Trojan.GenericKD.3018359_93e8ea94ab

by malwarelabrobot on May 19th, 2017 in Malware Descriptions.

SoftwareBundler:Win32/Chindo (Microsoft), UDS:DangerousObject.Multi.Generic (Kaspersky), Trojan.Win32.Generic!BT (VIPRE), Trojan.GenericKD.3018359 (AdAware), Trojan.NSIS.StartPage.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 93e8ea94ab917a81b94c0d54e7fa5376
SHA1: a607f547ca6396a4bf059e3bad3bc117ea20a7ba
SHA256: d78215a9cbf245cccc54c163d40b89eac10cc25e4feeeedf6fba13b9d41a9163
SSDeep: 3072:RZMJnTeM4cJJ VrjV4s je8ILQ77j2NZjbWsqfW9X25rplo6sOvuP4hc1HGr M9A:feTeM/az4s 68IL28ZHdrmlopP4hc1H1
Size: 181690 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2009-06-19 00:33:23
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

QQBrowser.exe:3748
QQBrowser.exe:3496
QQBrowser.exe:3224
QQBrowser.exe:2888
QQBrowser.exe:3100
QQBrowser.exe:3492
QQBrowser.exe:3044
QQBrowser.exe:3840
QQBrowser.exe:920
QQBrowser.exe:3164
QQBrowser.exe:3432
QQBrowser.exe:3176
stats_uploader.exe:984
xReport.exe:2884
xReport.exe:2996
regsvr32.exe:1552
netsh.exe:2524
netsh.exe:2492
xUpdate.exe:2784
PerfTraceService.exe:3452
BaiduPlayer5SetupSilent_359.exe:2044
V8._85416_20150820204011.exe:2732
PlayerApp.exe:1956

The Trojan injects its code into the following process(es):

Browser_V5.5.7852.9_r_4640_(Build1512022057).exe:4048
%original file name%.exe:2056
BDPlayerTray.exe:2696

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process Browser_V5.5.7852.9_r_4640_(Build1512022057).exe:4048 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\custom.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\12dc664d-0442-4570-a7c8-f3aa22922cec.com.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\noads.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\chrome.7z (1344211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\tmall.com.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\background_lib.js (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\amazon.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\youku.com.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\fame.png (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\resources.pak (92927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Uninstall.exe (9133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-x86.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_100_percent.pak (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\taobao.com.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\chrome.packed.7z (59963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\06.png (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\baidu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\taobao.png (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome.dll (157305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\tmall.com.png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Languages\chs.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-xp.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\14.png (488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\zh-CN\external_extensions.json (934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\lazy_index.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\youku.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\new-tab-icon.png (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libmp3lame.dll (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\sogou.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\news_pre_render.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\18.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\lecture.png (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\config.dat (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\font\font_8jda4sp0bz8pk3xr.ttf (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\VisualElements\Logo.png (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\data\city.json (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\alipay.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\UCProxySDK.dll (4489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\game.png (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\id-ID\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\taohuoyuan.png (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\lazy_lib.js (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\marketing\1001.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\UCBrowser.exe (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\youku.com.png (764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\background.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Locales\en-US.pak (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\config.dat (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\7z.dll (1841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\07.png (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\config.dat (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\baidu.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\font\font_8jda4sp0bz8pk3xr.woff (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\life.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\d3dcompiler_47.dll (13439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\6.1.2107.204.manifest (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\update_task.exe (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\sogou.com.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\setup_ex_.cab (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_watcher.dll (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\taobao.com.png (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\setup.exe (17426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Bin\ChannelU.dll (26363716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\VisualElements\SmallLogo.png (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\new_tab_icon.png (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\snapshot_blob.bin (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\48.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\taobao.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\pt-BR\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libGLESv2.dll (5192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\moon.jpg (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\subscribe.png (398 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Locales\zh-CN.pak (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\00.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\news\refresh.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-x86.sys (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\stats_uploader.exe (612 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\config.ini (195 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\curl-ca-bundle.crt (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\baidu.com.png (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-x64.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\bing.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\wow_installer.prefs (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\google.com.hk.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_child.dll (183256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\n_01.png (509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\start.dat (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\weibo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\VERSION (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\google.com.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Languages\settings.xml (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\bing.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-xp.sys (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_elf.dll (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\custom.png (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\48.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\rec.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\default.jpg (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\social.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\courgette.dll (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-x64.sys (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\09.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\renren.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\01.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\etao.com.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libEGL.dll (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\shop.png (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\config.dat (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\InstalledConfig.xml (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\google.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\12dc664d-0442-4570-a7c8-f3aa22922cec.com.png (479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\aavc.ini (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\browsing_data_remover.exe (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\desktop\facebook.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_200_percent.pak (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\config_updater.dll (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\baidu.com.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\rain.jpg (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\react_lib.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\news.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\uc123.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\video.png (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\updater.dll (8643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\hrkill.exe (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\start.dat (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Backup\UCBrowser.exe (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\multiple.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\13.png (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\16.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\UCService.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\PepperFlash\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\wow_installer.switches.txt (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\snow.jpg (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\bing.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\data\pc_newtab_recommendation.json (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\03.png (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\02.png (294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\other.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\en-IN\external_extensions.json (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\20.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\qq.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\icudtl.dat (19407 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\UCBrowserSetup.exe (70898 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\128.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\7z.dll (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\default.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\desktop\tmall_points.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\delegate_execute.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\google.com.png (521 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\stats_uploader.exe (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\04.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\taobao.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\etaohaitao.com.png (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\pp_helper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\19.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\theme_tool.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\PepperFlash\pepflashplayer.dll (69197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\index.js (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\wow_helper.exe (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\natives_blob.bin (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\_locales\en\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libexif.dll (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\UpdateOption.xml (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\n_00.png (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\UCAgent.exe (8056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\etao.com.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\molt_tool.exe (851 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\config.ini (0 bytes)

The process %original file name%.exe:2056 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\7185bdf1gw1f05vls701mg21130hix6s[1].gif (307874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\ZipDLL.dll (3608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Browser_V5.5.7852.9_r_4640_(Build1512022057).exe (26349 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BaiduPlayer5SetupSilent_359.exe (146246 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\21.gif (1101124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Base64.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\22.gif (326744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433[1].exe (24208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\V8._85416_20150820204011.exe (41066 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Inetc.dll (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\7185bdf1gw1f05vkvcpe1g20s60i07ww[1].gif (1036496 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\OK (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5D.tmp (0 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDUnInstall.exe (0 bytes)
%Program Files%\Tencent\QQBrowser\uninst.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\URL Parts Error (0 bytes)

The process QQBrowser.exe:3748 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\dr_packet.dat (728 bytes)

The process QQBrowser.exe:3496 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\Assistant.dll (430 bytes)

The process QQBrowser.exe:3224 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\QQBrowserFrame.dll (49 bytes)

The process QQBrowser.exe:2888 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\QBSafe.dll (454 bytes)
C:\Windows\Tasks\QQBrowser Udpater Task(Core).job (280 bytes)
C:\Windows\Tasks\QQBrowser Udpater Task.job (276 bytes)

The process QQBrowser.exe:3492 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Skin\001-Cool Air.gt (252503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Skin\LightStripes.gt (601 bytes)

The process QQBrowser.exe:3044 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\dr_packet.dat (424 bytes)

The process QQBrowser.exe:3840 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\QQBrowserConfig.dat (114 bytes)

The process QQBrowser.exe:920 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\repeal.xml (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EX69WNU8UGA26AXF3Z0.temp (3 bytes)

The process QQBrowser.exe:3432 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\QBSafe.dll (454 bytes)

The process QQBrowser.exe:3176 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\dr_packet.dat (328 bytes)
%Program Files%\Tencent\QQBrowser\dr.dll (86 bytes)

The process xReport.exe:2884 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BDPlayer\conf\ReportInfo.dat (180 bytes)

The process xReport.exe:2996 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BDPlayer\conf\ReportInfo.dat (190 bytes)

The process regsvr32.exe:1552 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\WebpDecodeFilter.dll (139 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcr90.dll (655 bytes)

The process xUpdate.exe:2784 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\baidu\BDPlayer\5.1.1.9\xnet.dll (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BindTaskSys\SysData\XTask.db (231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BindTaskSys\SysData\XTask.db-journal (4396 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Baidu\BCommon\XDownlaodConfig.ini (1865 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BindTaskSys\SysData\XTask.db-journal (0 bytes)

The process BaiduPlayer5SetupSilent_359.exe:2044 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_add_url.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.checkbox.png (928 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_imageadjust_image.xml (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rmvb.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.connect.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\yes.png (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_imageadjust_color.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\MpaDec.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\pncrt.dll (287 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SRT.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\new_version.png (16 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MTS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\addurl.combobox.btn.dropdown.png (835 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\fileinfo.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.screenshot.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_mouse.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.main.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_playlist_online.xml (765 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\color.xml (196 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\msvcp120.dll (455 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\asf.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.menu.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\RealMediaSplitter.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.stop.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\bk.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.imageadjust.logo.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\flv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\CoreAAC.ax (328 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_play.xml (918 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_subtitle.xml (281 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.caption.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_BDPlayer.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\btn_bk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.cancel.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.setting.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.channel1.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.open.png (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SSA.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\IntelQuickSyncDecoder.dll (347 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playcontroller.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.menu.png (12 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.hotkey.tab.png (241 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.restore.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.screenshot.thumbnail.line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\progress_front.png (18 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wma.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\string.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.option.select.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MP2V.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist_popbox.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.help.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp3.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.feedback.png (5 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playcontroller.separator.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\3gp.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.radio.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.channel1.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\vob.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.tools.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_setting.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.max.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdcommon.dll (427 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_screenshort.xml (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\ffsrv.exe (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xReport.exe (171 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_playlist_local.xml (856 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.open.png (5 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.tree.expand.png (248 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_display.xml (700 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.delete.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\progress_bk.png (18 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.setting.png (7 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\title_bk.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.nottopmost.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.v.playlist.bg.png (144 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\PlayerApp.exe (400 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.fullscreen.close.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\font.xml (810 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\font.xml (166 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.playlist.show.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\msvcr120.dll (970 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\addurl.combobox.edit.bg.png (435 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\real\cook.dll (74 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.fullscreen.open.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\VEFilter.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.logo.line.png (936 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MPEG4.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxview.dll (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_screenshot.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xnet.dll (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\m2ts.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.setting.thumb.v.png (375 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\onlinevideo_error.png (6 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\edit.setting.border.png (973 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_sound.xml (706 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe (456 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.mask.png (174 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_Tray.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.playlist.hide.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\update_line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\skin.xml (840 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_file.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.menu.sub.more.png (964 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\WEBM.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\window_expand.png (22 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.shadow.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avresample-lav-2.dll (161 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\avi.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist_bubble.xml (306 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.logo.png (256 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdlog.dll (39 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.png (973 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_tray.xml (880 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.body.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_basic.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.topmost.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.channel2.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\window_ask.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico (173 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xUpdate.exe (999 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ASS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\no.png (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ts.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\style.xml (12 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.caption.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.file.png (930 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main_playwnd.xml (106 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFVideo.ax (983 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFSplitter.ax (500 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_play.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.open.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.highlight.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.logo.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.setting.bg.v.png (931 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOV.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe (1923 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\FLVSplitter.ax (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playlist.png (166 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFAudio.ax (266 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wmv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\AudioSwitcher.ax (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.volume.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M4V.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOD.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.menu.item.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_hotkey.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\style.xml (331 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.timebk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\update_check.png (19 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\pva.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\f4v.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.separation.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.ok.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\TPS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDWebcore.dll (780 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.2.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.checkbox.partselect.png (412 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avutil-lav-54.dll (431 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playcontroller.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\tp.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\progress_front.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.channel2.png (176 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_messagebox.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avformat-lav-56.dll (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDUnInstall.exe (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpg.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxplayer.dll (70 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_playlist.xml (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.option.unselect.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.exit.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M2P.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\effect.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\OnlineVideo.ini (73 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playlist.caption.png (249 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_tools.xml (516 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.line.png (924 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images.xml (20 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.volume.open.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.tools.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.v.playlist.thumb.png (299 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_file.xml (942 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.audio.logo.png (251 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\progress_bk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\VSFilter.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpeg.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.arrow.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avcodec-lav-56.dll (780 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SWF.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.min.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.about.png (29 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_main.xml (10 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.2.png (955 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DIVX.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.thumb.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_update.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xmanager.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.messagebox.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\bpc.ico (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_player.xml (8 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_subtitle.xml (719 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_about.xml (825 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\real\drvc.dll (275 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.png (161 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_image_adjust.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\swscale-lav-3.dll (481 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.screen.thumbnail.picbk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.tab.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mkv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rm.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\skin.xml (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\bsed.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\filters.xml (11 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main_mask.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_thumbnail.xml (536 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxlogic.dll (158 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.pause.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport.exe (189 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.reset.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.thumb.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.select.png (268 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avfilter-lav-5.dll (189 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp4.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DAT.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\latest_version.png (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\OpenMediaUrl.exe (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\bk.png (9 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_Update.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\libbluray.dll (254 bytes)

The process V8._85416_20150820204011.exe:2732 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Tencent\QQBrowser\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\theme.png (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game.png (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\js\base.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\dr.dll (601 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\search.js (1 bytes)
%Program Files%\Tencent\QQBrowser\MouseGesture.dll (56 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_sogou.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcr90.dll (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\inforBar.html (800 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#app.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\del2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\history2.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\homepage.db (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\init.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\sliderman.1.3.7.js (19 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\tab_bg_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\PerfTraceService.exe (2934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcm90.dll (2129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\blue.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\7z.exe (1209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\down.png (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\screen.css (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\background.html (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\style.css (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\atbk2.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00DFF21-511E-4249-BCB9-EECC370D796B} (430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_google.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Resource.dll (1365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\text_light.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarF22B.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\reader.html (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\QBSafe.dll (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\whitelist.ze (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_blank.png (5 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_offlineurl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (21 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\default-icon.png (1 bytes)
%Program Files%\Tencent\QQBrowser\navi.ico (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\init.js (4 bytes)
%Program Files%\Tencent\QQBrowser\QBExtensionFramework.dll (3918 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\init.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___tq.qq.com_qbrcenter_index.html_adtag=8gongge.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.3366.com__ADTAG=cop.QQbrowser.8new.jpg (16 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\tssafeedit.dat (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{3E9C7A5B-D249-4C28-A451-53E1024AD354} (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\reader.html (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\small.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\screen.css (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\background.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\css\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_374AF031F22A1FC086DCBA0C50021437 (696 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_baidu.png (870 bytes)
C:\Users\"%CurrentUserName%"\Desktop\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account\down.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\index.html (1 bytes)
%Program Files%\Tencent\QQBrowser\service\xperf.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\qqbrowser_home.jpg (14 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_ceil.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\index.html (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\manifest.json (261 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_bing.png (442 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\icon_not_recommended.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\css\base.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\bkg.gif (22 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcp90.dll (3934 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcr90.dll (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___www.3366.com__ADTAG=cop.QQbrowser.8new.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\icon_suggested_action.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\hse.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\down.png (960 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\image.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.qq.com__pgv_ref=qqBrowserPC.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin1.png (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\css\ycalendar.css (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\night.png (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___s.click.taobao.com_khr1bAy.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\accountInfo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\TridentCore.dll (9754 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\shadow-bottom.png (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\business.js (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\random.db (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#history.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\inforBar.html (800 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowser.exe (723 bytes)
%Program Files%\Tencent\QQBrowser\QRCode.dll (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\QBUtils.dll (12336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\manifest.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\BugReport.exe (7256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\bkg.gif (22 bytes)
%Program Files%\Tencent\QQBrowser\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\accountInfo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\wbg.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowser.exe (1661 bytes)
%Program Files%\Tencent\QQBrowser\service\perfctrl.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Dialogs.dll (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\icon.fw.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\7z.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3E9C7A5B-D249-4C28-A451-53E1024AD354} (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QQBrowserLiveup.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QRCode.dll (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (16 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\sogou_web.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\site_text.png (5 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserFrame.dll (11518 bytes)
%Program Files%\Tencent\QQBrowser\resources.pri (3 bytes)
%Program Files%\Tencent\QQBrowser\Downloader.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___speed.qq.com_act_a20141103plan_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\MouseGesture.dll (872 bytes)
%Program Files%\Tencent\QQBrowser\WebpDecodeFilter.dll (673 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{B00DFF21-511E-4249-BCB9-EECC370D796B} (430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\wbg.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg (10 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\icon_not_recommended.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\license.txt (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\homepage.db (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#app.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\history.db (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\atbk1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\css\ycalendar.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\Private-icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.html (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\qqtrack.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\up-down.png (999 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___qzone.qq.com_.jpg (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\addressbar_blank.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\yellow.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\index.ini (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\down.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\event\bg.png (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\js\inforBar.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\css\style.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\init.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin\LightStripes.gt (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\nsis_skin.gt (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\content.js (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\index.html (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bggradient_day.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\del.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_fav.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\search.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\small_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\js\inforBar.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\large_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin1.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QBUtils.dll (12287 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\small.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.easing.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\resources.pri (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_login.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\hse.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\QQTrace.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\icon_suggested_action.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_fav.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\sliderman.1.3.7.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025 (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\search.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\site_text.png (5 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\search_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{6970B802-2F13-4038-B620-33B0211D26A0} (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\pixel.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\pixel.gif (43 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\text_light.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\manifest.json (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_suggested_action.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.easing.js (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
%Program Files%\Tencent\QQBrowser\BugReport.exe (2321 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account\down.png (971 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\event\bg.png (28 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\qqbrowser_home.jpg (14 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3349050F-829E-4bb2-AACF-03E3A6B68677} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Downloader.dll (4010 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\large_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme_ie.png (15 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\history2.js (21 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\ycalendar.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{CAA4306F-826C-4c1b-8FC6-571F84949DB4} (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{3349050F-829E-4bb2-AACF-03E3A6B68677} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\QBSafe.dll (454 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\blue.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546}\extplayer.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Assistant.dll (6284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\hse.png (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\template.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\css\history.css (8 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcm90.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcp90.dll (3361 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\NetWork.dll (2602 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_google.png (919 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\search_btn.png (1 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserLiveup.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã¤Â¸Å Ã§Â½â€˜Ã¥Â¯Â¼Ã¨Ë†Âª.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\pixel.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\bggradient_day.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\default-icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\Desktop\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\Private-icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (12 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Video\vd.ini (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\xperf.exe (5001 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (17 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\init.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___qzone.qq.com_.jpg (12 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\security.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\ycalendar.css (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBExtensionFramework.dll (3766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\sogou_web.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\init.js (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\down.png (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\WebpDecodeFilter.dll (2128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{6970B802-2F13-4038-B620-33B0211D26A0} (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\pink.png (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\pink.png (716 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\large_installed_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\PrScrn.dll (1281 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_bing.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\video\vd.ini (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\gray.png (501 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\dr.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\imgSearch.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ã¨â€¦Â¾Ã¨Â®Â¯Ã¨Â½Â¯Ã¤Â»Â¶\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\navi.ico (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\tssafeedit.dat (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\bgsearch_day.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\css\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\del2.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\QBSafe.dll (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\articlecontent.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserFrame.dll (13493 bytes)
%Program Files%\Tencent\QQBrowser\uninst.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\css\style.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\css\style.css (6 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT (4 bytes)
%Program Files%\Tencent\QQBrowser\EventTracing.dll (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\yellow.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\manifest.json (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\articlecontent.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\imgSearch.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___s.click.taobao.com_khr1bAy.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js\injectReader.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\sliderman.1.3.7.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBUtils.dll (17689 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{B00D20E2-207A-431A-9712-E1279792681B} (89 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\icon.png (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\gray.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ã¨â€¦Â¾Ã¨Â®Â¯Ã¨Â½Â¯Ã¤Â»Â¶\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\mainlist.ze (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_normal.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\history2.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\PrScrn.dll (2517 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_ceil.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\css\style.css (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\del.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\small.png (2 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___speed.qq.com_act_a20141103plan_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\accountInfoBar.html (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\icon.fw.png (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserSecurityCenter.exe (673 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\icon.png (487 bytes)
%Program Files%\Tencent\QQBrowser\service\qqtrack.xml (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\theme.png (25 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\QQTrace.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\nsis_skin.gt (106 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\tab_bg_white.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\business.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\https___mail.qq.com_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#history.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\default-icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme.png (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\green.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_baidu.png (870 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\uninst.exe (3649 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\css\base.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_login.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\ycalendar.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\small_installed_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcr90.dll (8224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\js\base.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\template.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\atbk2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\shadow-bottom.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\qqtrack.xml (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00D20E2-207A-431A-9712-E1279792681B} (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js\injectReader.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserSecurityCenter.exe (2015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\image.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\up-down.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\search_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\css\history.css (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\https___mail.qq.com_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___www.qq.com__pgv_ref=qqBrowserPC.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_not_recommended.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{CAA4306F-826C-4c1b-8FC6-571F84949DB4} (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_sogou.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\site_text.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\private.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\mainlist.ze (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin1.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_sogou.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\perfctrl.dll (3447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_baidu.png (870 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\small_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\random.db (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\night.png (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcp90.dll (3934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#app.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\CustomerJoinPlan.txt (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\bkg.gif (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\index.ini (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\text_light.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\EventTracing.dll (1326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\history.db (108 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_bing.png (442 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___tq.qq.com_qbrcenter_index.html_adtag=8gongge.jpg (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.easing.js (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\up-down.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\css\style.css (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\security.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\private.html (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_google.png (919 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\Private-icon.png (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\PerfTraceService.exe (1707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserLiveup.exe (3502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\content.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\template.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\css\history.css (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\qqtrack.xml (7 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\close.png (1 bytes)
%Program Files%\Tencent\QQBrowser\skin\LightStripes.gt (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\whitelist.ze (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\theme_ie.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\event\bg.png (28 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_offlineurl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcp90.dll (6900 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\theme_ie.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_374AF031F22A1FC086DCBA0C50021437 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\manifest.json (5 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Dialogs.dll (10771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\small.html (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\addressbar_blank.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\private.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\ycalendar.js (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\accountInfoBar.html (794 bytes)
%Program Files%\Tencent\QQBrowser\Resource.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabF22A.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\search.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bgsearch_day.jpg (4 bytes)
%Program Files%\Tencent\QQBrowser\app.ico (284 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\shadow-bottom.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\business.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (19 bytes)
%Program Files%\Tencent\QQBrowser\QBUtils.dll (12336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\QBInstaller.dll (1275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_active.png (3 bytes)
%Program Files%\Tencent\QQBrowser\NetWork.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\Config.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del.png (1 bytes)
%Program Files%\Tencent\QQBrowser\TridentCore.dll (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\atbk1.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#history.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcr90.dll (4840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546}\extplayer.js (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Assistant.dll (2321 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (39 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\close.png (1 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\checkbox.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\large_installed_arrow.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcm90.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\small.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_white.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk1.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\init.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\QBSafe.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\bkg.gif (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_mask.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_bing.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\up-down.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\js\base.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\css\style.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserSecurityCenter.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.qq.com__pgv_ref=qqBrowserPC.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___s.click.taobao.com_khr1bAy.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#app.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_baidu.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin1.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\index.ini (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\init.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\sliderman.1.3.7.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\image.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\7z.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\tssafeedit.dat (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\global.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\qblogo.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_login.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QRCode.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.3366.com__ADTAG=cop.QQbrowser.8new.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.concat.min.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js\injectReader.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\sogou_web.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\hse.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\down.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\css\history.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\search_btn.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcp90.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_close_btn.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___speed.qq.com_act_a20141103plan_.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\event (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_sogou.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\site_text.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00D20E2-207A-431A-9712-E1279792681B} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk~RF6f584.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\MouseGesture.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546}\extplayer.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\Private-icon.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_soso.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_locked.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#skin.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00DFF21-511E-4249-BCB9-EECC370D796B} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___tq.qq.com_qbrcenter_index.html_adtag=8gongge.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\tool.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\api.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserLiveup.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_google.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.easing.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\BugReport.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\night.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\reader.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\nsis_skin.gt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcr90.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\CustomerJoinPlan.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\certerror.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\history.db (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Resource.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin\ThirdParty.gt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\ycalendar.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\random.db (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3E9C7A5B-D249-4C28-A451-53E1024AD354} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBExtensionFramework.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin2.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarF22B.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{CAA4306F-826C-4c1b-8FC6-571F84949DB4} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\api.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_blank.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#account.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{6970B802-2F13-4038-B620-33B0211D26A0} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___qzone.qq.com_.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\Desktop\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk~RF6f575.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\TridentCore.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\pink.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\yellow.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_normal.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\mainlist.ze (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\accountInfo.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\video\vd.ini (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\PerfTraceService.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\video (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\security.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\qqtrack.xml (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Downloader.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\NetWork.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\loading.gif (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\closeBtnSearchbar.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\down.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\installed_arrow.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\index.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bgsearch_day.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\js\inforBar.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\EventTracing.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\navi.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\xperf.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\template.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\global.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\qqtrack.xml (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\warn-dialog-close.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\index.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\text_light.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\close.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\shadow-bottom.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del2.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\event\bg.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\accountInfoBar.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ã¨â€¦Â¾Ã¨Â®Â¯Ã¨Â½Â¯Ã¤Â»Â¶\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk~RF6f334.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin\LightStripes.gt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\qqbrowser_home.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_cancel_btn.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_blank.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\business.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_active.png (0 bytes)
%Program Files%\Tencent\QQBrowser\manifest.json (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\inforBar.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\blue.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\gray.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\imgSearch.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserFrame.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.min.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\content.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\up.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\manifest.json (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBUtils.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\small_installed_arrow.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin3.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\css\style.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\css\base.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bggradient_day.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Dialogs.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_offlineurl.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\whitelist.ze (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabF22A.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_normal.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3349050F-829E-4bb2-AACF-03E3A6B68677} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{00000000-0000-0000-0000-000000000000} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_fav.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk2.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manifest.json (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\error.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\history2.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin\DarkStripes.gt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\business.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\default.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\uninstallBtn.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\search.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\icon.fw.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\wbg.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\small.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\dr.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\QBInstaller.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\articlecontent.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\resources.pri (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\app.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk~RF6f584.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\ycalendar.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowser.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\index.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\icon.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_not_recommended.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk~RF6f362.TMP (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\Config.xml (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\private.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\homepage.db (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\https___mail.qq.com_.jpg (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\QQTrace.ini (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_white.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\screen.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\pixel.gif (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\PrScrn.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\manifest.json (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\default-icon.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\perfctrl.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\license.txt (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\manifest.json (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_suggested_action.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\WebpDecodeFilter.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\css\app.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Assistant.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_hover.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_continue_btn.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\green.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\uninst.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#history.ico (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\style.css (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\search.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white_ie.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html (0 bytes)

