CheckSM.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\AntiAdwa.dll.locale (38 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\safemon.dll.locale (20 bytes)
%Program Files% (x86)\360\Total Security\dynlbase.dll (6841 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1003.dat (1 bytes)
%Program Files% (x86)\360\Total Security\360DeskAna.exe (1425 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DsArk.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\safemon\360drwht.dat (42 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHToasts.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\regmon.dat (46 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\Sites64.dll (15019 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360zipc.dll (5513 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\hookport.sys (397 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360uac.dat (8 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationSafe\360InternationSafe_theme.ui (55596 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360DeskAna64.exe (3906 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\ipc\DrvUtility.dll (828 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\DumpUper.ini (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wdui2.dll (7710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\router.ini (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp.7z (27684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\udiskscan.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\ptype.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\vi\SysSweeper.ui.dat (128 bytes)
%Program Files% (x86)\360\Total Security\softmgr\360SoftMgrS.dll (2321 bytes)
%Program Files% (x86)\360\Total Security\safemon\360zipc.dll (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libvi.dat (130 bytes)
%Program Files% (x86)\360\Total Security\filemon\360AvFlt.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\udisk.locale (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360SPTool.exe.locale (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\PDown.dll (2025 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsr.dat (601 bytes)
%Program Files% (x86)\360\Total Security\ipc\360AntiHacker.dll (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SomAdvUtils.dll (8690 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Util.dll (5342 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\AntiAdwa.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\360net.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360procmon.dll.locale (101 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DSFScan.dll (3996 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\360Base64.dll (7547 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\LibOui.dat (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\qutmipc.dll (2626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\ipcService.dll (5373 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360skinview\360skinview_theme.ui (45 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1004.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\patt.enc (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\DsRes.dll (1406 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\DsRes.dll (64 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxld64.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\TR\SysSweeper.ui.dat (123 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\art.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsArk.dll (1796 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\cloudsec2.dll (7547 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1004.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360skinview\360skinview_theme.ui (45 bytes)
%Program Files% (x86)\360\Total Security\safemon\hookport.sys (58 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\AntiAdwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SPTool.exe (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\udisk.locale (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsr.dat (55 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\DsRes64.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\Sxin64.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\DsRes.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libvi.dat (130 bytes)
%Program Files% (x86)\360\Total Security\safemon\wdui3.dll (5441 bytes)
%Program Files% (x86)\360\Total Security\360TsLiveUpd.exe (6841 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHWatchdog.exe (601 bytes)
%Program Files% (x86)\360\Total Security\libredlist.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\360procmon.dll.locale (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHVer.dll (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDPayPro.exe (9098 bytes)
%Program Files% (x86)\360\Total Security\config\config.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\SomProxy.dll (3594 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\softmgr\AdvUtils.ini (146 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_reallyfast.png (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\signbwl.dat (684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box.sys (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\NetDefender.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr4.dat (7 bytes)
%Program Files% (x86)\360\Total Security\dynlenv.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\icon64.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MenuEx.dll (3246 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\libdefa.dat (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleak.dat (228 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_reallyfast.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\cloudsec2.dll (8633 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\stsuglist.dat (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\rpi.dat (972 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\DsRes.dll (1465 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\zh-TW\SysSweeper.ui.dat (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360QuarantPlugin.dll (4573 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\LibSDI.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\config\lang\zh-TW\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (112 bytes)
%Program Files% (x86)\360\Total Security\MiniUI.dll (6841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\drvms.dat (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\yhregd.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\UDiskScanEngine.dll.locale (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\Safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\deepscan\DSFScan.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SXIn.dll (5904 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\ru\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\Netgm.dll (3254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dswc.dat (50 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr5.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sndw.dat (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\Cloudsec3.dll (8817 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\appd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\deepscan\cloudcom2.dll (7547 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\appd.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qutmload.dll (1833 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\NetDefender.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\AVEngine.dll (8584 bytes)
%Program Files% (x86)\360\Total Security\safemon\WscReg.exe (22336 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxmain.exe (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHSafeMain.exe (29771 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\LibSDI.dat (78 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\yhregd.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toasts_waring.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\360SoftMgrS.dll (4865 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360rp.dll (20395 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\DsRes64.dll (377 bytes)
%Program Files% (x86)\360\Total Security\PDown.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\endata\h_3.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\art.dat (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\DsRes.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\config.xml (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1002.dat (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPI.dll (1526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\X64For32Lib.dll (53 bytes)
%Program Files% (x86)\360\Total Security\ipc\360boxld.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\endata\h_1.dat (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safescan.dll (2325 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CQhCltHttpW.dll (3932 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360drwht.dat (42 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360wdui\360wdui_theme.ui (5441 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsr.dat (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\NetDefender.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\chrome\manifest.json (332 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\udisk.locale (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\safemon\drvms.dat (3 bytes)
%Program Files% (x86)\360\Total Security\PatchUp.exe (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker.sys (1101 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\AntiAdwa.dll (22336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome\content\main.js (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\safemon\chrome\360webshield.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libredlist.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\udisk.locale (490 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Verify.dll (1321 bytes)
%Program Files% (x86)\360\Total Security\safemon\chrome\manifest.json (332 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360CleanPlus\360CleanPlus_theme.ui (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\art.dat (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\WifiAgent.dll (2742 bytes)
%Program Files% (x86)\360\Total Security\ipc\cleancfg.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\EfiProc.dll (1742 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\libleakres.dat (16582 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wificonfig\ra1006.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Uninstall.exe (12812 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dserror.dat (1 bytes)
%Program Files% (x86)\360\Total Security\ipc\FileMgr.dll (2105 bytes)
%Program Files% (x86)\360\Total Security\writeable_test_495427.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SXIn64.dll (5863 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360SPTool.exe.locale (28 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\softmgr\safespeedboot.dat (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\libleak-64.dat (22575 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\pt\SysSweeper.ui.dat (123 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\NetDefender.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1002.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\deepscan.dll (22163 bytes)
C:\Windows\System32\drivers\360Box64.sys (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\art.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\AVEI.dll (1750 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CheckSM.exe (3191 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360netcfg.exe (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\tools.xml (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\TS.dat (748 bytes)
%Program Files% (x86)\360\Total Security\config\defaultskin\defaultskin.ui (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\UDiskScanEngine.dll (4765 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\qex.dll (11518 bytes)
%Program Files% (x86)\360\Total Security\filemon\FsrMgr.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360wdui\360wdui_theme.ui (735 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sysfilerepS.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\SxWrapper.dll (1169 bytes)
%Program Files% (x86)\360\Total Security\mui\en\Strings.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libsdi.dat (1673 bytes)
%Program Files% (x86)\360\Total Security\endata\h_2.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\SelfProtectAPI2.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libsdi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SafeCamera.tpi (2321 bytes)
%Program Files% (x86)\360\Total Security\ipc\SXIn.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dserror.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\NetDefender.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\Antiadwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\AntiAdwa.dll.locale (87 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\WiFiSafe.dll (13152 bytes)
%Program Files% (x86)\360\Total Security\Dumpuper.exe (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\7z.dll (50 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\art.dat (20 bytes)
%Program Files% (x86)\360\Total Security\endata\lm_1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Conf.dll (3082 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\ipc\signbwl.dat (684 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes.dll (29 bytes)
%Program Files% (x86)\360\Total Security\ipc\qutmipc.sys (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360SPTool.exe.locale (31 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\AntiAdwa.dll.locale (1279 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\appd.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\Safemon.dll.locale (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360Quarant.dll (4397 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHActiveDefense.exe (5873 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360UDisk\360UDisk_theme.ui (237 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\Antiadwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\WhiteCache.dll (12119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\Sxin.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360AvFlt.dll (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\DsRes.dll (1483 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\cacert.pem (229 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\ssr.dat (53 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\appd.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\cloudcom2.dll (10255 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\DsRes64.dll (58 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\Optadn.dat (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsns.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\DsRes.dll (1551 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SpeedUp.dll (673 bytes)
%Program Files% (x86)\360\Total Security\netmon\360GameIdentify.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\safemon\360safemonpro.tpi (7971 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CQhCltHttpW.dll (2321 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dswtb.dat (263 bytes)
%Program Files% (x86)\360\Total Security\softmgr\Optadn.dat (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\360bps.dat (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\LibSDI.dat (77 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SpeedUp.dll (4095 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\QHSafeMain.exe (26096 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsws.dat (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\patt.enc (416 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\defaultskin\MiniUI.xml (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360net.dll (4879 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\execrule.dat (100 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\DsRes64.dll (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
%Program Files% (x86)\360\Total Security\safemon\360hipsPopWnd.dll (7726 bytes)
%Program Files% (x86)\360\Total Security\safemon\urllib.dat (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsr.dat (82 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\AntiAdwa.dll (29035 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\ssr.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\ru\SysSweeper.ui.dat (127 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360FsFlt.sys (2375 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CrashReport.dll (4712 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\config.ini (278 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libdefa.dat (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360CleanPlus\360CleanPlus_theme.ui (109 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPI.dll (3138 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360sandbox\360sandbox_theme.ui (1425 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome\content\browser.xul (560 bytes)
C:\Windows\System32\drivers\BAPIDRV64.SYS (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\Sxin.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1006.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\en\SysSweeper.ui.dat (115 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\RemoteTrashInterface.dll (5508 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\filemgr.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker64.sys (1878 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libaw.dat (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libsdi.dat (83 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libdefa.dat (162 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\I18N.dll (280 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box64.sys (2931 bytes)
%Program Files% (x86)\360\Total Security\softmgr\SomAdvUtilsWrap.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\DrvUtility.dll (728 bytes)
%Program Files% (x86)\360\Total Security\CrashReport.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Camera.sys (1687 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360procmon.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\netmon\Netgm.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box.dll (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qutmdrv.sys (3004 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\udisk.locale (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360bps.dat (676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationSafe\360InternationSafe_theme.ui (1363 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\udisk.locale (254 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wdui3.dll (8454 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\chrome.manifest (275 bytes)
%Program Files% (x86)\360\Total Security\safemon\360SelfProtection.sys (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360SPTool.exe.locale (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\tools\Tools_theme.ui (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\LibSDI.dat (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SafeCamera.tpi (404 bytes)
%Program Files% (x86)\360\Total Security\config\lang\pt\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\libvi.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsbs.dat (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\SomAdvUtilsWrap.dll (5248 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\CheckSM.dll (4562 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libaw.dat (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\360netcfg.exe (2047 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\drvmon.dat (5 bytes)
%Program Files% (x86)\360\Total Security\safemon\360Tray.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleak-64.dat (275 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\udisk.locale (482 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\filemon.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box.dll (1873 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxld.exe (1209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\DsRes64.dll (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\wd.ini (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\DsRes64.dll (2492 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\udisk.locale (486 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\UDiskScanEngine.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\safemon\dlproc.dll (4545 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsark64.sys (1346 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\art.dat (20 bytes)
%Program Files% (x86)\360\Total Security\I18N64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\drvmon.dat (5 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\LiveUpdate360.exe (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDSafeDown.exe (1726 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\NetDefender.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\icon64.png (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\dsr.dat (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\AntiAdwa.dll.locale (81 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\filemon\AVLib.dat (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Common.dll (2070 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\DsRes64.dll (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\360SPTool.exe.locale (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\Sxin64.dll.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\SelfProtectAPI2.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr1.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360procmon.dll.locale (100 bytes)
%Program Files% (x86)\360\Total Security\ipc\NetDefender.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\libleakres.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\yhregd.dll (5739 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\art.dat (18 bytes)
%Program Files% (x86)\360\Total Security\safemon\drvmk.dat (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appdef.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\icon.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\3G\3GIdentify.dll (1281 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\DsRes64.dll (62 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360SPTool.exe.locale (30 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Box64.sys (1425 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toasts_waring.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\LibSDI.dat (83 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\NetDefender.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxld64.exe (3243 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\DsRes64.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\TS.dat (748 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\writeable_test_495552.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\filemon.dat (17 bytes)
C:\Windows\System32\drivers\360AntiHacker64.sys (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\LiveUpd360.dll (4830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\filemgr.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360SPTool.exe.locale (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\Utils\ModuleUpdate.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\QVM\360QVM.dll (5873 bytes)
%Program Files% (x86)\360\Total Security\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\NetDefender.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\safemon\udiskscan.dat (3 bytes)
%Program Files% (x86)\360\Total Security\sweeper\RemoteTrashInterface.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\360Conf.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\art.dat (18 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsns.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1003.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\dslw\dslw.dat (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\plugins\nptswp.dll (3914 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WDPayPro.exe (12859 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\safemon\wduicfg.dat (10 bytes)
%Program Files% (x86)\360\Total Security\safemon\360procmon.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\Dumpuper.exe.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\chrome\360webshield.exe.locale (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\Safemon.dll.locale (18 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\AVEI.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libdefa.dat (162 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\FeedBack.exe (7209 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPIDRV.sys (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\Antiadwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Camera64.sys (526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\webprotection_firefox\plugins\nptswp.dll.locale (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\QHVer.dll (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\Antiadwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\clsid.dat (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wpz.dat (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Utils\ModuleUpdate.exe (6238 bytes)
%Program Files% (x86)\360\Total Security\config\lang\es\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsr.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\AntiAdwa.dll.locale (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\ssr.dat (32 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\AntiAdwa.dll.locale (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\Sxin.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\SelfProtectAPI2.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\360SPTool.exe.locale (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\appd.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360procmon.dll.locale (100 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\NetDefender.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MenuEx64.dll (8092 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\theme.xml (63 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus.dll (2461 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\DsRes.dll (748 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\safemon.dll.locale (21 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360UDisk\360UDisk_theme.ui (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\deepscan\CheckSM.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\libvi.dat (521 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\tools\Tools_theme.ui (7385 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\udisk.locale (470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\updatecfg.ini (623720 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_medium.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360Tray.exe (4650 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\en\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\AntiAdwa.dll.locale (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\UrlSettings.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\dynlbase.dll (8581 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360liveupdate\360liveupdate_theme.ui (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360netr.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\DataDriv.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360compro.dll (5083 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\DsRes64.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
%Program Files% (x86)\360\Total Security\ipc\SXIn64.dll (3361 bytes)
%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\chrome\360webshield.exe (1676 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\plugins\nptswp.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (119 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\sbmon.dll (3836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (112 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libaw.dat (1385 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\360InternationTray_theme.ui (673 bytes)
%Program Files% (x86)\360\Total Security\Uninstall.exe (10177 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360DeskAna.exe (4315 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\Sxin64.dll.locale (16 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360AV\360AV_theme.ui (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\libaw.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\safemon\webprotection_firefox\icon.png (6 bytes)
%Program Files% (x86)\360\Total Security\safemon\gamemode.tpi (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360UDisk.tpi (1524 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\ssr.dat (45 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\LibSDI.dat (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsark64.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\SysSweeper.dll (8234 bytes)
%Program Files% (x86)\360\Total Security\CombineExt.dll (673 bytes)
%Program Files% (x86)\360\Total Security\safemon\360compro.dll (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\appd.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\yhregd.dll.locale (9 bytes)
%Program Files% (x86)\360\Total Security\safemon\360.dat (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\drvmon.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\DsArk.sys (835 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\art.dat (16 bytes)
C:\Windows\System32\drivers\360AvFlt.sys (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\art.dat (16 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\MacroDef.enc (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\360avflt64.sys (2419 bytes)
%Program Files% (x86)\360\Total Security\deepscan\AVE\360ave_ex.def (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\somkernl.dll (27085 bytes)
%Program Files% (x86)\360\Total Security\360NetBase64.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\install.rdf (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\FeedBack.ini (263 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\360netd.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\DsRes64.dll (1438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\Sxin64.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\Sxin.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_medium.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sc.con (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\AVCheck.dll (2130 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\safemon\360SPTool.exe.locale (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\Qshieldz.dat (170 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\safemon.dll.locale (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\filemgr.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\ipc\ipcService.dll (3361 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHWatchdog.exe (1043 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\LiveUpdate360.exe (6582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\csp.dat (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\chrome\360webshield.exe.locale (15 bytes)
%Program Files% (x86)\360\Total Security\cacert.pem (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\FeedBack.ini (263 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\yhregd.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\filemon.dat (18 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\WscReg.exe (26008 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanproxy.dll (5928 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\SelfProtectAPI2.dll.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\wd.ini (7 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\udisk.locale (550 bytes)
%Program Files% (x86)\360\Total Security\safemon\router.ini (274 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\SelfProtectAPI2.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Sites64.dll (20376 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\scanstub.dll (1216 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr8.dat (2 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\360SafeCamera.tpi.locale (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus64.exe (10117 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\regmon.dat (46 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\udisk.locale (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\libdefa.dat (162 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\360SafeCamera.tpi.locale (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\SxWrapper.dll (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\filemon.dat (17 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\regmon.dat (44 bytes)
%Program Files% (x86)\360\Total Security\sweeper\TrashClean.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\scanproxy.dll (3361 bytes)
%Program Files% (x86)\360\Total Security\softmgr\360Downloads.ini (269 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\udisk.locale (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsconz.dat (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\safemon.dll.locale (19 bytes)
%Program Files% (x86)\360\Total Security\softmgr\stsuglist.dat (601 bytes)
%Program Files% (x86)\360\Total Security\FeedBack.exe (6841 bytes)
C:\Users\Public\Desktop\360 Total Security.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\deepscan\DsRes.dll (637 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libsdi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\appd.dll.locale (12 bytes)
%Program Files% (x86)\360\Total Security\deepscan\wifisafeEncrypt.js (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\dslw\dslw.dat (768 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\MiniUI.dll (9134 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\appd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\deepscan\sc.con (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360boxmain.exe (5580 bytes)
%Program Files% (x86)\360\Total Security\netmon\gameidentify.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\sweeper\SysSweeper.dat (727 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360Box.sys (1417 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\filemgr.dll.locale (11 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\UDiskScanEngine.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\ssr.dat (47 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\qutmipc.sys (185 bytes)
%Program Files% (x86)\360\Total Security\deepscan\Cloudsec3.dll (7385 bytes)
%Program Files% (x86)\360\Total Security\config\defaultskin\MiniUI.xml (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\feedback\FeedBack_theme.ui (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sndw.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\FsrMgr.dll (4112 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\deepscan\ssr.dat (48 bytes)
%Program Files% (x86)\360\Total Security\EfiProc.dll (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPIDRV.sys (1729 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\defaultskin\defaultskin.ui (198 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\QHSafeScanner.exe (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus.exe (7161 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\heavygate.dll (7402 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\drvmon.dat (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\PopSoftEng.dll (5139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\wduicfg.dat (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\EfiMon.sys (23 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\safemon\360SPTool.exe.locale (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\softmgr\safespeedboot.dat (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\I18N64.dll (969 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\libdefa.dat (160 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qex\qex.vdb.enc (4185 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\Sxin64.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\7z.dll (9721 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\appmon.dat (21 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\360ipc.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\writeable_test_495427.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\360procmon.dll.locale (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\ssr.dat (45 bytes)
%Program Files% (x86)\360\Total Security\LiveUpd360.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\SelfProtectAPI2.dll (3279 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\ipc\yhregd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\QHSafeScanner.exe (8221 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\acls.ini (1 bytes)
%Program Files% (x86)\360\Total Security\360P2SP.dll (5873 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\libleak.dat (46325 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360Base.dll (9004 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\wd.ini (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\image\toast_speed_veryfast.png (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\360NetBase.dll (1425 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\Safemon.dll.locale (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360leakfix\360leakfix_theme.ui (1887 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\sysfilerepS.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\udisk.locale (482 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\DsRes.dll (1146 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\ImAVEng.dll (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\appd.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\UDiskScanEngine.dll.locale (8 bytes)
%Program Files% (x86)\360\Total Security\safemon\iNetSafe.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus64.exe (7385 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\Uninstall.lnk (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\zh-CN\SysSweeper.ui.dat (601 bytes)
%Program Files% (x86)\360\Total Security\filemon\AVCheck.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\es\SysSweeper.ui.dat (125 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\theme.xml (63 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\360AntiHacker.dll (62 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360Quarant.dll (2105 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\deepscan\DsRes.dll (601 bytes)
%Program Files% (x86)\360\Total Security\deepscan\heavygate.dll (3073 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\AntiAdwa.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360SPTool.exe (2476 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\safemon\execrule.dat (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\appd.dll.locale (13 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\safemon\UDiskScanEngine.dll (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\360Verify.dll (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\deepscan\DsRes.dll (1655 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\UrlSettings.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360procmon.dll (3549 bytes)
%Program Files% (x86)\360\Total Security\safemon\7z.dll (7433 bytes)
%Program Files% (x86)\360\Total Security\safemon\WDSafeDown.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\dsws.dat (287 bytes)
%Program Files% (x86)\360\Total Security\config\newui\themes\default\360InternationTray\image\toast_speed_veryfast.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\regmon.dat (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360InternationTray\360InternationTray_theme.ui (186 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\SelfProtectAPI2.dll.locale (13 bytes)
%Program Files% (x86)\360\Total Security\deepscan\dsr.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\h_3.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\dlproc.dll (5955 bytes)
%Program Files% (x86)\360\Total Security\Safelive.dll (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\LibSDI.dat (81 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\ipc\360netd.dat (29 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\filemgr.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\ipc\yhregd.dll.locale (10 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\safemon\360procmon.dll.locale (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\safemon\udisk.locale (338 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360sandbox\360sandbox_theme.ui (268 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\LibSDI.dat (95 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\webprotection_firefox\chrome\content\browser.xul (560 bytes)
%Program Files% (x86)\360\Total Security\i18n\ru\libdefa.dat (673 bytes)
%Program Files% (x86)\360\Total Security\CleanPlus64.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\deepscan\360QuarantPlugin.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Safelive.dll (3935 bytes)
%Program Files% (x86)\360\Total Security\filemon\DataDriv.dat (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\appd.dll (7615 bytes)
%Program Files% (x86)\360\Total Security\filemon\fr5.dat (9 bytes)
%Program Files% (x86)\360\Total Security\ipc\X64For32Lib.dll (110 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\lang\hi\SysSweeper.ui.dat (1170 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\dsconz.dat (12 bytes)
%Program Files% (x86)\360\Total Security\360DeskAna64.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\filemgr.dll.locale (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\360netr.dat (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center\360 Total Security\360 Total Security.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\deepscan\dsurls.dat (844 bytes)
%Program Files% (x86)\360\Total Security\i18n\en\Dumpuper.exe.locale (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\Qshieldz.dat (673 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\cleancfg.dat (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360hipsPopWnd.dll (10184 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-TW\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\safemon.dll (11070 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wifisafeEncrypt.js (5 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libvi.dat (601 bytes)
%Program Files% (x86)\360\Total Security\config\lang\vi\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\safemon\chrome\360webshield.exe.locale (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\ipc\Sxin64.dll.locale (14 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\safemon\wd.ini (8 bytes)
%Program Files% (x86)\360\Total Security\ipc\appd.dll (5441 bytes)
%Program Files% (x86)\360\Total Security\safemon\acls.ini (1 bytes)
%Program Files% (x86)\360\Total Security\deepscan\BAPIDRV64.sys (857 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\360SkinView.exe (3349 bytes)
%Program Files% (x86)\360\Total Security\ipc\360Camera.sys (34 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\art.dat (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\QVM\360QVM.dll (6596 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\deepscan\ssr.dat (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\zh-CN\safemon\360procmon.dll.locale (97 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\yhregd.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\endata\lm_1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\QHActiveDefense.exe (6898 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\360procmon.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\AVE\360ave_ex.def (577 bytes)
%Program Files% (x86)\360\Total Security\leakrepair.dll (5441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\vi\safemon\360SafeCamera.tpi.locale (1 bytes)
%Program Files% (x86)\360\Total Security\config\lang\TR\SysSweeper.ui.dat (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\FileMgr.dll (4470 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\mui\en\Strings.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\tr\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\safemon\CameraProtect\CameraGuard\bkg\pic_01.jpg (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360safemonpro.tpi (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\vi\AntiAdwa.dll.locale (601 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\libaw.dat (9605 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\BAPIDRV64.sys (2116 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\ipc\Sxin.dll.locale (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\pt\safemon\Safemon.dll.locale (20 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\Dumpuper.exe (5146 bytes)
%Program Files% (x86)\360\Total Security\safemon\360UDisk.tpi (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\CleanPlus64.dll (2209 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\wdk.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\drvmon.dat (4 bytes)
%Program Files% (x86)\360\Total Security\i18n\pt\safemon\360SafeCamera.tpi.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\libvi.dat (130 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\ipc\NetDefender.dll.locale (15 bytes)
%Program Files% (x86)\360\Total Security\filemon\ptype.dat (2 bytes)
%Program Files% (x86)\360\Total Security\ipc\sbmon.dll (2469 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\ipc\NetDefender.dll (1921 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wificonfig\ra1001.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\wpz.dat (835 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\default_theme.ui (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\deepscan\dsr.dat (82 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libdefa.dat (1281 bytes)
%Program Files% (x86)\360\Total Security\i18n\es\ipc\appmon.dat (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\hi\safemon\wdk.ini (3 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\webprotection_firefox\plugins\nptswp.dll.locale (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\es\safemon\360procmon.dll.locale (101 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\libaw.dat (9605 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\deepscan\ssr.dat (32 bytes)
%Program Files% (x86)\360\Total Security\deepscan\WiFiSafe.dll (10177 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\filemon.dat (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\netmon\360GameIdentify.dll (2954 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\en\safemon\safemon.dll.locale (20 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-CN\safemon\SelfProtectAPI2.dll.locale (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\deepscan\qex\qex.vdb.enc (592 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\i18n\ru\ipc\appmon.dat (19 bytes)
%Program Files% (x86)\360\Total Security\deepscan\qutmload.dll (691 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\config\newui\themes\default\360AV\360AV_theme.ui (190 bytes)
%Program Files% (x86)\360\Total Security\i18n\tr\ipc\360netr.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\ipc\360ipc.dat (1 bytes)
%Program Files% (x86)\360\Total Security\i18n\zh-TW\safemon\udisk.locale (338 bytes)
%Program Files% (x86)\360\Total Security\i18n\hi\deepscan\dsurls.dat (844 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\filemon\fr1.dat (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\360_install_20150423064845_495427\temp_files\safemon\360AV.tpi (321 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QHSafeTray" = "%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe /start" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Find and delete all copies of the worm's file together with "autorun.inf" scripts on removable drives.
- Reboot the computer.
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 37484 | 37888 | 4.11399 | ab04b737e912b2d921facc6512684286 |
| .data | 45056 | 144 | 512 | 0.86365 | 3b4d640825fa0546a087a45d82fc4d7e |
| .rdata | 49152 | 24552 | 24576 | 4.99289 | c048b5754afd326ca2a4eabaaf948a46 |
| .bss | 73728 | 112596 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .idata | 188416 | 4960 | 5120 | 3.67966 | f869bd1dfb7c16e92b07aef7e161ae9f |
| .ndata | 196608 | 65536 | 1024 | 0 | 0f343b0931126a20f133d67c2b018a3b |
| .rsrc | 262144 | 84208 | 84480 | 3.77312 | a869ecee254cd015a2c70ca46ce4cfb8 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
| URL | IP |
|---|---|
| hxxp://www-google-analytics.l.google.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_started | |
| hxxp://www-google-analytics.l.google.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_second_screen | |
| hxxp://www-google-analytics.l.google.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_offer_yes | |
| hxxp://download.softobase.com/ru//Directx_9.10.11.exe | |
| hxxp://download.softobase.com/ru/360TotalSecurity_Rus_Setup_0001.exe | |
| hxxp://s.360safe.com/safei18n/ins.htm?mid=09bcd29b60133ba15b849679a9d82fa3&ver=6.2.0.1027&lan=en&os=6.1-x64&ch=softobase_ru&ue=1 | |
| hxxp://qup.cloud.os-lb.com/qconf.php | |
| hxxp://104.192.108.116/cloudquery.php | |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/f3d59eaa9ff33dcbe50abb4276fbe86c_7f60e69c8df5184d2425290206a842ea_5c78d14616e83859609ca3a719ba5701_08759c104a2519b794dbb88e67c68b5b.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/b0586730837afd39a4c6ffc29b8b45d1_0e20c81dbd120c83183c177cfc89a0cd_a8a404644af66d5edc3ddbf197bfa603_a0b0c1d9e2b22a2b18db00adfaf188b8_c60679ca1168c44c164f07248f20e5bc_729e30d5c7cc3017124cc6b758e3c18f_f2a5f9f80981ac71a5fed8321d0f97ed_771d63b6be5618a5a7348c591a6eaa8b_e6b21c42019a616ba330879cab91b21f_e2cbb6402ac6b292f2e8f47364289cee.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/c6cb4f5ac0255d2baf41678f26cd50cc_e9ae86455b04bf504ecbd7c7944b9dbe_7fdde18475dc134cace116c202eee2d4_351aaa705ad2bfe61d737e6c2ff59cb7_8e3f695edfee356c0ce44d45973e6e3d_10a33cc11d32c95ebe3dc53ebb04ca53_9bddd8965f0fb4f43008698df4c88648_64adc54c5e594f2dea16b70cc30c60e3_639d29e60ac1265ee915507a58eee764_619737941c6f039502af0ca22aef89a4.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/4ae7fb61ded98e1cd0fa51382739609d_eb6ffe3d9a8bc43b119f425d7455d531_3a4ecb93bee8365798b40edf1c7fd91e_4d46a68264b8919496d26d364d8090b6_36f661643ed70de2c3ba8953ff1e1413_b9ac2efa36cb97ec91388bc33ab41834_3f9d587294f714ec7225f558fb0188d4_1d9d050a761ca43372b982242d454a1d_92f9e3aa0878870a4141ec34bc6d5801_9c9cbe7e714bcd27ebada3be27f59997.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/dbbccf0284b1c6112444badae27b87c1_5f0a5b172d4b5ecc5b3ef0cc5474cd37_ad73e74d2e19934416da93519d7df2b1_fa5e8d8c25b5c5065a2dd11f06204c85_2b1338ddf314d8226e904876a3ee7080_07981a7a353d752cfb1592b50da561f5_8060a700fac6122047189ef371cd3f74_643bc87126cf236fc79dd6f724aca265_5ead54d5f96109bae4d9c930a8939abe_3de7aad99977dd3b7bce4d7903aaf9d3.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/7539e5c431f211952383e009cce4062d_db88b047a62996ecbdd46d4963a6e31c_8577fa6c6033344612199762bb9f103d_b38f46b78ddb8002e9f62beef6ad93f9_790208b89dfc8dc6a26482279ece0df5_fe000a5f0d9c756acaa12501852dd3e1_22738172936eb3c113317245ad15a3a9_e7ef487131e23bdeb1194f844474d8f1_81047bc4f848deb9c1e01d7e99ce85da_c89221d597d1b038b275e583c49aef33.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/9909aa216b30b502f677bfff05000b0e_8ecb89f3f07308b46e8f3b9910dc0f51_5da0bfb669c5f1fa42a938f8731a2ff5_4d5081f0e6ef496e640537ab0d892e92_396e96b0d6cf2047f661e847da722261_d4a64e1269957bfdf26df207f44924ff_405db178237b942c4b5871775daa9d37_95930fb68cca6ba86d1876431d0410a9_25decf1c6f9b4b7d68e04342781efe95_48db5a7174e85b83303b2e691959f20d.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/e6e862c79dc156d48370cc4f389eee28_58d21421ec10d7ec9ef08ce78a988b1e_8f166cecb19c47f41c45ed863de7b0d1_896ddf703e6e0c17d1fbf3fd2b467bcb_5ab2456234592215792583ee5ef9e433_74c7a7cd928fcedef39ccee1474ddb37_2e223e0dcce1b2ac068778ee37521487_90590ddf1137009e5d306a8fcbb9f5f5_a53cf4ce8dcc65dbd195aaf5769cd693_79a73367e8f15c93cdce7773eefc808b.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com.awsr53.qihucdn.com/qm/0cd47f5d563ba06a1e44716398931a08_4dec213c03a525d652460c0d5181cd45_4375cc87f7432f2774c519a50f5074df_e6f7ea0625257466991d27e0b8ac71cd_9e5615703c195167788ea46b1ed76600_3572385f0a757d33e2a9ee99a763834e_d7bee05e090c87a6b33bc2b8c77da29d_ae75251d6b6fe765d3979069dff3fbbd_b9dd248083413c0a205ba1803cf1710b_f7382d6e2985358f3ab826c871f5d968.html?lang=en | 54.76.174.118 |
| hxxp://54.76.137.169/cloudquery.php | |
| hxxp://www.google-analytics.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_second_screen | |
| hxxp://tconf.cloud.360safe.com/qconf.php | |
| hxxp://q.patch.360safe.com/qm/b0586730837afd39a4c6ffc29b8b45d1_0e20c81dbd120c83183c177cfc89a0cd_a8a404644af66d5edc3ddbf197bfa603_a0b0c1d9e2b22a2b18db00adfaf188b8_c60679ca1168c44c164f07248f20e5bc_729e30d5c7cc3017124cc6b758e3c18f_f2a5f9f80981ac71a5fed8321d0f97ed_771d63b6be5618a5a7348c591a6eaa8b_e6b21c42019a616ba330879cab91b21f_e2cbb6402ac6b292f2e8f47364289cee.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/9909aa216b30b502f677bfff05000b0e_8ecb89f3f07308b46e8f3b9910dc0f51_5da0bfb669c5f1fa42a938f8731a2ff5_4d5081f0e6ef496e640537ab0d892e92_396e96b0d6cf2047f661e847da722261_d4a64e1269957bfdf26df207f44924ff_405db178237b942c4b5871775daa9d37_95930fb68cca6ba86d1876431d0410a9_25decf1c6f9b4b7d68e04342781efe95_48db5a7174e85b83303b2e691959f20d.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/e6e862c79dc156d48370cc4f389eee28_58d21421ec10d7ec9ef08ce78a988b1e_8f166cecb19c47f41c45ed863de7b0d1_896ddf703e6e0c17d1fbf3fd2b467bcb_5ab2456234592215792583ee5ef9e433_74c7a7cd928fcedef39ccee1474ddb37_2e223e0dcce1b2ac068778ee37521487_90590ddf1137009e5d306a8fcbb9f5f5_a53cf4ce8dcc65dbd195aaf5769cd693_79a73367e8f15c93cdce7773eefc808b.html?lang=en | 54.76.174.118 |
| hxxp://www.google-analytics.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_offer_yes | |
| hxxp://q.patch.360safe.com/qm/dbbccf0284b1c6112444badae27b87c1_5f0a5b172d4b5ecc5b3ef0cc5474cd37_ad73e74d2e19934416da93519d7df2b1_fa5e8d8c25b5c5065a2dd11f06204c85_2b1338ddf314d8226e904876a3ee7080_07981a7a353d752cfb1592b50da561f5_8060a700fac6122047189ef371cd3f74_643bc87126cf236fc79dd6f724aca265_5ead54d5f96109bae4d9c930a8939abe_3de7aad99977dd3b7bce4d7903aaf9d3.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/f3d59eaa9ff33dcbe50abb4276fbe86c_7f60e69c8df5184d2425290206a842ea_5c78d14616e83859609ca3a719ba5701_08759c104a2519b794dbb88e67c68b5b.html?lang=en | 54.76.174.118 |
| hxxp://www.google-analytics.com/collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_started | |
| hxxp://q.patch.360safe.com/qm/7539e5c431f211952383e009cce4062d_db88b047a62996ecbdd46d4963a6e31c_8577fa6c6033344612199762bb9f103d_b38f46b78ddb8002e9f62beef6ad93f9_790208b89dfc8dc6a26482279ece0df5_fe000a5f0d9c756acaa12501852dd3e1_22738172936eb3c113317245ad15a3a9_e7ef487131e23bdeb1194f844474d8f1_81047bc4f848deb9c1e01d7e99ce85da_c89221d597d1b038b275e583c49aef33.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/0cd47f5d563ba06a1e44716398931a08_4dec213c03a525d652460c0d5181cd45_4375cc87f7432f2774c519a50f5074df_e6f7ea0625257466991d27e0b8ac71cd_9e5615703c195167788ea46b1ed76600_3572385f0a757d33e2a9ee99a763834e_d7bee05e090c87a6b33bc2b8c77da29d_ae75251d6b6fe765d3979069dff3fbbd_b9dd248083413c0a205ba1803cf1710b_f7382d6e2985358f3ab826c871f5d968.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/4ae7fb61ded98e1cd0fa51382739609d_eb6ffe3d9a8bc43b119f425d7455d531_3a4ecb93bee8365798b40edf1c7fd91e_4d46a68264b8919496d26d364d8090b6_36f661643ed70de2c3ba8953ff1e1413_b9ac2efa36cb97ec91388bc33ab41834_3f9d587294f714ec7225f558fb0188d4_1d9d050a761ca43372b982242d454a1d_92f9e3aa0878870a4141ec34bc6d5801_9c9cbe7e714bcd27ebada3be27f59997.html?lang=en | 54.76.174.118 |
| hxxp://q.patch.360safe.com/qm/c6cb4f5ac0255d2baf41678f26cd50cc_e9ae86455b04bf504ecbd7c7944b9dbe_7fdde18475dc134cace116c202eee2d4_351aaa705ad2bfe61d737e6c2ff59cb7_8e3f695edfee356c0ce44d45973e6e3d_10a33cc11d32c95ebe3dc53ebb04ca53_9bddd8965f0fb4f43008698df4c88648_64adc54c5e594f2dea16b70cc30c60e3_639d29e60ac1265ee915507a58eee764_619737941c6f039502af0ca22aef89a4.html?lang=en | 54.76.174.118 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /qm/9909aa216b30b502f677bfff05000b0e_8ecb89f3f07308b46e8f3b9910dc0f51_5da0bfb669c5f1fa42a938f8731a2ff5_4d5081f0e6ef496e640537ab0d892e92_396e96b0d6cf2047f661e847da722261_d4a64e1269957bfdf26df207f44924ff_405db178237b942c4b5871775daa9d37_95930fb68cca6ba86d1876431d0410a9_25decf1c6f9b4b7d68e04342781efe95_48db5a7174e85b83303b2e691959f20d.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
<<< skipped >>>
POST /cloudquery.php HTTP/1.1
User-Agent: Post_Multipart
Host: 54.76.137.169
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 978
Content-Type: multipart/form-data; boundary=----------------------------49d1b5b13606
------------------------------49d1b5b13606
Content-Disposition: form-data; name="m"
..@Bs.....!.6 .d......-@....L.7..u...,O.....c&g.K..m.(.lo`.'
........6N.>.G.&......f...../}EQ.'...cBC...c................R..S..P~|..xi...67...N./.M..'...B.K...-?...0|..8x...s..?.|..S....'....t........F...6...X\.`;.!..*Mf.)..~I.kN.o.i..~.<..d2...'q..7n.....G.d.....Q...q.D.;..{... _s^.W.Bb'. .Ew..z.5.... ...........].....h.Z.....#..... ..3[...\....p...v........\..)v.5..1.....0.XT..,q.....|.........{:..5.......R_)......J\._..k.)l38..,V........tph.r....p.s.X},..E4....K.....lT[S......b.N..%..t~=..K..bD$*T.Y.'Q..u
.zQ.."T...n...X.75S.<..b..k.."m..P..Gz.)......$...k..B...a.G......*A..z....S..@...X...*T.K.X..`....XyT@k..g...9 ....I$/...EufO{..s,.....`........Tn.Z...98.A...I;.....z".C........Ll.4...q.`.]..2'..G.ja..|..V...!.A.I.5.zl..".>.....Yi..'...m.U..0m..a8.J1y.5.m.|.....z.1..."..K.......:._......*..m.rTG_NK.Z..".$.e.........
------------------------------49d1b5b13606--
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:52:05 GMT
Content-Type: text/plain
Content-Length: 208
Connection: close
Vary: Accept-Encoding
....Bs......P.....Jo.N..^d.nj.......m..a....K..... >.Q.{.y`%1...r.;.......>..J^.9........8l,v....<.R...R.T.U.....T...U...P.W.......T...S...T...R...........T.P...S...........T.?.....................?.?.....<.<..
GET /qm/7539e5c431f211952383e009cce4062d_db88b047a62996ecbdd46d4963a6e31c_8577fa6c6033344612199762bb9f103d_b38f46b78ddb8002e9f62beef6ad93f9_790208b89dfc8dc6a26482279ece0df5_fe000a5f0d9c756acaa12501852dd3e1_22738172936eb3c113317245ad15a3a9_e7ef487131e23bdeb1194f844474d8f1_81047bc4f848deb9c1e01d7e99ce85da_c89221d597d1b038b275e583c49aef33.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:50 GMT
Content-Type: text/xml
Content-Length: 2695
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml><url md5="b38f46b78ddb8002e9f62beef6ad93f9"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/9/3/2/932772EB-1CB6-4231-B93B-3720A2D2680C/Windows6.1-KB2968294-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2968294-x64.msu|b9=1|b3=b38f46b78ddb8002e9f62beef6ad93f9|p2=212f4b9ded624a282f0d8120e8045057c1cc1232|b2=1397666|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="790208b89dfc8dc6a26482279ece0df5"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/9/B/6/9B6373AF-6E54-4972-BB2B-99048F023632/Windows6.1-KB2972100-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2972100-x64.msu|b9=1|b3=790208b89dfc8dc6a26482279ece0df5|p2=dba40228571104537e6d577390fb1bacb91cec24|b2=2135528|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="fe000a5f0d9c756acaa12501852dd3e1"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/1/5/E/15E6F381-A764-457D-A9BF-D4DF22665F1D/NDP40-KB2972106-x64.exe;http://dl.patch.360safe.com/leak/ty/NDP40-KB2972106-x64.exe|b9=1|b3=fe000a5f0d9c756acaa12501852dd3e1|p2=9e48abec988f0ded037283d862e38e16436e9d3c|b2=4013232|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="22738172936eb3c113317245ad15a3a9"><link>pdown://http://qh.dlservice.microsoft.com/download/C/3/E/C3E70E3A-E9F9-4BC2-8452-FAC21EDA04B4/Windows6.1-KB2977292-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2977292-x64.msu|b9=1|b3=22738172936eb3c113
<<< skipped >>>
GET /qm/dbbccf0284b1c6112444badae27b87c1_5f0a5b172d4b5ecc5b3ef0cc5474cd37_ad73e74d2e19934416da93519d7df2b1_fa5e8d8c25b5c5065a2dd11f06204c85_2b1338ddf314d8226e904876a3ee7080_07981a7a353d752cfb1592b50da561f5_8060a700fac6122047189ef371cd3f74_643bc87126cf236fc79dd6f724aca265_5ead54d5f96109bae4d9c930a8939abe_3de7aad99977dd3b7bce4d7903aaf9d3.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:49 GMT
Content-Type: text/xml
Content-Length: 49
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml></xml>..