The process PlayerApp.exe:1956 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5\Ã¥ÂÂ¸Ã¨Â½Â½Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (4 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BDPlayer\conf\TaskBar\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar (0 bytes)

The process BDPlayerTray.exe:2696 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\baidu\BDPlayer\5.1.1.9\msvcr120.dll (974 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdcommon.dll (430 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\msvcp120.dll (458 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdlog.dll (40 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xUpdate.exe (1 bytes)

Registry activity

The process Browser_V5.5.7852.9_r_4640_(Build1512022057).exe:4048 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASAPI32]
"EnableConsoleTracing" = "0"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASMANCS]
"MaxFileSize" = "1048576"
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASAPI32]
"FileTracingMask" = "4294901760"
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 40 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASMANCS]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\Browser_V5_RASMANCS]
"FileTracingMask" = "4294901760"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

The process %original file name%.exe:2056 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\93e8ea94ab917a81b94c0d54e7fa5376_RASMANCS]
"ConsoleTracingMask" = "4294901760"
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\93e8ea94ab917a81b94c0d54e7fa5376_RASAPI32]
"EnableConsoleTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"
"EnableFileTracing" = "0"
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\93e8ea94ab917a81b94c0d54e7fa5376_RASMANCS]
"FileDirectory" = "%windir%\tracing"
"MaxFileSize" = "1048576"
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\93e8ea94ab917a81b94c0d54e7fa5376_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\93e8ea94ab917a81b94c0d54e7fa5376_RASMANCS]
"EnableFileTracing" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process QQBrowser.exe:3748 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3F 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process QQBrowser.exe:3496 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\QQBrowser.Protocol]
"(Default)" = "QQBrowser Protocol"

[HKCR\Tencent.QQBrowser.Default\.exe\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe %*"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQBrowser.exe]
"DisableExceptionChainValidation" = "0"

[HKCR\QQBrowser.File\DefaultIcon]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe,0"

[HKCR\QQBrowser.Protocol\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe -- %1"

[HKCR\QQBrowser.File\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe -- %1"

[HKLM\System\CurrentControlSet\Control\WMI\Security]
"a083b31f-8832-4593-97ce-95c482533167" = "01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00"

[HKCR\Tencent.QQBrowser.Default\.exe\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".xhtml" = "QQBrowser.File"

[HKLM\System\CurrentControlSet\Control\WMI\Security]
"4ba0b957-882b-4625-a213-0349b865e6aa" = "01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\URLAssociations]
"http" = "QQBrowser.Protocol"

[HKLM\SOFTWARE\RegisteredApplications]
"QQBrowser" = "Software\Tencent\QQBrowser\Capabilities"

[HKCU\Software\Tencent\QQBrowser\InstallInfo]
"FirstLaunch" = "1"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".xht" = "QQBrowser.File"

[HKCR\QQBrowser.Protocol\shell]
"(Default)" = "open"

[HKLM\System\CurrentControlSet\Control\WMI\Security]
"5abb9909-bb1c-4766-94a2-dc34220d0391" = "01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Tencent\QQBrowser\CurrentVersion\App Paths\QQBrowser.exe]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe"

[HKCR\QQBrowser.Protocol\DefaultIcon]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe,0"

[HKCR\QQBrowser.File]
"URL Protocol" = ""

[HKCR\QQBrowser.File\shell]
"(Default)" = "open"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".mht" = "QQBrowser.File"
".mhtml" = "QQBrowser.File"

[HKCR\Tencent.QQBrowser.Default\.exe\shell\run\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe %*"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".shtml" = "QQBrowser.File"

[HKCR\QQBrowser.File]
"AppUserModelID" = "Tencent.QQBrowser.Default"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\URLAssociations]
"ftp" = "QQBrowser.Protocol"

[HKCR\QQBrowser.Protocol]
"URL Protocol" = ""

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".htm" = "QQBrowser.File"

[HKCR\QQBrowser.Protocol]
"AppUserModelID" = "Tencent.QQBrowser.Default"

[HKCU\Software\Tencent\QQBrowser\InstallInfo]
"DefaultBrower" = "%Program Files%\Internet Explorer\iexplore.exe"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\FileAssociations]
".html" = "QQBrowser.File"

[HKCR\QQBrowser.File]
"(Default)" = "QQBrowser HTML Document"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities\URLAssociations]
"https" = "QQBrowser.Protocol"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QQBrowser.exe]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser"

[HKLM\System\CurrentControlSet\Control\WMI\Security]
"fe298bd4-04d8-4bf8-9422-77d6b66b255f" = "01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00"

[HKCU\Software\Tencent\QQBrowser\http\shell\open\command]
"(Default)" = "%Program Files%\Google\Chrome\Application\chrome.exe -- %1"

[HKLM\System\CurrentControlSet\Control\WMI\Security]
"deafbc7e-fb81-4499-a39f-e8e7ec2b3ad1" = "01 00 04 80 14 00 00 00 24 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Tencent\QQBrowser\Capabilities]
"ApplicationName" = "QQBrowser"
"ApplicationDescription" = "QQBrowser"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Tencent\QQBrowser\PrivateCfg]
"DisablePtLogin_740"

[HKLM\SOFTWARE\RegisteredApplications]
"QQBrowser"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQBrowser.exe]
"GlobalFlag"
"VerifierFlags"
"PageHeapFlags"

[HKCU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"QQBrowser.exe"

The process QQBrowser.exe:2888 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

The process QQBrowser.exe:3100 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Tencent\QQBrowser\Launch]
"LaunchOpenPageType" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

The process QQBrowser.exe:3044 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 41 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process QQBrowser.exe:3840 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\.html]
"(Default)" = "QQBrowser.File"

[HKCU\Software\Classes\ftp\DefaultIcon]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe,0"

[HKCU\Software\Classes\https\shell]
"(Default)" = "open"

[HKCU\Software\Classes\.shtml]
"(Default)" = "QQBrowser.File"

[HKCU\Software\Classes\ftp\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice]
"Progid" = "QQBrowser.Protocol"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice]
"Progid" = "QQBrowser.Protocol"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Classes\http\DefaultIcon]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe,0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"GlobalAssocChangedCounter" = "151"

[HKCU\Software\Classes\ftp\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe -- %1"

[HKCU\Software\Classes\.xhtml]
"(Default)" = "QQBrowser.File"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Classes\.xht]
"(Default)" = "QQBrowser.File"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice]
"Progid" = "QQBrowser.Protocol"

[HKCU\Software\Classes\.htm]
"(Default)" = "QQBrowser.File"

[HKCU\Software\Classes\https\DefaultIcon]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe,0"

[HKCU\Software\Classes\https\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\UserChoice]
"Progid" = "QQBrowser.File"

[HKCU\Software\Classes\http\shell\open\command]
"(Default)" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe -- %1"

[HKCU\Software\Classes\http\shell]
"(Default)" = "open"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
"Progid" = "QQBrowser.File"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\UserChoice]

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process QQBrowser.exe:3164 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

The process QQBrowser.exe:3432 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process QQBrowser.exe:3176 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASMANCS]
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASAPI32]
"MaxFileSize" = "1048576"
"FileTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASAPI32]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASMANCS]
"EnableFileTracing" = "0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASAPI32]
"FileDirectory" = "%windir%\tracing"
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3D 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\QQBrowser_RASMANCS]
"MaxFileSize" = "1048576"
"FileTracingMask" = "4294901760"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

The process stats_uploader.exe:984 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASMANCS]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASAPI32]
"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASMANCS]
"EnableConsoleTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASAPI32]
"EnableConsoleTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASMANCS]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASAPI32]
"MaxFileSize" = "1048576"
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 42 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\stats_uploader_RASMANCS]
"FileTracingMask" = "4294901760"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process regsvr32.exe:1552 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\Interface\{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Tencent\QQBrowser\IE8\MIME\Database\Content Type\image/webp\bits]
"0" = "04 00 00 00 FF FF FF FF 52 49 46 46"

[HKCR\TypeLib\{5FD70451-714E-495A-9F17-450AEF3AA35E}\1.0\HELPDIR]
"(Default)" = "%Program Files%\Tencent\QQBrowser"

[HKCR\WEBPFilter.CoWEBPFilter]
"(Default)" = "WEBPFilter CoWEBPFilter"

[HKCR\WEBPFilter.CoWEBPFilter\CurVer]
"(Default)" = "WEBPFilter CoWEBPFilter.1"

[HKCR\WEBPFilter.CoWEBPFilter.1\CLSID]
"(Default)" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCU\Software\Tencent\QQBrowser\IE8\MIME\Database\Content Type\image/webp]
"Image Filter CLSID" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCR\MIME\Database\Content Type\image/webp]
"CLSID" = "{25336920-03F9-11cf-8FD0-00AA00686F13}"

[HKCR\AppID\WebpDecodeFilter.DLL]
"AppID" = "{A629F59C-66C9-4775-901A-A017530E3958}"

[HKCR\.webp]
"Content Type" = "image/webp"

[HKCR\WebpDecodeFilter.WebpImageDecodeFilt.1\CLSID]
"(Default)" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\ProgID]
"(Default)" = "WEBPFilter.CoWEBPFilter.1"

[HKCR\WEBPFilter.CoWEBPFilter.1]
"(Default)" = "WEBPFilter CoWEBPFilter"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}]
"(Default)" = "WEBPFilter.CoWEBPFilter"

[HKCR\MIME\Database\Content Type\image/webp]
"Image Filter CLSID" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCR\WebpDecodeFilter.WebpImageDecodeFilt.1]
"(Default)" = "WebpImageDecodeFilter Class"

[HKCR\Interface\{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}]
"(Default)" = "IWebpImageDecodeFilter"

[HKCR\WebpDecodeFilter.WebpImageDecodeFilter]
"(Default)" = "WebpImageDecodeFilter Class"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\VersionIndependentProgID]
"(Default)" = "WEBPFilter.CoWEBPFilter"

[HKCR\Interface\{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}]
"AppID" = "{A629F59C-66C9-4775-901A-A017530E3958}"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\TypeLib]
"(Default)" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCR\.webp]
"PerceivedType" = "image"

[HKCR\MIME\Database\Content Type\image/webp\bits]
"0" = "04 00 00 00 FF FF FF FF 52 49 46 46"

[HKCR\TypeLib\{5FD70451-714E-495A-9F17-450AEF3AA35E}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\Interface\{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}\TypeLib]
"(Default)" = "{5FD70451-714E-495A-9F17-450AEF3AA35E}"

[HKCU\Software\Tencent\QQBrowser\IE8\MIME\Database\Content Type\image/webp]
"CLSID" = "{25336920-03F9-11cf-8FD0-00AA00686F13}"

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\InprocServer32]
"(Default)" = "%Program Files%\Tencent\QQBrowser\WebpDecodeFilter.dll"

[HKCR\Interface\{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}\TypeLib]
"Version" = "1.0"

[HKCR\AppID\{A629F59C-66C9-4775-901A-A017530E3958}]
"(Default)" = "WebpDecodeFilter"

[HKCR\WEBPFilter.CoWEBPFilter\CLSID]
"(Default)" = "{E577DC7C-F3A8-4A79-A2B0-8E0A79FFA45B}"

[HKCR\WebpDecodeFilter.WebpImageDecodeFilter\CLSID]
"(Default)" = "{A981255C-6123-4487-B21A-9CF468EB3FC7}"

[HKCR\WebpDecodeFilter.WebpImageDecodeFilter\CurVer]
"(Default)" = "WebpDecodeFilter.WebpImageDecodeFilt.1"

[HKCR\TypeLib\{5FD70451-714E-495A-9F17-450AEF3AA35E}\1.0\0\win32]
"(Default)" = "%Program Files%\Tencent\QQBrowser\WebpDecodeFilter.dll"

[HKCU\Software\Tencent\QQBrowser\IE8\MIME\Database\Content Type\image/webp]
"Extension" = ".webp"

[HKCR\MIME\Database\Content Type\image/webp]
"Extension" = ".webp"

[HKCR\TypeLib\{5FD70451-714E-495A-9F17-450AEF3AA35E}\1.0]
"(Default)" = "webpdecodefilter 1.0 Type Library"

The Trojan deletes the following registry key(s):

[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\TypeLib]
[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}]
[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\InprocServer32]
[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\VersionIndependentProgID]
[HKCR\CLSID\{A981255C-6123-4487-B21A-9CF468EB3FC7}\ProgID]

The process netsh.exe:2524 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%SystemRoot%\system32]
"napipsec.dll,-1" = "IPsec Relying Party"
"napipsec.dll,-3" = "Microsoft Corporation"
"napipsec.dll,-2" = "Provides IPsec based enforcement for Network Access Protection"
"napipsec.dll,-4" = "1.0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%SystemRoot%\system32]
"eapqec.dll,-102" = "1.0"
"eapqec.dll,-103" = "Microsoft Corporation"
"eapqec.dll,-100" = "EAP Quarantine Enforcement Client"
"eapqec.dll,-101" = "Provides Network Access Protection enforcement for EAP authenticated network connections, such as those used with 802.1X and VPN technologies."
"dhcpqec.dll,-102" = "Microsoft Corporation"
"dhcpqec.dll,-103" = "1.0"
"dhcpqec.dll,-100" = "DHCP Quarantine Enforcement Client"
"dhcpqec.dll,-101" = "Provides DHCP based enforcement for NAP"
"tsgqec.dll,-102" = "1.0"
"tsgqec.dll,-103" = "Microsoft Corporation"
"tsgqec.dll,-100" = "RD Gateway Quarantine Enforcement Client"
"tsgqec.dll,-101" = "Provides RD Gateway enforcement for NAP"

The process netsh.exe:2492 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

The process PerfTraceService.exe:3452 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\PerfTraceService]
"TypesSupported" = "7"
"EventMessageFile" = "%Program Files%\Tencent\QQBrowsb"

The process BaiduPlayer5SetupSilent_359.exe:2044 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\BAIDU\BDPlayer\InstallPath]
"Version" = "5.1.1.9"
"InstallTime" = "2017-05-18 02:53:32"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "BaiduPlayer5SetupSilent_359.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BDPlayer]
"HelpLink" = "http://www.baidu.com"
"DisplayName" = "Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5"

[HKLM\SOFTWARE\BAIDU\BDPlayer]
"ChannelID" = "359"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BDPlayer]
"UninstallString" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDUninstall.exe"

[HKLM\SOFTWARE\BAIDU\BDPlayer]
"FirstInstallTime" = "2017-05-18 02:53:32"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BDPlayer]
"DisplayVersion" = "5.1.1.9"
"Publisher" = "Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Å“Â¨Ã§ÂºÂ¿Ã§Â½â€˜Ã§Â»Å“Ã¦Å â‚¬Ã¦Å“Â¯Ã¯Â¼Ë†Ã¥Å’â€”Ã¤ÂºÂ¬Ã¯Â¼â€°Ã¦Å“â€°Ã©â„¢ÂÃ¥â€¦Â¬Ã¥ÂÂ¸"
"DisplayIcon" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe"

[HKLM\SOFTWARE\BAIDU\BDPlayer\InstallPath]
"Path" = "%Program Files%\baidu\BDPlayer\5.1.1.9"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BDPlayer]
"URLUpdateInfo" = "http://www.baidu.com"
"URLInfoAbout" = "http://www.baidu.com"

The process V8._85416_20150820204011.exe:2732 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\SignatureList]
"accountInfoBar.html" = "AY9EPX/xn4 koiwdV53GGkKRrHlPe7dM7IW095EVLW9EcDFnd3D265K4Q97AvSL1mXyed eU6run704RFnvWsteF2Kz1i2/PqgFmx2uHgcq/eNCgvSwJWAh8fOxdtupX4PCMNt5bTfniQeDl1nzt VR9bLAfthB2NSQNbTssemk="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\js]
"global.js" = "F1x bElWW0KAVW8dze0Mbr/Dm6CoJGRHw9Hyx1RReWDG/gXkjcQdXk a46Axg2sDjSzwOpra92NNO7ANhXE2f070FE9R4JQlb/7EiMo34Yuv2ik9RgJGDod4aT/h9hBhC2S9yWne0JH7Nr/mbFU8Mb88RrN0Q7POMH3VHicGxxo="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess\js]
"api.js" = "KdzpiPPafc//mqIv/5 XJLoPFho3ixPxjdBXo7fUMneJIFwT70jZTYldVYFnNHeL75MbZIrnRbIYTfxe7Pn8oDaTs4SCaf6q8dQXmJ9ssO80MuxeP0ndCXW5IOoqPZoJ3wyDTzNrqihWlm/ ozzmC6tlQNwpaledwco9hHv3Kac="

[HKCU\Software\Tencent\QQBrowser\Launch]
"SkinUpdateFlag" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"FavoritesChanges" = "1"

[HKLM\SOFTWARE\Tencent\QQBrowser]
"INSTLANG" = "1033"

[HKCU\Software\Tencent\QQBrowser\Common]
"MainPageDIY_" = "30391306"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"Operational" = "1"
"STYLE" = "104"

[HKLM\SOFTWARE\Tencent\QQBrowser]
"s2" = "4"
"s1" = "4"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}]
"CommandOrder" = "1"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\lib]
"ycalendar.js" = "Ib0wShmBpOPdR6WIXozuGPAYmfhw HqOZEc9lU wePCCZVQ6YfBPhdNrdduMjhS5hB3SnrGR577LroR1Y2Rv4mlpMvc090e40OzXs/knSRxzb3rCvfZPwpa/HlTAtP47aP6I75ecIT0dIl/vPovsR1gjWfVFjfvcmILiHbwDA4="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"Name" = "Ã¥â€ â€¦Ã©Â¡ÂµÃ©ÂÂ¢"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess\js]
"search.js" = "IOSc1vtqyq1U7w6ERKIDsLRpv4mCbXTIw/HKw13cRHxcexU7Lrlv64EHual89dNwbkQbQh5Vc4vQlubP2vKuq9yzILTIElywHb4C6Uf6xd26zYypsUK1RjKoffD8wVvBW9Vlj37VbAXxhI8K4Q8ZZk00jCUKlBc9Gh3bbxdA0Gs="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\js]
"init.js" = "PFyqkS14Ezzwwz3NzSYKgQGIhRXUTnt6ktpq OCUoyT9x96JDR5tWlyWvGn/S8QtChKnWJ4ieyeVWXLQUrQGG5lEDl33J3dmOavy3OUOcvX8XpPA3BcX5XgT1VHlb3zNVVQaT0TPyzBF3SD2OEBbSxfyUQgtDaSBe0RsaU7Xnb0="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\BackgroundPage]
"LoadingTime" = "LoadAsInited"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess\js]
"global.js" = "SeN/CHriBIVnAjdwU6fW8AHF Y5sYGuTkrIwtRsftkTb2xJMtrUsGn1IuvZYyuHQDvkeFojs9MobGSEuJ Cj1S94nQrvzQbV8hd2sS2j27SmIQHTJjaC478N4KYEvvLFu84D1tWaEUfLCXZkhjwTcNPsC45ORTPKG6hzgqeccMM="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\history]
"history2.js" = "EYdPibxwSOsOqWp65 q m9YPkG2qiUUGpCPnvRau01UVBjkeEsX12Uy5TmZV0QiqFodnvBKS8uPPdSDAtWYh46mlNAugPtYfiEf7rdH5i9IKkjarXT3vqrc8m dOB2sBwi35rGtSx5Q mNco60nlRGZ/4BbXHVO9e4liF3omtHU="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\ContentScripts\DocumentIdle_0]
"AllFrames" = "1"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"Version" = "8.0.0.12"

[HKCU\Software\Tencent\QQBrowser\extensions8]
"CommandOrder" = "1"

[HKCU\Software\Tencent\QQBrowser\PrivateCfg]
"EnableZombieReport" = "1"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\SignatureList]
"content.js" = "HT1aXFiSWWlckk7HXoJkwioM1SSPnbDaXAKb3oOmdxHYpJDFZoUmdiVxYpDM4q3nhXWNdlgFJwH88gmJBpR EYUVMlJRLk6nW0WTWFpoKuGv5 bv3Fafms133G5ygK61lv0xigm9vitf72LDM0wpESsg8yMdDmk1uvrCbYE3Swg="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"Operational" = "1"

[HKCU\Software\Tencent\QQBrowser\InstallInfo]
"NewInstall" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"URLInfoAbout" = "http://www.qq.com"

[HKCU\Software\Tencent\QQBrowser\Advanced]
"EnableUEData" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"Favorites" = "00 0A 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\js]
"business.js" = "IuxI4T0J7Bik5qY6/aqfPYonejaosMlt7RKPN2HAI58nqalyzaR3NKDmDMBsP/GLsP/n4EEmigqfaXfhw1XVPuoKRupEmWoBrFcuX0YxFI/tTm8jQjjGQnoyTA0sowMVrFwfL ATf0Id2A3Ld1g7RvjnRX1DRtsnCMsCqrERJjk="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\BackgroundPage]
"Path" = "background.html"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"ManifestVersion" = "2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\BackgroundDll]
"LoadingTime" = "LoadAsInited"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"ManifestVersion" = "2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}]
"CommandOrder" = "2"

[HKCU\Software\Tencent\QQBrowser\Launch]
"AbpCalcFlag" = "1"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"RequiredMinVersion" = "8.0.0.2261"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\lib]
"jquery.easing.js" = "TmbGZQQC93Sgo2FdztxQ0d9XKSQvW71Fi7BWXGb3/Y FVjxcrUPmKaPobqD7KbZMw7CHfrtxoraOME53bkqu7WtNB48Toe29QgontHYDQgrkR9tTzIz8ByGm187nfwmjMQ/pazCml7IhkVNcTRuiUBILtPyb5I8Dg6vKCCa8fcU="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\SignatureList]
"background.js" = "F9mIz66B1YB2KiWHfg8OtENAgX96C/1LO0KjQQHIR31aEaHLE5tPl fwJZigG8Q6ZhhcxmJ3KXTQWzo63lWn8vSkbn4pdwgVMT2Or3vBeRoD97hKndLnvyZ4QoTWvOskDzcBA5mzrDV9Yp5x1R/Z5lNfFH3FL0d1CPq TAfTet4="

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"Operational" = "1"

[HKCU\Software\Tencent\QQBrowser\Common]
"MainPageDIY" = "ZgAuAGoAaQBzAHMAMwA2ADAALgBjAG4AAAAaAAAA"

[HKCU\Software\Tencent\QQBrowser\InstallInfo]
"InstallModeForExtension" = "1"

[HKLM\SOFTWARE\Tencent\QQBrowser]
"InstallDir" = "%Program Files%\Tencent\QQBrowser"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"STYLE" = "64"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\ContentScripts\DocumentIdle_0]
"JS" = "content.js"

[HKCU\Software\Tencent\QQBrowser\InstallInfo]
"DefaultBrowserFirstRun" = "0"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}]
"currentVersion" = "8.0.3.25"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"ManifestVersion" = "2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage]
"index.html" = "Uy0EzM9E6A oW0Z32PTfsdnTQKM8SYLC8Svtt17Rtqz fslfu4Rf0azo0648ksrzDNSmiBlKk0iB2FCsYtC5RZOxmCgxpG0rk16BRJ1Gpf8hQmkpWSTzx2IR MAZgb7CqIwwhGHPzE3qF1k4bVaBita wVueecTJfn4gHFZ1bLg="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}]
"currentVersion" = "8.0.0.25"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"Name" = "Ã¨Â´Â¦Ã¥ÂÂ·Ã¥Å Â©Ã¦â€°â€¹"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "10"

[HKLM\SOFTWARE\Tencent\QQBrowser]
"EXE" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant]
"ExecutablesToExclude" = "%Program Files%\Tencent\QQBrowser\QQBrowser.exe"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\SignatureList]
"background.html" = "Fm2eUg6wC00HcJHVm5J5S9WbzmEVSNFdyD8in0PXbYIUFYHWK zhaV9u182EDyOlZuGJx5fLb0VPFyexkuUSnj4ULw1KjUvqMjtjvPcMlgxIOsZ2m2jqwbJsRGPbXSLKCMKqq uFRju5vweuSqBckjVRLe4ndm/ewMWuI7GJUkQ="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html]
"certerror.html" = "Quu5ifaZbhsH6hfNNjsEbMi71iGFPa 7qoPsbDB85tzNJhbuwap kINuU5JVUFuy7ab/H63S1Y9kCw eo6zOs2bZvrgxEv8DGHhKa832zqs6fjzTX BFb6/uP1kQr9kAIzY jkBspKr9vZIFKnmKfjTFFlvSX3lQxR9BTuyhiN8="

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}]
"CommandOrder" = "0"

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted\C:\Users\"%CurrentUserName%"\AppData\Local\Temp]
"V8._85416_20150820204011.exe" = "1"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"ID" = "{807849B3-40D8-42E3-8001-D541FD7CEBFB}"

[HKCU\Software\Tencent\QQBrowser]
"HomePageCfg" = "1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"RequiredMinVersion" = "8.0.0.0"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\BackgroundDll]
"Path" = "QBSafe.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"UninstallString" = "%Program Files%\Tencent\QQBrowser\uninst.exe"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"Desc" = "Ã¨Â´Â¦Ã¥ÂÂ·Ã¥Å Â©Ã¦â€°â€¹"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess]
"index.html" = "DG53S6RFyw43Ype9xROtxTn4z5b3SsHMzH8/wVLXZciV6q4kwtV3RzjBgYe7MiTfATyKVDf5DqI/mqQCIpYrr1JN6EXZR81dwwgj70KhNn/9WcjMdpBvKxRLCjl82LcKMlx91xsdg6Dt6Oy2gDhDopfRX1ThZ2OFvfdSyp4OHQo="

[HKCU\Software\Tencent\QQBrowser\Launch]
"InstallQuickSetting" = "0"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"Desc" = "QBSafe"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}]
"currentVersion" = "8.0.0.12"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"Publisher" = "Ã¨â€¦Â¾Ã¨Â®Â¯Ã§Â§â€˜Ã¦Å â‚¬Ã¯Â¼Ë†Ã¦Â·Â±Ã¥Å“Â³Ã¯Â¼â€°Ã¦Å“â€°Ã©â„¢ÂÃ¥â€¦Â¬Ã¥ÂÂ¸"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"ID" = "{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}"

[HKLM\SOFTWARE\Tencent\QQBrowser]
"Version" = "8.2.3638.400"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"STYLE" = "80"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\js]
"api.js" = "CTLNX2nY1O7mQDlrx81saZ A/b3cld1PV1aWjfRWB9Uk7nMqUgRWUwgVmyvWg9gkM0yW1MsoF6XNwlLBdc8okJ8kImN9HQxCfo4NuKEahbCA1RnudXB pCuvw3EEMiY ORP/YDMicZcSXjtSnvP3UDhaX THBQVVts I5sLdd5g="
"tool.js" = "K4IAXHGyqD8uA sLEGlFibFQFep8I HkPC6DghtA9hoTdT1tLMSTsbcae2i84ApCOoZfk1C2pUFZKm zTVVUv9o4P9Oozg9nnWh57vtG7ZXh3mv8qIRGwwANrzOQ rITxZOxWcTUTD8qZm E8LlIN0BrJJKq4Pp9GeSDBv4bMoc="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"Version" = "8.0.0.25"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess\js]
"init.js" = "HS Wucfrv 6MUQNZq0WGl6Yw8Ly2dg hvt5V24pB0sowDcogYJpVFP7lyYpqkEWURP1N0mBL8t qCq70Zi/U/E2y7YbqDiQlmwkkHeUSHMVnfCk5anb9ybtcI//8CWC67XXLFO0oRjvc9PsAQHdcDriLEMx3DzYDxb ZLFaswiU="

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"RequiredMinVersion" = "8.1.0.0"

[HKCU\Software\Tencent\QQBrowser\Launch]
"Learned" = "1"

[HKCU\Software\Tencent\QQBrowser]
"(Default)" = "%Program Files%\Tencent\QQBrowser"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25]
"Version" = "8.0.3.25"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"ID" = "{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}"

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\SignatureList\js]
"inforBar.js" = "S232TIJBgUGMXlTdOQRla7UFcRwmODl7HS6sTy2LB9xtBKNjcUUfpZCPrXF11mEjmXkG04wEItvpPgr70sOc1/mxQ92eYR7k/8G5ajwkGW/ IBjUUsSE0sTzHIxwQExAFa8newkyrRqF jHkN1n4BZKdzwbw f0TqwXpiJUe/z0="

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"FavoritesVersion" = "2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\lib]
"jquery.min.js" = "CHRzStLFVzowFpds/NlgIauwssen3//6We9cKfzF4H4Vd0hTu rRxAgWBSZOvL3qB MA5m1oDYbyEFquZhoip7CWckTQo6 S dUFfDJATgzAhGnGQPvY1xAeDuKT9mHvkWXV8QiJu5ZgSSuggmwXioU5HomYw1dNanbdvDS7rss="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html]
"error.html" = "Gs5We3VMGdtvsJGT6u6MMVvDt3zSWVVCEh8CKo8BudWeZgocGRxZCxnUzIBcEspzCp9h2OFGwf4FTuDYG9Mf1MROlJx1oTz9uXnHk/JNRuCTn/dHBXBTqu6XR1tj6OqL7gKQ3svK/Mexy4lBO/PSgypdugTHFgugTpMadvZRDAE="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\lib]
"jquery.mCustomScrollbar.concat.min.js" = "FEhORzx0GxacyZAVElwZHrgrANsncYw61M/NU 0QHFBgGjRJpqYWNkmYr RKq2WX0f/FJok0GTgzs8/6dhyMZytR PdWyBo75CPRNtP9mOif95Zo4easLJYCBcI5g2c0D5pRYPoiHsPikFHkAJqRvrN6hSayUrzNSKTswWIuyb0="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\app]
"app.js" = "G/xQAG9BNoueIWTF1B/FXI65sQFTqDtYNE0FVw5XsDx85Ijs IGfdoTBG7Py NEEoLHisu1f8t1F3PxhFNk DpdtGLy8bva44n6ej3FvOKk8n0KXPpT5IyCV8qs3EkNZaXZdk9rqBhdZQUdUDJDVnJ0iRs1nyTryHc9C8yzksaM="

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\manage\app]
"sliderman.1.3.7.js" = "RkIvek G9RI Q9/NEOdxEh/ynLS5sJRj/vlO2PrWACyN8sI9vf695W/3CP d/Jr59MnJV2sK2YzNz6txbNvhpSI6S3MTO8Z3UJIBleKth0bLzeGpI4dTaAsMMam3QXyux3g7jkzADCCb5iHY8RLV c6W8sEprWrpGZNIRzFvOcs="

[HKLM\SOFTWARE\Tencent\QQBrowser]
"SupplyID" = "85416"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"DisplayVersion" = "8.2.3638.400"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\lib]
"template.js" = "RzgJqwNHJ4N8sJDEKasrvKhYoIjrKXGKh3qo6y3p7Bx3eQjIDn1gNlluXXutWcLSBX23i7mSbXxa6km5He 5qAf5eFTYPlcyzJ1efN6K7LGNsOYTGrjFWBGg57GhUneVMDCg1l8ncB214UhBIQPO6KZ2/tvVX4d0a6nCIXqOTdc="

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html]
"private.html" = "K xv/ifPeX60jeD65vv gUoqtdQCKyrPu3G9CV9ZgkzifnKYT2HlMs77KUqIBos6Ta5uCGG4ausc030WTKPfMuL9EjmW7FoJZIZgTcWa mx0 gaAmsoMZHsvq/IVS6SDzsQ/mOiHy60uAr1RKyo62yEJn9wW8JYFqpfIUaAznfU="

[HKCU\Software\Tencent\QQBrowser\extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25]
"HomeUrl" = "http://app.browser.qq.com?id={309147A1-5CA9-4082-BAB3-BF9020CDE0C2}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2]
"FavoritesResolve" = "28 03 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html]
"small.html" = "WhbKXbpTC/qXxBxGyDkPJ/ZidAPRqwpAIJ8PLBPltgCg1UOLWJ0KKlk30VAlBy8LToz1KY9tESfeyRr1Qj0S8uwj1uskS7BS Nv9rCDKYGKMcDtyfGr2PeKzp2Zm5lch76FJqhupbdr96BGzQfyKYi 6 F3Ih/Slsdzs3XdO9Ik="

[HKCU\Software\Tencent\QQBrowser\Launch]
"MainPageType" = "2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"DisplayName" = "QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨8.2"

[HKCU\Software\Tencent\QQBrowser\extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\SignatureList\Html\quickaccess\js]
"business.js" = "WwyVRnDKaHIVi7OS82cBQkBlZMsrWmAnPcwnoCg2R4t8EtSPDXSP0xhBttAipCfJaV6zLzkC21QRx1LrESQKdh3KvGzvw9O2dHm9Xj Ugulv8wtWsfMDS FQyAGC z0jMV4dBQooJplN1ncZteRXwjISn0jBdDc3CUac1LbU3CI="

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser]
"DisplayIcon" = "%Program Files%\Tencent\QQBrowser\app.ico"

[HKCU\Software\Tencent\QQBrowser\PrivateCfg]
"TC_CFT_Bits3" = "71656520"

[HKCU\Software\Tencent\QQBrowser\extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12]
"Name" = "QBSafe"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Tencent\QQBrowser]
"S2"
"S1"

[HKCU\Software\Tencent\QQBrowser\Launch]
"EnableUEData"

The process PlayerApp.exe:1956 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCR\.pmp\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rmi\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.mod\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg4\UserChoice]
"Progid" = "BDPlayer.mpeg4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma]
"Progid" = "BDPlayer.wma"

[HKCR\.smk]
"(Default)" = "BDPlayer.smk"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tp]
"Progid" = "BDPlayer.tp"

[HKCR\BDPlayer.dts\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.aac]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ssa\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.3g2\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mla" = "BDPlayer.mla"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
"Progid" = "BDPlayer.mpa"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flic\UserChoice]
"Progid" = "BDPlayer.flic"

[HKCR\BDPlayer.mod]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ratDVD\UserChoice]
"Progid" = "BDPlayer.ratDVD"

[HKCR\.wav]
"BDPlayer.bak" = "WMP11.AssocFile.WAV"

[HKCR\BDPlayer.qt]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.avi\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\avi.ico"

[HKCR\.3g2]
"BDPlayer.bak" = "WMP11.AssocFile.3G2"

[HKCR\BDPlayer.ac3\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.rpm\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.d2v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m4v" = "BDPlayer.m4v"

[HKCR\.pva]
"(Default)" = "BDPlayer.pva"

[HKCR\.mov]
"(Default)" = "BDPlayer.mov"

[HKCR\.3gp]
"BDPlayer.bak" = "WMP11.AssocFile.3GP"

[HKCR\BDPlayer.amr]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"comres.dll,-3410" = "Component Services"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rpm\UserChoice]
"Progid" = "BDPlayer.rpm"

[HKCR\BDPlayer.m4a\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.rpm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.rt\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.hlv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
"Progid" = "BDPlayer.flv"

[HKCR\BDPlayer.fli]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".flv" = "BDPlayer.flv"

[HKCR\.mpe]
"(Default)" = "BDPlayer.mpe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp5]
"Progid" = "BDPlayer.mp5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2]
"Progid" = "BDPlayer.3gp2"

[HKCR\BDPlayer.flv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wmv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.divx\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mpeg" = "BDPlayer.mpeg"

[HKCR\BDPlayer.scm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mpe\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"GlobalAssocChangedCounter" = "47"

[HKCR\.hlv\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".TAK" = "BDPlayer.tak"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\Windows Journal]
"Journal.exe,-3074" = "Windows Journal"

[HKCR\.mp5]
"(Default)" = "BDPlayer.mp5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rpm\UserChoice]
"Progid" = "BDPlayer.rpm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice]
"Progid" = "BDPlayer.fli"

[HKCR\BDPlayer.asm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".FLI" = "BDPlayer.fli"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vob\UserChoice]
"Progid" = "BDPlayer.vob"

[HKCR\BDPlayer.mod\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOD.ico"

[HKCR\BDPlayer.mp3\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.m4v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mp5\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram]
"Progid" = "BDPlayer.ram"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".SSA" = "BDPlayer.ssa"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scm\UserChoice]
"Progid" = "BDPlayer.scm"

[HKCR\BDPlayer.ogg]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".rp" = "BDPlayer.rp"

[HKCR\.ogm\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
"Progid" = "BDPlayer.mp2v"

[HKCR\BDPlayer.ogg\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.smi\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.m4b\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.3gpp\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rmvb\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mpv2]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf]
"Progid" = "BDPlayer.asf"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\UserChoice]
"Progid" = "BDPlayer.mts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
"Progid" = "BDPlayer.3g2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm]
"Progid" = "BDPlayer.webm"

[HKCR\BDPlayer.mp4\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogx\UserChoice]
"Progid" = "BDPlayer.ogx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scm\UserChoice]
"Progid" = "BDPlayer.scm"

[HKCR\BDPlayer.wma\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wma.ico"

[HKCR\BDPlayer.mids\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb]
"Progid" = "BDPlayer.rmvb"

[HKCR\.mpeg\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ratDVD]
"Progid" = "BDPlayer.ratDVD"

[HKCR\.ass]
"(Default)" = "BDPlayer.ass"

[HKCR\BDPlayer.csf]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.rmi]
"BDPlayer.bak" = "WMP11.AssocFile.MIDI"

[HKCR\BDPlayer.asf]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.wv]
"(Default)" = "BDPlayer.wv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\UserChoice]
"Progid" = "BDPlayer.mts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
"Progid" = "BDPlayer.3g2"

[HKCR\BDPlayer.mid\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.cda]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\UserChoice]
"Progid" = "BDPlayer.cda"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".flic" = "BDPlayer.flic"

[HKCR\.smi\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ivm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ssa]
"(Default)" = "BDPlayer.ssa"

[HKCR\.rp\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.flc\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mid\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"dfrgui.exe,-103" = "Disk Defragmenter"

[HKCR\BDPlayer.mpeg\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.amr]
"(Default)" = "BDPlayer.amr"

[HKCR\BDPlayer.mla\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asm\UserChoice]
"Progid" = "BDPlayer.asm"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".APE" = "BDPlayer.ape"

[HKCR\.mpeg4]
"(Default)" = "BDPlayer.mpeg4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
"Progid" = "BDPlayer.mpeg"

[HKCR\.dts\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ogm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
"Progid" = "BDPlayer.m4v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr]
"Progid" = "BDPlayer.amr"

[HKCR\.ts]
"BDPlayer.bak" = "WMP11.AssocFile.TTS"

[HKCR\BDPlayer.mid\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.3gpp]
"(Default)" = "BDPlayer.3gpp"

[HKCR\BDPlayer.wav]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wmp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mts\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MTS.ico"

[HKCR\BDPlayer.3gpp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.rt\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mp4\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amv\UserChoice]
"Progid" = "BDPlayer.amv"

[HKCR\BDPlayer.wm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.3gp2\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "9"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp6\UserChoice]
"Progid" = "BDPlayer.vp6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf\UserChoice]
"Progid" = "BDPlayer.ivf"

[HKCR\.m2ts]
"BDPlayer.bak" = "WMP11.AssocFile.M2TS"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".wma" = "BDPlayer.wma"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
"Progid" = "BDPlayer.mkv"

[HKCR\BDPlayer.qt\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.flac]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
"Progid" = "BDPlayer.mpv2"

[HKCR\BDPlayer.ofr\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".csf" = "BDPlayer.csf"

[HKCR\.d2v]
"(Default)" = "BDPlayer.d2v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\UserChoice]
"Progid" = "BDPlayer.mod"

[HKCR\.mp2v]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\BDPlayer.flv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\flv.ico"

[HKCR\BDPlayer.wmv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.3gpp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.pva\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil]
"Progid" = "BDPlayer.smil"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlmv\UserChoice]
"Progid" = "BDPlayer.xlmv"

[HKCR\BDPlayer.ogm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.m2p\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.tp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
"Progid" = "BDPlayer.mpv2"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E]
"LanguageList" = "en-US, en"

[HKCR\BDPlayer.tod]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
"Progid" = "BDPlayer.m4v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\UserChoice]
"Progid" = "BDPlayer.mod"

[HKCR\BDPlayer.avi\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.m4b\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.scm\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
"Progid" = "BDPlayer.mpg"

[HKCR\BDPlayer.fli\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vob\UserChoice]
"Progid" = "BDPlayer.vob"

[HKCR\Applications\BDPlayer.exe\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.flc]
"(Default)" = "BDPlayer.flc"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"ie4uinit.exe,-737" = "Internet Explorer (No Add-ons)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".FLAC" = "BDPlayer.flac"

[HKCR\.mpv2]
"(Default)" = "BDPlayer.mpv2"

[HKCR\BDPlayer.aac\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.mp3\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ratDVD\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.m4p\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.wmp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mla]
"(Default)" = "BDPlayer.mla"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ratDVD" = "BDPlayer.ratDVD"

[HKCR\BDPlayer.mp5\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".M4A" = "BDPlayer.m4a"

[HKCR\BDPlayer.d2v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mid]
"(Default)" = "BDPlayer.mid"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m4p" = "BDPlayer.m4p"

[HKCR\BDPlayer.tod\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra]
"Progid" = "BDPlayer.ra"

[HKCR\BDPlayer.mp2\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.3gp2]
"BDPlayer.bak" = "WMP11.AssocFile.3G2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
"Progid" = "BDPlayer.smil"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ivm" = "BDPlayer.ivm"

[HKCR\.bik]
"(Default)" = "BDPlayer.bik"

[HKCR\BDPlayer.ass\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mpa\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.vob\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t]
"Progid" = "BDPlayer.m2t"

[HKCR\.m4p]
"(Default)" = "BDPlayer.m4p"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
"Progid" = "BDPlayer.asf"

[HKCR\.bik\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rpm]
"Progid" = "BDPlayer.rpm"

[HKCR\.3g2]
"(Default)" = "BDPlayer.3g2"

[HKCR\BDPlayer.bik\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ogg]
"(Default)" = "BDPlayer.ogg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pss\UserChoice]
"Progid" = "BDPlayer.pss"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tod\UserChoice]
"Progid" = "BDPlayer.tod"