GET /qm/4ae7fb61ded98e1cd0fa51382739609d_eb6ffe3d9a8bc43b119f425d7455d531_3a4ecb93bee8365798b40edf1c7fd91e_4d46a68264b8919496d26d364d8090b6_36f661643ed70de2c3ba8953ff1e1413_b9ac2efa36cb97ec91388bc33ab41834_3f9d587294f714ec7225f558fb0188d4_1d9d050a761ca43372b982242d454a1d_92f9e3aa0878870a4141ec34bc6d5801_9c9cbe7e714bcd27ebada3be27f59997.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:49 GMT
Content-Type: text/xml
Content-Length: 3083
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml><url md5="4ae7fb61ded98e1cd0fa51382739609d"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/C/C/A/CCA7CA55-9109-42B0-908C-FFA419E4792E/NDP40-KB2978125-x64.exe;hXXp://dl.patch.360safe.com/leak/ty/NDP40-KB2978125-x64.exe|b9=1|b3=4ae7fb61ded98e1cd0fa51382739609d|p2=6ce8b5a8c7117ced5200728b10ce0bbd118198ed|b2=2076344|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="eb6ffe3d9a8bc43b119f425d7455d531"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/C/6/9/C6997FC5-FBD6-40F6-AA11-3ABBB25B6DA4/Windows6.1-KB2991963-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2991963-x64.msu|b9=1|b3=eb6ffe3d9a8bc43b119f425d7455d531|p2=2d1a373da3175f43c702b83b5f2402415e9a2715|b2=1294527|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="3a4ecb93bee8365798b40edf1c7fd91e"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/8/2/8/828063ED-DEF2-415A-B39F-F0CB06C4BDE4/Windows6.1-KB2992611-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2992611-x64.msu|b9=1|b3=3a4ecb93bee8365798b40edf1c7fd91e|p2=c494fce3ed8d648614ed49d367426b7839e99ccf|b2=5479321|h3=60|h7=15|b5=vulnerability fix</link></url><url md5="4d46a68264b8919496d26d364d8090b6"><link>pdown://http://qh.dlservice.microsoft.com/download/0/9/0/090571D8-1045-4032-9710-96C8847D2F5B/Windows6.1-KB2993958-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2993958-x64.msu|b9=1|b3=4d46a68264b8919496
<<< skipped >>>
POST /qconf.php HTTP/1.1
User-Agent: Post_Multipart
Host: tconf.cloud.360safe.com
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 68
Content-Type: application/x-www-form-urlencoded
....../.....f.....)7.)..l.........0S.bb..o....-..d2S..]6o..|.C.M.u
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:50:46 GMT
Content-Type: text/plain
Content-Length: 36
Connection: close
Vary: Accept-Encoding
......B.pc..%p....jC...]....-...S..^..
GET /qm/f3d59eaa9ff33dcbe50abb4276fbe86c_7f60e69c8df5184d2425290206a842ea_5c78d14616e83859609ca3a719ba5701_08759c104a2519b794dbb88e67c68b5b.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:49 GMT
Content-Type: text/xml
Content-Length: 49
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml></xml>..
GET /safei18n/ins.htm?mid=09bcd29b60133ba15b849679a9d82fa3&ver=6.2.0.1027&lan=en&os=6.1-x64&ch=softobase_ru&ue=1 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)
Host: s.360safe.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Server: nginx/1.0.12
Date: Thu, 23 Apr 2015 03:49:13 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Sun, 04 Jan 2015 10:43:27 GMT
Connection: close
Accept-Ranges: bytes
POST /qconf.php HTTP/1.1
User-Agent: Post_Multipart
Host: tconf.cloud.360safe.com
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 68
Content-Type: application/x-www-form-urlencoded
....../.....1...IX.h....i...........AT...-.4.*.....u.........}..2.3
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:52:04 GMT
Content-Type: text/plain
Content-Length: 36
Connection: close
Vary: Accept-Encoding
......B.pc....;.zE.2.6.V.lN...C.......
GET /qm/0cd47f5d563ba06a1e44716398931a08_4dec213c03a525d652460c0d5181cd45_4375cc87f7432f2774c519a50f5074df_e6f7ea0625257466991d27e0b8ac71cd_9e5615703c195167788ea46b1ed76600_3572385f0a757d33e2a9ee99a763834e_d7bee05e090c87a6b33bc2b8c77da29d_ae75251d6b6fe765d3979069dff3fbbd_b9dd248083413c0a205ba1803cf1710b_f7382d6e2985358f3ab826c871f5d968.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:50 GMT
Content-Type: text/xml
Content-Length: 3923
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml><url md5="0cd47f5d563ba06a1e44716398931a08"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/D/E/D/DED978C0-ED29-4240-9DCE-038107D70142/Windows6.1-KB2868038-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2868038-x64.msu|b9=1|b3=0cd47f5d563ba06a1e44716398931a08|p2=3f5f29645c1123bd49e89095152be113c3adc07d|b2=415822|h3=60|h7=3|p4=3600|b5=vulnerability fix</link></url><url md5="4dec213c03a525d652460c0d5181cd45"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/B/9/6/B96CA2A3-6D3D-4089-AB09-69A383ACACF5/Windows6.1-KB2862152-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2862152-x64.msu|b9=1|b3=4dec213c03a525d652460c0d5181cd45|p2=9d9357cf1bac89acc0aaed880e8bb8ceeff2d82c|b2=1226216|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="4375cc87f7432f2774c519a50f5074df"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/8/6/7/867F988B-F418-4E8A-9CAD-0373A56FC9E2/Windows6.1-KB2868626-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2868626-x64.msu|b9=1|b3=4375cc87f7432f2774c519a50f5074df|p2=78f3fc29be51c28aa699190e8caa2252b7a1b836|b2=2169972|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="e6f7ea0625257466991d27e0b8ac71cd"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/7/4/D/74D7C7A7-1D28-48D2-AF3B-BCCB9DFB75CE/Windows6.1-KB2868725-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2868725-x6
<<< skipped >>>
POST /qconf.php HTTP/1.1
User-Agent: Post_Multipart
Host: tconf.cloud.360safe.com
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 68
Content-Type: application/x-www-form-urlencoded
....../.....1...IX.h....i...........AT...-.4.*.....u.........}..2.3
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:50:47 GMT
Content-Type: text/plain
Content-Length: 508
Connection: close
Vary: Accept-Encoding
.......6.S...../....jQc.'d....[.M..*..$..n.........t|...V..........u...>....p....(...w..@f..`.~..?.R5-.]..(..`.b.[bw....2.b=X...&.G...7Z...d.H.....F.:v.....yo........ ...b..P.}-...d.Pz.w.b..<.]un![.pJ...@...@N.h.,..Bz....h LQ...m.O..H(.e....6..L.0.....y.tP.J... p..I..:.<^.G..hnG...{eK.Aj.....o...."V...Pe[%...|7z.....:.t@........Q.oD..)...........q .x.;.g6$../.\.e..."....)|.`w........s.....W.\16=......-.....nlx...7q.......#...Lq......j.-..-G$..d..@G.p(6V .w.D?4...VZG.....m1...y.#..t..gx....R}C.f4.Y.v.d....
POST /cloudquery.php HTTP/1.1
User-Agent: Post_Multipart
Host: 54.76.137.169
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 1058
Content-Type: multipart/form-data; boundary=----------------------------349cf2984a14
------------------------------349cf2984a14
Content-Disposition: form-data; name="m"
...Bs.....|;.\~...u..$.S'|/.....=>.%.^..p|K.....\.d...RR....>n^G3I..f..1.t.'.|.x....8s..[.}/@..?B..5l<..N.:9.4=:.v..d.(^.hsTm.....|......7...:~I...D.<..X @.1.E.x..U.N.x...|.,../...?........l..Q:..v-..]._..<.A-..........5.HH LM..U.......Lz<v.....:...5Q/...^...O.X.oNh..1..:.6..,{M.NV. x.(..c..n.......3......4....o.6W...N?,..}.......!.t. ...M.......h6......q..q..wb~E#i....zV.5...&...KP...R..$t.d..VC..........W..e...l.......(.$.~"..U.....*...^.*x.j.......(}.M.............@Tp...S....s......\......Y..@^.6.u.g.{*.b.S;.j...8.y#*$X7....=[.......,...r.Y...c....51....!.bs.8.j.. ...)..oJ...-qE....,O..Z'jz...P.M!..3._~.kwkZ......?_(l7..`0....i....{..........-Z3|{..#Y..Z..y..Fe.26l.w....WF.e(...-.dN..o..
.0..{.u...c.&...[9/I..!G....P.V.....H.q5.....A.m.Bw.....'k.......$...bl..[W..:.2'3.....A..:.J.o.....W7.....@!h'.*..D..)...({.v..U.V.)U....rQU%..Z..#:.#...9.....El.I...`....a..cl....-a5..ch,Mp8Y..{0H\[...E..1K..
------------------------------349cf2984a14--
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:52:05 GMT
Content-Type: text/plain
Content-Length: 297
Connection: close
Vary: Accept-Encoding
....Bs......P.-Z...A.K..q..>....Hb..l......).[..2C~.I..&n.........qf.3F.x.....P@.3..7%E.w.e.h....<.R...T.R.......T...P...T.W...P.....P.R...P.S.S.....S.....W.R.....S...W...T.S.?...................?.?w.:.5..Y.E.Z...Y.B.F.Y.S.E..w./.).z...:.w.....w.-.*.z...:.q.....v.....z./...v.6.3.u...(.q..?.?.?.;...
POST /cloudquery.php HTTP/1.1
User-Agent: Post_Multipart
Host: 104.192.108.116
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 410
Content-Type: multipart/form-data; boundary=----------------------------f4eba8e9cbe1
------------------------------f4eba8e9cbe1
Content-Disposition: form-data; name="m"
...Au.....7..........Um...3k...B.1F.Bb.8.....Uwn.{uH/..<...."Z.....0.b.....'......?,H..eb....[....GR.}.g....K...eN.j.q...A/.l..D.B...o...o./..d. Gk.l.x.....>6..=N..`Y.F....yV.B..(..xc..........D.....Q..o......p....i.yA..=E '.M.$1V..........9..G_:......s8...^2.....V)_..X
------------------------------f4eba8e9cbe1--
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:50:47 GMT
Content-Type: text/plain
Content-Length: 181
Connection: close
Vary: Accept-Encoding
....Au......PVC%...R.........u.....v.*Y..w.*b\.....Z...!.=..5<...&m.=..h......B..................<.R.......................................?.?.?.?.?.?.?.~.L.[...\.....L.Q...?.?.?.;...
GET /ru//Directx_9.10.11.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: download.softobase.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Thu, 23 Apr 2015 03:48:26 GMT
Content-Type: application/octet-stream
Content-Length: 100340480
Last-Modified: Wed, 05 Sep 2012 12:37:40 GMT
Connection: keep-alive
ETag: "50474794-5fb1300"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*............................d.............@..............................................@..............................V.... ...Z......................d...................................................................................CODE................................ ..`DATA................................@...BSS......................................idata..V...........................@....tls.....................................rdata..............................@..P.reloc..d...........................@..P.rsrc....Z... ...\..................@..P.............0......................@..P..................................................................................................................................................................@...Byte............@...Stringl.@.............................l.@.........,.@.8.@.<.@.@.@.4.@..-@.,-@.h-@..TObject.% .A....%..A....%..A....%..A....%..A....%..A....%,.A....%..A....%..A....%..A....%..A....%..A....%<.A....%8.A....%4.A....%..A....%H.A....%D.A....%..A....%..A...S........T......D$,.t...\$0....D[....%..A....%..A....%..A....%..A....%..A....%..A....%..A....%..A...S......A..;.uYhD...j.......D$..|$..u.3...$.P.D$.....A....D$....A.3......L$..T...T$..T$......T$...@..du....D$..D$......D$...$..$...
<<< skipped >>>
GET /ru/360TotalSecurity_Rus_Setup_0001.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: download.softobase.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.6.2
Date: Thu, 23 Apr 2015 03:48:37 GMT
Content-Type: application/octet-stream
Content-Length: 33607288
Last-Modified: Thu, 09 Apr 2015 02:28:49 GMT
Connection: keep-alive
ETag: "5525e3e1-200ce78"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............km..km..km..$...km......km.....gkm..9...km......km......km......km..kl..im......km..9...km......km.Rich.km.........PE..L...cH.U............................ld............@..........................@.......*....@.....................................T.......tK................... ...... .......................x.......0...@...............@.......@....................text............................... ..`.rdata..~1.......2..................@..@.data............n..................@....tls.................P..............@....rsrc...tK.......L...R..............@..@.reloc....... ......................@..B..................................................................................................................................................................................................................................................................................................X.I...........V....X.I.......D$..t.V..........^................L$...v$.D$..T$.V........W..........f.._..^..D$..................D$..L$..T$.V.t$.PQRV..........^................j.h.aI.d.....PQV.`.L.3.P.D$.d........t$......3..D$..N.....I.j..A..A.....P.A..D$$P........L$.d......Y^............D$.VP...........I...^..........V......I..~$.r..F.P.X......3..F$.....F .F...^.d.................j.h.aI.d.....PQV.`.L.3.P.D$.d........t$..K...3..D$..N...`?J.j..A..A.....P.A..D$$P........L$.d......Y^............y$.r..A...A....
<<< skipped >>>
POST /qconf.php HTTP/1.1
User-Agent: Post_Multipart
Host: tconf.cloud.360safe.com
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 68
Content-Type: application/x-www-form-urlencoded
....../.....1...IX.h....i...........AT...-.4.*.....u.........}..2.3
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:52:04 GMT
Content-Type: text/plain
Content-Length: 36
Connection: close
Vary: Accept-Encoding
......B.pc....;.zE.2.6.V.lN...C.......
POST /qconf.php HTTP/1.1
User-Agent: Post_Multipart
Host: tconf.cloud.360safe.com
Accept: */*
Pragma: no-cache
X-360-Cloud-Security-Desc: Scan Suspicious File
x-360-ver: 4
Content-Length: 68
Content-Type: application/x-www-form-urlencoded
....../.....f.....)7.)..l.........0S.bb..o....-..d2S..]6o..|.C.M.u
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:50:47 GMT
Content-Type: text/plain
Content-Length: 508
Connection: close
Vary: Accept-Encoding
.........{........L.;.c%.|...vK.......czWj.....[E.V.Us@.db.]~.,.....K...U.5U.?...}....M.d../.Fd*s$y..0..1}.H4..L....fS..n.UIb.L 9&......PK......$.v.......,.vM.....)!........mn.1H.....@M....nu.7E1....;.....9Q...#.x.t..5..W...D.\..)......m.%.>.......D..x...%_M.N...qD..G`.T...rB..8_..............f~k.......Rs@...._d...6.....x.O(By.!.... ......m.c|c..\.Zx..>.(,.).n6...z.;T?xq.....7.....A.....7.V....`.il.`F`..-;X..2..>Rw.e.....\.#E9.....QW.?..1..y3z{..m.....*@...M...c5.>.zp..i.\..f..._..d.....z4.:.W...^.$......
GET /qm/e6e862c79dc156d48370cc4f389eee28_58d21421ec10d7ec9ef08ce78a988b1e_8f166cecb19c47f41c45ed863de7b0d1_896ddf703e6e0c17d1fbf3fd2b467bcb_5ab2456234592215792583ee5ef9e433_74c7a7cd928fcedef39ccee1474ddb37_2e223e0dcce1b2ac068778ee37521487_90590ddf1137009e5d306a8fcbb9f5f5_a53cf4ce8dcc65dbd195aaf5769cd693_79a73367e8f15c93cdce7773eefc808b.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:50 GMT
Content-Type: text/xml
Content-Length: 3914
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml><url md5="e6e862c79dc156d48370cc4f389eee28"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/7/D/C/7DC58284-AFC4-4122-A89D-F1E8B299C456/Windows6.1-KB2847927-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2847927-x64.msu|b9=1|b3=e6e862c79dc156d48370cc4f389eee28|p2=88356fddfec452ed7f91728f52b20eaeb2975a28|b2=1668392|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="58d21421ec10d7ec9ef08ce78a988b1e"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/E/8/2/E8245CAE-CA46-42AA-BA0B-F3AA49C58DBA/Windows6.1-KB2862966-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2862966-x64.msu|b9=1|b3=58d21421ec10d7ec9ef08ce78a988b1e|p2=37e84cc30f4d5aa824d4ea4e7fe8162873fa8753|b2=2332207|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="8f166cecb19c47f41c45ed863de7b0d1"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/5/E/4/5E40CC10-B3BA-4344-ACE9-C321381C6E06/NDP40-KB2840628-v2-x64.exe;hXXp://dl.patch.360safe.com/leak/ty/NDP40-KB2840628-v2-x64.exe|b9=1|b3=8f166cecb19c47f41c45ed863de7b0d1|p2=45b0d7127e349cd5b608fdfa62dd23c64e3f7c01|b2=18157704|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="896ddf703e6e0c17d1fbf3fd2b467bcb"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/D/C/C/DCCDA3B5-a8fcbb9f5f5"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/B/4/B/B4B92AF3-413E-4BCC-93A9-B78E02793B3F/
<<< skipped >>>
GET /collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_started HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.google-analytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Thu, 16 Apr 2015 23:35:36 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 533547
Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gif..Date: Thu, 16 Apr 2015 23:35:36 GMT..Server: Golfe2..Content-Length: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate..Age: 533547..Alternate-Protocol: 80:quic,p=1..GIF89a.............,...........D..;....
GET /collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_second_screen HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.google-analytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Thu, 16 Apr 2015 23:35:36 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 533563
Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gif..Date: Thu, 16 Apr 2015 23:35:36 GMT..Server: Golfe2..Content-Length: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate..Age: 533563..Alternate-Protocol: 80:quic,p=1..GIF89a.............,...........D..;....
GET /collect?v=1&tid=UA-54698389-1&cid=4001577&t=pageview&dp=/softobase_wrapper_offer_yes HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.google-analytics.com
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Pragma: no-cache
Expires: Mon, 07 Aug 1995 23:30:00 GMT
Access-Control-Allow-Origin: *
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Date: Thu, 16 Apr 2015 23:35:36 GMT
Server: Golfe2
Content-Length: 35
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 533570
Alternate-Protocol: 80:quic,p=1
GIF89a.............,...........D..;HTTP/1.1 200 OK..Pragma: no-cache..Expires: Mon, 07 Aug 1995 23:30:00 GMT..Access-Control-Allow-Origin: *..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gif..Date: Thu, 16 Apr 2015 23:35:36 GMT..Server: Golfe2..Content-Length: 35..Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate..Age: 533570..Alternate-Protocol: 80:quic,p=1..GIF89a.............,...........D..;..
GET /qm/b0586730837afd39a4c6ffc29b8b45d1_0e20c81dbd120c83183c177cfc89a0cd_a8a404644af66d5edc3ddbf197bfa603_a0b0c1d9e2b22a2b18db00adfaf188b8_c60679ca1168c44c164f07248f20e5bc_729e30d5c7cc3017124cc6b758e3c18f_f2a5f9f80981ac71a5fed8321d0f97ed_771d63b6be5618a5a7348c591a6eaa8b_e6b21c42019a616ba330879cab91b21f_e2cbb6402ac6b292f2e8f47364289cee.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:49 GMT
Content-Type: text/xml
Content-Length: 49
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml></xml>..
GET /qm/c6cb4f5ac0255d2baf41678f26cd50cc_e9ae86455b04bf504ecbd7c7944b9dbe_7fdde18475dc134cace116c202eee2d4_351aaa705ad2bfe61d737e6c2ff59cb7_8e3f695edfee356c0ce44d45973e6e3d_10a33cc11d32c95ebe3dc53ebb04ca53_9bddd8965f0fb4f43008698df4c88648_64adc54c5e594f2dea16b70cc30c60e3_639d29e60ac1265ee915507a58eee764_619737941c6f039502af0ca22aef89a4.html?lang=en HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Host: q.patch.360safe.com
Accept: */*
Connection: Keep-Alive
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.2.9
Date: Thu, 23 Apr 2015 03:50:49 GMT
Content-Type: text/xml
Content-Length: 2005
Connection: close
<?xml version="1.0" encoding="utf-8"?><xml><url md5="c6cb4f5ac0255d2baf41678f26cd50cc"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/D/4/3/D43DD544-D69D-475B-9769-82BEDA1EC706/IE10-Windows6.1-KB2909210-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/IE10-Windows6.1-KB2909210-x64.msu|b9=1|b3=c6cb4f5ac0255d2baf41678f26cd50cc|p2=b565da99f504e4a622a611b9740beabe11aaddf7|b2=1001760|h3=60|h7=3|p4=3600|b5=vulnerability fix</link></url><url md5="e9ae86455b04bf504ecbd7c7944b9dbe"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/A/2/6/A26B576B-6573-499D-9DB0-31C42FC2A1DC/Windows6.1-KB2911501-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2911501-x64.msu|b9=1|b3=e9ae86455b04bf504ecbd7c7944b9dbe|p2=156852756d587f7f27aa8c9f979cb71b69dc2bd2|b2=796370|h3=60|h7=3|p4=3600|b5=vulnerability fix</link></url><url md5="7fdde18475dc134cace116c202eee2d4"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/A/E/D/AEDDD34E-EB10-4D54-9B68-250667EF7A8B/Windows6.1-KB2912390-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1-KB2912390-x64.msu|b9=1|b3=7fdde18475dc134cace116c202eee2d4|p2=203a1f438914f5f26ec02e0672a1585db95a924f|b2=3153869|h3=60|h7=7|p4=7200|b5=vulnerability fix</link></url><url md5="351aaa705ad2bfe61d737e6c2ff59cb7"><link>pdown://hXXp://qh.dlservice.microsoft.com/download/C/7/7/C77BDB45-54E4-485E-82EB-2F424113AA12/Windows6.1-KB2871997-v2-x64.msu;hXXp://dl.patch.360safe.com/leak/win7/Windows6.1
<<< skipped >>>
POST /cloudquery.php HTTP/1.1
Content-Type: multipart/form-data; boundary=---------------------------riB5lWb2zKNzPDqv52lk
Accept-Encoding: gzip
Host: 104.192.108.116
Content-Length: 424
Pragma: no-cache
Connection: Keep-Alive
x-360-ver: 4
-----------------------------riB5lWb2zKNzPDqv52lk
Content-Disposition: form-data; name="m"
...Au.....7..........Um...3k...B.1F.Bb.8.....Uwn.{uH/..<...."Z.....0.b.....'......?,H..eb....[....GR.}.g....K...eN.j.q...A/.l..D.B...o...o./..d. Gk.l.x.....>6..=N..`Y.F....yV.B..(..xc..........D.....Q..o......p....i.yA..=E '.M.$1V..........9..G_:......s8...^2.....V)_..X
-----------------------------riB5lWb2zKNzPDqv52lk--
HTTP/1.1 200 OK
Server: nginx/0.6.39
Date: Thu, 23 Apr 2015 03:50:47 GMT
Content-Type: text/plain
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Content-Encoding: gzip
a..............a4...baX.X.... .....z..h..e....?..w....O..IiE../..J......]Q"\..;l..2.....Z......?.......}../.f/..g.......f.o.?h9."6<.}..l.E...../............v7.#.=V ;p=.l................0..
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
DXSETUP.exe_1376:
.text
.text
`.data
`.data
.rsrc
.rsrc
@.reloc
@.reloc
%s %s: %s: (null)
%s %s: %s: (null)
%s %s: %s: %s
%s %s: %s: %s
%s%s%s
%s%s%s
Logs\DirectX.log
Logs\DirectX.log
DXSETUP_DPF(): GetWindowsDirectory() failed.
DXSETUP_DPF(): GetWindowsDirectory() failed.
Logs\DXError.log
Logs\DXError.log
%s(): %s
%s(): %s
DXSError(): FormatMessage() failed, error = %d.
DXSError(): FormatMessage() failed, error = %d.
(0x%x)
(0x%x)
%s(): %s failed.
%s(): %s failed.
%s(): %s failed, error = %d.
%s(): %s failed, error = %d.
%s(): %s failed, error = 0x%x.
%s(): %s failed, error = 0x%x.
module: %s(%s), file: %s, line: %d, function: %s
module: %s(%s), file: %s, line: %d, function: %s
[%s %s]
[%s %s]
/windowsupdate
/windowsupdate
Unable to load %s.
Unable to load %s.
e:\bt\193462\setup\deliverables\dsetup\inc\dsinline.h
e:\bt\193462\setup\deliverables\dsetup\inc\dsinline.h
Module: %s, Function: %s
Module: %s, Function: %s
advpack.dll
advpack.dll
GetFileVersionInfoBlock(): %s does not have version information.
GetFileVersionInfoBlock(): %s does not have version information.
GetFileVersionInfoBlock(): Unable to get FileVersionInfoSize, file: %s, reason: %d.
GetFileVersionInfoBlock(): Unable to get FileVersionInfoSize, file: %s, reason: %d.
RegCloseKey()
RegCloseKey()
e:\bt\193462\setup\deliverables\dxsetup\dxsetup.cpp
e:\bt\193462\setup\deliverables\dxsetup\dxsetup.cpp
RegCreateKeyEx()
RegCreateKeyEx()
RegOpenKeyEx()
RegOpenKeyEx()
RegCloseKey().
RegCloseKey().
Unable to create path string, %s%s.
Unable to create path string, %s%s.
DXSetup: GetRequiredDiskSpaceFromLog(): GetWindowsDirectory() failed.
DXSetup: GetRequiredDiskSpaceFromLog(): GetWindowsDirectory() failed.
String ID: %d
String ID: %d
MsgBox
MsgBox
Unable to find %s
Unable to find %s
Unable to find %s.
Unable to find %s.
dsetup.dll
dsetup.dll
dsetup32.dll
dsetup32.dll
\dsetup32.dll
\dsetup32.dll
\dsetup.dll
\dsetup.dll
Unable to copy string %s.
Unable to copy string %s.
CommandLine: %s
CommandLine: %s
dxntunp.inf
dxntunp.inf
directx.inf
directx.inf
dxnt.cab
dxnt.cab
directx.cab
directx.cab
Module: dsetup.dll
Module: dsetup.dll
This version of DirectX is not compatible with WindowsNT 4.0.
This version of DirectX is not compatible with WindowsNT 4.0.
Invalid command line switch, using command ID %d without flat image.
Invalid command line switch, using command ID %d without flat image.
DSetupCallback(): Phase = %d, Steps = %d
DSetupCallback(): Phase = %d, Steps = %d
e:\bt\193462\setup\deliverables\dxsetup\psheets.cpp
e:\bt\193462\setup\deliverables\dxsetup\psheets.cpp
e:\bt\193462\setup\deliverables\dxsetup\psheets.h
e:\bt\193462\setup\deliverables\dxsetup\psheets.h
\ntkrnlpa.exe
\ntkrnlpa.exe
comctl32.dll version: %d.d.d.d
comctl32.dll version: %d.d.d.d
\comctl32.dll
\comctl32.dll
Win95(): This platform is not supported.
Win95(): This platform is not supported.
e:\bt\193462\setup\deliverables\dxsetup\utils.cpp
e:\bt\193462\setup\deliverables\dxsetup\utils.cpp
GetProcessWindowStation
GetProcessWindowStation
operator
operator
DXSETUP.pdb
DXSETUP.pdb
t%SPh
t%SPh
u9SShp
u9SShp
u.Sj0jr
u.Sj0jr
RegCloseKey
RegCloseKey
RegCreateKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExA
ADVAPI32.dll
ADVAPI32.dll
GetWindowsDirectoryA
GetWindowsDirectoryA
KERNEL32.dll
KERNEL32.dll
GDI32.dll
GDI32.dll
EnumWindows
EnumWindows
ExitWindowsEx
ExitWindowsEx
GetAsyncKeyState
GetAsyncKeyState
USER32.dll
USER32.dll
VERSION.dll
VERSION.dll
COMCTL32.dll
COMCTL32.dll
GetCPInfo
GetCPInfo
GetProcessHeap
GetProcessHeap
C:\Windows\Logs\DirectX.log
C:\Windows\Logs\DirectX.log
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DXSETUP.exe
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\setup.tmp\DXSETUP.exe
k2v_.mX0q[,hT9
k2v_.mX0q[,hT9
|/oZ/nY-kV.mX0q[/oZ0r\2u_2v_5}e6
|/oZ/nY-kV.mX0q[/oZ0r\2u_2v_5}e6
)`N*dQ,gS/nY/nY/oZ/oZ/nY0q[-jV-kV.mXO
)`N*dQ,gS/nY/nY/oZ/oZ/nY0q[-jV-kV.mXO
?3&YH0q[0q[0q[/nY/nY.mX.mX.mX-jV-jV-kV-kV*dQI
?3&YH0q[0q[0q[/nY/nY.mX.mX.mX-jV-jV-kV-kV*dQI
|||}}}~~~
|||}}}~~~
|||^^^{{{
|||^^^{{{
version="1.0.0.0"
version="1.0.0.0"
name="Microsoft.DirectX.Setup"
name="Microsoft.DirectX.Setup"
name="Microsoft.Windows.Common-Controls"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
publicKeyToken="6595b64144ccf1df"
2(2-272_2
2(2-272_2
4!4)4/444:4
4!4)4/444:4
0$0,0`0|0
0$0,0`0|0
> >$>(>,>0>4>8>@>
> >$>(>,>0>4>8>@>
mscoree.dll
mscoree.dll
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
KERNEL32.DLL
KERNEL32.DLL
WUSER32.DLL
WUSER32.DLL
hXXp://VVV.BetaPlace.com
hXXp://VVV.BetaPlace.com
Windows(R)!
Windows(R)!
stup k webov
stup k webov
mu serveru hXXp://VVV.BetaPlace.com, budete muset syst
mu serveru hXXp://VVV.BetaPlace.com, budete muset syst
m Windows(R) znovu nainstalovat.
m Windows(R) znovu nainstalovat.
ssen Windows(R) erneut installieren, wenn Sie
ssen Windows(R) erneut installieren, wenn Sie
gen, und auf die Website hXXp://VVV.BetaPlace.com zugreifen, wenn die Kennung abl
gen, und auf die Website hXXp://VVV.BetaPlace.com zugreifen, wenn die Kennung abl
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!
que volver a instalar Windows(R) si no tiene un Id. v
que volver a instalar Windows(R) si no tiene un Id. v
que visitar el sitio Web hXXp://VVV.BetaPlace.com cuando el Id. haya caducado.
que visitar el sitio Web hXXp://VVV.BetaPlace.com cuando el Id. haya caducado.
Vous devrez installer Windows(R)
Vous devrez installer Windows(R)
hXXp://VVV.BetaPlace.com lorsque l'identificateur aura expir
hXXp://VVV.BetaPlace.com lorsque l'identificateur aura expir
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.com
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.com
Windows(R)
Windows(R)
Windows(R)
Windows(R)
U dient Windows(r) opnieuw te installeren als u geen geldige b
U dient Windows(r) opnieuw te installeren als u geen geldige b
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci Web!
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci Web!
de reinstalar o Windows(R) se n
de reinstalar o Windows(R) se n
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!
Windows(R)
Windows(R)
hXXp://VVV.BetaPlace.com.
hXXp://VVV.BetaPlace.com.
ste installera om Windows(R) om du inte har ett giltigt DirectX BetaID och
ste installera om Windows(R) om du inte har ett giltigt DirectX BetaID och
tkomst till webbplatsen hXXp://VVV.BetaPlace.com n
tkomst till webbplatsen hXXp://VVV.BetaPlace.com n
effettuato l'aggiornamento. L'operazione pu
effettuato l'aggiornamento. L'operazione pu
o em tempo de execu
o em tempo de execu
procurar componentes de tempo de execu
procurar componentes de tempo de execu
The DirectX setup wizard guides you through installation of DirectX Runtime Components. Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement. You must accept the agreement to continue the setup.
The DirectX setup wizard guides you through installation of DirectX Runtime Components. Please read the following license agreement. Press the PAGE DOWN key to see the rest of the agreement. You must accept the agreement to continue the setup.
o dos componentes de tempo de execu
o dos componentes de tempo de execu
Sla uw werk op en sluit alle toepassingen voordat u verder gaat.
Sla uw werk op en sluit alle toepassingen voordat u verder gaat.
Windows NT 4.0
Windows NT 4.0
Windows
Windows
mem Windows NT 4.0.lInstalacn
mem Windows NT 4.0.lInstalacn
mu WIndows.
mu WIndows.
pro instalaci..Zdrojov
pro instalaci..Zdrojov
..Zdrojov
..Zdrojov
ne %d MB. M
ne %d MB. M
=DirectX funktioniert ist mit Windows NT 4.0 nicht kompatibel.
=DirectX funktioniert ist mit Windows NT 4.0 nicht kompatibel.
r die Installation von DirectX neu starten. Klicken Sie auf "OK", um den Computer jetzt neu zu starten..DirectX-Setup wurde erfolgreich abgeschlossen.YDiese DirectX-Version ist mit der zurzeit installierten Windows-Version nicht kompatibel.GEine ben
r die Installation von DirectX neu starten. Klicken Sie auf "OK", um den Computer jetzt neu zu starten..DirectX-Setup wurde erfolgreich abgeschlossen.YDiese DirectX-Version ist mit der zurzeit installierten Windows-Version nicht kompatibel.GEine ben
hr %d MB ben
hr %d MB ben
DirectX needs approximately %dMB. You can increase available disk space by uninstalling applications or by deleting unneeded files.
DirectX needs approximately %dMB. You can increase available disk space by uninstalling applications or by deleting unneeded files.
n de DirectX no es compatible con Windows NT 4.0eLa instalaci
n de DirectX no es compatible con Windows NT 4.0eLa instalaci
xito.YEsta versi
xito.YEsta versi
n de Windows instalada actualmente.CDirectX no pudo encontrar un archivo necesario para la instalaci
n de Windows instalada actualmente.CDirectX no pudo encontrar un archivo necesario para la instalaci
DirectX necesita aproximadamente %d MB. Puede liberar espacio en disco desinstalando aplicaciones o eliminando archivos que no necesite.
DirectX necesita aproximadamente %d MB. Puede liberar espacio en disco desinstalando aplicaciones o eliminando archivos que no necesite.
ACette version de DirectX n'est pas compatible avec Windows
ACette version de DirectX n'est pas compatible avec Windows
e correctement.`Cette version de DirectX n'est pas compatible avec la version de Windows actuellement install
e correctement.`Cette version de DirectX n'est pas compatible avec la version de Windows actuellement install
e.BDirectX n'a pas pu trouver un fichier n
e.BDirectX n'a pas pu trouver un fichier n
cessite environ %d Mo. Vous pouvez lib
cessite environ %d Mo. Vous pouvez lib
compatibile con Windows NT 4.0.D
compatibile con Windows NT 4.0.D
compatibile con la versione di Windows attualmente installata.;Impossibile trovare un file necessario per l'installazione.%File origine di DirectX non corretto.%File origine di DirectX non corretto.'Impossibile copiare un file necessario.
compatibile con la versione di Windows attualmente installata.;Impossibile trovare un file necessario per l'installazione.%File origine di DirectX non corretto.%File origine di DirectX non corretto.'Impossibile copiare un file necessario.
DirectX richiede circa %d MB. Per liberare spazio su disco, disinstallare alcune applicazioni o eliminare i file non necessari.
DirectX richiede circa %d MB. Per liberare spazio su disco, disinstallare alcune applicazioni o eliminare i file non necessari.
WindowsNT 4.0
WindowsNT 4.0
=Deze versie van DirectX is niet compatibel met Windows NT 4.0oDirectX is pas juist ge
=Deze versie van DirectX is niet compatibel met Windows NT 4.0oDirectX is pas juist ge
nstalleerd nadat het systeem opnieuw is opgestart. Klik op OK om opnieuw op te starten.'De installatie van DirectX is voltooid.VDe huidige DirectX-versie is niet compatibel met de ge
nstalleerd nadat het systeem opnieuw is opgestart. Klik op OK om opnieuw op te starten.'De installatie van DirectX is voltooid.VDe huidige DirectX-versie is niet compatibel met de ge
nstalleerde versie van Windows.ADirectX kan een voor de installatie benodigd bestand niet vinden."DirectX-bronbestand is niet juist."DirectX-bronbestand is niet juist.2DirectX heeft een vereist bestand niet gekopieerd.
nstalleerde versie van Windows.ADirectX kan een voor de installatie benodigd bestand niet vinden."DirectX-bronbestand is niet juist."DirectX-bronbestand is niet juist.2DirectX heeft een vereist bestand niet gekopieerd.
DirectX heeft ongeveer %d MB nodig. U kunt de beschikbare schijfruimte vergroten door niet langer benodigde toepassingen of bestanden te verwijderen.
DirectX heeft ongeveer %d MB nodig. U kunt de beschikbare schijfruimte vergroten door niet langer benodigde toepassingen of bestanden te verwijderen.
?Ta wersja programu DirectX nie jest zgodna z systemem WindowsNT_Instalator DirectX musi zrestartowac komputer. Aby zrestartowac go teraz, nacisnij przycisk OK./Instalacja DirectX zostala ukonczona pomyslnie.^Ta wersja programu DirectX nie jest zgodna z wersja aktualnie zainstalowanego systemu Windows.CInterfejs DirectX nie moze znalezc pliku potrzebnego do instalacji.'Plik zr
?Ta wersja programu DirectX nie jest zgodna z systemem WindowsNT_Instalator DirectX musi zrestartowac komputer. Aby zrestartowac go teraz, nacisnij przycisk OK./Instalacja DirectX zostala ukonczona pomyslnie.^Ta wersja programu DirectX nie jest zgodna z wersja aktualnie zainstalowanego systemu Windows.CInterfejs DirectX nie moze znalezc pliku potrzebnego do instalacji.'Plik zr
Program DirectX wymaga okolo %d MB. Mozesz zwiekszyc dostepne miejsce na dysku, odinstalowujac aplikacje lub usuwajac niepotrzebne pliki.
Program DirectX wymaga okolo %d MB. Mozesz zwiekszyc dostepne miejsce na dysku, odinstalowujac aplikacje lub usuwajac niepotrzebne pliki.
vel com o WindowsNT 4.0hO Programa de Instala
vel com o WindowsNT 4.0hO Programa de Instala
xito.aEsta vers
xito.aEsta vers
o do sistema operacional atualmente instalado.EO DirectX n
o do sistema operacional atualmente instalado.EO DirectX n
O DirectX precisa de aproximadamente %dMB. Voc
O DirectX precisa de aproximadamente %dMB. Voc
Windows NT 4.0
Windows NT 4.0
Windows.8DirectX:
Windows.8DirectX:
r inte kompatibel med Windows NT 4.0hInstallationsprogrammet f
r inte kompatibel med Windows NT 4.0hInstallationsprogrammet f
rdig.XDen h
rdig.XDen h
r inte kompatibel med den Windows-version som
r inte kompatibel med den Windows-version som
r installerad.DDet gick inte att hitta en n
r installerad.DDet gick inte att hitta en n
r %d MB. Du kan
r %d MB. Du kan
WindowsNT 4.0
WindowsNT 4.0
DXError.log
DXError.log
DirectX.log
DirectX.log
(ManagedDX.CAB)
(ManagedDX.CAB)
.NET Framework
.NET Framework
.NET Framework
.NET Framework
soubor INF.DInstalacn
soubor INF.DInstalacn
to chybe naleznete v souborech DXError.log a DirectX.log ve slo
to chybe naleznete v souborech DXError.log a DirectX.log ve slo
ce Windows.DRozhran
ce Windows.DRozhran
mu Windows NT podporov
mu Windows NT podporov
operacn
operacn
tko Storno.HRozhran
tko Storno.HRozhran
mu Windows NT predinstalov
mu Windows NT predinstalov
treba znovu instalovat.wAktu
treba znovu instalovat.wAktu
mu.qTyp procesoru nen
mu.qTyp procesoru nen
.mTento komprimovan
.mTento komprimovan
DirectX (ManagedDX.CAB) v distribucn
DirectX (ManagedDX.CAB) v distribucn
na platforma .NET Framework. Nainstalujte platformu .NET Framework a potom znovu spustte instalaci rozhran
na platforma .NET Framework. Nainstalujte platformu .NET Framework a potom znovu spustte instalaci rozhran
DirectX.ZStahov
DirectX.ZStahov
Weitere Informationen zum Ermitteln des Problems finden Sie in den Dateien "DXError.log" und "DirectX.log" im Ordner "Windows".7DirectX3D wird von dieser NT-Version nicht unterst
Weitere Informationen zum Ermitteln des Problems finden Sie in den Dateien "DXError.log" und "DirectX.log" im Ordner "Windows".7DirectX3D wird von dieser NT-Version nicht unterst
her.yDie Kabinettdatei f
her.yDie Kabinettdatei f
r die Managed DirectX-Komponente (ManagedDX.CAB) ist im DirectX-Verzeichnis "redist" nicht vorhanden.
r die Managed DirectX-Komponente (ManagedDX.CAB) ist im DirectX-Verzeichnis "redist" nicht vorhanden.
r die Managed DirectX-Komponente muss .NET Framework installiert werden, bevor DirectX installiert wird. Installieren Sie .NET Framework, und f
r die Managed DirectX-Komponente muss .NET Framework installiert werden, bevor DirectX installiert wird. Installieren Sie .NET Framework, und f
hren Sie dann DirectX-Setup erneut aus.dFehler beim Downloaden einer f
hren Sie dann DirectX-Setup erneut aus.dFehler beim Downloaden einer f
Please refer to DXError.log and DirectX.log in your Windows folder to determine problem..This version on NT does not support DirectX3D.&An unknown operating system was found.
Please refer to DXError.log and DirectX.log in your Windows folder to determine problem..This version on NT does not support DirectX3D.&An unknown operating system was found.
User hit the cancel key.3DirectX was not preinstalled on this version on NT.rDirectX setup has determined that a newer version of DirectX is already installed.
User hit the cancel key.3DirectX was not preinstalled on this version on NT.rDirectX setup has determined that a newer version of DirectX is already installed.
Please logon again as an Administrator or contact your PC Administrator.qProcessor type is unsupported by DirectX.
Please logon again as an Administrator or contact your PC Administrator.qProcessor type is unsupported by DirectX.
DirectX supports Pentium-compatible and K6 class processors or higher.dThe Managed DirectX component cab file (ManagedDX.CAB) is missing from the DirectX redist directory.
DirectX supports Pentium-compatible and K6 class processors or higher.dThe Managed DirectX component cab file (ManagedDX.CAB) is missing from the DirectX redist directory.
Managed DirectX component requires .NET Framework to be installed before DirectX. Please install .NET Framework and then run DirectX setup again.MDownloading a file necessary for installation failed. Please run setup again.
Managed DirectX component requires .NET Framework to be installed before DirectX. Please install .NET Framework and then run DirectX setup again.MDownloading a file necessary for installation failed. Please run setup again.
A cabinet file necessary for installation cannot be trusted. Please verify the Cryptographic Services are enabled and the cabinet file certificate is valid.
A cabinet file necessary for installation cannot be trusted. Please verify the Cryptographic Services are enabled and the cabinet file certificate is valid.
un archivo .inf necesario.DLa instalaci
un archivo .inf necesario.DLa instalaci
Vea el archivo de registro DXError.log y DirectX.log en la carpeta Windows para determinar el problema.'Esta versi
Vea el archivo de registro DXError.log y DirectX.log en la carpeta Windows para determinar el problema.'Esta versi
un sistema operativo desconocido.&El usuario presion
un sistema operativo desconocido.&El usuario presion
DirectX es compatible con procesadores K6, compatibles con Pentium, o superiores.|No se encuentra el archivo CAB de componentes Managed DirectX (ManagedDX.CAB) en el directorio de redistribuci
DirectX es compatible con procesadores K6, compatibles con Pentium, o superiores.|No se encuentra el archivo CAB de componentes Managed DirectX (ManagedDX.CAB) en el directorio de redistribuci
El componente Managed DirectX necesita que .NET Framework se instale antes que DirectX. Instale .NET Framework y vuelva a ejecutar el programa de instalaci
El componente Managed DirectX necesita que .NET Framework se instale antes que DirectX. Instale .NET Framework y vuelva a ejecutar el programa de instalaci
n de DirectX.jError al descargar un archivo necesario para la instalaci
n de DirectX.jError al descargar un archivo necesario para la instalaci
Un archivo .CAB necesario para la instalaci
Un archivo .CAB necesario para la instalaci
lido el certificado del archivo .CAB.
lido el certificado del archivo .CAB.