[HKCR\BDPlayer.ssa\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SSA.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssa\UserChoice]
"Progid" = "BDPlayer.ssa"

[HKCR\.m4v]
"(Default)" = "BDPlayer.m4v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\UserChoice]
"Progid" = "BDPlayer.rm"

[HKCR\BDPlayer.m2p]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.3gp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\3gp.ico"

[HKCR\.ivf]
"(Default)" = "BDPlayer.ivf"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".PMP" = "BDPlayer.pmp"

[HKCR\BDPlayer.m2a\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.m4a]
"BDPlayer.bak" = "WMP11.AssocFile.M4A"

[HKCR\.amv]
"(Default)" = "BDPlayer.amv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pss\UserChoice]
"Progid" = "BDPlayer.pss"

[HKCR\.ts\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".avi" = "BDPlayer.avi"

[HKCR\BDPlayer.3g2\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.3gp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\UserChoice]
"Progid" = "BDPlayer.rm"

[HKCR\.asm\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mpeg4" = "BDPlayer.mpeg4"

[HKCR\.tta\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ivm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.3g2]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.vob\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.3gpp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.mpeg]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rmi\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ape]
"(Default)" = "BDPlayer.ape"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa]
"Progid" = "BDPlayer.mpa"

[HKCR\BDPlayer.webm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v]
"Progid" = "BDPlayer.mp2v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asm]
"Progid" = "BDPlayer.asm"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".3g2" = "BDPlayer.3g2"

[HKCR\.mpa]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2]
"Progid" = "BDPlayer.3g2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
"Progid" = "BDPlayer.wav"

[HKCR\.m2t\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
"Progid" = "BDPlayer.amr"

[HKCR\BDPlayer.mkv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.wmv]
"BDPlayer.bak" = "WMP11.AssocFile.WMV"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat]
"Progid" = "BDPlayer.dat"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10209" = "More Games from Microsoft"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv\UserChoice]
"Progid" = "BDPlayer.ogv"

[HKCR\BDPlayer.wav\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.aac]
"BDPlayer.bak" = "WMP11.AssocFile.ADTS"

[HKCR\BDPlayer.mka\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mka\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bik]
"Progid" = "BDPlayer.bik"

[HKCR\BDPlayer.tpr\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.flic\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
"Progid" = "BDPlayer.wav"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
"Progid" = "BDPlayer.amr"

[HKCR\BDPlayer.ogv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smk]
"Progid" = "BDPlayer.smk"

[HKCR\.mpg\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.m2p]
"(Default)" = "BDPlayer.m2p"

[HKCR\BDPlayer.mpeg\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpeg.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".FLC" = "BDPlayer.flc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofr\UserChoice]
"Progid" = "BDPlayer.ofr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv\UserChoice]
"Progid" = "BDPlayer.ogv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
"Progid" = "BDPlayer.3gp2"

[HKCR\BDPlayer.mpv2\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
"Progid" = "BDPlayer.smil"

[HKCR\BDPlayer.cda\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".amv" = "BDPlayer.amv"

[HKCR\.wma\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.csf\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv]
"Progid" = "BDPlayer.mkv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".pva" = "BDPlayer.pva"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
"Progid" = "BDPlayer.m1v"

[HKCR\BDPlayer.tak]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.amr\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.ape\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.mkv\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofr\UserChoice]
"Progid" = "BDPlayer.ofr"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m1v" = "BDPlayer.m1v"

[HKCR\BDPlayer.mpe\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.mid\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
"Progid" = "BDPlayer.3gp2"

[HKCR\.ra]
"(Default)" = "BDPlayer.ra"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"iscsicpl.dll,-5001" = "iSCSI Initiator"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpr\UserChoice]
"Progid" = "BDPlayer.tpr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
"Progid" = "BDPlayer.mp4"

[HKCR\BDPlayer.m2a\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scm]
"Progid" = "BDPlayer.scm"

[HKCR\BDPlayer.tp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp]
"Progid" = "BDPlayer.rp"

[HKCR\.flc\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mts]
"(Default)" = "BDPlayer.mts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov]
"Progid" = "BDPlayer.mov"

[HKCR\BDPlayer.wm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pss]
"Progid" = "BDPlayer.pss"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pmp\UserChoice]
"Progid" = "BDPlayer.pmp"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mts" = "BDPlayer.mts"

[HKCR\BDPlayer.ratDVD\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mts\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.ogv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
"Progid" = "BDPlayer.mid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\UserChoice]
"Progid" = "BDPlayer.ogm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
"Progid" = "BDPlayer.3gp"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ASS" = "BDPlayer.ass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.d2v]
"Progid" = "BDPlayer.d2v"

[HKCR\BDPlayer.srt\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SRT.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".3gp" = "BDPlayer.3gp"

[HKCR\.mov]
"BDPlayer.bak" = "WMP11.AssocFile.MOV"

[HKCR\BDPlayer.dat\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DAT.ico"

[HKCR\BDPlayer.ogx\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.wv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.wma\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".asf" = "BDPlayer.asf"

[HKCR\.avi]
"(Default)" = "BDPlayer.avi"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cda]
"Progid" = "BDPlayer.cda"

[HKCR\BDPlayer.m2v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.wmp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlv\UserChoice]
"Progid" = "BDPlayer.hlv"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10058" = "Purble Place"
"gameux.dll,-10059" = "Mahjong Titans"
"gameux.dll,-10056" = "Hearts"
"gameux.dll,-10057" = "Minesweeper"
"gameux.dll,-10054" = "Chess Titans"
"gameux.dll,-10055" = "FreeCell"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".asm" = "BDPlayer.asm"

[HKCR\.aifc]
"BDPlayer.bak" = "WMP11.AssocFile.AIFF"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mids" = "BDPlayer.mids"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
"Progid" = "BDPlayer.webm"

[HKCR\.dts]
"(Default)" = "BDPlayer.dts"

[HKCR\.wmv\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DTS\UserChoice]
"Progid" = "BDPlayer.dts"

[HKCR\.avsts\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ac3\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mpv2\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.wv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flic]
"Progid" = "BDPlayer.flic"

[HKCR\.wma]
"(Default)" = "BDPlayer.wma"

[HKCR\BDPlayer.rt]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.flac]
"(Default)" = "BDPlayer.flac"

[HKCR\BDPlayer.ts\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ts.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"mip.exe,-291" = "Math Input Panel"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\Windows Sidebar]
"sidebar.exe,-1005" = "Desktop Gadget Gallery"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
"Progid" = "BDPlayer.avi"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".wm" = "BDPlayer.wm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smk\UserChoice]
"Progid" = "BDPlayer.smk"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"AuthFWGP.dll,-20" = "Windows Firewall with Advanced Security"

[HKCR\.mp2\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mpa]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-591" = "Windows Easy Transfer Reports"

[HKCR\BDPlayer.pva\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\pva.ico"

[HKCR\.mpeg4\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.f4v]
"Progid" = "BDPlayer.f4v"

[HKCR\.ts]
"(Default)" = "BDPlayer.ts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2p\UserChoice]
"Progid" = "BDPlayer.m2p"

[HKCR\.SCM]
"(Default)" = "BDPlayer.scm"

[HKCR\BDPlayer.ts\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mpeg4\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v]
"Progid" = "BDPlayer.m2v"

[HKCR\BDPlayer.m2ts\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
"Progid" = "BDPlayer.avi"

[HKCR\.tpr]
"(Default)" = "BDPlayer.tpr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smk\UserChoice]
"Progid" = "BDPlayer.smk"

[HKCR\BDPlayer.wv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\RegisteredApplications]
"BDPlayer5" = "Software\Baidu\BDPlayer5\Capabilities"

[HKCR\.wmv]
"(Default)" = "BDPlayer.wmv"

[HKCR\BDPlayer.rmi]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.d2v\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.flac\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.flic]
"(Default)" = "BDPlayer.flic"

[HKCR\.3gp\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.pss\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.asm]
"(Default)" = "BDPlayer.asm"

[HKCR\.vp6]
"(Default)" = "BDPlayer.vp6"

[HKCR\BDPlayer.rmvb\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rmvb.ico"

[HKCR\BDPlayer.asf\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"MdSched.exe,-4001" = "Windows Memory Diagnostic"

[HKCR\BDPlayer.flac\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.rt\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
"Progid" = "BDPlayer.m2a"

[HKCR\.mpv2\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
"Progid" = "BDPlayer.mp4"

[HKCR\BDPlayer.pva\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mka]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".MID" = "BDPlayer.mid"

[HKCR\BDPlayer.rpm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.m4b]
"(Default)" = "BDPlayer.m4b"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".SRT" = "BDPlayer.srt"

[HKCR\.rm\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".wmp" = "BDPlayer.wmp"

[HKCR\.m4p\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.asm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.m2t]
"BDPlayer.bak" = "WMP11.AssocFile.M2TS"

[HKCR\BDPlayer.srt]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".wmv" = "BDPlayer.wmv"

[HKCR\.3g2\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mod\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.csf\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.pss\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.csf]
"(Default)" = "BDPlayer.csf"

[HKCR\BDPlayer.3gp2\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.asm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.d2v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.flic\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mp3]
"(Default)" = "BDPlayer.mp3"

[HKCR\BDPlayer.mov]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\UserChoice]
"Progid" = "BDPlayer.m4p"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp6\UserChoice]
"Progid" = "BDPlayer.vp6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pva\UserChoice]
"Progid" = "BDPlayer.pva"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\UserChoice]
"Progid" = "BDPlayer.rmvb"

[HKCR\.mov\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlv\UserChoice]
"Progid" = "BDPlayer.hlv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
"Progid" = "BDPlayer.mid"

[HKCR\BDPlayer.dsm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"TipTsf.dll,-80" = "Tablet PC Input Panel"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2p]
"Progid" = "BDPlayer.m2p"

[HKCR\BDPlayer.xlmv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".AAC" = "BDPlayer.aac"

[HKCR\BDPlayer.smi\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mp3]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
"Progid" = "BDPlayer.webm"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".M4B" = "BDPlayer.m4b"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DTS\UserChoice]
"Progid" = "BDPlayer.dts"

[HKCR\BDPlayer.flv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
"Progid" = "BDPlayer.m1v"

[HKCR\BDPlayer.mpga\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.m4b]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
"Progid" = "BDPlayer.m2a"

[HKCR\BDPlayer.ape\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ogv" = "BDPlayer.ogv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\UserChoice]
"Progid" = "BDPlayer.rmvb"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape]
"Progid" = "BDPlayer.ape"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"AccessibilityCpl.dll,-10" = "Ease of Access Center"
"gameux.dll,-10082" = "Games Explorer"

[HKCR\.m2v]
"(Default)" = "BDPlayer.m2v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlmv]
"Progid" = "BDPlayer.xlmv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ogx" = "BDPlayer.ogx"
".OGG" = "BDPlayer.ogg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt]
"Progid" = "BDPlayer.rt"

[HKCR\.tp\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ra\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.xlmv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ogm" = "BDPlayer.ogm"

[HKCR\.IVF\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.divx]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mp4\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".pss" = "BDPlayer.pss"

[HKCR\BDPlayer.f4v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\f4v.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MPGA\UserChoice]
"Progid" = "BDPlayer.mpga"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\UserChoice]
"Progid" = "BDPlayer.divx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mids\UserChoice]
"Progid" = "BDPlayer.mids"

[HKCR\BDPlayer.mpa\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.ram\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.webm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ass\UserChoice]
"Progid" = "BDPlayer.ass"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mpe" = "BDPlayer.mpe"

[HKCR\BDPlayer.ivf]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mpg" = "BDPlayer.mpg"

[HKCR\BDPlayer.ass\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ASS.ico"

[HKCR\BDPlayer.wv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".SMI" = "BDPlayer.smi"

[HKCR\BDPlayer.rm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.ogm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aac]
"Progid" = "BDPlayer.aac"

[HKCR\BDPlayer.mov\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.tta\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.avi]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ivm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".CDA" = "BDPlayer.cda"

[HKCR\.ram]
"(Default)" = "BDPlayer.ram"

[HKCR\BDPlayer.flic\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ts" = "BDPlayer.ts"

[HKCR\BDPlayer.rp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.vp7]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.mpga]
"(Default)" = "BDPlayer.mpga"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p]
"Progid" = "BDPlayer.m4p"

[HKCR\.ogx\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.xlmv\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.rmvb\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\UserChoice]
"Progid" = "BDPlayer.m4p"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m2p" = "BDPlayer.m2p"

[HKCR\BDPlayer.3gpp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.dat]
"(Default)" = "BDPlayer.dat"

[HKCR\.ogm]
"(Default)" = "BDPlayer.ogm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
"Progid" = "BDPlayer.flv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mp5" = "BDPlayer.mp5"
".mp4" = "BDPlayer.mp4"

[HKCR\BDPlayer.xlmv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka]
"Progid" = "BDPlayer.mka"

[HKCR\.rt]
"(Default)" = "BDPlayer.rt"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".MP2" = "BDPlayer.mp2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg]
"Progid" = "BDPlayer.mpeg"

[HKCR\BDPlayer.vp7\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mpv2" = "BDPlayer.mpv2"

[HKCR\.m2v]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\BDPlayer.ogv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.m2v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.flic\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.rp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.mpg]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".SMK" = "BDPlayer.smk"

[HKCR\.webm]
"(Default)" = "BDPlayer.webm"

[HKCR\BDPlayer.m2t\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M2P.ico"

[HKCR\.ofr]
"(Default)" = "BDPlayer.ofr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
"Progid" = "BDPlayer.wm"

[HKCR\.tpr\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
"Progid" = "BDPlayer.wmv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MPGA\UserChoice]
"Progid" = "BDPlayer.mpga"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice]
"Progid" = "BDPlayer.flc"

[HKCR\BDPlayer.rm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rm.ico"

[HKCR\BDPlayer.mla\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.flac\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts]
"Progid" = "BDPlayer.ts"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10021" = "Performance Monitor"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\UserChoice]
"Progid" = "BDPlayer.m2ts"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".smil" = "BDPlayer.smil"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofr]
"Progid" = "BDPlayer.ofr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
"Progid" = "BDPlayer.mp2"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".amr" = "BDPlayer.amr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv\UserChoice]
"Progid" = "BDPlayer.wv"

[HKCR\.xlmv]
"(Default)" = "BDPlayer.xlmv"

[HKCR\BDPlayer.mp3\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp3.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\UserChoice]
"Progid" = "BDPlayer.divx"

[HKCR\.flv]
"(Default)" = "BDPlayer.flv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tak]
"Progid" = "BDPlayer.tak"

[HKCR\BDPlayer.smil\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.webm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\WEBM.ico"

[HKCR\.3gp]
"(Default)" = "BDPlayer.3gp"

[HKCR\BDPlayer.ra\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mkv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mkv.ico"

[HKCR\.srt\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
"Progid" = "BDPlayer.aifc"

[HKCR\BDPlayer.tod\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"SoundRecorder.exe,-100" = "Sound Recorder"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg4]
"Progid" = "BDPlayer.mpeg4"

[HKCR\BDPlayer.rmvb\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".MP3" = "BDPlayer.mp3"

[HKCR\.ac3]
"(Default)" = "BDPlayer.ac3"

[HKCR\BDPlayer.m4v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.mp2]
"BDPlayer.bak" = "WMP11.AssocFile.MP3"

[HKCR\.smil]
"(Default)" = "BDPlayer.smil"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b]
"Progid" = "BDPlayer.m4b"

[HKCR\BDPlayer.m2v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape\UserChoice]
"Progid" = "BDPlayer.ape"

[HKCR\.ra\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2]
"Progid" = "BDPlayer.mpv2"

[HKCR\BDPlayer.rt\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe]
"Progid" = "BDPlayer.mpe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
"Progid" = "BDPlayer.3gp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg]
"Progid" = "BDPlayer.ogg"

[HKCR\BDPlayer.ratDVD]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wav\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.m4a]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.aac\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.cda\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flic\UserChoice]
"Progid" = "BDPlayer.flic"

[HKCR\BDPlayer.mpa\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.asf]
"BDPlayer.bak" = "WMP11.AssocFile.ASF"

[HKCR\BDPlayer.m2p\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bik\UserChoice]
"Progid" = "BDPlayer.bik"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
"Progid" = "BDPlayer.rmi"

[HKCR\.mpv2]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts\UserChoice]
"Progid" = "BDPlayer.ts"

[HKCR\BDPlayer.mpv2\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mpe\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.asf\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\asf.ico"

[HKCR\BDPlayer.mids]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ra]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ssa]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wma]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.rmvb]
"(Default)" = "BDPlayer.rmvb"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amv]
"Progid" = "BDPlayer.amv"

[HKCR\.mp4]
"(Default)" = "BDPlayer.mp4"

[HKCR\BDPlayer.m4v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bik\UserChoice]
"Progid" = "BDPlayer.bik"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
"Progid" = "BDPlayer.rmi"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.d2v\UserChoice]
"Progid" = "BDPlayer.d2v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts\UserChoice]
"Progid" = "BDPlayer.ts"

[HKCR\BDPlayer.cda\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp5\UserChoice]
"Progid" = "BDPlayer.mp5"

[HKCR\BDPlayer.wma\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mp2v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.srt\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ogx]
"(Default)" = "BDPlayer.ogx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a]
"Progid" = "BDPlayer.m2a"

[HKCR\BDPlayer.tak\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".AC3" = "BDPlayer.ac3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
"Progid" = "BDPlayer.wm"

[HKCR\BDPlayer.tpr]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ivm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.amv\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mpg]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\BDPlayer.f4v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m4p\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.m2v\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.vob\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpga]
"Progid" = "BDPlayer.mpga"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32\migwiz]
"wet.dll,-588" = "Windows Easy Transfer"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp]
"Progid" = "BDPlayer.3gp"

[HKCR\BDPlayer.vp6\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"NetProjW.dll,-501" = "Connect to a Network Projector"

[HKCR\BDPlayer.flc]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
"Progid" = "BDPlayer.mpeg"

[HKCR\.cda]
"BDPlayer.bak" = "WMP11.AssocFile.CDA"

[HKCR\BDPlayer.asf\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.csf\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf\UserChoice]
"Progid" = "BDPlayer.ivf"

[HKCR\BDPlayer.mpg\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srt\UserChoice]
"Progid" = "BDPlayer.srt"

[HKCR\BDPlayer.pva\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.vp6]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.rm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.amv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mla]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.ogg\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.pmp\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".scm" = "BDPlayer.scm"

[HKCR\BDPlayer.bik]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp7\UserChoice]
"Progid" = "BDPlayer.vp7"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"msconfig.exe,-126" = "System Configuration"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogx\UserChoice]
"Progid" = "BDPlayer.ogx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avsts\UserChoice]
"Progid" = "BDPlayer.avsts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mids\UserChoice]
"Progid" = "BDPlayer.mids"

[HKCR\BDPlayer.m4b\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mpeg4\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mp5]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ivf\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".BIK" = "BDPlayer.bik"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape\UserChoice]
"Progid" = "BDPlayer.ape"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AC3\UserChoice]
"Progid" = "BDPlayer.ac3"

[HKCR\BDPlayer.webm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
"Progid" = "BDPlayer.wmv"

[HKCR\BDPlayer.mts]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.avsts]
"(Default)" = "BDPlayer.avsts"

[HKCR\BDPlayer.smk\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp7\UserChoice]
"Progid" = "BDPlayer.vp7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.OGG\UserChoice]
"Progid" = "BDPlayer.ogg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avsts\UserChoice]
"Progid" = "BDPlayer.avsts"

[HKCR\.mid]
"BDPlayer.bak" = "WMP11.AssocFile.MIDI"

[HKCR\BDPlayer.f4v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2]
"Progid" = "BDPlayer.mp2"

[HKCR\BDPlayer.ape]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv]
"Progid" = "BDPlayer.wv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpr\UserChoice]
"Progid" = "BDPlayer.tpr"

[HKCR\.wma]
"BDPlayer.bak" = "WMP11.AssocFile.WMA"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi]
"Progid" = "BDPlayer.smi"

[HKCR\BDPlayer.mpga]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amv\UserChoice]
"Progid" = "BDPlayer.amv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srt]
"Progid" = "BDPlayer.srt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
"Progid" = "BDPlayer.mp2"

[HKCR\BDPlayer.rpm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.ogx]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.m1v]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\.cda]
"(Default)" = "BDPlayer.cda"

[HKCR\BDPlayer.pmp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".dts" = "BDPlayer.dts"

[HKCR\BDPlayer.flc\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.flic]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m1v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"filemgmt.dll,-2204" = "Services"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tp\UserChoice]
"Progid" = "BDPlayer.tp"

[HKCR\.avi\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tp\UserChoice]
"Progid" = "BDPlayer.tp"

[HKCR\.vp7]
"(Default)" = "BDPlayer.vp7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
"Progid" = "BDPlayer.wma"

[HKCR\BDPlayer.dat]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts]
"Progid" = "BDPlayer.mts"

[HKCR\.m4v]
"BDPlayer.bak" = "WMP11.AssocFile.MP4"

[HKCR\BDPlayer.ts]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts]
"Progid" = "BDPlayer.m2ts"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".M2A" = "BDPlayer.m2a"

[HKCR\BDPlayer.smil\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.ram\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTA\UserChoice]
"Progid" = "BDPlayer.tta"

[HKCR\BDPlayer.m2p\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.tak\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.pss\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.3gp2\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v]
"Progid" = "BDPlayer.m1v"

[HKCR\BDPlayer.mpga\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.dsm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mov\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOV.ico"

[HKCR\BDPlayer.pva]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivm]
"Progid" = "BDPlayer.ivm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
"Progid" = "BDPlayer.wma"

[HKCR\.aac]
"(Default)" = "BDPlayer.aac"

[HKCR\BDPlayer.m1v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmp]
"Progid" = "BDPlayer.wmp"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".QT" = "BDPlayer.qt"

[HKCR\.divx]
"(Default)" = "BDPlayer.divx"

[HKCR\.3gpp]
"BDPlayer.bak" = "WMP11.AssocFile.3GP"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\UserChoice]
"Progid" = "BDPlayer.m4b"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srt\UserChoice]
"Progid" = "BDPlayer.srt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mla\UserChoice]
"Progid" = "BDPlayer.mla"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKCR\BDPlayer.m4v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.amr\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.vob]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm]
"Progid" = "BDPlayer.ogm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\UserChoice]
"Progid" = "BDPlayer.ra"

[HKCR\BDPlayer.mp5\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
"Progid" = "BDPlayer.mov"

[HKCR\BDPlayer.mp2\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.wav]
"(Default)" = "BDPlayer.wav"

[HKCR\BDPlayer.hlv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
"Progid" = "BDPlayer.mpe"

[HKCR\BDPlayer.mpeg\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.qt]
"(Default)" = "BDPlayer.qt"

[HKCR\.mp2v\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mkv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLAC\UserChoice]
"Progid" = "BDPlayer.flac"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vob]
"Progid" = "BDPlayer.vob"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mka" = "BDPlayer.mka"
".RT" = "BDPlayer.rt"

[HKCR\.mka]
"(Default)" = "BDPlayer.mka"

[HKCR\BDPlayer.flc\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp6]
"Progid" = "BDPlayer.vp6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csf\UserChoice]
"Progid" = "BDPlayer.csf"

[HKCR\BDPlayer.wmp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\UserChoice]
"Progid" = "BDPlayer.ra"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice]
"Progid" = "BDPlayer.dat"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".dat" = "BDPlayer.dat"

[HKCR\BDPlayer.ivf\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.ogx\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".MOD" = "BDPlayer.mod"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogx]
"Progid" = "BDPlayer.ogx"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\UserChoice]
"Progid" = "BDPlayer.m2v"

[HKCR\BDPlayer.dat\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.dsm]
"(Default)" = "BDPlayer.dsm"

[HKCR\BDPlayer.m2ts\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\m2ts.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
"Progid" = "BDPlayer.aifc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlmv\UserChoice]
"Progid" = "BDPlayer.xlmv"

[HKCR\BDPlayer.rpm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
"Progid" = "BDPlayer.mp3"

[HKCR\.pmp]
"(Default)" = "BDPlayer.pmp"

[HKCR\.mpg]
"(Default)" = "BDPlayer.mpg"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".tp" = "BDPlayer.tp"

[HKCR\BDPlayer.smil\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.aifc\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt]
"Progid" = "BDPlayer.qt"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2p\UserChoice]
"Progid" = "BDPlayer.m2p"

[HKCR\.vp7\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mp2]
"(Default)" = "BDPlayer.mp2"

[HKCR\BDPlayer.ts\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ram" = "BDPlayer.ram"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10060" = "Solitaire"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\UserChoice]
"Progid" = "BDPlayer.m2v"

[HKCR\BDPlayer.m4b\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mpe]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.wav\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.qt\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
"Progid" = "BDPlayer.mp3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M4A\UserChoice]
"Progid" = "BDPlayer.m4a"

[HKCR\.smi]
"(Default)" = "BDPlayer.smi"

[HKCR\.ogv\OpenWithProgIDs]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"FXSRESM.dll,-114" = "Windows Fax and Scan"

[HKCR\.mpa\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.srt\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.ofr\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mla]
"Progid" = "BDPlayer.mla"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg4\UserChoice]
"Progid" = "BDPlayer.mpeg4"

[HKCR\BDPlayer.wm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m2a\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.dsm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".VP6" = "BDPlayer.vp6"
".vp7" = "BDPlayer.vp7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTA\UserChoice]
"Progid" = "BDPlayer.tta"

[HKCR\.m2ts]
"(Default)" = "BDPlayer.m2ts"

[HKCR\.mp2v]
"(Default)" = "BDPlayer.mp2v"

[HKCR\.smk\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.rmi\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.vp7\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"miguiresource.dll,-101" = "Event Viewer"

[HKCR\.vp6\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mp5\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac]
"Progid" = "BDPlayer.flac"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\Common Files\Microsoft Shared\Ink]
"ShapeCollector.exe,-298" = "Personalize Handwriting Recognition"

[HKCR\BDPlayer.mod\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\UserChoice]
"Progid" = "BDPlayer.m2ts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pva\UserChoice]
"Progid" = "BDPlayer.pva"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm]
"Progid" = "BDPlayer.wm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice]
"Progid" = "BDPlayer.fli"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0]
"powershell.exe,-101" = "Windows PowerShell ISE"

[HKCR\BDPlayer.pss]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m4a\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ivm]
"(Default)" = "BDPlayer.ivm"

[HKCR\.ac3\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.tp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\UserChoice]
"Progid" = "BDPlayer.cda"

[HKCR\BDPlayer.fli\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv]
"Progid" = "BDPlayer.wmv"

[HKCR\BDPlayer.m2v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv]
"Progid" = "BDPlayer.ogv"

[HKCR\BDPlayer.ac3\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.dsm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"wsecedit.dll,-718" = "Local Security Policy"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
"Progid" = "BDPlayer.mpe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csf\UserChoice]
"Progid" = "BDPlayer.csf"

[HKCR\.rpm]
"(Default)" = "BDPlayer.rpm"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".3gpp" = "BDPlayer.3gpp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tod\UserChoice]
"Progid" = "BDPlayer.tod"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivm\UserChoice]
"Progid" = "BDPlayer.ivm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp\UserChoice]
"Progid" = "BDPlayer.rp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLAC\UserChoice]
"Progid" = "BDPlayer.flac"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".tod" = "BDPlayer.tod"

[HKCR\.ratDVD\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ratDVD\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.3gp2]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mp2v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.dts]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m2t\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice]
"Progid" = "BDPlayer.dat"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice]
"Progid" = "BDPlayer.smi"

[HKCR\BDPlayer.mpeg4]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.bik\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\.wv\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.ass\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tta]
"Progid" = "BDPlayer.tta"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".IVF" = "BDPlayer.ivf"

[HKCR\.m1v]
"(Default)" = "BDPlayer.m1v"

[HKCR\BDPlayer.m1v]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dts]
"Progid" = "BDPlayer.dts"

[HKCR\BDPlayer.amv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivm\UserChoice]
"Progid" = "BDPlayer.ivm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp\UserChoice]
"Progid" = "BDPlayer.rp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp]
"Progid" = "BDPlayer.3gpp"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"wdc.dll,-10030" = "Resource Monitor"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pmp\UserChoice]
"Progid" = "BDPlayer.pmp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3]
"Progid" = "BDPlayer.mp3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice]
"Progid" = "BDPlayer.smi"

[HKCR\BDPlayer.m2t]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.aac\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@%Program Files%\DVD Maker]
"DVDMaker.exe,-61403" = "Windows DVD Maker"

[HKCR\BDPlayer.hlv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".vob" = "BDPlayer.vob"

[HKCR\.divx\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.avsts\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".3gp2" = "BDPlayer.3gp2"
".mpa" = "BDPlayer.mpa"

[HKCR\BDPlayer.rm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ogx\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"recdisc.exe,-2000" = "Create a System Repair Disc"

[HKCR\BDPlayer.3gp2\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.mids\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.pmp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.m2t]
"(Default)" = "BDPlayer.m2t"

[HKCR\BDPlayer.tak\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.mpe]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\BDPlayer.smil]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.OGG\UserChoice]
"Progid" = "BDPlayer.ogg"

[HKCR\.f4v]
"(Default)" = "BDPlayer.f4v"

[HKCR\BDPlayer.mka\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.scm]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v]
"Progid" = "BDPlayer.m4v"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\UserChoice]
"Progid" = "BDPlayer.m2t"

[HKCR\.dsm\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m2ts" = "BDPlayer.m2ts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssa]
"Progid" = "BDPlayer.ssa"

[HKCR\.tp]
"(Default)" = "BDPlayer.tp"

[HKCR\.m1v\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.dat\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.mp4]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.mkv]
"(Default)" = "BDPlayer.mkv"

[HKCR\BDPlayer.ogg\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.avi\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avsts]
"Progid" = "BDPlayer.avsts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mids]
"Progid" = "BDPlayer.mids"

[HKCR\.mts]
"BDPlayer.bak" = "WMP11.AssocFile.M2TS"

[HKCR\.tod]
"(Default)" = "BDPlayer.tod"

[HKCR\BDPlayer.ram]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
"Progid" = "BDPlayer.aac"

[HKCR\BDPlayer.ofr]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ogg\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".WAV" = "BDPlayer.wav"

[HKCR\.mp3]
"BDPlayer.bak" = "WMP11.AssocFile.MP3"

[HKCR\BDPlayer.mov\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a]
"Progid" = "BDPlayer.m4a"

[HKCR\.pss]
"(Default)" = "BDPlayer.pss"

[HKCR\BDPlayer.ogv]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.mla\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mp2v" = "BDPlayer.mp2v"

[HKCR\.mpa]
"(Default)" = "BDPlayer.mpa"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ass\UserChoice]
"Progid" = "BDPlayer.ass"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"wucltux.dll,-1" = "Windows Update"

[HKCR\BDPlayer.mp2\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm]
"Progid" = "BDPlayer.rm"

[HKCR\BDPlayer.m2ts]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mla\UserChoice]
"Progid" = "BDPlayer.mla"

[HKCR\BDPlayer.asm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mkv" = "BDPlayer.mkv"

[HKCR\.mts\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt\UserChoice]
"Progid" = "BDPlayer.rt"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"rstrui.exe,-100" = "System Restore"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".RMI" = "BDPlayer.rmi"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"pmcsnap.dll,-700" = "Print Management"

[HKCR\.aifc]
"(Default)" = "BDPlayer.aifc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\UserChoice]
"Progid" = "BDPlayer.ogm"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10103" = "Internet Spades"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.f4v\UserChoice]
"Progid" = "BDPlayer.f4v"

[HKCR\.ogv]
"(Default)" = "BDPlayer.ogv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".aifc" = "BDPlayer.aifc"

[HKCR\BDPlayer.dts\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
"Progid" = "BDPlayer.mp2v"

[HKCR\.flv\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asm\UserChoice]
"Progid" = "BDPlayer.asm"

[HKCR\.m2a\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg]
"Progid" = "BDPlayer.mpg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt\UserChoice]
"Progid" = "BDPlayer.rt"

[HKCR\BDPlayer.ram\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.ivf\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"sdcpl.dll,-101" = "Backup and Restore"

[HKCR\BDPlayer.mids\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".divx" = "BDPlayer.divx"

[HKCR\.asf]
"(Default)" = "BDPlayer.asf"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".rmvb" = "BDPlayer.rmvb"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ass]
"Progid" = "BDPlayer.ass"

[HKCR\BDPlayer.tpr\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.avsts\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.amv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pmp]
"Progid" = "BDPlayer.pmp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tak\UserChoice]
"Progid" = "BDPlayer.tak"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid]
"Progid" = "BDPlayer.mid"

[HKCR\.ssa\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.asf\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
"Progid" = "BDPlayer.mpa"

[HKCR\BDPlayer.tta]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"msra.exe,-100" = "Windows Remote Assistance"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities]
"ApplicationDescription" = "Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³Ã¦â€™ÂÃ¦â€Â¾Ã¥â„¢Â¨"

[HKCR\BDPlayer.wmv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wmv.ico"

[HKCR\BDPlayer.vob\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\vob.ico"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"SyncCenter.dll,-3000" = "Sync Center"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".webm" = "BDPlayer.webm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv\UserChoice]
"Progid" = "BDPlayer.wv"

[HKCR\BDPlayer.m4a\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.avsts]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.xlmv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tak\UserChoice]
"Progid" = "BDPlayer.tak"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\UserChoice]
"Progid" = "BDPlayer.m2t"

[HKCR\.wmp]
"(Default)" = "BDPlayer.wmp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4]
"Progid" = "BDPlayer.mp4"

[HKCR\.mpga\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssa\UserChoice]
"Progid" = "BDPlayer.ssa"

[HKCR\BDPlayer.ac3]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
"Progid" = "BDPlayer.mov"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".ra" = "BDPlayer.ra"

[HKCR\.f4v\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.pss\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.f4v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.3gp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".WV" = "BDPlayer.wv"

[HKCR\BDPlayer.qt\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.m4p]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
"Progid" = "BDPlayer.aac"

[HKCR\.srt]
"(Default)" = "BDPlayer.srt"

[HKCR\.rp]
"(Default)" = "BDPlayer.rp"

[HKCR\.avi]
"BDPlayer.bak" = "WMP11.AssocFile.AVI"

[HKCR\.tak\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.flv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.scm\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.dts\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pva]
"Progid" = "BDPlayer.pva"

[HKCR\.aifc\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.vp7\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.wmv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32\Speech\SpeechUX]
"sapi.cpl,-5555" = "Windows Speech Recognition"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
"Progid" = "BDPlayer.asf"

[HKCR\.wm]
"(Default)" = "BDPlayer.wm"

[HKCR\BDPlayer.mp4\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp4.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx]
"Progid" = "BDPlayer.divx"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".avsts" = "BDPlayer.avsts"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi]
"Progid" = "BDPlayer.avi"

[HKCR\BDPlayer.amv\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".OFR" = "BDPlayer.ofr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.f4v\UserChoice]
"Progid" = "BDPlayer.f4v"

[HKCR\.mka\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mp4]
"BDPlayer.bak" = "WMP11.AssocFile.MP4"

[HKCR\BDPlayer.m2p\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M2P.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav]
"Progid" = "BDPlayer.wav"

[HKCR\.mod]
"(Default)" = "BDPlayer.mod"

[HKCR\BDPlayer.mpeg4\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MPEG4.ico"

[HKCR\.fli\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\UserChoice]
"Progid" = "BDPlayer.mka"

[HKCR\BDPlayer.mp2v\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.m4v\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli]
"Progid" = "BDPlayer.fli"

[HKCR\BDPlayer.flac\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M4A\UserChoice]
"Progid" = "BDPlayer.m4a"

[HKCR\.smil\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.pmp\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.vp6\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"mblctr.exe,-1008" = "Windows Mobility Center"
"msinfo32.exe,-100" = "System Information"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc]
"Progid" = "BDPlayer.flc"

[HKCR\.wm\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ass\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
"Progid" = "BDPlayer.3gpp"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\UserChoice]
"Progid" = "BDPlayer.mka"

[HKCR\BDPlayer.tp\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\TP.ico"

[HKCR\BDPlayer.tta\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.m2ts\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice]
"Progid" = "BDPlayer.flc"

[HKCR\BDPlayer.mpg\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"odbcint.dll,-1310" = "Data Sources (ODBC)"

[HKCR\BDPlayer.aac\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.d2v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.qt\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mids]
"(Default)" = "BDPlayer.mids"

[HKCR\BDPlayer.ape\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.mids\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.ass]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mpe\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv]
"Progid" = "BDPlayer.flv"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3]
"Progid" = "BDPlayer.ac3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
"Progid" = "BDPlayer.mpg"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi]
"Progid" = "BDPlayer.rmi"

[HKCR\.wav\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.mp2v\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MP2V.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlv]
"Progid" = "BDPlayer.hlv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".mov" = "BDPlayer.mov"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod]
"Progid" = "BDPlayer.mod"

[HKCR\BDPlayer.mts\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.ratDVD]
"(Default)" = "BDPlayer.ratDVD"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AC3\UserChoice]
"Progid" = "BDPlayer.ac3"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt\UserChoice]
"Progid" = "BDPlayer.qt"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".f4v" = "BDPlayer.f4v"

[HKCR\BDPlayer.aifc\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities]
"ApplicationName" = "Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³Ã¦â€™ÂÃ¦â€Â¾Ã¥â„¢Â¨"

[HKCR\BDPlayer.vp6\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.mp3\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.mp2]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.webm\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.fli]
"(Default)" = "BDPlayer.fli"

[HKCR\BDPlayer.aifc\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"displayswitch.exe,-320" = "Connect to a Projector"

[HKCR\BDPlayer.3gp]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
"Progid" = "BDPlayer.mkv"

[HKCR\BDPlayer.fli\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m2v" = "BDPlayer.m2v"

[HKCR\BDPlayer.tod\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".m2t" = "BDPlayer.m2t"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tod]
"Progid" = "BDPlayer.tod"

[HKCR\BDPlayer.rmvb]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.m4a]
"(Default)" = "BDPlayer.m4a"

[HKCR\BDPlayer.ssa\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\.wmp\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.m2ts\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmp\UserChoice]
"Progid" = "BDPlayer.wmp"

[HKCR\BDPlayer.ra\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.m4a\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.amr\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.amr\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\UserChoice]
"Progid" = "BDPlayer.ram"

[HKCR\BDPlayer.ogm\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"XpsRchVw.exe,-102" = "XPS Viewer"

[HKCR\.3gp2]
"(Default)" = "BDPlayer.3gp2"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".RPM" = "BDPlayer.rpm"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"miguiresource.dll,-201" = "Task Scheduler"

[HKCR\BDPlayer.ram\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".MPGA" = "BDPlayer.mpga"

[HKCR\.vob]
"(Default)" = "BDPlayer.vob"

[HKCR\BDPlayer.3g2\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".TTA" = "BDPlayer.tta"

[HKCR\.ape\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.mpeg]
"(Default)" = "BDPlayer.mpeg"

[HKCR\BDPlayer.mid]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.smk]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf]
"Progid" = "BDPlayer.ivf"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10061" = "Spider Solitaire"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmp\UserChoice]
"Progid" = "BDPlayer.wmp"

[HKCR\BDPlayer.scm\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.m1v\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"mycomput.dll,-300" = "Computer Management"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\UserChoice]
"Progid" = "BDPlayer.ram"

[HKCR\BDPlayer.m4p\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.wm]
"BDPlayer.bak" = "WMP11.AssocFile.ASF"

[HKCR\.rm]
"(Default)" = "BDPlayer.rm"

[HKCR\BDPlayer.mkv\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dsm]
"Progid" = "BDPlayer.dsm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\UserChoice]
"Progid" = "BDPlayer.m4b"

[HKCR\BDPlayer.smi\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".hlv" = "BDPlayer.hlv"

[HKCR\BDPlayer.mpga\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dsm\UserChoice]
"Progid" = "BDPlayer.dsm"

[HKCR\.ivm\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKCR\BDPlayer.smk\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCR\BDPlayer.smk\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.mla\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.ofr\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp5\UserChoice]
"Progid" = "BDPlayer.mp5"

[HKCR\BDPlayer.tpr\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Classes\Local Settings\MuiCache\30\52C64B7E\@C:\Windows\system32]
"gameux.dll,-10101" = "Internet Checkers"
"gameux.dll,-10102" = "Internet Backgammon"

[HKCR\BDPlayer.m2t\shell\open\command]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe --from=shell --url=%1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
"Progid" = "BDPlayer.3gpp"

[HKCR\.csf\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.m2a]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\BDPlayer.tta\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCR\BDPlayer.hlv\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.divx\shell\open]
"(Default)" = "Ã§â€Â¨ Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5 Ã¦â€°â€œÃ¥Â¼â‚¬(&P)"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpr]
"Progid" = "BDPlayer.tpr"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".rm" = "BDPlayer.rm"

[HKCR\.rmi]
"(Default)" = "BDPlayer.rmi"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dsm\UserChoice]
"Progid" = "BDPlayer.dsm"

[HKCR\BDPlayer.smi]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csf]
"Progid" = "BDPlayer.csf"

[HKCR\.mpeg]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKCR\BDPlayer.divx\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DIVX.ico"

[HKCR\BDPlayer.aifc]
"(Default)" = "Type: REG_SZ, Length: 0"

[HKCR\.hlv]
"(Default)" = "BDPlayer.hlv"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".d2v" = "BDPlayer.d2v"

[HKCR\.tak]
"(Default)" = "BDPlayer.tak"

[HKCR\BDPlayer.mpg\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpg.ico"

[HKCR\BDPlayer.rmi\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\.tta]
"(Default)" = "BDPlayer.tta"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".TPR" = "BDPlayer.tpr"

[HKCR\.mod]
"BDPlayer.bak" = "WMP11.AssocFile.MPEG"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".dsm" = "BDPlayer.dsm"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ratDVD\UserChoice]
"Progid" = "BDPlayer.ratDVD"

[HKCR\.m2a]
"(Default)" = "BDPlayer.m2a"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.d2v\UserChoice]
"Progid" = "BDPlayer.d2v"

[HKCR\BDPlayer.avsts\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCR\BDPlayer.bik\DefaultIcon]
"(Default)" = "%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt\UserChoice]
"Progid" = "BDPlayer.qt"

[HKCR\.dat\OpenWithProgids]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.ofr\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc]
"Progid" = "BDPlayer.aifc"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp7]
"Progid" = "BDPlayer.vp7"

[HKCR\.cda\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKCR\.tod\OpenWithProgIds]
"BDPlayer.exe" = "Type: REG_SZ, Length: 0"

[HKLM\SOFTWARE\BAIDU\BDPlayer5\Capabilities\FileAssociations]
".xlmv" = "BDPlayer.xlmv"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDPlayer_AutoRun" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ratDVD\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bik\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ts\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp5\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivf\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg4\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rt\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pva\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DTS\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rpm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp7\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ape\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avsts\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mids\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smk\UserChoice]
"Progid"

[HKLM\SOFTWARE\RegisteredApplications]
"BDPlayer5"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ass\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTA\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tod\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vob\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vp6\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srt\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mla\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.f4v\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.d2v\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmvb\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.FLAC\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csf\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ra\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ssa\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogx\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.M4A\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.divx\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qt\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2p\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AC3\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ram\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4b\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4p\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pss\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpe\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dsm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ivm\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MPGA\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pmp\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tak\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlmv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flic\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ofr\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogv\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tpr\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.OGG\UserChoice]
"Progid"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\UserChoice]
"Progid"

The process BDPlayerTray.exe:2696 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