ULe programme d'installation de DirectX n'a pas pu trouver un fichier .inf n
ULe programme d'installation de DirectX n'a pas pu trouver un fichier .inf n
cessaire.ULe programme d'installation de DirectX n'a pas pu localiser un r
cessaire.ULe programme d'installation de DirectX n'a pas pu localiser un r
Consultez les fichiers DXError.log et DirectX.log situ
Consultez les fichiers DXError.log et DirectX.log situ
s dans le dossier Windows pour d
s dans le dossier Windows pour d
DirectX prend en charge les processeurs compatibles Pentium et K6 ou plus.sLe fichier CAB des composants Managed DirectX (ManagedDX.CAB) est introuvable dans le r
DirectX prend en charge les processeurs compatibles Pentium et K6 ou plus.sLe fichier CAB des composants Managed DirectX (ManagedDX.CAB) est introuvable dans le r
Le composant Managed DirectX requiert l'installation de .NET Framework avant celle de DirectX. Installez .NET Framework et relancez le programme d'installation de DirectX.jUn fichier n
Le composant Managed DirectX requiert l'installation de .NET Framework avant celle de DirectX. Installez .NET Framework et relancez le programme d'installation de DirectX.jUn fichier n
s et que le certificat du fichier CAB est valide.
s et que le certificat du fichier CAB est valide.
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.1La versione su Windows NT non supporta DirectX3D.*Rilevato un sistema operativo sconosciuto.!Operazione annullata dall'utente.CDirectX non
Per individuare il problema, vedere i file DXError.log e DirectX.log nella cartella di Windows.1La versione su Windows NT non supporta DirectX3D.*Rilevato un sistema operativo sconosciuto.!Operazione annullata dall'utente.CDirectX non
stato preinstallato su questa versione di Windows NT.
stato preinstallato su questa versione di Windows NT.
Effettuare nuovamente l'accesso come amministratore o contattare l'amministratore del computer in uso.yTipo di processore non supportato da DirectX.
Effettuare nuovamente l'accesso come amministratore o contattare l'amministratore del computer in uso.yTipo di processore non supportato da DirectX.
Sono supportati processori compatibili Pentium e di classe K6 o superiori.cFile cab del componente DirectX gestito (ManagedDX.CAB) mancante dalla directory redist di DirectX.wIl componente gestito DirectX richiede .NET Framework. Installare .NET Framework e ripetere l'installazione di DirectX.pImpossibile scaricare un file necessario per l'installazione. Eseguire nuovamente il programma di installazione.
Sono supportati processori compatibili Pentium e di classe K6 o superiori.cFile cab del componente DirectX gestito (ManagedDX.CAB) mancante dalla directory redist di DirectX.wIl componente gestito DirectX richiede .NET Framework. Installare .NET Framework e ripetere l'installazione di DirectX.pImpossibile scaricare un file necessario per l'installazione. Eseguire nuovamente il programma di installazione.
Un file CAB necessario per l'installazione risulta non attendibile. Verificare che i servizi di crittografia siano abilitati e che il certificato relativo al file CAB sia valido.
Un file CAB necessario per l'installazione risulta non attendibile. Verificare che i servizi di crittografia siano abilitati e che il certificato relativo al file CAB sia valido.
Windows
Windows
Windows NT
Windows NT
.NET Framework
.NET Framework
DirectX.log
DirectX.log
Windows NT
Windows NT
.GManaged DirectX
.GManaged DirectX
(ManagedDX.CAB)
(ManagedDX.CAB)
.xManaged DirectX
.xManaged DirectX
. .NET Framework
. .NET Framework
Raadpleeg DXError.log en DirectX.log in de map Windows om vast te stellen wat het probleem is..Deze versie van NT ondersteunt DirectX3D niet.2Er is een onbekend besturingssysteem aangetroffen.
Raadpleeg DXError.log en DirectX.log in de map Windows om vast te stellen wat het probleem is..Deze versie van NT ondersteunt DirectX3D niet.2Er is een onbekend besturingssysteem aangetroffen.
nstalleerd op deze versie van NT.sDirectX Setup heeft ontdekt dat er al een nieuwere versie van DirectX is ge
nstalleerd op deze versie van NT.sDirectX Setup heeft ontdekt dat er al een nieuwere versie van DirectX is ge
DirectX ondersteunt Pentium-compatibele en klasse K6-processors of hoger.cHet cab-bestand met het DirectX-beheeronderdeel (ManagedDX.CAB) ontbreekt in de DirectX redist-map.
DirectX ondersteunt Pentium-compatibele en klasse K6-processors of hoger.cHet cab-bestand met het DirectX-beheeronderdeel (ManagedDX.CAB) ontbreekt in de DirectX redist-map.
.NET Framework moet zijn ge
.NET Framework moet zijn ge
nstalleerd voordat u het onderdeel Managed DirectX kunt installeren. Installeer .NET Framework en voer vervolgens Setup voor DirectX opnieuw uit.fHet downloaden van een bestand dat voor de installatie vereist is, is mislukt. Voer Setup opnieuw uit.
nstalleerd voordat u het onderdeel Managed DirectX kunt installeren. Installeer .NET Framework en voer vervolgens Setup voor DirectX opnieuw uit.fHet downloaden van een bestand dat voor de installatie vereist is, is mislukt. Voer Setup opnieuw uit.
n of meerdere bestanden door een toepassing zijn geopend. Sluit alle toepassingen af voordat u de installatie van DirectX opnieuw uitvoert.
n of meerdere bestanden door een toepassing zijn geopend. Sluit alle toepassingen af voordat u de installatie van DirectX opnieuw uitvoert.
Een CAB-bestand dat nodig is voor de installatie wordt niet vertrouwd. Controleer of de service Cryptographic Services ingeschakeld is en of het certificaat van het CAB-bestand geldig is.
Een CAB-bestand dat nodig is voor de installatie wordt niet vertrouwd. Controleer of de service Cryptographic Services ingeschakeld is en of het certificaat van het CAB-bestand geldig is.
9Instalator DirectX nie moze znalezc wymaganego pliku inf.=Instalator DirectX nie moze zlokalizowac wymaganego katalogu.tWystapil wewnetrzny blad systemu.
9Instalator DirectX nie moze znalezc wymaganego pliku inf.=Instalator DirectX nie moze zlokalizowac wymaganego katalogu.tWystapil wewnetrzny blad systemu.
Sprawdz plik DXError.log i DirectX.log w folderze Windows, aby rozpoznac problem.-Ta wersja systemu NT nie obsluguje DirectX3D.&Znaleziono nieznany system operacyjny.$Uzytkownik nacisnal przycisk Anuluj.LInterfejs DirectX nie zostal wstepnie zainstalowany w tej wersji systemu NT.sInstalator DirectX wykryl, ze jest juz zainstalowana nowsza wersja programu DirectX.
Sprawdz plik DXError.log i DirectX.log w folderze Windows, aby rozpoznac problem.-Ta wersja systemu NT nie obsluguje DirectX3D.&Znaleziono nieznany system operacyjny.$Uzytkownik nacisnal przycisk Anuluj.LInterfejs DirectX nie zostal wstepnie zainstalowany w tej wersji systemu NT.sInstalator DirectX wykryl, ze jest juz zainstalowana nowsza wersja programu DirectX.
Program DirectX obsluguje procesory zgodne z Pentium oraz procesory klasy K6 lub nowsze.\Brak pliku cab skladnika Managed DirectX (ManagedDX.CAB) w katalogu redist programu DirectX.
Program DirectX obsluguje procesory zgodne z Pentium oraz procesory klasy K6 lub nowsze.\Brak pliku cab skladnika Managed DirectX (ManagedDX.CAB) w katalogu redist programu DirectX.
Skladnik Managed DirectX wymaga zainstalowania architektury .NET Framework przed programem DirectX. Zainstaluj architekture .NET Framework, a nastepnie uruchom ponownie Instalatora programu DirectX.YPobieranie pliku wymaganego do instalacji nie powiodlo sie. Uruchom ponownie instalatora.
Skladnik Managed DirectX wymaga zainstalowania architektury .NET Framework przed programem DirectX. Zainstaluj architekture .NET Framework, a nastepnie uruchom ponownie Instalatora programu DirectX.YPobieranie pliku wymaganego do instalacji nie powiodlo sie. Uruchom ponownie instalatora.
Nie mozna zaufac plikowi cabinet wymaganemu dla instalacji. Sprawdz, czy uslugi kryptograficzne sa wlaczone i czy certyfikat pliku cabinet jest prawidlowy.
Nie mozna zaufac plikowi cabinet wymaganemu dla instalacji. Sprawdz, czy uslugi kryptograficzne sa wlaczone i czy certyfikat pliku cabinet jest prawidlowy.
rio.LO Programa de Instala
rio.LO Programa de Instala
ria.lErro interno de sistema.
ria.lErro interno de sistema.
Consulte DXError.log e DirectX.log na pasta do Windows para determinar o problema..Esta vers
Consulte DXError.log e DirectX.log na pasta do Windows para determinar o problema..Esta vers
suporte ao DirectX3D.,Sistema operacional desconhecido encontrado.-O usu
suporte ao DirectX3D.,Sistema operacional desconhecido encontrado.-O usu
o oferece suporte a este tipo de processador. O
o oferece suporte a este tipo de processador. O
DirectX oferece suporte a processadores compat
DirectX oferece suporte a processadores compat
veis com Pentium ou da classe K6 ou superiores.nO arquivo de instala
veis com Pentium ou da classe K6 ou superiores.nO arquivo de instala
o do componente Managed DirectX (ManagedDX.CAB) est
o do componente Managed DirectX (ManagedDX.CAB) est
Para ser instalado antes do DirectX, o componente Managed DirectX requer o .NET Framework. Instale o .NET Framework e execute a instala
Para ser instalado antes do DirectX, o componente Managed DirectX requer o .NET Framework. Instale o .NET Framework e execute a instala
o do DirectX novamente.lFalha ao fazer o download de um arquivo necess
o do DirectX novamente.lFalha ao fazer o download de um arquivo necess
o. Execute o programa de instala
o. Execute o programa de instala
o em uso por um aplicativo. Feche todos os aplicativos antes de executar a instala
o em uso por um aplicativo. Feche todos os aplicativos antes de executar a instala
vel. Certifique-se de que os Servi
vel. Certifique-se de que os Servi
o habilitados e que o certificado do arquivo de gabinete
o habilitados e que o certificado do arquivo de gabinete
Windows.
Windows.
.BDirectX:
.BDirectX:
ndig INF-fil.JInstallationsprogrammet f
ndig INF-fil.JInstallationsprogrammet f
ndig katalog.kEtt internt fel uppstod.
ndig katalog.kEtt internt fel uppstod.
Information om felet finns i filen DXError.log och DirectX.log i Windows-mappen..Den h
Information om felet finns i filen DXError.log och DirectX.log i Windows-mappen..Den h
nt operativsystem hittades.&Anv
nt operativsystem hittades.&Anv
r.jProcessortypen st
r.jProcessortypen st
gre.ZCAB-filen med DirectX-komponenten f
gre.ZCAB-filen med DirectX-komponenten f
r hanterad kod (ManagedDX.CAB) saknas i redist-mappen.
r hanterad kod (ManagedDX.CAB) saknas i redist-mappen.
ver att .NET Framework
ver att .NET Framework
r installerat innan du installerar DirectX. Installera .NET Framework och f
r installerat innan du installerar DirectX. Installera .NET Framework och f
r aktiverad och att kabinettfilens certifikat
r aktiverad och att kabinettfilens certifikat
.DirectX
.DirectX
lo k chybe %d instalacn
lo k chybe %d instalacn
DirectX-Setupfehler %d
DirectX-Setupfehler %d
DirectX setup error %d
DirectX setup error %d
%Error %d de la instalaci
%Error %d de la instalaci
n de DirectX.Modificador de la l
n de DirectX.Modificador de la l
#Erreur d'installation de DirectX %d'Option de ligne de commande non valide.
#Erreur d'installation de DirectX %d'Option de ligne de commande non valide.
3Errore %d del programma di installazione di DirectX Parametro della riga di comando non valido.
3Errore %d del programma di installazione di DirectX Parametro della riga di comando non valido.
DirectX Setup-fout %d*Ongeldige schakeloptie voor opdrachtregel.
DirectX Setup-fout %d*Ongeldige schakeloptie voor opdrachtregel.
Blad instalatora DirectX: %d,Nieprawidlowy przelacznik wiersza polecenia.
Blad instalatora DirectX: %d,Nieprawidlowy przelacznik wiersza polecenia.
Erro %d na instala
Erro %d na instala
DirectX %d#
DirectX %d#
Installationsfel %d f
Installationsfel %d f
%s kann nicht gefunden werden.
%s kann nicht gefunden werden.
No se encuentra %s
No se encuentra %s
Impossible de trouver %s
Impossible de trouver %s
Impossibile trovare %s
Impossibile trovare %s
Kan %s niet vinden
Kan %s niet vinden
Nie mozna znalezc %s
Nie mozna znalezc %s
vel localizar %s
vel localizar %s
r inte att hitta %s
r inte att hitta %s
hXXp://Microsoft.com/DirectX
hXXp://Microsoft.com/DirectX
hXXp://VVV.betaplace.com
hXXp://VVV.betaplace.com
te na webov
te na webov
m serveru hXXp://Microsoft.com/DirectX. Aktualizovanou predprodejn
m serveru hXXp://Microsoft.com/DirectX. Aktualizovanou predprodejn
m serveru hXXp://VVV.betaplace.com.
m serveru hXXp://VVV.betaplace.com.
Diese Vorabversion von DirectX ist bereits abgelaufen. Besuchen Sie hXXp://Microsoft.com/DirectX, um die neueste ver
Diese Vorabversion von DirectX ist bereits abgelaufen. Besuchen Sie hXXp://Microsoft.com/DirectX, um die neueste ver
ffentlichte DirectX-Version zu downloaden, oder besuchen Sie hXXp://VVV.betaplace.com, um die aktuelle Vorabversion zu downloaden.
ffentlichte DirectX-Version zu downloaden, oder besuchen Sie hXXp://VVV.betaplace.com, um die aktuelle Vorabversion zu downloaden.
This pre-release version of DirectX has already expired. Please goto hXXp://Microsoft.com/DirectX to get the latest released version DirectX., or to hXXp://VVV.betaplace.com to get an updated pre-release version.
This pre-release version of DirectX has already expired. Please goto hXXp://Microsoft.com/DirectX to get the latest released version DirectX., or to hXXp://VVV.betaplace.com to get an updated pre-release version.
n preliminar ya ha caducado. Vaya a hXXp://Microsoft.com/DirectX para obtener la versi
n preliminar ya ha caducado. Vaya a hXXp://Microsoft.com/DirectX para obtener la versi
s reciente disponible de DirectX o a hXXp://VVV.betaplace.com para obtener una versi
s reciente disponible de DirectX o a hXXp://VVV.betaplace.com para obtener una versi
. Visitez le site hXXp://Microsoft.com/DirectX (site en anglais) pour obtenir la derni
. Visitez le site hXXp://Microsoft.com/DirectX (site en anglais) pour obtenir la derni
e de DirectX, ou le site hXXp://VVV.betaplace.com (site en anglais) pour obtenir une version B
e de DirectX, ou le site hXXp://VVV.betaplace.com (site en anglais) pour obtenir une version B
scaduta. Visitare il sito Web hXXp://Microsoft.com/DirectX per ottenere l'ultima versione completa di DirectX o la pagina hXXp://VVV.betaplace.com per ottenere una versione preliminare aggiornata.
scaduta. Visitare il sito Web hXXp://Microsoft.com/DirectX per ottenere l'ultima versione completa di DirectX o la pagina hXXp://VVV.betaplace.com per ottenere una versione preliminare aggiornata.
hXXp://Microsoft.com/DirectX
hXXp://Microsoft.com/DirectX
hXXp://VVV.betaplace.com
hXXp://VVV.betaplace.com
. hXXp://Microsoft.com/DirectX
. hXXp://Microsoft.com/DirectX
, hXXp://VVV.betaplace.com
, hXXp://VVV.betaplace.com
Deze evaluatieversie is reeds verlopen. Ga naar hXXp://Microsoft.com/DirectX voor de meest recente releaseversie van DirectX of ga naar hXXp://VVV.betaplace.com voor een bijgewerkte evaluatieversie.
Deze evaluatieversie is reeds verlopen. Ga naar hXXp://Microsoft.com/DirectX voor de meest recente releaseversie van DirectX of ga naar hXXp://VVV.betaplace.com voor een bijgewerkte evaluatieversie.
Waznosc tej wersji wstepnej programu DirectX juz wygasla. Przejdz do witryny hXXp://Microsoft.com/DirectX, aby uzyskac najnowsza z wydanych wersji programu DirectX, lub do witryny hXXp://VVV.betaplace.com, aby uzyskac zaktualizowana wersje wstepna.
Waznosc tej wersji wstepnej programu DirectX juz wygasla. Przejdz do witryny hXXp://Microsoft.com/DirectX, aby uzyskac najnowsza z wydanych wersji programu DirectX, lub do witryny hXXp://VVV.betaplace.com, aby uzyskac zaktualizowana wersje wstepna.
expirou. Visite hXXp://Microsoft.com/DirectX para obter a vers
expirou. Visite hXXp://Microsoft.com/DirectX para obter a vers
o mais recente do DirectX, ou hXXp://VVV.betaplace.com para obter uma vers
o mais recente do DirectX, ou hXXp://VVV.betaplace.com para obter uma vers
hXXp://Microsoft.com/DirectX,
hXXp://Microsoft.com/DirectX,
hXXp://VVV.betaplace.com,
hXXp://VVV.betaplace.com,
till webbplatsen hXXp://Microsoft.com/DirectX f
till webbplatsen hXXp://Microsoft.com/DirectX f
mta den senaste officiella versionen av DirectX eller till hXXp://VVV.betaplace.com om du vill h
mta den senaste officiella versionen av DirectX eller till hXXp://VVV.betaplace.com om du vill h
mto operacn
mto operacn
DirectX SetupZDirectX is not completely installed on your computer. Are you sure you want to quit setup?7This package is not supported on this Operating System.
DirectX SetupZDirectX is not completely installed on your computer. Are you sure you want to quit setup?7This package is not supported on this Operating System.
n?7Este paquete no es compatible con el sistema operativo.&Se cancel
n?7Este paquete no es compatible con el sistema operativo.&Se cancel
n sea necesario. Esta operaci
n sea necesario. Esta operaci
Installazione di DirectXFInstallazione di DirectX non completata. Interrompere l'installazione?6Pacchetto non supportato nel sistema operativo in uso.
Installazione di DirectXFInstallazione di DirectX non completata. Interrompere l'installazione?6Pacchetto non supportato nel sistema operativo in uso.
StatoOAttendere. Il programma di installazione sta completando le seguenti operazioni
StatoOAttendere. Il programma di installazione sta completando le seguenti operazioni
in corso la ricerca dei componenti di run-time di DirectX. Se necessario, i componenti verranno aggiornati. L'operazione potrebbe richiedere alcuni minuti...
in corso la ricerca dei componenti di run-time di DirectX. Se necessario, i componenti verranno aggiornati. L'operazione potrebbe richiedere alcuni minuti...
Instalator programu DirectXpProgram DirectX nie zostal calkowicie zainstalowany na tym komputerze. Czy na pewno chcesz zakonczyc instalacje?;Ten pakiet nie jest obslugiwany w tym systemie operacyjnym.
Instalator programu DirectXpProgram DirectX nie zostal calkowicie zainstalowany na tym komputerze. Czy na pewno chcesz zakonczyc instalacje?;Ten pakiet nie jest obslugiwany w tym systemie operacyjnym.
completamente instalado neste computador. Tem certeza de que deseja sair da instala
completamente instalado neste computador. Tem certeza de que deseja sair da instala
suporte a este pacote neste sistema operacional.
suporte a este pacote neste sistema operacional.
o do DirectX4Instalar componentes de tempo de execu
o do DirectX4Instalar componentes de tempo de execu
Procurando por componentes em tempo de execu
Procurando por componentes em tempo de execu
r operativsystemet.
r operativsystemet.
DirectX: %s
DirectX: %s
m Windows(R) znovu nainstalovat.GChcete pokracovat v instalaci t
m Windows(R) znovu nainstalovat.GChcete pokracovat v instalaci t
&DirectX-Setup - VORABVERSIONWARNUNG!!!.Diese Vorabversion von DirectX L
&DirectX-Setup - VORABVERSIONWARNUNG!!!.Diese Vorabversion von DirectX L
UFT am %s AB!
UFT am %s AB!
&DirectX setup - pre-release WARNING!!!2This pre-release version of DirectX EXPIRES on %s!
&DirectX setup - pre-release WARNING!!!2This pre-release version of DirectX EXPIRES on %s!
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!XWould you like to continue with the installation of this pre-release version of DirectX?
You will need to re-install Windows(R) if you do not have a valid DirectX BetaID and access to hXXp://VVV.BetaPlace.com website when it expires!XWould you like to continue with the installation of this pre-release version of DirectX?
Instalando archivos...eInstalaci
Instalando archivos...eInstalaci
n preliminar de DirectX CADUCA el %s.
n preliminar de DirectX CADUCA el %s.
n beta de DirectX y accede al sitio Web hXXp://VVV.BetaPlace.com cuando el Id. haya caducado.J
n beta de DirectX y accede al sitio Web hXXp://VVV.BetaPlace.com cuando el Id. haya caducado.J
ta de DirectX expirera le %s.
ta de DirectX expirera le %s.
.HVoulez-vous poursuivre l'installation de cette version B
.HVoulez-vous poursuivre l'installation de cette version B
6Installazione di DirectX - Avviso versione preliminare3Questa versione preliminare di DirectX SCADE il %s.
6Installazione di DirectX - Avviso versione preliminare3Questa versione preliminare di DirectX SCADE il %s.
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.comEContinuare l'installazione di questa versione preliminare di DirectX?
necessario reinstallare Windows(R) se alla scadenza non si dispone di un BetaID valido per DirectX e di accesso al sito Web hXXp://VVV.BetaPlace.comEContinuare l'installazione di questa versione preliminare di DirectX?
Bestanden installeren...CInstallatie van DirectX Runtime voor ontwikkelaars (foutopsporing):CInstallatie van DirectX Runtime voor ontwikkelaars (handelsversie):
Bestanden installeren...CInstallatie van DirectX Runtime voor ontwikkelaars (foutopsporing):CInstallatie van DirectX Runtime voor ontwikkelaars (handelsversie):
-DirectX Setup. Waarschuwing: evaluatieversie.0Deze evaluatieversie van DirectX verloopt op %s!
-DirectX Setup. Waarschuwing: evaluatieversie.0Deze evaluatieversie van DirectX verloopt op %s!