Dropped PE files

MD5	File path
e93b5a4fd5050116a84cf52011c516c1	c:\Program Files\Tencent\QQBrowser\Assistant.dll
4c86d70ab39a65776f5dd5702da9b509	c:\Program Files\Tencent\QQBrowser\BugReport.exe
16880d4c14c8aa0b4a1b0ec82b9f6cb3	c:\Program Files\Tencent\QQBrowser\Dialogs.dll
4d49497ce2c51461b42af928a91e3260	c:\Program Files\Tencent\QQBrowser\Downloader.dll
10d98bc99fb31673330239b88174973e	c:\Program Files\Tencent\QQBrowser\EventTracing.dll
d34a527493f39af4491b3e909dc697ca	c:\Program Files\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcm90.dll
4c39358ebdd2ffcd9132a30e1ec31e16	c:\Program Files\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcp90.dll
cdbe9690cf2b8409facad94fac9479c9	c:\Program Files\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcr90.dll
77b80794e7726eade4fe30954e2e5847	c:\Program Files\Tencent\QQBrowser\MouseGesture.dll
73640253f394c6dd6940fc1fe222cd92	c:\Program Files\Tencent\QQBrowser\NetWork.dll
f1e9d5f32467dd034f828bcc293e7ad9	c:\Program Files\Tencent\QQBrowser\PrScrn.dll
88f2d2382cce7ec315ca6860ff0c4075	c:\Program Files\Tencent\QQBrowser\QBExtensionFramework.dll
16ae0a59da95783599969cb2a8cd7b0d	c:\Program Files\Tencent\QQBrowser\QBSafe.dll
268905b968aace3dbaf5dd97391071e9	c:\Program Files\Tencent\QQBrowser\QBUtils.dll
c3e4c6aaedb957ba059b51c1d2403c93	c:\Program Files\Tencent\QQBrowser\QQBrowser.exe
68eb386277ed0c2e4a13b6c5731f236e	c:\Program Files\Tencent\QQBrowser\QQBrowserFrame.dll
acd46c8f29be4cc5f659b87f115c740c	c:\Program Files\Tencent\QQBrowser\QQBrowserLiveup.exe
38977583aa8131702dd06a022a94476c	c:\Program Files\Tencent\QQBrowser\QQBrowserSecurityCenter.exe
f3df05cd6c209c05c5415af6bc9e7199	c:\Program Files\Tencent\QQBrowser\QRCode.dll
528fd48653019ba6629ec9d9db2cd6a9	c:\Program Files\Tencent\QQBrowser\Resource.dll
e826d419df589357d43554c7f0c0e39c	c:\Program Files\Tencent\QQBrowser\TridentCore.dll
12650137ef731c4f2967bd670287e357	c:\Program Files\Tencent\QQBrowser\WebpDecodeFilter.dll
699f0052d0c959f1a5b7c3926cce11fa	c:\Program Files\Tencent\QQBrowser\dr.dll
a51d90f2f9394f5ea0a3acae3bd2b219	c:\Program Files\Tencent\QQBrowser\service\7z.exe
1b47580cce6db40a3f389ebd6250795f	c:\Program Files\Tencent\QQBrowser\service\PerfTraceService.exe
e625e19acadb88eeaefd2f15cbc757f2	c:\Program Files\Tencent\QQBrowser\service\perfctrl.dll
8267d1cba70f87018d89bbb2bbbfdc03	c:\Program Files\Tencent\QQBrowser\service\xperf.exe
9ed4bdccc465222477805ca2df443596	c:\Program Files\Tencent\QQBrowser\tssafeedit.dat
9e98a28eb052436ddd886d31bae3fa1c	c:\Program Files\baidu\BDPlayer\5.1.1.9\BDPlayer.exe
75103f9effdf709fc8f2548ecf39cefb	c:\Program Files\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe
2597d45148235b2958f8fd6166f28666	c:\Program Files\baidu\BDPlayer\5.1.1.9\BDWebcore.dll
98e0bfb9f5d7e894bfd0b8347a760277	c:\Program Files\baidu\BDPlayer\5.1.1.9\FFAudio.ax
99d64d510d6a9cf3d4b35ec3c4dae179	c:\Program Files\baidu\BDPlayer\5.1.1.9\FFSplitter.ax
5cb8ef1e4d7c6e00e6298dd932e876cf	c:\Program Files\baidu\BDPlayer\5.1.1.9\FFVideo.ax
2f8bf7b7bb60625b84d333a7e39944fb	c:\Program Files\baidu\BDPlayer\5.1.1.9\IntelQuickSyncDecoder.dll
fa27e0a28527bcbb1b0434566e0ebb77	c:\Program Files\baidu\BDPlayer\5.1.1.9\OpenMediaUrl.exe
76af45eb35e2a5192a92fada8c16aab6	c:\Program Files\baidu\BDPlayer\5.1.1.9\PlayerApp.exe
a3a86d1ae771381bee3ed99bc08b3662	c:\Program Files\baidu\BDPlayer\5.1.1.9\avcodec-lav-56.dll
6833b6e05d2559dcbc4c224d3f0744b6	c:\Program Files\baidu\BDPlayer\5.1.1.9\avfilter-lav-5.dll
3250ca6fb2753dc8aa3dc0980db796f8	c:\Program Files\baidu\BDPlayer\5.1.1.9\avformat-lav-56.dll
a5600d8d5cf82fc2c6746f6a8f2142d3	c:\Program Files\baidu\BDPlayer\5.1.1.9\avresample-lav-2.dll
99de62d3e488e808d8a2c97081dfa819	c:\Program Files\baidu\BDPlayer\5.1.1.9\avutil-lav-54.dll
23be28e724ad20eac255eae1ef245d8d	c:\Program Files\baidu\BDPlayer\5.1.1.9\bdcommon.dll
5a645642c53e287e60deaa81eb82377f	c:\Program Files\baidu\BDPlayer\5.1.1.9\bdlog.dll
102a1039c2a9678518b5734f964fb34c	c:\Program Files\baidu\BDPlayer\5.1.1.9\bdxlogic.dll
1e5a78d11d33250e41a22c9f923d16af	c:\Program Files\baidu\BDPlayer\5.1.1.9\bdxplayer.dll
1ba063952c75a0824152d8311453d84c	c:\Program Files\baidu\BDPlayer\5.1.1.9\bdxview.dll
00cadf917243eba532cae5b443e9b4f4	c:\Program Files\baidu\BDPlayer\5.1.1.9\bugreport.exe
0facb9af0f2db15ff1c122d3912ebdf7	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\AudioSwitcher.ax
43693b826cc75b25c00443c398fbadc4	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\CoreAAC.ax
74202e220a8e3e15e78342883e01e3ce	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\FLVSplitter.ax
6356cf87dcaec250e4f8ea509a6c8de9	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\MpaDec.ax
f075f75818649aec518368d0ce243b86	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\RealMediaSplitter.ax
e07f7761fc3ebf851b461517d88633c0	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\VEFilter.ax
3f21bc0af3e228a17cc340f9c215e141	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\VSFilter.dll
763146c0f6090fad64f2eead0c8cff81	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\real\cook.dll
5e2088c262d7eec20cbb98c0590f759e	c:\Program Files\baidu\BDPlayer\5.1.1.9\codecs\real\drvc.dll
b81c2b0821d2791f0d8a2231468c4962	c:\Program Files\baidu\BDPlayer\5.1.1.9\ffsrv.exe
3be86f5a8f3c8695b15b6815b645512e	c:\Program Files\baidu\BDPlayer\5.1.1.9\fileinfo.dll
7a15d3c1a52fd228bdf8e0420998fcb9	c:\Program Files\baidu\BDPlayer\5.1.1.9\libbluray.dll
fd5cabbe52272bd76007b68186ebaf00	c:\Program Files\baidu\BDPlayer\5.1.1.9\msvcp120.dll
034ccadc1c073e4216e9466b720f9849	c:\Program Files\baidu\BDPlayer\5.1.1.9\msvcr120.dll
24135e695aaa9ed3cb0016f094a1ec85	c:\Program Files\baidu\BDPlayer\5.1.1.9\pncrt.dll
bebedf69eb577f0856a57bf6e6ce5de9	c:\Program Files\baidu\BDPlayer\5.1.1.9\swscale-lav-3.dll
59111e6e54d150e7674c808eba53902a	c:\Program Files\baidu\BDPlayer\5.1.1.9\xReport.exe
7ef132767873cc3722a934c98c1665fc	c:\Program Files\baidu\BDPlayer\5.1.1.9\xUpdate.exe
0ef763e21d463ad7aebdae71dc379b68	c:\Program Files\baidu\BDPlayer\5.1.1.9\xmanager.dll
e1c419dc4c188ccb90d573a32c47fc4b	c:\Program Files\baidu\BDPlayer\5.1.1.9\xnet.dll
d819753030d9c355b85cf36ee3266411	c:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433[1].exe
0fe441c8331ebe24dbc9d16177df24a4	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\BaiduPlayer5SetupSilent_359.exe
d819753030d9c355b85cf36ee3266411	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Browser_V5.5.7852.9_r_4640_(Build1512022057).exe
3c4c8edac2cd495654fa87ffeefb77ce	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\V8._85416_20150820204011.exe
f0e3845fefd227d7f1101850410ec849	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Base64.dll
50fdadda3e993688401f6f1108fabdb4	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Inetc.dll
00a0194c20ee912257df53bfe258ee4a	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\System.dll
2dc35ddcabcb2b24919b9afae4ec3091	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\ZipDLL.dll
16ae0a59da95783599969cb2a8cd7b0d	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\QBSafe.dll
4c39358ebdd2ffcd9132a30e1ec31e16	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcp90.dll
cdbe9690cf2b8409facad94fac9479c9	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcr90.dll
268905b968aace3dbaf5dd97391071e9	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\QBUtils.dll
4c39358ebdd2ffcd9132a30e1ec31e16	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcp90.dll
cdbe9690cf2b8409facad94fac9479c9	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcr90.dll
268905b968aace3dbaf5dd97391071e9	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QBUtils.dll
acd46c8f29be4cc5f659b87f115c740c	c:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QQBrowserLiveup.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	23096	23552	4.43854	092e164daa50385128d3c5b319373035
.rdata	28672	4496	4608	3.59023	4e7f519777030dd2f0ea0d2092babed3
.data	36864	110424	1024	3.20088	f6d93c048bf148a2daee8a6b0505e38b
.ndata	147456	36864	0	0	d41d8cd98f00b204e9800998ecf8427e
.rsrc	184320	27352	27648	2.92125	4a197e513c73635e641df26d43a25be9

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://ww1.sinaimg.cn.gccdn.net/large/7185bdf1gw1f05vkvcpe1g20s60i07ww.gif	87.118.248.244
hxxp://orp5.n.shifen.com/p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496122010000&op=install&ver=5.1.1.9&ch=359&module=BaiduPlayer5SetupSilent_359
hxxp://ww1.sinaimg.cn.gccdn.net/large/7185bdf1gw1f05vls701mg21130hix6s.gif	87.118.248.244
hxxp://e8218.dscb1.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=
hxxp://tank.mig.tencent-cloud.net/
hxxp://orp5.n.shifen.com/p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496224810000&op=lauch&ext=toolbar&ver=5.1.1.9&ch=359&module=BDPlayerTray
hxxp://e6845.dscb1.akamaiedge.net/pca3-g5.crl
hxxp://e8218.dscb1.akamaiedge.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEHFwvZPPPxia5kUrUUxJNA4=
hxxp://dns.union.uc.cn/pcbrowser/down.php?pid=4640
hxxp://umcdn.uc.cn.w.alikunlun.com/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.exe	195.27.31.253
hxxp://umcdn.uc.cn.w.alikunlun.com/biz-data/sec/channel/test/config/av_config.ini	195.27.31.253
hxxp://dns.union.uc.cn/pcbrowser/down.php?type=dll&pid=4640
hxxp://umcdn.uc.cn.w.alikunlun.com/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.dll	195.27.31.253
hxxp://stat.v.baidu.com/p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496224810000&op=lauch&ext=toolbar&ver=5.1.1.9&ch=359&module=BDPlayerTray	123.125.112.68
hxxp://stat.v.baidu.com/p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496122010000&op=install&ver=5.1.1.9&ch=359&module=BaiduPlayer5SetupSilent_359	123.125.112.68
hxxp://qbwup.imtt.qq.com/	119.147.10.139
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c=	23.46.123.27
hxxp://down2.uc.cn/pcbrowser/down.php?pid=4640	123.150.188.19
hxxp://crl.verisign.com/pca3-g5.crl	23.46.117.163
hxxp://umcdn.uc.cn/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.exe	195.27.31.253
hxxp://down2.uc.cn/pcbrowser/down.php?type=dll&pid=4640	123.150.188.19
hxxp://ww4.sinaimg.cn/large/7185bdf1gw1f05vls701mg21130hix6s.gif	87.118.248.244
hxxp://ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEHFwvZPPPxia5kUrUUxJNA4=	23.46.123.27
hxxp://umcdn.uc.cn/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.dll	195.27.31.253
hxxp://wow.uc.cn/biz-data/sec/channel/test/config/av_config.ini	195.27.31.253
hxxp://ww1.sinaimg.cn/large/7185bdf1gw1f05vkvcpe1g20s60i07ww.gif	87.118.248.244
update.p2sp.baidu.com	123.125.112.24
dns.msftncsi.com	131.107.255.255
browser.etl.desktop.qq.com	119.147.201.16
csc3-2010-crl.verisign.com	23.46.117.163
www.qq.com
ikan.baidu.com
clients1.google.com
media.p2sp.baidu.com

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY PE EXE or DLL Windows file download HTTP
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile

Traffic

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD+Oyl+0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCEFIA5aolVvwahu2WydRLM8c= HTTP/1.1

Cache-Control: max-age = 584393

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Thu, 13 Oct 2016 04:26:54 GMT

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1763

content-transfer-encoding: binary

Cache-Control: max-age=553509, public, no-transform, must-revalidate

Last-Modified: Wed, 17 May 2017 09:38:32 GMT

Expires: Wed, 24 May 2017 09:38:32 GMT

Date: Wed, 17 May 2017 23:53:49 GMT

Connection: keep-alive
0..........0..... .....0......0...0.......WI.....L.c=...r..7Z..2017051
7093832Z0s0q0I0... ...................B.>.I.$&.....e......0..C9...3
13..R...%V.......K3.....20170517093832Z....20170524093832Z0...*.H.....
........e=.~..r.{.F.w.7.^..].X........~...N.m)U.... ..'y.4.-.d.A<1.
...YX ..OW...M..3E.."...yv%.Sxf........BGSoY .G......>3.d4X~.......
.Np=..J...A.. ....9.&.....A..q.[...S..P......r"mD}.....Q....H)..>.;
.".UO.S................R.B.e.K"...3...|.0|.%Wq..[Z6.?Q...,n........0..
.0...0..........^..)......<...T.0...*.H........0..1.0...U....US1.0.
..U....VeriSign, Inc.1.0...U....VeriSign Trust Network1:08..U...1(c) 2
006 VeriSign, Inc. - For authorized use only1E0C..U...<VeriSign Cla
ss 3 Public Primary Certification Authority - G50...161122000000Z..171
214235959Z0..1.0...U....US1.0...U....Symantec Corporation1.0...U....Sy
mantec Trust Network1?0=..U...6Symantec Class 3 PCA - G5 OCSP Responde
r Certificate 50.."0...*.H.............0.............................m
..|........1rUZN.b.......t. d......O...NY.lR..k .Q.z.g.4(,...Rp.7...0C
.j.)Z........ ~..3...x.b.-..... S^0<6...!.(..2}...T.fX}...6...(...1
...#..H..|`.yy.<B.z.q$......u.-..K.!......y..8..--....?.,.[.[...5.e
.4.....D..t.;....).J....\fV..G.........0...0...U.......0.0l..U. .e0c0a
..`.H...E....0R0&.. .........hXXp://VVV.symauth.com/cps0(.. .......0..
.hXXp://VVV.symauth.com/rpa0...U.%..0... .......0...U...........0... .
....0......0"..U....0...0.1.0...U....TGV-OFF-500...U.......WI.....L.c=
...r..7Z0...U.#..0.....e......0..C9...3130...*.H.............<w<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTSqZMG5M8TA9rdzkbCnNwuMAd5VgQUz5mp6nsm9EvJjo/X8AUm7+PSp50CEHFwvZPPPxia5kUrUUxJNA4= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.verisign.com


HTTP/1.1 200 OK

Server: nginx/1.10.2

Content-Type: application/ocsp-response

Content-Length: 1660

content-transfer-encoding: binary

Cache-Control: max-age=312739, public, no-transform, must-revalidate

Last-Modified: Sun, 14 May 2017 14:45:09 GMT

Expires: Sun, 21 May 2017 14:45:09 GMT

Date: Wed, 17 May 2017 23:53:58 GMT

Connection: keep-alive

0..x......q0..m.. .....0.....^0..Z0.........8.Y......*u...&.A..2017051
4144509Z0s0q0I0... ...................F....0.yV......{&.K......&......
.qp...?...E QLI4.....20170514144509Z....20170521144509Z0...*.H........
.....2 .i.2....y v...(Z<|d.(.. ....p..[.....F....k...Dn....(C*.5I.^
..Hf.......:..o..W.D}.8.....Gik.9....z..rA....4E..W.W....J.%W...u.X.V.
e.._U.k...A...4..p.0........y.....j.'..E...W$.....O$\p..%.....a?....^.
........l.N....d7..... .w8[F!pH..6.#.c....'I....1...._....0...0...0...
.......h..o&.......WC..0...*.H........0..1.0...U....US1.0...U....VeriS
ign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at h
ttps://VVV.verisign.com/rpa (c)101.0,..U...%VeriSign Class 3 Code Sign
ing 2010 CA0...161213000000Z..211231235959Z0D1B0@..U...9Symantec Class
 3 Code Signing 2010 CA SHA1 OCSP Responder0.."0...*.H.............0..
........{.~......9......W*8:Y.`.b8.4....:.]6;..V...]'6......Mi.._.....
l.....!,.F|..?&....1.y............Cudi(.Ron.._T.p ..a....'!.0.Z.......
......n@A.5.&..Z.Bo...L.....e.`..4........4.........<.".q..n.,..$..
...C....n.v..*.3.,:..{...R. ...1.s..jF..q...a.f..@.../..........0...0.
..U.......0.0f..U. ._0]0[..`.H...E....0L0#.. .........hXXps://d.symcb.
com/cps0%.. .......0...hXXps://d.symcb.com/rpa0...U.%..0... .......0..
.U...........0... .....0......0"..U....0...0.1.0...U....TGV-OFF-650...
U.........8.Y......*u...&.A0...U.#..0.......{&.K......&.....0...*.H...
...........O..s3..[.....:Y......c..L...:...4EZ.x.I..m.7.B`.t.A....56f.
......W<>.Lr.,...........".T.......Q..] "A.pV......J...JK[.3

<<< skipped >>>

GET /down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.dll HTTP/1.1

Accept: */*

Connection: Keep-Alive

User-Agent: ChannelPromptDownloader

Cache-Control: no-cache

Host: umcdn.uc.cn


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 53410192

Connection: keep-alive

Date: Thu, 11 May 2017 18:49:36 GMT

x-oss-request-id: 5914B240C13CD75B4A4F8D9B

Accept-Ranges: bytes

ETag: "D76F2D8D51D9D7D26C75FE3BF4CC5249"

Last-Modified: Wed, 08 Mar 2017 07:25:11 GMT

x-oss-object-type: Normal

x-oss-hash-crc64ecma: 18016613896755670337

x-oss-storage-class: Standard

Cache-Control: max-age=7776000

Content-MD5: 128tjVHZ19Jsdf479MxSSQ==

x-oss-server-time: 79

Via: cache19.l2sg1[471,200-0,M], cache12.l2sg1[472,0], cache6.de1[0,200-0,H], cache10.de1[3,0]

Age: 536668

X-Cache: HIT TCP_HIT dirn:1:507730825

X-Swift-SaveTime: Thu, 11 May 2017 18:49:37 GMT

X-Swift-CacheTime: 2592000

Timing-Allow-Origin: *

EagleId: c31b1fd214950652441985398e

MZ......................@...................................(.........
..!..L.!This program cannot be run in DOS mode....$.......^!...@t..@t.
.@t......@t.....f@t......@t.!.w..@t.!.p..@t.!.q.<@t.t.q..@t...q..@t
..8...@t..8...@t..@u..@t...}..@t...t..@t......@t..@...@t...v..@t.Rich.
@t.................PE..L......X...........!.....F...|,......!.......`.
.............................. /......!/...@.........................p
...l............`.... ..............3..../.........T..................
.t...........@............`.. ............................text...mE...
....F.................. ..`.rdata.......`.......J..............@..@.da
ta...$"..........................@....gfids.......@...................
...@..@.tls.........P......................@....rsrc..... ..`.... ....
.............@..@.reloc......../.. ..................@..B.............
......................................................................
......................................................................
...............................................h......1....,..h.U...E.
..Y......h......1....,..h.U...%...Y..@....k...hcU.......Y.............
...U..j.h.>..d.....PV.....3.P.E.d........E......v.......j..D9...v..
Q.......F......E...F......F.....t.j.V...........M.d......Y^..]........
........... B..............A........A.......D....A.0....A.............
....U...M...VW..b.........;.u/.........s..E..M.....=D...u..A.3._^]..._
3.^]......|..........;.u..........s....\..........;.u2.........s..U...
.....B.#..E.....=D...u..B.3._^]..._..@..^]...Q.P...R.P._3.^]......

<<< skipped >>>

GET /large/7185bdf1gw1f05vls701mg21130hix6s.gif HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: ww4.sinaimg.cn

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Wed, 17 May 2017 23:53:33 GMT

Server: PWS/8.2.0.7

X-Px: ms h0-s2001.p0-mow ( h0-s2002.p0-mow), ht-d h0-s2002.p0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Mon, 12 Jun 2017 02:29:48 GMT

Age: 5606625

Accept-Ranges: bytes

Content-Length: 5199689

Content-Type: image/gif

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=87.118.248.244,c=194.242.96.218

Connection: keep-alive
GIF89a7.v.....:...$.{.J.....s..*].._. ...x-.l.>......K..m....!..Q.0
pW{......H..6s.3....g.[..d..|....I.".'?!........:{..A.].P...p.M.c.^.. 
...d..s.({.1...R.M.......8.b.6f..jm..f...n....@)z........s......()..{.
..J....R....(...!|.)..L...\.S....);..6z.!...Q........k....B...=....Q..
Z..2t..t.l.....v..t........S..\r.&q....~On)........:..$j.)..a........!
........J.. .u!.._.8"b.1..w.5Gp..K....=.......U...l........Z.#)..)...C
.,..}........}..R..\..)............b.;..S..*........V.."..T...4IB..!..
a..:.....P.....I.....l.To..!`.k..2..!..5..............;..... ....."s.c
.\)p.J..\.....!z. ]...Ua`.;..\...........3z.].'... k.....t.!..k...{.Y.
B1.......r..r5..F..[..1|.1.......s_..S.....).....o.4..*...%v..#1d..}d.
...c...l....u...... =[..I.. ....VB..u.:.......s....o.E...U.$.....2Si.m
.(....Fb..2E..!.......,....7.v........H......*\......#J.H.....3j......
 C..I....(S.\.....0c..I....8s.......@...J....H.*].....P.J.J....X.j....
..`...K....h..].....p...K....x............L...... ^......#..B.....3k..
.....C..M.....S.^......c..-.....s...........N...... _}..s...K.N......k
...........N......._.........O...............(....h...&....6....F(...V
h...f....v... .(..$.h..(.........0.(..4.h..8....<....@.)..D.i..H&..
.2Zf..PF)..TVi..Xf...\v...`.)..d.if.,..f{L....p.)..t.i..x....|......*.
.......^....6....F*..3VV...f....v.....*....j..~&...........*....j....z
*...:.... ....k...&....6....F ...Vk...f....v..... ....k.............. 
o....k.............,....l...'....7....G,...Wl...g....w... .,..$.l..(..
..,....0.,..4.l..8....<....@.-..D.m..H'.e.L7...PG-..TO...Xg...U<<< skipped >>>

GET /pcbrowser/down.php?pid=4640 HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: down2.uc.cn

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily

Server: nginx

Date: Wed, 17 May 2017 23:54:01 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: PHPSESSID=5ih01d7q2mdvoj0l49d77oncv6; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Location: hXXp://umcdn.uc.cn/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.exe

0..HTTP/1.1 302 Moved Temporarily..Server: nginx..Date: Wed, 17 May 20
17 23:54:01 GMT..Content-Type: text/html..Transfer-Encoding: chunked..
Connection: keep-alive..Set-Cookie: PHPSESSID=5ih01d7q2mdvoj0l49d77onc
v6; path=/..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control: no-
store, no-cache, must-revalidate, post-check=0, pre-check=0..Pragma: n
o-cache..Location: hXXp://umcdn.uc.cn/down/4640/UCBrowser_V6.1.2107.20
4_4640_(Build1703071827)_ChannelU_03081433.exe..0..

POST / HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1) QQBrowser/6.0

Host: qbwup.imtt.qq.com

Content-Length: 438

Cache-Control: no-cache

......,<LV.qbpcstatf.stat}.........crypt...

list<char>....u
...p.....y.w.qNx.....r.o.r.........x..N.;..3D..Q.N.....z-Q.|3Q.........A.Q*...[[Ng.
.r....*.
...i.....k.

x......w...{

..f.....f.:......Y.D.....<i.....a..y[G.J.p2>.7......$qC.b....G.......6.ku&....C.~...w...E......../. .sJ.F.I.}..H.........:.#.h.i....._..Bv....4......*....T.C[F|V~..(....8..|...K...Z.=.V.A

0...N.6V

..4S&Qn\.:y..q...6....k..l"S..kliw.z.D........y.v.J...
HTTP/1.1 200 OK

Content-Length: 54

Content-Type: application/multipart-formdata

Date: Wed, 17 May 2017 23:54:01 GMT

Server: HTTP Load Balancer/1.0

...6..,<LV.qbpcstatf.stat}.............int32..........HTTP/1.1 200 
OK..Content-Length: 54..Content-Type: application/multipart-formdata..
Date: Wed, 17 May 2017 23:54:01 GMT..Server: HTTP Load Balancer/1.0...
..6..,<LV.qbpcstatf.stat}.............int32............

POST / HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1) QQBrowser/6.0

Host: qbwup.imtt.qq.com

Content-Length: 398

Cache-Control: no-cache

......,<LV.qbpcstatf.stat}...k.....crypt...

list<char>....M
...H.....y.w.qNx.....r.o.r.........x..N.;..3D..Q.N.....z-Q.|.8r\.H......A.Q*...[[Ng.
.r....*.
...i.....k.

x......w...{

..f.....f.:......Y.D.....<i.....a..y[G.J.p2>.7......$qC.b....G.......6.ku&.df......kQ~..>.f>..e...(....!.{).=...J._e...xIF
y..._..)

&.6.}Nq....!v....w..H.6..HEBE./..|......m....[....6.rp...s!.\...k..3...K..px....
HTTP/1.1 200 OK

Content-Length: 54

Content-Type: application/multipart-formdata

Date: Wed, 17 May 2017 23:53:51 GMT

Server: HTTP Load Balancer/1.0

...6..,<LV.qbpcstatf.stat}.............int32............

GET /p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496224810000&op=lauch&ext=toolbar&ver=5.1.1.9&ch=359&module=BDPlayerTray HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727))

Host: stat.v.baidu.com

Accept: */*

Connection: close


HTTP/1.1 200 OK

Date: Wed, 17 May 2017 23:53:51 GMT

Content-Type: image/gif

Transfer-Encoding: chunked

Connection: close

Set-Cookie: BAIDUID=54EA3A97D6AB29EE69B37B6960F77298:FG=1; expires=Thu, 17-May-18 23:53:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

P3P: CP=" OTI DSP COR IVA OUR IND COM "

Server: Apache

tracecode: 32310662180897961994051807

Set-Cookie: BAIDUID=062EC7B3709D328412531E8129532FB4:FG=1; expires=Thu, 17-May-18 23:53:51 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

P3P: CP=" OTI DSP COR IVA OUR IND COM "

0..

GET /large/7185bdf1gw1f05vkvcpe1g20s60i07ww.gif HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: ww1.sinaimg.cn

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Wed, 17 May 2017 23:53:26 GMT

Server: PWS/8.2.0.7

X-Px: ms h0-s2001.p0-mow ( h0-s2003.p0-mow), ht-d h0-s2003.p0-mow.cdngp.net

Cache-Control: max-age=7776000

Expires: Sun, 18 Jun 2017 05:50:30 GMT

Age: 5076176

Accept-Ranges: bytes

Content-Length: 17013252

Content-Type: image/gif

Last-Modified: Mon, 08 Jul 2013 18:06:40 GMT

X-Via-CDN: f=TXCDN,s=87.118.248.244,c=194.242.96.218

Connection: keep-alive
GIF89a............U&..N.._......... ..(....pj&...... "...... VJ3...,1.
.......o..../:E.%.....@..f/..f.Ojg.....O;9....U4$.........n...Q.Q.f.XN
4......{.............v'..}xN".. ...Zbj.|e.vg..z))1.K N ..4x..p#.......
........sf;...%:hL6..i.......kI.3f$...4i........1.f3....xu>=16!...^
..n.sV};.S%.<.ca...t....CCI..N......ojm....T.pfd.w....w...TN3......
.$w5<.......0W..J....i8..N.pG.oSOOV11:.z.......^........wVPg\Bu.#..
D.wdpfY`.......m.==1..:(..Rt.......jb.D(X9)...f33..L...l............_.
V......ff....uZb..!!*...333......8Si....Tb{....;..!......fPMC..4RH...7
...<G.x..39vR?......m;..............s.x......T4.m........dWk.}.....
..hQ#......o7thF.p2RKJ.wN..l..........".8...k2[..8..82)2!#.....L.....p
..~vwy{.....cC9.....6..kfZ\::B.?B.H}...`8.....WN...)))...l........|;'.
........2{..n|i&...p.fK!.......,...............H......*\.......N.H....
.3j...... C..I....(S.D.....0c..I....8s.....O.`...J....H.*].....P.J.J..
T.X.j......`....U...h..].....p...K....x............L...... ^......#;.C
.....3k.......%..M.....S.^......c.....^..s....0.......GG.... _........
..7....O....;h......O.....WO......y.;...........?............}.&....6.
 b.=(a...haQ.N....v.!r.......H..(.V..,.A_}).(..4.8.:..Q"a&.R..?6.D.D6 
..5&...-....PF)....h....F..0..e......U@.W.......L d......pLp$.52...V..
...n......&d.v..a....b....!.l..<Fn#d......d...<Wbzh......}....T.
. k.z.Z._..j v...hi....a...(b.... .TQd.Mp.N....L0@.QM. .Q....:...Zx...
.;#.....u:|...\....."V...Y.i: \Z....`m...#N.!....$..b.w.. ...x...w.`.}
.....fw..'.v/.Y..hbXV.f.p.........y..p....B......;z. ......PG.....<<< skipped >>>

POST / HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1) QQBrowser/6.0

Host: qbwup.imtt.qq.com

Content-Length: 398

Cache-Control: no-cache

......,<LV.qbpcstatf.stat}...k.....crypt...

list<char>....M
...H.....y.w.qNx.....r.o.r.........x..N.;..3D..Q.N.....z-Q.|.......]....A.Q*...[[Ng.
.r....*.
...i.....k.

x......w...{

..f.....f.:......Y.D.....<i.....a..y[G.J.p2>.7......$qC.b....G.......6.ku&.df......kQ~..>.f>..e...(....!.{).=...J._e...xIF.$.8S..U...p.$
.6..HEBE......!Y......s/.u.........".....s.

..\z....7......2g.|.n*......
HTTP/1.1 200 OK

Content-Length: 54

Content-Type: application/multipart-formdata

Date: Wed, 17 May 2017 23:54:00 GMT

Server: HTTP Load Balancer/1.0

...6..,<LV.qbpcstatf.stat}.............int32............

POST / HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1) QQBrowser/6.0

Host: qbwup.imtt.qq.com

Content-Length: 366

Cache-Control: no-cache

...n..,<LV.qbpcstatf.stat}...K.....crypt...

list<char>....-
...(.....y.w.qNx.....r.o.r.........x..N.;..3D..Q.N.....z-Q.|W....]......A.Q*...[[Ng.
.r....*.
...i.....k.

x......w...{

..f.....f.:......Y.D.....<i.....a..y[G.J.p2>.7......$qC.b....G.......6.ku&.df......kQ~..>.f>..e...(....!.{).=...J....o..Bb..x..r.`...O.*..&...B.@z..@..op.......<.P...R.).m8J..F....
HTTP/1.1 200 OK

Content-Length: 54

Content-Type: application/multipart-formdata

Date: Wed, 17 May 2017 23:54:08 GMT

Server: HTTP Load Balancer/1.0

...6..,<LV.qbpcstatf.stat}.............int32..........HTTP/1.1 200 
OK..Content-Length: 54..Content-Type: application/multipart-formdata..
Date: Wed, 17 May 2017 23:54:08 GMT..Server: HTTP Load Balancer/1.0...
..6..,<LV.qbpcstatf.stat}.............int32............

GET /p.gif?app=baiduplayer5&pccode=C_0-D_0-M_0050563844C4-V_10F5F7ED&r=131395496122010000&op=install&ver=5.1.1.9&ch=359&module=BaiduPlayer5SetupSilent_359 HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727))

Host: stat.v.baidu.com

Accept: */*

Connection: close


HTTP/1.1 200 OK

Date: Wed, 17 May 2017 23:53:33 GMT

Content-Type: image/gif

Transfer-Encoding: chunked

Connection: close

Set-Cookie: BAIDUID=BCDAE4AB4778FF2729EF75A144104629:FG=1; expires=Thu, 17-May-18 23:53:33 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

P3P: CP=" OTI DSP COR IVA OUR IND COM "

Server: Apache

tracecode: 32133535900527773194051807

Set-Cookie: BAIDUID=81EF8859B4CF449ED72B4CFA230762E0:FG=1; expires=Thu, 17-May-18 23:53:33 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1

P3P: CP=" OTI DSP COR IVA OUR IND COM "

0..

GET /pca3-g5.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.verisign.com


HTTP/1.1 200 OK

Server: Apache

ETag: "28ee9435bc244efc0822c40aaea2a2d4:1490227391"

Last-Modified: Wed, 22 Mar 2017 23:37:59 GMT

Date: Wed, 17 May 2017 23:53:53 GMT

Content-Length: 571

Connection: keep-alive

Content-Type: application/pkix-crl

0..70...0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...
U....VeriSign Trust Network1:08..U...1(c) 2006 VeriSign, Inc. - For au
thorized use only1E0C..U...<VeriSign Class 3 Public Primary Certifi
cation Authority - G5..170321000000Z..170630235959Z0#0!..n.N/.v...J..%
R.t..160630163929Z0...*.H....................F...............cb.rZE.1Q
O.l....F..w.e].o...,N,5.....o.....UD....5f.."....O...T.Z..b....L.. y\4
B....o.n.rO./...Z....b....L....Y.h?.p....}...%O.y..}.5.A.@.f.x........
..0...HP.V.....R.f..7m..h.i\.H...qQ.M....E........G..uP.`....@~..Qi.!C
fd..&........6HTTP/1.1 200 OK..Server: Apache..ETag: "28ee9435bc244efc
0822c40aaea2a2d4:1490227391"..Last-Modified: Wed, 22 Mar 2017 23:37:59
 GMT..Date: Wed, 17 May 2017 23:53:53 GMT..Content-Length: 571..Connec
tion: keep-alive..Content-Type: application/pkix-crl..0..70...0...*.H.
.......0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Tr
ust Network1:08..U...1(c) 2006 VeriSign, Inc. - For authorized use onl
y1E0C..U...<VeriSign Class 3 Public Primary Certification Authority
 - G5..170321000000Z..170630235959Z0#0!..n.N/.v...J..%R.t..16063016392
9Z0...*.H....................F...............cb.rZE.1QO.l....F..w.e].o
...,N,5.....o.....UD....5f.."....O...T.Z..b....L.. y\4B....o.n.rO./...
Z....b....L....Y.h?.p....}...%O.y..}.5.A.@.f.x..........0...HP.V.....R
.f..7m..h.i\.H...qQ.M....E........G..uP.`....@~..Qi.!Cfd..&........6..

<<< skipped >>>

GET /pcbrowser/down.php?type=dll&pid=4640 HTTP/1.1

Accept: */*

Content-Length: 0

User-Agent: ChannelPromptDownloader

Host: down2.uc.cn

Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily

Server: nginx

Date: Wed, 17 May 2017 23:54:03 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.3.10

Set-Cookie: PHPSESSID=nf6vrcipifvp075jagtb0q69o2; path=/

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Pragma: no-cache

Location: hXXp://umcdn.uc.cn/down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.dll

0..HTTP/1.1 302 Moved Temporarily..Server: nginx..Date: Wed, 17 May 20
17 23:54:03 GMT..Content-Type: text/html..Transfer-Encoding: chunked..
Connection: keep-alive..X-Powered-By: PHP/5.3.10..Set-Cookie: PHPSESSI
D=nf6vrcipifvp075jagtb0q69o2; path=/..Expires: Thu, 19 Nov 1981 08:52:
00 GMT..Cache-Control: no-store, no-cache, must-revalidate, post-check
=0, pre-check=0..Pragma: no-cache..Location: hXXp://umcdn.uc.cn/down/4
640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.d
ll..0..

GET /down/4640/UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: umcdn.uc.cn

Connection: Keep-Alive

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 404880

Connection: keep-alive

Date: Thu, 11 May 2017 18:49:15 GMT

x-oss-request-id: 5914B22B3B1DCEA87E6070E0

Accept-Ranges: bytes

ETag: "D819753030D9C355B85CF36EE3266411"

Last-Modified: Wed, 08 Mar 2017 07:25:11 GMT

x-oss-object-type: Normal

x-oss-hash-crc64ecma: 5000225178610041071

x-oss-storage-class: Standard

Cache-Control: max-age=7776000

Content-MD5: 2Bl1MDDZw1W4XPNu4yZkEQ==

x-oss-server-time: 77

Via: cache7.l2sg1[465,200-0,M], cache29.l2sg1[466,0], cache6.de1[0,200-0,H], cache3.de1[3,0]

Age: 536687

X-Cache: HIT TCP_HIT dirn:3:607575997

X-Swift-SaveTime: Thu, 11 May 2017 18:49:15 GMT

X-Swift-CacheTime: 2592000

Timing-Allow-Origin: *

EagleId: c31b1fcb14950652426352145e
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........h..{...{..
.{..q....{..q...A{..q....{...%...{...%...{...%...{.......{.. "...{....
...{.......{...{...{..R%...{..W%...{...{...{..R%...{..Rich.{..........
PE..L......X.....................t....................@...............
...........p.......6....@.................................x...........
.................3...0..l7..`l..T....................m.......l..@.....
.......................................text...........................
.... ..`.rdata..............................@..@.data....1............
..............@....gfids..D...........................@..@.tls........
........................@....rsrc...............................@..@.r
eloc..l7...0...8..................@..B................................
......................................................................
......................................................................
.............................................8...h..D......Y..........
........%..h .D......Y..................c..h0.D......Y.V. ;E........PV
...E......hl.D..v...Y^.V.P;E........PV...E......h{.D..P...Y^.V.t;E....
....PV...E......h..D..*...Y^.V..;E....`...PV...E......h..D......Y^.V..
;E....:...PV. .E..z...h..D......Y^.V..;E........PV.@.E..T...h..D......
Y^.V..;E........PV.`.E......h..D......Y^.V..;E........PV...E......h..D
..l...Y^.V..;E........PV...E......h..D..F...Y^.V..;E....|...PV...E....
..h..D.. ...Y^.V..<E....V...PV...E......h..D......Y^.V.,<E..<<< skipped >>>

GET /biz-data/sec/channel/test/config/av_config.ini HTTP/1.1

Accept: */*

Content-Length: 0

User-Agent: ChannelPromptDownloader

Host: wow.uc.cn

Cache-Control: no-cache


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/octet-stream

Content-Length: 32

Connection: keep-alive

Date: Wed, 17 May 2017 22:35:53 GMT

x-oss-request-id: 591CD0492037C866171478A4

Accept-Ranges: bytes

ETag: "54038E4A450A3F429405CCBE0DBFCFAE"

Last-Modified: Fri, 24 Feb 2017 08:50:01 GMT

x-oss-object-type: Normal

x-oss-hash-crc64ecma: 10919123851284209732

Content-MD5: VAOOSkUKP0KUBcy Db/Prg==

x-oss-server-time: 2

Via: cache26.l2hk1[0,304-0,H], cache31.l2hk1[1,0], cache1.de1[0,200-0,H], cache5.de1[1,0]

Age: 4690

X-Cache: HIT TCP_MEM_HIT dirn:4:267288821

X-Swift-SaveTime: Wed, 17 May 2017 23:26:50 GMT

X-Swift-CacheTime: 3600

Timing-Allow-Origin: *

EagleId: c31b1fcd14950652433857306e

[base]..anti=1..set_d=1..set_m=0HTTP/1.1 200 OK..Server: Tengine..Cont
ent-Type: application/octet-stream..Content-Length: 32..Connection: ke
ep-alive..Date: Wed, 17 May 2017 22:35:53 GMT..x-oss-request-id: 591CD
0492037C866171478A4..Accept-Ranges: bytes..ETag: "54038E4A450A3F429405
CCBE0DBFCFAE"..Last-Modified: Fri, 24 Feb 2017 08:50:01 GMT..x-oss-obj
ect-type: Normal..x-oss-hash-crc64ecma: 10919123851284209732..Content-
MD5: VAOOSkUKP0KUBcy Db/Prg==..x-oss-server-time: 2..Via: cache26.l2hk
1[0,304-0,H], cache31.l2hk1[1,0], cache1.de1[0,200-0,H], cache5.de1[1,
0]..Age: 4690..X-Cache: HIT TCP_MEM_HIT dirn:4:267288821..X-Swift-Save
Time: Wed, 17 May 2017 23:26:50 GMT..X-Swift-CacheTime: 3600..Timing-A
llow-Origin: *..EagleId: c31b1fcd14950652433857306e..[base]..anti=1..s
et_d=1..set_m=0..

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_2056:

.text

`.rdata

@.data

.ndata

.rsrc

uDSSh

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegEnumKeyA

RegCreateKeyExA

RegCloseKey

RegDeleteKeyA

RegOpenKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

verifying installer: %d%%

hXXp://nsis.sf.net/NSIS_Error

... %d%%

~nsu.tmp

%u.%u%s%s

RegDeleteKeyExA

%s=%s

*?|<>/":

Browser_V5.5.7852.9_r_4640_(Build1512022057).exe

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Inetc.dll

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp

5 5$5(5,5

\\?\unc\

zcÁ

65708<8`9

<'</<5<;<|<

-%UZh

%Program Files%\Tencent\QQBrowser\uninst.exe

stall.exe

uninst.exe

DUNIN~1.EXE

hix6s.gif

\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp

c:\%original file name%.exe

%Program Files%\Winamp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp

%original file name%.exe

ers\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5D.tmp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\

74444444444

u<BBBB.BBBBDW

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency></assembly>

%original file name%.exe_2056_rwx_10004000_00001000:

callback%d

BDPlayerTray.exe_2696:

.text

`.rdata

@.data

.rsrc

@.reloc

F\ FTP

8%u(j

Nt.Nt

Bv9.jk

x=%d,y=%d,w=%d,h=%d

1.2.40

l:%d,t:%d,r:%d,b:%d

&#xX;

</%s>

%s="%s"

%s='%s'

<![CDATA[%s]]>

<!--%s-->

version="%s"

encoding="%s"

standalone="%s"

%s %s

%s:%d

%s:%d %s

1,1,-1,-1

hotkey

password

hotkeyctrl

skin%d

sub%d

0,0,%d,%d

-%d,%d,-%d,%d

%d,-%d,%d,-%d

0,-%d,%d,-0

-%d,0,-0,%d

%d,%d,%d,%d

crtextnormal

crtextsel

crtexthover

crtext

RegCreateKeyTransactedW

RegOpenKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyExW

bdcommon.dll

bdxctrl.dll

IMsgBox

IxCanvasShowDelegate

IxMsgDispatcher

bdxmain.dll

bdxview.dll

IBDCmdCenter

bdxlogic.dll

bdxplayer.dll

NULL row buffer for row %ld, pass %d

libpng error: %s, offset=%d

libpng error no. %s: %s

libpng warning no. %s: %s

libpng error: %s

libpng warning: %s

Buffer error in compressed datastream in %s chunk

Incomplete compressed datastream in %s chunk

Data error in compressed datastream in %s chunk

Unknown zTXt compression type %d

gamma = (%d/100000)

gx=%f, gy=%f, bx=%f, by=%f

wx=%f, wy=%f, rx=%f, ry=%f

incorrect gamma=(%d/100000)

iTXt chunk not supported.