U dient Windows(R) opnieuw te installeren als u geen geldige b
U dient Windows(R) opnieuw te installeren als u geen geldige b
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.HWilt u doorgaan met de installatie van deze evaluatieversie van DirectX?
ta-id voor DirectX en toegang tot de website hXXp://VVV.betaplace.com hebt wanneer DirectX verloopt.HWilt u doorgaan met de installatie van deze evaluatieversie van DirectX?
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci web!ICzy chcesz kontynuowac instalowanie tej wersji wstepnej programu DirectX?
Po wygasnieciu waznosci tej wersji trzeba bedzie ponownie zainstalowac system Windows(R) w wypadku braku prawidlowego identyfikatora Beta programu DirectX i dostepu do witryny hXXp://VVV.BetaPlace.com w sieci web!ICzy chcesz kontynuowac instalowanie tej wersji wstepnej programu DirectX?
amento do DirectX EXPIRA em %s!
amento do DirectX EXPIRA em %s!
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!HDeseja continuar a instala
lida e acessar hXXp://VVV.BetaPlace.com quando ela expirar!HDeseja continuar a instala
hXXp://VVV.BetaPlace.com.?
hXXp://VVV.BetaPlace.com.?
Filer installeras...LInstallation av k
Filer installeras...LInstallation av k
lla den %s.
lla den %s.
4.9.0.0904
4.9.0.0904
dxsetup.exe
dxsetup.exe
Microsoft(R) DirectX for Windows(R)
Microsoft(R) DirectX for Windows(R)
DirectX for Windows
DirectX for Windows
r Windows
r Windows
DirectX para Windows
DirectX para Windows
DirectX pour Windows
DirectX pour Windows
Microsoft(R) DirectX per Windows(R)
Microsoft(R) DirectX per Windows(R)
Microsoft(R) DirectX voor Windows(R)
Microsoft(R) DirectX voor Windows(R)
DirectX dla systemu Windows
DirectX dla systemu Windows
Windows
Windows
QHActiveDefense.exe_804:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
8%u3P
8%u3P
tCPj
tCPj
vSSSh
vSSSh
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
Uu.AUu
Uu.AUu
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
portuguese-brazilian
portuguese-brazilian
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
\\.\Scsi%d:
\\.\Scsi%d:
XXXXXX
XXXXXX
\\.\%s
\\.\%s
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
%s:x
%s:x
BRegDeleteKeyExW
BRegDeleteKeyExW
BRegDeleteKeyEx
BRegDeleteKeyEx
BRegCloseKey
BRegCloseKey
BRegEnumKeyExW
BRegEnumKeyExW
BRegEnumKeyEx
BRegEnumKeyEx
BRegEnumKeyW
BRegEnumKeyW
BRegEnumKey
BRegEnumKey
BRegDeleteKeyW
BRegDeleteKeyW
BRegDeleteKey
BRegDeleteKey
BRegCreateKeyExW
BRegCreateKeyExW
BRegCreateKeyEx
BRegCreateKeyEx
BRegCreateKeyW
BRegCreateKeyW
BRegCreateKey
BRegCreateKey
BRegOpenKeyExW
BRegOpenKeyExW
BRegOpenKeyEx
BRegOpenKeyEx
BRegOpenKeyW
BRegOpenKeyW
BRegOpenKey
BRegOpenKey
shellexecute=
shellexecute=
kernel32.dll
kernel32.dll
TTransportException: Unknown transport exception
TTransportException: Unknown transport exception
TTransportException: Transport not open
TTransportException: Transport not open
TTransportException: Timed out
TTransportException: Timed out
TTransportException: End of file
TTransportException: End of file
TTransportException: Interrupted
TTransportException: Interrupted
TTransportException: Invalid arguments
TTransportException: Invalid arguments
TTransportException: Corrupted Data
TTransportException: Corrupted Data
TTransportException: Internal error
TTransportException: Internal error
TTransportException: (Invalid exception type)
TTransportException: (Invalid exception type)
Cannot open base TTransport.
Cannot open base TTransport.
Cannot close base TTransport.
Cannot close base TTransport.
Base TTransport cannot read.
Base TTransport cannot read.
Base TTransport cannot write.
Base TTransport cannot write.
Base TTransport cannot consume.
Base TTransport cannot consume.
C:\vmagent_new\bin\joblist\38554\src\Q_capital\QHService_6.2\360LPUB\dev\include\boost/exception/detail/exception_ptr.hpp
C:\vmagent_new\bin\joblist\38554\src\Q_capital\QHService_6.2\360LPUB\dev\include\boost/exception/detail/exception_ptr.hpp
received invalid message type %d from client
received invalid message type %d from client
SetAuthKey
SetAuthKey
sendMsg2Srv
sendMsg2Srv
sendMsg2SrvEx
sendMsg2SrvEx
sendCMD2Srv
sendCMD2Srv
sendWndCopyDataMsg2Srv
sendWndCopyDataMsg2Srv
SendMsg2Users
SendMsg2Users
deleteContext() tid:%d
deleteContext() tid:%d
Advapi32.dll
Advapi32.dll
GetNamedPipeClientProcessId
GetNamedPipeClientProcessId
Q360DsMainMutexNetProbe_b6bb85f3-a4ba-499c-8a14-eac587ec1fc2
Q360DsMainMutexNetProbe_b6bb85f3-a4ba-499c-8a14-eac587ec1fc2
RegDeleteKeyExW
RegDeleteKeyExW
Unable to open pipe
Unable to open pipe
SetNamedPipeHandleState failed
SetNamedPipeHandleState failed
Called read on non-open pipe
Called read on non-open pipe
Called write on non-open pipe
Called write on non-open pipe
Write to pipe failed
Write to pipe failed
Thrift: %s
Thrift: %s
TThreadPoolServer exception %s: %s
TThreadPoolServer exception %s: %s
TThreadPoolServer: TServerTransport died on accept:
TThreadPoolServer: TServerTransport died on accept:
TPipeServer unable to initiate pipe comms, GLE=
TPipeServer unable to initiate pipe comms, GLE=
TPipeServer unable to initiate pipe comms
TPipeServer unable to initiate pipe comms
TPipeServer CreateNamedPipe failed, GLE=
TPipeServer CreateNamedPipe failed, GLE=
TPipeServer CreateNamedPipe failed
TPipeServer CreateNamedPipe failed
TPipeServer ConnectNamedPipe GLE=
TPipeServer ConnectNamedPipe GLE=
TPipeServer: client connection failed
TPipeServer: client connection failed
TPipeServer::TCreateNamedPipe() GLE=
TPipeServer::TCreateNamedPipe() GLE=
TCreateNamedPipe() failed
TCreateNamedPipe() failed
TApplicationException: Unsupported client type
TApplicationException: Unsupported client type
i32AuthKey
i32AuthKey
i32MagicKey
i32MagicKey
iAuthKey
iAuthKey
i32PipePortHandle
i32PipePortHandle
QTrayClient_SetAuthKey_pargs
QTrayClient_SetAuthKey_pargs
iMsgInfoId
iMsgInfoId
copyDataMsg
copyDataMsg
SetAuthKey failed: unknown result
SetAuthKey failed: unknown result
dwLastErr=%d
dwLastErr=%d
QTrayService_SetAuthKey_result
QTrayService_SetAuthKey_result
QTrayService_sendMsg2Srv_result
QTrayService_sendMsg2Srv_result
QTrayService_sendMsg2SrvEx_result
QTrayService_sendMsg2SrvEx_result
QTrayService_sendCMD2Srv_result
QTrayService_sendCMD2Srv_result
QTrayService_sendWndCopyDataMsg2Srv_result
QTrayService_sendWndCopyDataMsg2Srv_result
QTrayService_SendMsg2Users_result
QTrayService_SendMsg2Users_result
QTrayService.RegisterClient
QTrayService.RegisterClient
QTrayService.SetAuthKey
QTrayService.SetAuthKey
QTrayService.AttachMessage
QTrayService.AttachMessage
QTrayService.AddEventLog
QTrayService.AddEventLog
QTrayService.GetAutoliveState
QTrayService.GetAutoliveState
QTrayService.GetUserInfo
QTrayService.GetUserInfo
QTrayService.QueryClientObject
QTrayService.QueryClientObject
QTrayService.OnMessage
QTrayService.OnMessage
QTrayService.AVMessageToSrv
QTrayService.AVMessageToSrv
QTrayService.TestValue
QTrayService.TestValue
QTrayService.ping
QTrayService.ping
QTrayService.HipsFnCallBack
QTrayService.HipsFnCallBack
QTrayService.setAppMonState2Srv
QTrayService.setAppMonState2Srv
QTrayService.setDrvMonState2Srv
QTrayService.setDrvMonState2Srv
QTrayService.setSBNetworkState2Srv
QTrayService.setSBNetworkState2Srv
QTrayService.setCommonState2Srv
QTrayService.setCommonState2Srv
QTrayService.stopService
QTrayService.stopService
QTrayService.sendMsg2Srv
QTrayService.sendMsg2Srv
QTrayService.sendMsg2SrvEx
QTrayService.sendMsg2SrvEx
QTrayService.sendTrayData2Srv
QTrayService.sendTrayData2Srv
QTrayService.sendSBLaunchData2Srv
QTrayService.sendSBLaunchData2Srv
QTrayService.sendCMD2Srv
QTrayService.sendCMD2Srv
QTrayService.UDiskMessageToSrv
QTrayService.UDiskMessageToSrv
QTrayService.ReplyMessage2Srv
QTrayService.ReplyMessage2Srv
QTrayService.sendWndCopyDataMsg2Srv
QTrayService.sendWndCopyDataMsg2Srv
QTrayService.sendLaunchProcData2Srv
QTrayService.sendLaunchProcData2Srv
QTrayService.ScanMessageToSrv
QTrayService.ScanMessageToSrv
QTrayService.SendMsg2Users
QTrayService.SendMsg2Users
szKeyName
szKeyName
iSrvPipeHandle
iSrvPipeHandle
dwMsgID
dwMsgID
%s:%I64X
%s:%I64X
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
C:\vmagent_new\bin\joblist\38554\out\Release\QHActiveDefense.pdb
C:\vmagent_new\bin\joblist\38554\out\Release\QHActiveDefense.pdb
GetWindowsDirectoryW
GetWindowsDirectoryW
GetProcessHeap
GetProcessHeap
KERNEL32.dll
KERNEL32.dll
USER32.dll
USER32.dll
RegCreateKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegEnumKeyExW
RegCloseKey
RegCloseKey
RegQueryInfoKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteExW
ShellExecuteExW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
URLDownloadToCacheFileW
URLDownloadToCacheFileW
urlmon.dll
urlmon.dll
SHDeleteKeyW
SHDeleteKeyW
SHLWAPI.dll
SHLWAPI.dll
WINMM.dll
WINMM.dll
IPHLPAPI.DLL
IPHLPAPI.DLL
VERSION.dll
VERSION.dll
WS2_32.dll
WS2_32.dll
PSAPI.DLL
PSAPI.DLL
RPCRT4.dll
RPCRT4.dll
USERENV.dll
USERENV.dll
WTSAPI32.dll
WTSAPI32.dll
NETAPI32.dll
NETAPI32.dll
PeekNamedPipe
PeekNamedPipe
SetNamedPipeHandleState
SetNamedPipeHandleState
ConnectNamedPipe
ConnectNamedPipe
CreateNamedPipeW
CreateNamedPipeW
DisconnectNamedPipe
DisconnectNamedPipe
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
RegEnumKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyExA
zcÃ
zcÃ
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipe@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipe@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransport@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransport@transport@thrift@apache@@@detail@boost@@
.?AV?$TVirtualTransport@VTBufferedTransport@transport@thrift@apache@@VTBufferBase@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferedTransport@transport@thrift@apache@@VTBufferBase@234@@transport@thrift@apache@@
.?AVTBufferedTransport@transport@thrift@apache@@
.?AVTBufferedTransport@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferBase@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferBase@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AVTBufferBase@transport@thrift@apache@@
.?AVTBufferBase@transport@thrift@apache@@
.?AVTTransportDefaults@transport@thrift@apache@@
.?AVTTransportDefaults@transport@thrift@apache@@
.?AV?$TVirtualProtocol@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@VTProtocolDefaults@234@@protocol@thrift@apache@@
.?AV?$TVirtualProtocol@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@VTProtocolDefaults@234@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AVTTransportException@transport@thrift@apache@@
.?AVTTransportException@transport@thrift@apache@@
.?AVTTransport@transport@thrift@apache@@
.?AVTTransport@transport@thrift@apache@@
.?AV?$sp_counted_impl_p@VTBufferedTransportFactory@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransportFactory@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipeServer@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipeServer@transport@thrift@apache@@@detail@boost@@
.?AVTBufferedTransportFactory@transport@thrift@apache@@
.?AVTBufferedTransportFactory@transport@thrift@apache@@
.?AV?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AVTTransportFactory@transport@thrift@apache@@
.?AVTTransportFactory@transport@thrift@apache@@
.?AVTPipe@transport@thrift@apache@@
.?AVTPipe@transport@thrift@apache@@
.?AVIQSScanMsgCenter@@
.?AVIQSScanMsgCenter@@
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AVC360UtilExportFuncs@@
.?AVC360UtilExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AVC360ConfExportFuncs@@
.?AVC360ConfExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AVC360BaseExportFuncs@@
.?AVC360BaseExportFuncs@@
.?AVCScanMsgResult@@
.?AVCScanMsgResult@@
.?AVIQSScanMsgResult@@
.?AVIQSScanMsgResult@@
.?AV?$TVirtualTransport@VTPipe@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTPipe@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AVTPipeServer@transport@thrift@apache@@
.?AVTPipeServer@transport@thrift@apache@@
.?AVTServerTransport@transport@thrift@apache@@
.?AVTServerTransport@transport@thrift@apache@@
.?AVCUrlCallback@@
.?AVCUrlCallback@@
.?AVQTrayClient_SetAuthKey_presult@qtray@@
.?AVQTrayClient_SetAuthKey_presult@qtray@@
.?AVQTrayClient_SetAuthKey_pargs@qtray@@
.?AVQTrayClient_SetAuthKey_pargs@qtray@@
.?AVQTrayService_SendMsg2Users_result@qtray@@
.?AVQTrayService_SendMsg2Users_result@qtray@@
.?AVQTrayService_SendMsg2Users_args@qtray@@
.?AVQTrayService_SendMsg2Users_args@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_result@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_result@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_args@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_args@qtray@@
.?AVQTrayService_sendCMD2Srv_result@qtray@@
.?AVQTrayService_sendCMD2Srv_result@qtray@@
.?AVQTrayService_sendCMD2Srv_args@qtray@@
.?AVQTrayService_sendCMD2Srv_args@qtray@@
.?AVQTrayService_sendMsg2SrvEx_result@qtray@@
.?AVQTrayService_sendMsg2SrvEx_result@qtray@@
.?AVQTrayService_sendMsg2SrvEx_args@qtray@@
.?AVQTrayService_sendMsg2SrvEx_args@qtray@@
.?AVQTrayService_sendMsg2Srv_result@qtray@@
.?AVQTrayService_sendMsg2Srv_result@qtray@@
.?AVQTrayService_sendMsg2Srv_args@qtray@@
.?AVQTrayService_sendMsg2Srv_args@qtray@@
.?AVQTrayService_SetAuthKey_result@qtray@@
.?AVQTrayService_SetAuthKey_result@qtray@@
.?AVQTrayService_SetAuthKey_args@qtray@@
.?AVQTrayService_SetAuthKey_args@qtray@@
7r7C7N7_7u7{7
7r7C7N7_7u7{7
939@9#:0:
939@9#:0:
3"3'3.353
3"3'3.353
;$;(;,;0;
;$;(;,;0;
46U6f6
46U6f6
6*7074787
6*7074787
7-7Q7w7}7
7-7Q7w7}7
=5>;>]>}>
=5>;>]>}>
4 4$4(4,404
4 4$4(4,404
9(?,?0?8?
9(?,?0?8?
2 2$2(2,2024282
2 2$2(2,2024282
mscoree.dll
mscoree.dll
KERNEL32.DLL
KERNEL32.DLL
deepscan\cloudcom2.dll
deepscan\cloudcom2.dll
\360Safe\LogInfo
\360Safe\LogInfo
%s\%s*%s
%s\%s*%s
%s\%s
%s\%s
.log2
.log2
Newctrl.lck
Newctrl.lck
important_log
important_log
%s\%s%s%d%s
%s\%s%s%d%s
\\.\A:
\\.\A:
%d_%d_%d_%d_%d
%d_%d_%d_%d_%d
..\..\deepscan\BAPI.dll
..\..\deepscan\BAPI.dll
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
autorun.inf
autorun.inf
safemon\UDiskScanEngine.dll
safemon\UDiskScanEngine.dll
shellexecute
shellexecute
config.ini
config.ini
udisk.locale
udisk.locale
..\..\360verify.dll
..\..\360verify.dll
\LogInfo
\LogInfo
safemon\gamemode.tpi
safemon\gamemode.tpi
safemon\360procmon.dll
safemon\360procmon.dll
ipc\netdefender.dll
ipc\netdefender.dll
ipc\appd.dll
ipc\appd.dll
ipc\yhregd.dll
ipc\yhregd.dll
ipc\fileMgr.dll
ipc\fileMgr.dll
ipc\ipcservice.dll
ipc\ipcservice.dll
Software\360TotalSecurity\srvtpi\%s
Software\360TotalSecurity\srvtpi\%s
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeTray.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeTray.exe
QHSafeTray.exe
QHSafeTray.exe
360rp.dll
360rp.dll
recvmsg
recvmsg
recvmsgcontext
recvmsgcontext
sendmsg
sendmsg
sendmsgtosession
sendmsgtosession
sendmsgcontext
sendmsgcontext
sendmsgtosessioncontext
sendmsgtosessioncontext
\\.\qutmipc
\\.\qutmipc
.qihoo.com
.qihoo.com
.360safe.com
.360safe.com
.360.cn
.360.cn
360base.dll
360base.dll
360NetBase.dll
360NetBase.dll
%d.%d.%d.%d
%d.%d.%d.%d
user32.dll
user32.dll
safemon\QHSafeTray.exe
safemon\QHSafeTray.exe
QHSafeMain.exe
QHSafeMain.exe
QHVer.dll
QHVer.dll
%d.%d-%s
%d.%d-%s
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360safe.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360safe.exe
\galaxy.dat
\galaxy.dat
\\.\pipe\%ws
\\.\pipe\%ws
psapi.dll
psapi.dll
Kernel32.dll
Kernel32.dll
\galaxy2.dat
\galaxy2.dat
%%%s%%
%%%s%%
CrashReport.dll
CrashReport.dll
\\.\360SelfProtection
\\.\360SelfProtection
modules\360tsesafeup.exe
modules\360tsesafeup.exe
modules\360isafeup.exe
modules\360isafeup.exe
\360Tray.exe" /start
\360Tray.exe" /start
\QHSafeTray.exe" /start
\QHSafeTray.exe" /start
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AL_Keylogger
AL_Keylogger
QHWatchdog.exe
QHWatchdog.exe
rpcrt4.dll
rpcrt4.dll
"%s" %s
"%s" %s
explorer.exe
explorer.exe
{1099D519-05E2-47e9-B669-413DDCD5D53E}
{1099D519-05E2-47e9-B669-413DDCD5D53E}
deepscan\BAPI.dll
deepscan\BAPI.dll
safemon\QHWatchdog.exe /watch
safemon\QHWatchdog.exe /watch
Global\0FB40CC1-AFF9-441d-8D9B-9F285AD8F637__
Global\0FB40CC1-AFF9-441d-8D9B-9F285AD8F637__
\explorer.exe
\explorer.exe
deepscan\qutmload.dll
deepscan\qutmload.dll
safemon\SelfProtectAPI2.dll
safemon\SelfProtectAPI2.dll
webfw.log
webfw.log
wddown.log
wddown.log
ScanStub.dll
ScanStub.dll
deepscan\speedmem2.hg
deepscan\speedmem2.hg
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
{5EEE8B0C-BEB2-4f05-BA7E-5EF3A65B8ECC}
{5EEE8B0C-BEB2-4f05-BA7E-5EF3A65B8ECC}
\deepscan\BAPI.dll
\deepscan\BAPI.dll
AviraImp.dll
AviraImp.dll
%s.bak
%s.bak
\\.\pipe\
\\.\pipe\
UrlSettings.dll.locale
UrlSettings.dll.locale
hXXp://s.360safe.com/safei18n/
hXXp://s.360safe.com/safei18n/
\i18n.dll
\i18n.dll
main.htm?
main.htm?
tray.htm?m=%s&cs=%s&a=%s&?
tray.htm?m=%s&cs=%s&a=%s&?
ins.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
ins.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
uni.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s&cpu=%s&ram=%s&protect=%s&ttl=%s&avp=%s&scan=%s&moni=%s
uni.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s&cpu=%s&ram=%s&protect=%s&ttl=%s&avp=%s&scan=%s&moni=%s
feature.htm?id=%d&
feature.htm?id=%d&
up.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
up.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
off_vdb.htm?dt=%s&dv=%s&prod=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
off_vdb.htm?dt=%s&dv=%s&prod=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
pmode.htm?m=%s&cs=%s&
pmode.htm?m=%s&cs=%s&
err.htm?mod=sp&code=10&mid=%s&ver=%s&lan=%s&os=%s&ch=%s&rn=%s
err.htm?mod=sp&code=10&mid=%s&ver=%s&lan=%s&os=%s&ch=%s&rn=%s
engine.htm?t=%s&s=%d&
engine.htm?t=%s&s=%d&
vs.htm?m=%s&
vs.htm?m=%s&
wifi.htm?f=%s&r=%s&c=%s&
wifi.htm?f=%s&r=%s&c=%s&
fb.htm?a=%s&s=%s&
fb.htm?a=%s&s=%s&
checkup.htm?a=%s&
checkup.htm?a=%s&
instcomp.htm?soft=20130127&status=%d&mid=%s
instcomp.htm?soft=20130127&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&sdb=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&sdb=%d&mid=%s
ws_ff.htm?s=%s&
ws_ff.htm?s=%s&
toolbox.htm?id=%d&
toolbox.htm?id=%d&
toolboxmodule.htm?id=%d&status=%d&
toolboxmodule.htm?id=%d&status=%d&
dumpuper.htm?stack=%s&ver=%s&queryResponse=%s&sendResponse=%s
dumpuper.htm?stack=%s&ver=%s&queryResponse=%s&sendResponse=%s
wd.htm
wd.htm
wdpaypro.htm
wdpaypro.htm
filemon.htm
filemon.htm
hips.htm
hips.htm
src.htm
src.htm
%s?bd=%d&avira=%d&exectime=%u&step=%d&
%s?bd=%d&avira=%d&exectime=%u&step=%d&
&curl=0
&curl=0
&curl=1
&curl=1
&curl=2&curlerr=0xx
&curl=2&curlerr=0xx
&curl=2
&curl=2
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
\safemon\WscReg.exe
\safemon\WscReg.exe
WHERE pathToSignedProductExe LIKE '%safemon\\QHSafeTray.exe'
WHERE pathToSignedProductExe LIKE '%safemon\\QHSafeTray.exe'
{X-X-X-X-XX}_
{X-X-X-X-XX}_
.\QHCheckCertificate.c
.\QHCheckCertificate.c
Operator
Operator
Certificate Table
Certificate Table
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
netmsg.dll
netmsg.dll
mqutil.dll
mqutil.dll
wininet.dll
wininet.dll
__crt
__crt
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
{A0972F10-452C-4cd1-904E-B50E394EDE34}
{A0972F10-452C-4cd1-904E-B50E394EDE34}
%s-%d-%s:
%s-%d-%s:
%s-%d-%s:%s
%s-%d-%s:%s
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
%s %u
%s %u
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
hXXp://down.360safe.com/setup.exe
hXXp://down.360safe.com/setup.exe
hXXp://down.360safe.com/setupbeta.exe
hXXp://down.360safe.com/setupbeta.exe
%Program Files% (x86)\360\Total Security\safemon\QHActiveDefense.exe
%Program Files% (x86)\360\Total Security\safemon\QHActiveDefense.exe
%Program Files% (x86)\360\Total Security\safemon
%Program Files% (x86)\360\Total Security\safemon
QHActiveDefense.exe
QHActiveDefense.exe
%Program Files% (x86)\360\Total Security
%Program Files% (x86)\360\Total Security
6,2,0,1000
6,2,0,1000
QHActive.exe
QHActive.exe
QHWatchdog.exe_2492:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
operator
operator
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
C:\vmagent_new\bin\joblist\31966\out\Release\QHWatchdog.pdb
C:\vmagent_new\bin\joblist\31966\out\Release\QHWatchdog.pdb
KERNEL32.dll
KERNEL32.dll
ADVAPI32.dll
ADVAPI32.dll
SHLWAPI.dll
SHLWAPI.dll
GetCPInfo
GetCPInfo
9'9,90949]9
9'9,90949]9
7'7,70747]7
7'7,70747]7
014181
014181
mscoree.dll
mscoree.dll
KERNEL32.DLL
KERNEL32.DLL
%Program Files% (x86)\360\Total Security\safemon\QHWatchdog.exe
%Program Files% (x86)\360\Total Security\safemon\QHWatchdog.exe
6,0,0,1001
6,0,0,1001
QHWatchdog.exe
QHWatchdog.exe
QHSafeTray.exe_1172:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
L$.Qf
L$.Qf
tCPj
tCPj
vSSSh
vSSSh
FTPjK
FTPjK
FtPj;
FtPj;
C.PjRV
C.PjRV
FUu.AUu
FUu.AUu
kernel32.dll
kernel32.dll
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
portuguese-brazilian
portuguese-brazilian
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
operator
operator
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
Local\{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flag
\\.\Scsi%d:
\\.\Scsi%d:
XXXXXX
XXXXXX
\\.\%s
\\.\%s
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
%s:x
%s:x
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
(3-!0,1'8"5.*2$
(3-!0,1'8"5.*2$
BRegOpenKey
BRegOpenKey
BRegOpenKeyW
BRegOpenKeyW
BRegOpenKeyEx
BRegOpenKeyEx
BRegOpenKeyExW
BRegOpenKeyExW
BRegCreateKey
BRegCreateKey
BRegCreateKeyW
BRegCreateKeyW
BRegCreateKeyEx
BRegCreateKeyEx
BRegCreateKeyExW
BRegCreateKeyExW
BRegDeleteKey
BRegDeleteKey
BRegDeleteKeyW
BRegDeleteKeyW
BRegEnumKey
BRegEnumKey
BRegEnumKeyW
BRegEnumKeyW
BRegEnumKeyEx
BRegEnumKeyEx
BRegEnumKeyExW
BRegEnumKeyExW
BRegCloseKey
BRegCloseKey
BRegDeleteKeyEx
BRegDeleteKeyEx
BRegDeleteKeyExW
BRegDeleteKeyExW
GetNamedPipeClientProcessId
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
GetNamedPipeServerProcessId
%s\%s
%s\%s
AL_Keylogger
AL_Keylogger
AutoLogin
AutoLogin
NetPayShowWeb
NetPayShowWeb
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths
QHSafeMain.exe
QHSafeMain.exe
C:\vmagent_new\bin\joblist\39403\src\Q_capital\QHSafeTray__6.2\360LPUB\dev\include\boost/exception/detail/exception_ptr.hpp
C:\vmagent_new\bin\joblist\39403\src\Q_capital\QHSafeTray__6.2\360LPUB\dev\include\boost/exception/detail/exception_ptr.hpp
\"^&`[]{}
\"^&`[]{}
-_.!~*'()
-_.!~*'()
dkey
dkey
bootkey
bootkey
select * from %s
select * from %s
select * from %s
select * from %s
update %s set %s=%d, %s=%d where %s='%s'
update %s set %s=%d, %s=%d where %s='%s'
insert into %s(%s, %s, %s, %s, %s, %s, %s)values('%d', '%s', '%s', '%d', '%d', '%d', '%d')
insert into %s(%s, %s, %s, %s, %s, %s, %s)values('%d', '%s', '%s', '%d', '%d', '%d', '%d')
select * from %s where %s='%s'
select * from %s where %s='%s'
update %s set %s=%d where %s='%s'
update %s set %s=%d where %s='%s'
create table %s(%s int, %s char, %s char, %s int, %s int, %s int, %s int);
create table %s(%s int, %s char, %s char, %s int, %s int, %s int, %s int);
create table %s(%s char, %s char);
create table %s(%s char, %s char);
select * from %s where %s
select * from %s where %s
select * from %s where %s='%d' and %s=0
select * from %s where %s='%d' and %s=0
update %s set %s='%s' where %s='%s'
update %s set %s='%s' where %s='%s'
insert into %s(%s, %s)values('%s', '%s')
insert into %s(%s, %s)values('%s', '%s')
select * from %s where %s
select * from %s where %s
select * from %s where %s > %d and %s
select * from %s where %s > %d and %s
select * from %s where %s
select * from %s where %s
select * from %s where %s>=%d and %s
select * from %s where %s>=%d and %s
select * from %s where %s>=%d and %s
select * from %s where %s>=%d and %s
select * from %s where %s=0 and %s
select * from %s where %s=0 and %s
speedupopt.db
speedupopt.db
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
\\.\X:
\\.\X:
TTransportException: Unknown transport exception
TTransportException: Unknown transport exception
TTransportException: Transport not open
TTransportException: Transport not open
TTransportException: Timed out
TTransportException: Timed out
TTransportException: End of file
TTransportException: End of file
TTransportException: Interrupted
TTransportException: Interrupted
TTransportException: Invalid arguments
TTransportException: Invalid arguments
TTransportException: Corrupted Data
TTransportException: Corrupted Data
TTransportException: Internal error
TTransportException: Internal error
TTransportException: (Invalid exception type)
TTransportException: (Invalid exception type)
Cannot open base TTransport.
Cannot open base TTransport.
Cannot close base TTransport.
Cannot close base TTransport.
Base TTransport cannot read.
Base TTransport cannot read.
Base TTransport cannot write.
Base TTransport cannot write.
Base TTransport cannot consume.
Base TTransport cannot consume.
received invalid message type %d from client
received invalid message type %d from client
SetAuthKey
SetAuthKey
_PPQueryIPPort
_PPQueryIPPort
Thrift: %s
Thrift: %s
TThreadPoolServer exception %s: %s
TThreadPoolServer exception %s: %s
TThreadPoolServer: TServerTransport died on accept:
TThreadPoolServer: TServerTransport died on accept:
Unable to open pipe
Unable to open pipe
SetNamedPipeHandleState failed
SetNamedPipeHandleState failed
Called read on non-open pipe
Called read on non-open pipe
Called write on non-open pipe
Called write on non-open pipe
Write to pipe failed
Write to pipe failed
TPipeServer unable to initiate pipe comms, GLE=
TPipeServer unable to initiate pipe comms, GLE=
TPipeServer unable to initiate pipe comms
TPipeServer unable to initiate pipe comms
TPipeServer CreateNamedPipe failed, GLE=
TPipeServer CreateNamedPipe failed, GLE=
TPipeServer CreateNamedPipe failed
TPipeServer CreateNamedPipe failed
TPipeServer ConnectNamedPipe GLE=
TPipeServer ConnectNamedPipe GLE=
TPipeServer: client connection failed
TPipeServer: client connection failed
TPipeServer::TCreateNamedPipe() GLE=
TPipeServer::TCreateNamedPipe() GLE=
TCreateNamedPipe() failed
TCreateNamedPipe() failed
user32.dll
user32.dll
dwLastErr=%d
dwLastErr=%d
TApplicationException: Unsupported client type
TApplicationException: Unsupported client type
i32AuthKey
i32AuthKey
i32MagicKey
i32MagicKey
iAuthKey
iAuthKey
i32PipePortHandle
i32PipePortHandle
QTrayClient_SetAuthKey_result
QTrayClient_SetAuthKey_result
iMsgInfoId
iMsgInfoId
copyDataMsg
copyDataMsg
SetAuthKey failed: unknown result
SetAuthKey failed: unknown result
QTrayClient.SetTrayIcon
QTrayClient.SetTrayIcon
QTrayClient.SetTipText
QTrayClient.SetTipText
QTrayClient.ShowBallon
QTrayClient.ShowBallon
QTrayClient.SkinMessageBox
QTrayClient.SkinMessageBox
QTrayClient.SetTrayData
QTrayClient.SetTrayData
QTrayClient.GetTrayData
QTrayClient.GetTrayData
QTrayClient.AVMessageToCli
QTrayClient.AVMessageToCli
QTrayClient.TestValueClient
QTrayClient.TestValueClient
QTrayClient.HipsCreateNotifyWnd
QTrayClient.HipsCreateNotifyWnd
QTrayClient.SetAuthKey
QTrayClient.SetAuthKey
QTrayClient.PostMessage
QTrayClient.PostMessage
QTrayClient.SendMessage
QTrayClient.SendMessage
QTrayClient.UDiskMessageToCli
QTrayClient.UDiskMessageToCli
QTrayClient.PostCopyDataMessage
QTrayClient.PostCopyDataMessage
QTrayClient.ScanMessageToCli
QTrayClient.ScanMessageToCli
sendMsg2Srv
sendMsg2Srv
sendMsg2SrvEx
sendMsg2SrvEx
sendCMD2Srv
sendCMD2Srv
sendWndCopyDataMsg2Srv
sendWndCopyDataMsg2Srv
SendMsg2Users
SendMsg2Users
u8StrClientPipe
u8StrClientPipe
QTrayService_SetAuthKey_pargs
QTrayService_SetAuthKey_pargs
nStartMsg
nStartMsg
nEndMsg
nEndMsg
bBypassVista
bBypassVista
uMsg
uMsg
iMsgType
iMsgType
iMsg
iMsg
QTrayService_sendMsg2Srv_pargs
QTrayService_sendMsg2Srv_pargs
QTrayService_sendMsg2SrvEx_pargs
QTrayService_sendMsg2SrvEx_pargs
strKey
strKey
cmdline
cmdline
iCMD
iCMD
QTrayService_sendCMD2Srv_pargs
QTrayService_sendCMD2Srv_pargs
iCopyDataMsgId
iCopyDataMsgId
QTrayService_sendWndCopyDataMsg2Srv_pargs
QTrayService_sendWndCopyDataMsg2Srv_pargs
iMsgId
iMsgId
QTrayService_SendMsg2Users_pargs
QTrayService_SendMsg2Users_pargs
sendMsg2Srv failed: unknown result
sendMsg2Srv failed: unknown result
sendMsg2SrvEx failed: unknown result
sendMsg2SrvEx failed: unknown result
sendCMD2Srv failed: unknown result
sendCMD2Srv failed: unknown result
sendWndCopyDataMsg2Srv failed: unknown result
sendWndCopyDataMsg2Srv failed: unknown result
SendMsg2Users failed: unknown result
SendMsg2Users failed: unknown result
szKeyName
szKeyName
u8StrCmd
u8StrCmd
dwMsgID
dwMsgID
%s:%I64X
%s:%I64X
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
C:\vmagent_new\bin\joblist\39403\out\Release\QHSafeTray.pdb
C:\vmagent_new\bin\joblist\39403\out\Release\QHSafeTray.pdb
GetWindowsDirectoryW
GetWindowsDirectoryW
DisconnectNamedPipe
DisconnectNamedPipe
KERNEL32.dll
KERNEL32.dll
ExitWindowsEx
ExitWindowsEx
USER32.dll
USER32.dll
SetViewportOrgEx
SetViewportOrgEx
GDI32.dll
GDI32.dll
RegOpenKeyExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
RegEnumKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyExW
RegCreateKeyA
RegCreateKeyA
RegDeleteKeyW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryInfoKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
ShellExecuteExW
ShellExecuteExW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
URLDownloadToCacheFileW
URLDownloadToCacheFileW
urlmon.dll
urlmon.dll
SHLWAPI.dll
SHLWAPI.dll
COMCTL32.dll
COMCTL32.dll
PSAPI.DLL
PSAPI.DLL
Secur32.dll
Secur32.dll
WINMM.dll
WINMM.dll
VERSION.dll
VERSION.dll
RPCRT4.dll
RPCRT4.dll
WTSAPI32.dll
WTSAPI32.dll
WS2_32.dll
WS2_32.dll
IMM32.dll
IMM32.dll
NETAPI32.dll
NETAPI32.dll
GetProcessHeap
GetProcessHeap
PeekNamedPipe
PeekNamedPipe
SetNamedPipeHandleState
SetNamedPipeHandleState
ConnectNamedPipe
ConnectNamedPipe
CreateNamedPipeW
CreateNamedPipeW
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryW
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
RegEnumKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyExA
zcÃ
zcÃ
.?AVCUrlCallback@@
.?AVCUrlCallback@@
.?AVTBufferedTransportFactory@transport@thrift@apache@@
.?AVTBufferedTransportFactory@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferedTransport@transport@thrift@apache@@VTBufferBase@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferedTransport@transport@thrift@apache@@VTBufferBase@234@@transport@thrift@apache@@
.?AVTBufferedTransport@transport@thrift@apache@@
.?AVTBufferedTransport@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferBase@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTBufferBase@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AVTBufferBase@transport@thrift@apache@@
.?AVTBufferBase@transport@thrift@apache@@
.?AVTTransportDefaults@transport@thrift@apache@@
.?AVTTransportDefaults@transport@thrift@apache@@
.?AV?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AV?$TVirtualProtocol@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@VTProtocolDefaults@234@@protocol@thrift@apache@@
.?AV?$TVirtualProtocol@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@VTProtocolDefaults@234@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AV?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@
.?AVTTransportFactory@transport@thrift@apache@@
.?AVTTransportFactory@transport@thrift@apache@@
.?AV?$sp_counted_impl_p@VTBufferedTransportFactory@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransportFactory@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolFactoryT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipeServer@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipeServer@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransport@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTBufferedTransport@transport@thrift@apache@@@detail@boost@@
.?AVTTransportException@transport@thrift@apache@@
.?AVTTransportException@transport@thrift@apache@@
.?AVTTransport@transport@thrift@apache@@
.?AVTTransport@transport@thrift@apache@@
.?AVTPipe@transport@thrift@apache@@
.?AVTPipe@transport@thrift@apache@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@V?$TBinaryProtocolT@VTTransport@transport@thrift@apache@@@protocol@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipe@transport@thrift@apache@@@detail@boost@@
.?AV?$sp_counted_impl_p@VTPipe@transport@thrift@apache@@@detail@boost@@
.PA_W
.PA_W
.?AV?$CModalWindow@VCMsgBox@@@@
.?AV?$CModalWindow@VCMsgBox@@@@
.?AV?$CWindowImpl@VCMsgBox@@VCWindow@ATL@@V?$CWinTraits@$0IGAAMCAA@$0BAA@@3@@ATL@@
.?AV?$CWindowImpl@VCMsgBox@@VCWindow@ATL@@V?$CWinTraits@$0IGAAMCAA@$0BAA@@3@@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCMsgBox@@$1?DIID_Isite_events@sitesUI@@3U_GUID@@B@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCMsgBox@@$1?DIID_Isite_events@sitesUI@@3U_GUID@@B@ATL@@
.?AVCMsgBox@@
.?AVCMsgBox@@
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AVC360UtilExportFuncs@@
.?AVC360UtilExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AVC360ConfExportFuncs@@
.?AVC360ConfExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AVC360BaseExportFuncs@@
.?AVC360BaseExportFuncs@@
.?AV?$TVirtualTransport@VTPipe@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AV?$TVirtualTransport@VTPipe@transport@thrift@apache@@VTTransportDefaults@234@@transport@thrift@apache@@
.?AVTPipeServer@transport@thrift@apache@@
.?AVTPipeServer@transport@thrift@apache@@
.?AVTServerTransport@transport@thrift@apache@@
.?AVTServerTransport@transport@thrift@apache@@
.?AVQTrayClient_SetAuthKey_result@qtray@@
.?AVQTrayClient_SetAuthKey_result@qtray@@
.?AVQTrayClient_SetAuthKey_args@qtray@@
.?AVQTrayClient_SetAuthKey_args@qtray@@
.?AVQTrayService_SendMsg2Users_presult@qtray@@
.?AVQTrayService_SendMsg2Users_presult@qtray@@
.?AVQTrayService_SendMsg2Users_pargs@qtray@@
.?AVQTrayService_SendMsg2Users_pargs@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_presult@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_presult@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_pargs@qtray@@
.?AVQTrayService_sendWndCopyDataMsg2Srv_pargs@qtray@@
.?AVQTrayService_sendCMD2Srv_presult@qtray@@
.?AVQTrayService_sendCMD2Srv_presult@qtray@@
.?AVQTrayService_sendCMD2Srv_pargs@qtray@@
.?AVQTrayService_sendCMD2Srv_pargs@qtray@@
.?AVQTrayService_sendMsg2SrvEx_presult@qtray@@
.?AVQTrayService_sendMsg2SrvEx_presult@qtray@@
.?AVQTrayService_sendMsg2SrvEx_pargs@qtray@@
.?AVQTrayService_sendMsg2SrvEx_pargs@qtray@@
.?AVQTrayService_sendMsg2Srv_presult@qtray@@
.?AVQTrayService_sendMsg2Srv_presult@qtray@@
.?AVQTrayService_sendMsg2Srv_pargs@qtray@@
.?AVQTrayService_sendMsg2Srv_pargs@qtray@@
.?AVQTrayService_SetAuthKey_presult@qtray@@
.?AVQTrayService_SetAuthKey_presult@qtray@@
.?AVQTrayService_SetAuthKey_pargs@qtray@@
.?AVQTrayService_SetAuthKey_pargs@qtray@@
%dM"og
%dM"og
.UMUX
.UMUX
KeyU
KeyU
.Rd0Jb
.Rd0Jb
4m`%D@P
4m`%D@P
55v6
55v6
:':0:6:?:
:':0:6:?:
=&>6>]>}>
=&>6>]>}>
9Å“9
9Å“9
=
=
=!=,=>=}=
=!=,=>=}=
7'7,70747]7
7'7,70747]7
= =$=(=,=0=4=~=
= =$=(=,=0=4=~=
? ?$?(?,?
? ?$?(?,?
01S1
01S1
8Â8
8Â8
? ?$?(?,?0?4?
? ?$?(?,?0?4?
= =$=(=,=0=
= =$=(=,=0=
2(3,30343
2(3,30343
6$8(8,8084888
6$8(8,8084888
: :<:>
: :<:>
mscoree.dll
mscoree.dll
KERNEL32.DLL
KERNEL32.DLL
powrprof.dll
powrprof.dll
BypassMetroDesktop
BypassMetroDesktop
Software\Microsoft\Windows\CurrentVersion\Policies
Software\Microsoft\Windows\CurrentVersion\Policies
%s\Explorer
%s\Explorer
360InternationTray\traymenu.xml
360InternationTray\traymenu.xml
\LiveUpdate360.exe
\LiveUpdate360.exe
ipc\360boxmain.exe
ipc\360boxmain.exe
xsoftmgr\somkernl.dll
xsoftmgr\somkernl.dll
d.360.cn
d.360.cn
.360safe.com
.360safe.com
%s
%s
%s
%s
360.cn
360.cn
\\.\360SelfProtection
\\.\360SelfProtection
"%s\Utils\360MsgCenter.exe" /NOTIFY=%d
"%s\Utils\360MsgCenter.exe" /NOTIFY=%d
360TotalSecurityUpdMsgWnd
360TotalSecurityUpdMsgWnd
[md=%u][op=%u][e=%u]
[md=%u][op=%u][e=%u]
[md=%u][e=%u]
[md=%u][e=%u]
360base.dll
360base.dll
360conf.dll
360conf.dll
..\360base.dll
..\360base.dll
\deepscan\360base.dll
\deepscan\360base.dll
..\..\360base.dll
..\..\360base.dll
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360safe.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\360safe.exe
..\360conf.dll
..\360conf.dll
..\..\360conf.dll
..\..\360conf.dll
deepscan\BAPI.dll
deepscan\BAPI.dll
..\ipc\360boxmain.exe
..\ipc\360boxmain.exe
Kernel32.dll
Kernel32.dll
CrashReport.dll
CrashReport.dll
\360Base.dll
\360Base.dll
\CrashReport.dll
\CrashReport.dll
sites.dll
sites.dll
i18n.dll
i18n.dll
%strayna.html?
%strayna.html?
Global\0FB40CC1-AFF9-441d-8D9B-9F285AD8F637__
Global\0FB40CC1-AFF9-441d-8D9B-9F285AD8F637__
360verify.dll
360verify.dll
\LogInfo
\LogInfo
softmgr\somkernl.dll
softmgr\somkernl.dll
\deepscan\qutmload.dll
\deepscan\qutmload.dll
360InternationSafe\image\%s
360InternationSafe\image\%s
Session%d
Session%d
safemon\SelfProtectAPI2.dll
safemon\SelfProtectAPI2.dll
safemon\360procmon.dll
safemon\360procmon.dll
e\safemon\somproxy.dll
e\safemon\somproxy.dll
\safemon\QHSafeTray.exe" /start
\safemon\QHSafeTray.exe" /start
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
safemon\QHActiveDefense.exe
safemon\QHActiveDefense.exe
safemon\360hipsPopWnd.dll
safemon\360hipsPopWnd.dll
\galaxy.dat
\galaxy.dat
360InternationSafe\msgbox.xml
360InternationSafe\msgbox.xml
360chrome
360chrome
safevideo.exe
safevideo.exe
chrome_exe
chrome_exe
IDS_360EXE_NOT_IN_SB
IDS_360EXE_NOT_IN_SB
360InternationTray\speedld.xml
360InternationTray\speedld.xml
360InternationTray\shared.xml
360InternationTray\shared.xml
%sbtime.html?tp=%d&n=%d&o=%d&t=%d&
%sbtime.html?tp=%d&n=%d&o=%d&t=%d&
\QHToasts.exe
\QHToasts.exe
tsupd.ini
tsupd.ini
IDS_TRAY_EXIT_MSG_TEXT
IDS_TRAY_EXIT_MSG_TEXT
IDS_TRAY_EXIT_MSG_YES
IDS_TRAY_EXIT_MSG_YES
IDS_TRAY_EXIT_MSG_NO
IDS_TRAY_EXIT_MSG_NO
/cmd=
/cmd=
/cmdline=
/cmdline=
F\galaxy.dat
F\galaxy.dat
QHSafeScanner.exe
QHSafeScanner.exe
"%s\%s" %s
"%s\%s" %s
safemon\360safemonpro.tpi
safemon\360safemonpro.tpi
safemon\360AV.tpi
safemon\360AV.tpi
safemon\360Udisk.tpi
safemon\360Udisk.tpi
\deepscan\CloudSec3.dll
\deepscan\CloudSec3.dll
\deepscan\Deepscan.dll
\deepscan\Deepscan.dll
360SkinView.exe
360SkinView.exe
"%s%s" "%s"
"%s%s" "%s"
"%s" %s
"%s" %s
\PatchUp.exe
\PatchUp.exe
PDown.dll
PDown.dll
d.360safe.com
d.360safe.com
.360.cn
.360.cn
\\.\pipe\%ws
\\.\pipe\%ws
pKernel32.dll
pKernel32.dll
explorer.exe
explorer.exe
taskmgr.exe
taskmgr.exe
QHVer.dll
QHVer.dll
config.ini
config.ini
%d.%d-%s
%d.%d-%s
\StringFileInfo\xx
\StringFileInfo\xx
%s\ProductName
%s\ProductName
%s\FileDescription
%s\FileDescription
%d.%d.%d.%d
%d.%d.%d.%d
%s\OriginalFilename
%s\OriginalFilename
%s\InternalName
%s\InternalName
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s
360se6.exe
360se6.exe
360se.exe
360se.exe
360chrome.exe
360chrome.exe
%s\shell
%s\shell
%s\shell\%s\command
%s\shell\%s\command
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
ntdll.dll
ntdll.dll
okernel32.dll
okernel32.dll
\ntoskrnl.exe
\ntoskrnl.exe
SOFTWARE\Microsoft\Windows NT\CurrentVersion
SOFTWARE\Microsoft\Windows NT\CurrentVersion
360util.dll
360util.dll
360NetBase.dll
360NetBase.dll
softcounter_%u.xml
softcounter_%u.xml
\StringFileInfo\xx\ProductName
\StringFileInfo\xx\ProductName
http=
http=
https=
https=
CLSID\%s\InprocServer32
CLSID\%s\InprocServer32
windows
windows
%s\Microsoft Shared\OFFICE9
%s\Microsoft Shared\OFFICE9
%s\Microsoft Shared\OFFICE10
%s\Microsoft Shared\OFFICE10
%s\Microsoft Shared\OFFICE11
%s\Microsoft Shared\OFFICE11
%s\Microsoft Shared\OFFICE12
%s\Microsoft Shared\OFFICE12
%s\Microsoft Shared\OFFICE14
%s\Microsoft Shared\OFFICE14
%s\Microsoft Shared\OFFICE15
%s\Microsoft Shared\OFFICE15
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
&curl=0
&curl=0
&curl=1
&curl=1
&curl=2&curlerr=0xx
&curl=2&curlerr=0xx
&curl=2
&curl=2
\config.ini
\config.ini
..\config.ini
..\config.ini
%snosign.htm?f=%s&re=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
%snosign.htm?f=%s&re=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
hXXp://VVV.360totalsecurity.com/d/ts/%s/%s/
hXXp://VVV.360totalsecurity.com/d/ts/%s/%s/
%s%cd:d
%s%cd:d
%s "%s"
%s "%s"
%s %s
%s %s
IEXPLORE.EXE
IEXPLORE.EXE
firefox
firefox
%Y-%m-%d
%Y-%m-%d
\leakrepair.dll
\leakrepair.dll
%llu%s
%llu%s
%d:%s
%d:%s
ipc\ipcservice.dll
ipc\ipcservice.dll
Software\360TotalSecurity\traytpi\%s
Software\360TotalSecurity\traytpi\%s
safemon\360TrayMenu.dll
safemon\360TrayMenu.dll
%d/d/d
%d/d/d
%dddddd
%dddddd
%Y-%m-%d %H:%M:%S
%Y-%m-%d %H:%M:%S
somextrainfo2.ini
somextrainfo2.ini
svdl.ini
svdl.ini
svchost.exe
svchost.exe
[%d][%d] u:u:u:u - %s
[%d][%d] u:u:u:u - %s
{1099D519-05E2-47e9-B669-413DDCD5D53E}
{1099D519-05E2-47e9-B669-413DDCD5D53E}
Common\XML\CommonResource.xml
Common\XML\CommonResource.xml
support
support
cmd.exe
cmd.exe
.android_secure
.android_secure
\deepscan\BAPI.dll
\deepscan\BAPI.dll
safemon\cleanedFileFullpath.dat
safemon\cleanedFileFullpath.dat
can not load pdown.dll
can not load pdown.dll
n360TsLiveUpd.exe
n360TsLiveUpd.exe
modules\360isafeup.exe
modules\360isafeup.exe
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
0.xml
0.xml
default.xml
default.xml
theme.xml
theme.xml
\\.\pipe\
\\.\pipe\
UrlSettings.dll.locale
UrlSettings.dll.locale
hXXp://s.360safe.com/safei18n/
hXXp://s.360safe.com/safei18n/
\i18n.dll
\i18n.dll
main.htm?
main.htm?
tray.htm?m=%s&cs=%s&a=%s&?
tray.htm?m=%s&cs=%s&a=%s&?
ins.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
ins.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
uni.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s&cpu=%s&ram=%s&protect=%s&ttl=%s&avp=%s&scan=%s&moni=%s
uni.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s&cpu=%s&ram=%s&protect=%s&ttl=%s&avp=%s&scan=%s&moni=%s
feature.htm?id=%d&
feature.htm?id=%d&
up.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
up.htm?mid=%s&ver=%s&lan=%s&os=%s&ch=%s
off_vdb.htm?dt=%s&dv=%s&prod=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
off_vdb.htm?dt=%s&dv=%s&prod=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
pmode.htm?m=%s&cs=%s&
pmode.htm?m=%s&cs=%s&
err.htm?mod=sp&code=10&mid=%s&ver=%s&lan=%s&os=%s&ch=%s&rn=%s
err.htm?mod=sp&code=10&mid=%s&ver=%s&lan=%s&os=%s&ch=%s&rn=%s
engine.htm?t=%s&s=%d&
engine.htm?t=%s&s=%d&
vs.htm?m=%s&
vs.htm?m=%s&
wifi.htm?f=%s&r=%s&c=%s&
wifi.htm?f=%s&r=%s&c=%s&
fb.htm?a=%s&s=%s&
fb.htm?a=%s&s=%s&
checkup.htm?a=%s&
checkup.htm?a=%s&
instcomp.htm?soft=20130127&status=%d&mid=%s
instcomp.htm?soft=20130127&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&sdb=%d&mid=%s
safe/instcomp.htm?soft=6701&status=%d&sda=%d&sdb=%d&mid=%s
ws_ff.htm?s=%s&
ws_ff.htm?s=%s&
toolbox.htm?id=%d&
toolbox.htm?id=%d&
toolboxmodule.htm?id=%d&status=%d&
toolboxmodule.htm?id=%d&status=%d&
dumpuper.htm?stack=%s&ver=%s&queryResponse=%s&sendResponse=%s
dumpuper.htm?stack=%s&ver=%s&queryResponse=%s&sendResponse=%s
wd.htm
wd.htm
wdpaypro.htm
wdpaypro.htm
filemon.htm
filemon.htm
hips.htm
hips.htm
src.htm
src.htm
\i18n\i18n.ini
\i18n\i18n.ini
\softmgr\AdvUtils.ini
\softmgr\AdvUtils.ini
qurl
qurl
{X-X-X-X-XX}_
{X-X-X-X-XX}_
psapi.dll
psapi.dll
.\QHCheckCertificate.c
.\QHCheckCertificate.c
Operator
Operator
Certificate Table
Certificate Table
:SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
:SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
netmsg.dll
netmsg.dll
mqutil.dll
mqutil.dll
wininet.dll
wininet.dll
__crt
__crt
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
{A0972F10-452C-4cd1-904E-B50E394EDE34}
{A0972F10-452C-4cd1-904E-B50E394EDE34}
%s-%d-%s:
%s-%d-%s:
%s-%d-%s:%s
%s-%d-%s:%s
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
%s %u
%s %u
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe
%Program Files% (x86)\360\Total Security\safemon\QHSafeTray.exe
%Program Files% (x86)\360\Total Security
%Program Files% (x86)\360\Total Security
UAC_MESSAGE=To continue, type an administrator password
UAC_MESSAGE=To continue, type an administrator password
6,2,0,1002
6,2,0,1002
QHSafeTray.exe
QHSafeTray.exe
PatchUp.exe_3300:
.text
.text
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
D$.Pf
D$.Pf
8%u3P
8%u3P
tCPj
tCPj
.Uu;AUu
.Uu;AUu
kernel32.dll
kernel32.dll
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
operator
operator
GetProcessWindowStation
GetProcessWindowStation
USER32.DLL
USER32.DLL
\\.\Scsi%d:
\\.\Scsi%d:
XXXXXX
XXXXXX
\\.\%s
\\.\%s
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
%s:x
%s:x
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
_PPQueryIPPort
_PPQueryIPPort
*`'X;
*`'X;
%s>
%s>
%s="%s"
%s="%s"
%s='%s'
%s='%s'
version="%s"
version="%s"
encoding="%s"
encoding="%s"
standalone="%s"
standalone="%s"
%s:%I64X
%s:%I64X
\\.\PhysicalDrive%d
\\.\PhysicalDrive%d
C:\vmagent_new\bin\joblist\36029\out\Release\PatchUp.pdb
C:\vmagent_new\bin\joblist\36029\out\Release\PatchUp.pdb
KERNEL32.dll
KERNEL32.dll
GetKeyboardState
GetKeyboardState
keybd_event
keybd_event
GetKeyState
GetKeyState
USER32.dll
USER32.dll
SetViewportOrgEx
SetViewportOrgEx
GDI32.dll
GDI32.dll
RegCloseKey
RegCloseKey
RegOpenKeyExW
RegOpenKeyExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryInfoKeyW
ADVAPI32.dll
ADVAPI32.dll
ShellExecuteW
ShellExecuteW
SHELL32.dll
SHELL32.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
URLDownloadToCacheFileW
URLDownloadToCacheFileW
urlmon.dll
urlmon.dll
SHLWAPI.dll
SHLWAPI.dll
COMCTL32.dll
COMCTL32.dll
gdiplus.dll
gdiplus.dll
VERSION.dll
VERSION.dll
NETAPI32.dll
NETAPI32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
RegEnumKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyExA
zcÃ
zcÃ
.PA_W
.PA_W
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360UtilExportFuncs@@@@
.?AVC360UtilExportFuncs@@
.?AVC360UtilExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360ConfExportFuncs@@@@
.?AVC360ConfExportFuncs@@
.?AVC360ConfExportFuncs@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AV?$C360PublicDLLHelper@VC360BaseExportFuncs@@@@
.?AVC360BaseExportFuncs@@
.?AVC360BaseExportFuncs@@
.?AV?$CModalWindow@VCMsgBox@@@@
.?AV?$CModalWindow@VCMsgBox@@@@
.?AV?$CWindowImpl@VCMsgBox@@VCWindow@ATL@@V?$CWinTraits@$0IGAAMCAA@$0BAA@@3@@ATL@@
.?AV?$CWindowImpl@VCMsgBox@@VCWindow@ATL@@V?$CWinTraits@$0IGAAMCAA@$0BAA@@3@@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCMsgBox@@$1?DIID_Isite_events@sitesUI@@3U_GUID@@B@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCMsgBox@@$1?DIID_Isite_events@sitesUI@@3U_GUID@@B@ATL@@
.?AVCMsgBox@@
.?AVCMsgBox@@
.?AVCUrlCallback@@
.?AVCUrlCallback@@
2"3 3>3^3
2"3 3>3^3
5T585
5T585
5#5)5.535
5#5)5.535
5#5)52575
5#5)52575
2%3S3f3
2%3S3f3
373?3`3~3
373?3`3~3
;4;8;
;4;8;
6o6d6
6o6d6
0%0>0#161
0%0>0#161
74888
74888
>$>(>,>0>4>8>@>
>$>(>,>0>4>8>@>
6 6$6(6,606
6 6$6(6,606
7 7$7(7,7074787
7 7$7(7,7074787
8 8@8`8|8
8 8@8`8|8
KERNEL32.DLL
KERNEL32.DLL
mscoree.dll
mscoree.dll
dsetupapi.dll
dsetupapi.dll
%s||%s||
%s||%s||
deepscan\cloudcom2.dll
deepscan\cloudcom2.dll
deepscan\speedmem2.hg
deepscan\speedmem2.hg
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QHSafeMain.exe
libwhite.dat
libwhite.dat
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s
SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\%s
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
SOFTWARE\Microsoft\Windows NT\CurrentVersion
SOFTWARE\Microsoft\Windows NT\CurrentVersion
360util.dll
360util.dll
\StringFileInfo\xx\ProductName
\StringFileInfo\xx\ProductName
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
%smid=%s&ver=%s&lan=%s&os=%s&ch=%s
config.ini
config.ini
\config.ini
\config.ini
..\config.ini
..\config.ini
%snosign.htm?f=%s&re=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
%snosign.htm?f=%s&re=%s&mid=%s&ver=%s&lan=%s&os=%s&ch=%s
hXXp://VVV.360safe.com/totalsecurity/%s/%s/d
hXXp://VVV.360safe.com/totalsecurity/%s/%s/d
%s "%s"
%s "%s"
%s %s
%s %s
IEXPLORE.EXE
IEXPLORE.EXE
firefox
firefox
%Y-%m-%d
%Y-%m-%d
%d.%d.%d.%d
%d.%d.%d.%d
360NetBase.dll
360NetBase.dll
360base.dll
360base.dll
ntdll.dll
ntdll.dll
\ntoskrnl.exe
\ntoskrnl.exe
%d.%d-%s
%d.%d-%s
QHVer.dll
QHVer.dll
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
HKEY_DYN_DATA
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
I18N.dll
I18N.dll
\CrashReport.dll
\CrashReport.dll
pdown.dll
pdown.dll
libleak-64_dif.dat
libleak-64_dif.dat
libleak-64_dif.cab
libleak-64_dif.cab
libleak_dif.dat
libleak_dif.dat
libleak_dif.cab
libleak_dif.cab
360leakfix\detail_page.xml
360leakfix\detail_page.xml
hXXp://qh.dlservice.microsoft.com
hXXp://qh.dlservice.microsoft.com
360leakfix\leakfix_page.xml
360leakfix\leakfix_page.xml
%s - %s
%s - %s
hXXp://s.360safe.com/safei18n/patch.html
hXXp://s.360safe.com/safei18n/patch.html
hXXp://s.360safe.com/safei18n/patch_pop.html
hXXp://s.360safe.com/safei18n/patch_pop.html
%s?a=%s&nhig=%u¬h=%u&nunr=%u&nfun=%u&
%s?a=%s&nhig=%u¬h=%u&nunr=%u&nfun=%u&
360leakfix\leakfix_pop.xml
360leakfix\leakfix_pop.xml
ts.product:1003
ts.product:1003
IDS_MSG_TEXT_QUIT
IDS_MSG_TEXT_QUIT
IDS_PATCH_SAVE_DEFAULT_KEY
IDS_PATCH_SAVE_DEFAULT_KEY
%s(%s)
%s(%s)
Kernel32.dll
Kernel32.dll
{%s-%s-%s-%s-%s}
{%s-%s-%s-%s-%s}
spuninst.exe
spuninst.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\%s\Products
SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\%s\Products
MsiExec.exe /package %s /uninstall %s /qb
MsiExec.exe /package %s /uninstall %s /qb
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages
SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages
%d-d-d
%d-d-d
wusa.exe /uninstall /kb:%d
wusa.exe /uninstall /kb:%d
360leakfix\leakfix_record.xml
360leakfix\leakfix_record.xml
Ûyte/s
Ûyte/s
360leakfix\leakfix_settings.xml
360leakfix\leakfix_settings.xml
360softmgr_testdir.dat
360softmgr_testdir.dat
360leakfix\main_dlg.xml
360leakfix\main_dlg.xml
360leakfix\shared.xml
360leakfix\shared.xml
IDS_DIFF_DOWNLOAD_URL_32
IDS_DIFF_DOWNLOAD_URL_32
IDS_DIFF_DOWNLOAD_URL_64
IDS_DIFF_DOWNLOAD_URL_64
%d-%d-%d
%d-%d-%d
can not load pdown.dll
can not load pdown.dll
wleakrepair.dll
wleakrepair.dll
libleakres.dat
libleakres.dat
pdown://%s|k=1|h7=1|b7=0|b4=0
pdown://%s|k=1|h7=1|b7=0|b4=0
hXXp://
hXXp://
0.xml
0.xml
default.xml
default.xml
theme.xml
theme.xml
sites.dll
sites.dll
\\.\360SelfProtection
\\.\360SelfProtection
Common\XML\SharedStrings.xml
Common\XML\SharedStrings.xml
Common\XML\CommonResource.xml
Common\XML\CommonResource.xml
support
support
360InternationSafe\msgbox.xml
360InternationSafe\msgbox.xml
CrashReport.dll
CrashReport.dll
UrlSettings.dll.locale
UrlSettings.dll.locale
hXXp://s.360safe.com/safei18n/
hXXp://s.360safe.com/safei18n/
\i18n.dll
\i18n.dll
hXXp://s.360safe.com/safei18n/wd.htm
hXXp://s.360safe.com/safei18n/wd.htm
hXXp://s.360safe.com/safei18n/wdpaypro.htm
hXXp://s.360safe.com/safei18n/wdpaypro.htm
hXXp://s.360safe.com/safei18n/filemon.htm
hXXp://s.360safe.com/safei18n/filemon.htm
hXXp://s.360safe.com/safei18n/hips.htm
hXXp://s.360safe.com/safei18n/hips.htm
hXXp://s.360safe.com/safei18n/srv.htm
hXXp://s.360safe.com/safei18n/srv.htm
.\QHCheckCertificate.c
.\QHCheckCertificate.c
Operator
Operator
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
0|2008-10-08|15:04:02|QHErrObj.cpp|1||MEM|1|
netmsg.dll
netmsg.dll
mqutil.dll
mqutil.dll
wininet.dll
wininet.dll
__crt
__crt
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
|hu-hu-hu|hu:hu:hu|%s|%d|%s|%s|%d|%s
Certificate Table
Certificate Table
:SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
:SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards
{A0972F10-452C-4cd1-904E-B50E394EDE34}
{A0972F10-452C-4cd1-904E-B50E394EDE34}
%s-%d-%s:
%s-%d-%s:
%s-%d-%s:%s
%s-%d-%s:%s
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
1830B7BD-F7A3-4c4d-989B-C004DE465EDE
%s %u
%s %u
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
F:\WorkCode\Pub\360GPUBNew\dev\include\Interface\QHTL.h
%Program Files% (x86)\360\Total Security\PatchUp.exe
%Program Files% (x86)\360\Total Security\PatchUp.exe
%Program Files% (x86)\360\Total Security
%Program Files% (x86)\360\Total Security
%Program Files% (x86)\360\Total Security\pdown.dll
%Program Files% (x86)\360\Total Security\pdown.dll
]%Program Files% (x86)\360\Total Security\libleak-64_dif.dat
]%Program Files% (x86)\360\Total Security\libleak-64_dif.dat
%Program Files% (x86)\360\Total Security\libleak-64_dif.cab
%Program Files% (x86)\360\Total Security\libleak-64_dif.cab
QHSafeMain.exe
QHSafeMain.exe
6, 0, 0, 1005
6, 0, 0, 1005
PatchUp.exe
PatchUp.exe