Bogus message code %d

Invalid component ID %d in SOS

IDCT output block size %d not supported

Wrong JPEG library version: library is %d, caller expects %d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Invalid scan script at entry %d

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Buffer passed to JPEG library is too small

Unsupported color conversion request

Too many color components: %d, max %d

Bogus DAC value 0x%x

Bogus DAC index %d

Bogus DQT index %d

Bogus DHT index %d

Empty JPEG image (DNL not supported)

Maximum supported image dimension is %u pixels

Cannot transcode due to multiple use of quantization table %d

Backing store not supported

Huffman table 0xx was not defined

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Cannot quantize more than %d color components

Insufficient memory (case %d)

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Unsupported JPEG process: SOF type 0xx

Failed to create temporary file %s

Unsupported marker type 0xx

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Freed EMS handle %u

Define Restart Interval %u

Obtained EMS handle %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

At marker 0xx, recovery action %d

Selected %d colors for quantization

Smoothing not supported with nonstandard sampling ratios

RST%d

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Start Of Scan: %d components

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Opened temporary file %s

Closed temporary file %s

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

Obtained XMS handle %u

Freed XMS handle %u

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: found marker 0xx instead of RST%d

%ld%c

d:\clientci\workspace\yingyinlite_compile_5.1.1\yingyinlite\bin\Release_Win32\pdb\BDPlayerTray.pdb

MSVCP120.dll

GetProcessHeap

KERNEL32.dll

EnumThreadWindows

GetKeyState

GetKeyNameTextW

MapVirtualKeyW

USER32.dll

RegCloseKey

RegOpenKeyExW

RegDeleteKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegCreateKeyExW

ADVAPI32.dll

ole32.dll

ShellExecuteW

SHELL32.dll

OLEAUT32.dll

SHLWAPI.dll

OffsetViewportOrgEx

GDI32.dll

COMCTL32.dll

MSIMG32.dll

MSVCR120.dll

_calloc_crt

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

__crtGetShowWindowMode

_amsg_exit

_wcmdln

__crtSetUnhandledExceptionFilter

GdiplusShutdown

GdipSetStringFormatHotkeyPrefix

gdiplus.dll

WINMM.dll

VERSION.dll

.?AV?$CBkCreator@VCBkHotkey@@@@

.?AVCBkHotkey@@

.?AV?$CWindowImpl@VCBkHotkey@@V?$CHotKeyCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraitsOR@$0IA@$0A@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@@ATL@@

.?AV?$CWindowImplBaseT@V?$CHotKeyCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraitsOR@$0IA@$0A@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@@ATL@@

.?AV?$CWindowImplRoot@V?$CHotKeyCtrlT@VCWindow@ATL@@@WTL@@@ATL@@

.?AV?$CHotKeyCtrlT@VCWindow@ATL@@@WTL@@

.?AV?$CBkCreator@VCBkHotKeyCtrl@@@@

.?AVCBkHotKeyCtrl@@

%U4]06Pr

G0.hk

W7^.Jv

~I.PR!I

m[.PM

{^.OW

F%Fg=2

/.qrz

%URWip

..3 ..3!3.3"3.3#3.3$3.3&3.3'3.3(2-2*2-3 3-3 3.3,3.3-3.3.2.302-212-21323232323.325/413/31//02///2///1/0/1101/011/111-113-111,212*232*222)343'3.3&/02$111"500"625 232

%.s"(0

/4<"16>`/5=

1 &{2/-6111

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

<assemblyIdentity type='Win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='X86' publicKeyToken='6595b64144ccf1df' language='*' />

77U7x7~7

67X7

1!2*2?273@3

8 8$8(8,80848

2-2L2}2D3

9(979\9~9

= =$=(=,=0=4=

9 9$9(9,9094989<9

6 6$6(6,606

; ;$;(;,;

.jpeg

\string.xml

\font.xml

\color.xml

\images.xml

\render.xml

\style.xml

Invalid WM_COPYDATA, length = %d, first null = %d

Invalid WM_COPYDATA, length = %d

lym:Process Command Line %s

BaiduBrowserMsgWnd\%d

user32.dll

pipe

style.xml

effect.xml

string.xml

skin.xml

error @ %s:%d (lasterror=%u, hr=0x%X)

path=%s

nValue=%d

BDPlayer.dat

delete, ret=%d, dwError=%d

msimg32.dll

BKHotKey

msctls_hotkey32

uxtheme.dll

create %s(%d) failed with error %d: %s

import

%s\%s

PERFORMANCE(%S) : %f ms

} %s(%s)

%s(%s) {

55A30E17-5B6E-4D53-9E0E-F20B6B308287

89A08041-0E78-494C-B1A5-920FC74AF790

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_DYN_DATA

HKEY_PERFORMANCE_DATA

HKEY_CURRENT_CONFIG

WAdvapi32.dll

bdbugreport_%u

\bugreport.exe

"%s" --smname=%s

menu_tray.xml

BDPlayer.exe

\BDPlayer.exe

\xUpdate.exe

%d.%d.%d.%d

\res\icon\Player.ico

\xReport.exe

"%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe"

%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport.exe

bdbugreport_2696

PerfTraceService.exe_3468:

.text

`.rdata

@.data

.rsrc

@.reloc

l$X9.vE

Av.SCv=kAv

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

operator

GetProcessWindowStation

USER32.DLL

tdh.dll

e:\SlaveDepot\beyond_slave\branch8_union_rc_rep\beyond\bin\pdb\Release\PerfTraceService.pdb

KERNEL32.dll

RegCreateKeyW

RegCloseKey

RegOpenKeyExW

RegCreateKeyExW

ADVAPI32.dll

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

WS2_32.dll

GetCPInfo

GetConsoleOutputCP

GetProcessHeap

zcÁ

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

7%7S7a7

3=3

>&>,>2>:>

8Œ8v8

;3;<;)=8=,>

KERNEL32.DLL

mscoree.dll

[%s](%lu):

PerfTrace.ini

DebugMsg

EVENT_RECORD address : %d, UserDataLength : %d

PerfTrackInfo : Name : %s, Id : %d

Start Event : Name : %s, Id : %d

InFlightEvents number : %d

Match Event : Name : %s, Id : %d

{x-x-x-xx-xxxxxx}

Port

TypesSupported

QQTrace.ini

TraceConfig.xml

qqtrack.xml

advapi32.dll

IsVervionEnalbe failed , OSVersion : %d

IsTypeEnable failed, trace type %d

7z.exe

::CreateProcess failed, ErrCode : %d, cmd : %s

::SetPriorityClass failed, ErrCode : %d

File path too long ! %s, %s

share dir path too long ! %s, %s

CopyFile failed, ErrCode : %d

begin ReloadConfig tread, ReloadTime : %d

CreateThread failed, ErrCode %d

OpenTrace failed , ErrCode : %d

Session-4BA0B957-882B-4625-A213-0349B865E6AA

%d/%d/%d %d:%d:%d

event id :%d, duration :%f ms, start time :%s

ScenarioId %s take a long time

QQTrace-UserSession-8D2FEC41-08A1-4c4b-AB00-F67DD5761ACC

-start %s -on %s -BufferSize %d -MinBuffers %d -MaxBuffers %d

-on %s -BufferSize %d -MinBuffers %d -MaxBuffers %d -stackwalk %s

-stop -stop %s

-flush -flush "%s"

-flush -f "%s" -flush "%s" -f "%s"

RunXperf Error ! (%d)

%s\%s%s.%d-d-d.d-d-d-%d.etl

-merge "%s" "%s" "%s"

Myredir-B48C0CD8-8D7A-45ee-90EB-B1FCCD3F5E1A

"%s" %s

CreateProcess failed (%d)

DeleteFile %s Failed : %d

xperf.exe

QQTraceUserSession.etl

QQTraceNTSession.etl

%d.%d.%d.%d

oXmlDoc.Load(lpszConfigFileName) || !oXmlDoc.IsValid() failed

oXmlDoc.IsValid() failed

IDispatch error #%d

%Program Files%\Tencent\QQBrowser\Service\PerfTraceService.exe

Browser_V5.5.7852.9_r_4640_(Build1512022057).exe_4048:

.text

`.rdata

@.data

.gfids

@.tls

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

PSSSSSSh

jk9.jk

jCv.SCv

atlthunk.dll

operator

operator ""

GetProcessWindowStation

%S#[k

\\.\PhysicalDrive%d

\\.\IDE21201.VXD

ERROR: Could not open IDE21201.VXD file

\\.\Scsi%d:

Drive%dModelNumber

Drive%dSerialNumber

DriveÜontrollerRevisionNumber

DriveÜontrollerBufferSize

Drive%dType

X-X-X-X-X-X

-- %s --

%%X

RegCreateKeyTransactedW

RegOpenKeyTransactedW

RegDeleteKeyTransactedW

D:\UCChannel\ucchannel\Release\ChannelU.pdb

.text$di

.text$mn

.text$x

.text$yd

.idata$5

.CRT$XCA

.CRT$XCAA

.CRT$XCL

.CRT$XCU

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIAC

.CRT$XIC

.CRT$XIZ

.CRT$XLA

.CRT$XLZ

.CRT$XPA

.CRT$XPX

.CRT$XPXA

.CRT$XPZ

.CRT$XTA

.CRT$XTZ

.rdata

.rdata$T

.rdata$r

.rdata$sxdata

.rdata$zzzdbg

.rtc$IAA

.rtc$IZZ

.rtc$TAA

.rtc$TZZ

.xdata$x

.idata$2

.idata$3

.idata$4

.idata$6

.data

.data$r

.gfids$x

.gfids$y

.tls$

.tls$ZZZ

.rsrc$01

.rsrc$02

KERNEL32.dll

USER32.dll

RegOpenKeyExW

RegDeleteKeyW

RegCloseKey

RegQueryInfoKeyW

RegEnumKeyExW

RegCreateKeyExW

ADVAPI32.dll

SHFileOperationW

ShellExecuteW

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

COMCTL32.dll

HttpQueryInfoW

HttpOpenRequestW

HttpSendRequestW

WININET.dll

PSAPI.DLL

IPHLPAPI.DLL

WINTRUST.dll

VERSION.dll

GetProcessHeap

GetCPInfo

.?AVCHttpDownload@@

ChannelDllUrl=hXXp://down2.uc.cn/pcbrowser/down.php?type=dll

version=6.1.2107.204

ReportUrl=hXXp://mmstat.ucweb.com/

<requestedExecutionLevel level='asInvoker' uiAccess='false' />

<assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' processorArchitecture='x86' publicKeyToken='6595b64144ccf1df' language='*' />

4"4(4,424

5:5_5'656

5(565>5{5

8$8(8,808

2,2:2@2[2

8 8-838:8[8

0%0U0g0

=#=?=\=|=

8$8/84898]8

8%9s9

11C1R1a1p1

:,;0;4;8;

< <$<(<,<

= =$=(=,=0=4=8=<=

: :<:@:`:

kernel32.dll

mscoree.dll

msvcrt.dll

ext-ms-win-ntuser-windowstation-l1-1-0

portuguese-brazilian

aavc.ini

UCBrowser.exe

hXXp://wow.uc.cn/biz-data/sec/channel/test/config/av_config.ini

UCBrowserSetup.exe

SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

kxetray.exe

kxescore.exe

kislive.exe

kskinmgr.dll

SOFTWARE\Microsoft\Windows\CurrentVersion\Run

hXXp://mmstat.ucweb.com/

d\\.\%c:

\\.\PHYSICALDRIVE%d

bluesky.4.1.6.1.1

READ_URL_ERROR

READ_CHANNEL_BASE_URL_ERROR

PASS_PARAM_ERROR

EXTRACT_CHROMEPACKED7ZFILE_ERROR

UN7Z_TO_CHROME7Z_ERROR

UN7Z_TO_CHROMEBIN_ERROR

EXTRACT_TO_SETUPEXE_ERROR

UNCAB_TO_SETUPEXE_ERROR

RENAME_CHROME_FOLDER_ERROR

COPY_CHROME_FOLDER_ERROR

COPY_SETUPEXE_FILE_ERROR

RUN_SETUPEXE_FILE_ERROR

HTTP/1.1

Content-Length: %d

ChannelU.exe

ChannelDllUrl

PackageBaseUrl

ReportUrl

6.0.1121.13

config.ini

ChannelU.dll

hXXp://

\\.\X:

%d%d%d%d

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

Advapi32.dll

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Browser_V5.5.7852.9_r_4640_(Build1512022057).exe

UCWeb Inc.

1.0.11.0

Copyright 2008-2016 UCWeb Inc. All rights reserved.

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

QQBrowser.exe:3748
QQBrowser.exe:3496
QQBrowser.exe:3224
QQBrowser.exe:2888
QQBrowser.exe:3100
QQBrowser.exe:3492
QQBrowser.exe:3044
QQBrowser.exe:3840
QQBrowser.exe:920
QQBrowser.exe:3164
QQBrowser.exe:3432
QQBrowser.exe:3176
stats_uploader.exe:984
xReport.exe:2884
xReport.exe:2996
regsvr32.exe:1552
netsh.exe:2524
netsh.exe:2492
xUpdate.exe:2784
PerfTraceService.exe:3452
BaiduPlayer5SetupSilent_359.exe:2044
V8._85416_20150820204011.exe:2732
PlayerApp.exe:1956
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\custom.dat (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\12dc664d-0442-4570-a7c8-f3aa22922cec.com.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\noads.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\chrome.7z (1344211 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\tmall.com.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\background_lib.js (129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\amazon.png (507 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\youku.com.png (653 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\fame.png (444 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\resources.pak (92927 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Uninstall.exe (9133 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-x86.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_100_percent.pak (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\taobao.com.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\chrome.packed.7z (59963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\06.png (354 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\baidu.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\taobao.png (389 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome.dll (157305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\tmall.com.png (200 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Languages\chs.locale (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-xp.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\14.png (488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\zh-CN\external_extensions.json (934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\lazy_index.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\youku.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\new-tab-icon.png (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libmp3lame.dll (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\sogou.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\news_pre_render.js (26 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\18.png (283 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\lecture.png (282 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\config.dat (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\font\font_8jda4sp0bz8pk3xr.ttf (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\VisualElements\Logo.png (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\data\city.json (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\alipay.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\UCProxySDK.dll (4489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\game.png (340 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\id-ID\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\taohuoyuan.png (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\lazy_lib.js (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\marketing\1001.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\UCBrowser.exe (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\youku.com.png (764 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\background.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Locales\en-US.pak (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\config.dat (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\7z.dll (1841 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\07.png (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\config.dat (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\baidu.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\font\font_8jda4sp0bz8pk3xr.woff (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\life.png (475 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\d3dcompiler_47.dll (13439 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\6.1.2107.204.manifest (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\update_task.exe (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\sogou.com.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\setup_ex_.cab (441 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_watcher.dll (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\taobao.com.png (304 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\setup.exe (17426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Bin\ChannelU.dll (26363716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\VisualElements\SmallLogo.png (27 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\new_tab_icon.png (113 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\snapshot_blob.bin (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\48.jpg (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\taobao.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\pt-BR\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libGLESv2.dll (5192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\moon.jpg (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\subscribe.png (398 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Locales\zh-CN.pak (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\00.png (436 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\news\refresh.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-x86.sys (42 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\stats_uploader.exe (612 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\config.ini (195 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\curl-ca-bundle.crt (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\baidu.com.png (426 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\uclauncher-x64.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\bing.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\wow_installer.prefs (235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\google.com.hk.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_child.dll (183256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\n_01.png (509 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\start.dat (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\weibo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\VERSION (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\google.com.png (457 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Languages\settings.xml (103 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\bing.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-xp.sys (44 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_elf.dll (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\custom.png (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\48.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\rec.png (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\default.jpg (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\social.png (290 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\courgette.dll (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Drivers\ucdrv-x64.sys (50 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\09.png (328 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\extension\renren.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\01.png (544 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\etao.com.png (335 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libEGL.dll (88 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\shop.png (350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\config.dat (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\InstalledConfig.xml (713 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\google.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\12dc664d-0442-4570-a7c8-f3aa22922cec.com.png (479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\aavc.ini (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\browsing_data_remover.exe (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\desktop\facebook.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\chrome_200_percent.pak (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\config_updater.dll (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\baidu.com.png (682 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\rain.jpg (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\react_lib.js (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\news.png (205 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\uc123.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\video.png (368 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\updater.dll (8643 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\es-419\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\hrkill.exe (1931 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\start.dat (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Backup\UCBrowser.exe (2987 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\external_extensions.json (493 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\multiple.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\13.png (816 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\16.png (939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\UCService.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\PepperFlash\manifest.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\wow_installer.switches.txt (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\zh-cn\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\wallpaper\snow.jpg (32 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\bing.com.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\en-in\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\data\pc_newtab_recommendation.json (52 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\ru\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\03.png (305 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\02.png (294 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\recommend_section\other.png (180 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\en-IN\external_extensions.json (621 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\20.png (480 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\qq.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\icudtl.dat (19407 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\UCBrowserSetup.exe (70898 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\icon\128.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\7z.dll (2939 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\search_logo\default.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\desktop\tmall_points.ico (275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\delegate_execute.exe (1499 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\new_tab_search\google.com.png (521 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\stats_uploader.exe (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\04.png (645 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\16.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\login_view\taobao.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\etaohaitao.com.png (438 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\share.dat (66 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\bookmarks\pp_helper.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\19.png (367 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\pt-br\config.dat (124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\theme_tool.exe (1139 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\PepperFlash\pepflashplayer.dll (69197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\new_tab\index.js (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Configs\id\start.dat (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\wow_helper.exe (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\natives_blob.bin (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\_locales\en\messages.json (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\libexif.dll (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Update\UpdateOption.xml (189 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\Extensions\preset\hfahjeoiihhilkhgpknbhgcgjiejgecf\default\images\weather_icon\n_00.png (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\6.1.2107.204\UCAgent.exe (8056 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\Share\icons\searchbar\etao.com.png (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\UCChannel\Package\Chrome-bin\molt_tool.exe (851 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\7185bdf1gw1f05vls701mg21130hix6s[1].gif (307874 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\ZipDLL.dll (3608 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Browser_V5.5.7852.9_r_4640_(Build1512022057).exe (26349 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\BaiduPlayer5SetupSilent_359.exe (146246 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\21.gif (1101124 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Base64.dll (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\22.gif (326744 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\UCBrowser_V6.1.2107.204_4640_(Build1703071827)_ChannelU_03081433[1].exe (24208 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\V8._85416_20150820204011.exe (41066 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsn7A5E.tmp\Inetc.dll (40 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\7185bdf1gw1f05vkvcpe1g20s60i07ww[1].gif (1036496 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\dr_packet.dat (728 bytes)
%Program Files%\Tencent\QQBrowser\Assistant.dll (430 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserFrame.dll (49 bytes)
%Program Files%\Tencent\QQBrowser\QBSafe.dll (454 bytes)
C:\Windows\Tasks\QQBrowser Udpater Task(Core).job (280 bytes)
C:\Windows\Tasks\QQBrowser Udpater Task.job (276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Skin\001-Cool Air.gt (252503 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Skin\LightStripes.gt (601 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserConfig.dat (114 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\repeal.xml (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EX69WNU8UGA26AXF3Z0.temp (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\QBSafe.dll (454 bytes)
%Program Files%\Tencent\QQBrowser\dr.dll (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BDPlayer\conf\ReportInfo.dat (180 bytes)
%Program Files%\Tencent\QQBrowser\WebpDecodeFilter.dll (139 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcr90.dll (655 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xnet.dll (49 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BindTaskSys\SysData\XTask.db (231 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BindTaskSys\SysData\XTask.db-journal (4396 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Baidu\BCommon\XDownlaodConfig.ini (1865 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_add_url.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.checkbox.png (928 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_imageadjust_image.xml (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rmvb.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.connect.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\yes.png (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_imageadjust_color.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\MpaDec.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\pncrt.dll (287 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SRT.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\new_version.png (16 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MTS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\addurl.combobox.btn.dropdown.png (835 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\fileinfo.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.screenshot.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_mouse.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.main.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_playlist_online.xml (765 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\color.xml (196 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\msvcp120.dll (455 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\asf.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.menu.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\RealMediaSplitter.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.stop.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\bk.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.imageadjust.logo.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\flv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\CoreAAC.ax (328 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_play.xml (918 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_subtitle.xml (281 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.caption.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_BDPlayer.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\btn_bk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.cancel.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.setting.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.channel1.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.open.png (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SSA.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\IntelQuickSyncDecoder.dll (347 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playcontroller.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.menu.png (12 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.hotkey.tab.png (241 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.restore.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.screenshot.thumbnail.line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\progress_front.png (18 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wma.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\string.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.option.select.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MP2V.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist_popbox.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.help.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp3.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.feedback.png (5 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playcontroller.separator.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\3gp.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.radio.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.channel1.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\vob.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.tools.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_setting.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.max.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdcommon.dll (427 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_screenshort.xml (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\ffsrv.exe (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xReport.exe (171 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_playlist_local.xml (856 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.open.png (5 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.tree.expand.png (248 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_display.xml (700 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.delete.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\progress_bk.png (18 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.setting.png (7 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\title_bk.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.nottopmost.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.v.playlist.bg.png (144 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\PlayerApp.exe (400 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.fullscreen.close.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\font.xml (810 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\font.xml (166 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.playlist.show.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\msvcr120.dll (970 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\addurl.combobox.edit.bg.png (435 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\real\cook.dll (74 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.fullscreen.open.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\VEFilter.ax (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.logo.line.png (936 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MPEG4.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxview.dll (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_screenshot.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\m2ts.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.setting.thumb.v.png (375 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\onlinevideo_error.png (6 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\edit.setting.border.png (973 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_sound.xml (706 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayer.exe (456 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.mask.png (174 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_Tray.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.playlist.hide.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\update_line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\skin.xml (840 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_file.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.menu.sub.more.png (964 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\WEBM.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\window_expand.png (22 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.shadow.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avresample-lav-2.dll (161 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\avi.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_playlist_bubble.xml (306 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.logo.png (256 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdlog.dll (39 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.png (973 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_tray.xml (880 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.body.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_basic.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.tools.topmost.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.channel2.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\window_ask.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\Player.ico (173 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xUpdate.exe (999 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ASS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\no.png (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\ts.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\style.xml (12 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.caption.png (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.file.png (930 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main_playwnd.xml (106 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFVideo.ax (983 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFSplitter.ax (500 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_play.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.open.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.highlight.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.logo.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.setting.bg.v.png (931 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOV.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe (1923 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\FLVSplitter.ax (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playlist.png (166 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\FFAudio.ax (266 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\wmv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\AudioSwitcher.ax (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.volume.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M4V.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\MOD.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.menu.item.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_hotkey.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\style.xml (331 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.timebk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\update_check.png (19 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.row.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\pva.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\f4v.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playlist.separation.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.ok.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\TPS.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDWebcore.dll (780 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.2.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\imglist.setting.checkbox.partselect.png (412 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.play.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avutil-lav-54.dll (431 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playcontroller.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\tp.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\progress_front.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.channel2.png (176 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_messagebox.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avformat-lav-56.dll (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\BDUnInstall.exe (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpg.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxplayer.dll (70 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_playlist.xml (4 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.option.unselect.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.exit.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\M2P.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\effect.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\OnlineVideo.ini (73 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.playlist.caption.png (249 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_tools.xml (516 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.line.png (924 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images.xml (20 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.volume.open.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.main.tools.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\scroll.v.playlist.thumb.png (299 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_hotkey_file.xml (942 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.main.audio.logo.png (251 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\progress_bk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\VSFilter.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mpeg.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.thumbnail.arrow.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avcodec-lav-56.dll (780 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\SWF.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.min.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.about.png (29 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_main.xml (10 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.setting.2.png (955 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DIVX.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.imageadjust.thumb.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_update.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\xmanager.dll (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.messagebox.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\bpc.ico (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\menu_player.xml (8 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\tab_setting_subtitle.xml (719 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_about.xml (825 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\codecs\real\drvc.dll (275 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.player.png (161 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_image_adjust.xml (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\swscale-lav-3.dll (481 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.screen.thumbnail.picbk.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.setting.tab.png (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mkv.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\rm.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\skin.xml (17 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\bsed.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\filters.xml (11 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_main_mask.xml (2 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\window_thumbnail.xml (536 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bdxlogic.dll (158 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.playcontroller.pause.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport.exe (189 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.imageadjust.reset.png (3 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\bg.messagebox.line.png (947 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\slider.playcontroller.thumb.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\icon.menu.select.png (268 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\images\btn.sys.close.png (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\avfilter-lav-5.dll (189 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\mp4.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\icon\DAT.ico (26 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\update\latest_version.png (15 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\OpenMediaUrl.exe (1 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\res\themes\default\MediaUrlHelp\images\bk.png (9 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\bugreport_Update.ini (255 bytes)
%Program Files%\baidu\BDPlayer\5.1.1.9\libbluray.dll (254 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\theme.png (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game.png (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\js\base.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\search.js (1 bytes)
%Program Files%\Tencent\QQBrowser\MouseGesture.dll (56 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_sogou.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\inforBar.html (800 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#app.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\del2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\history2.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\homepage.db (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\init.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\sliderman.1.3.7.js (19 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\tab_bg_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\PerfTraceService.exe (2934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcm90.dll (2129 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\blue.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\7z.exe (1209 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\down.png (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\screen.css (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\background.html (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\style.css (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\atbk2.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00DFF21-511E-4249-BCB9-EECC370D796B} (430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_google.png (919 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Resource.dll (1365 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\text_light.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\TarF22B.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\reader.html (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\QBSafe.dll (454 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\whitelist.ze (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_blank.png (5 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_offlineurl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (21 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\default-icon.png (1 bytes)
%Program Files%\Tencent\QQBrowser\navi.ico (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\init.js (4 bytes)
%Program Files%\Tencent\QQBrowser\QBExtensionFramework.dll (3918 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\init.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___tq.qq.com_qbrcenter_index.html_adtag=8gongge.jpg (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.3366.com__ADTAG=cop.QQbrowser.8new.jpg (16 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\tssafeedit.dat (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{3E9C7A5B-D249-4C28-A451-53E1024AD354} (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\reader.html (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\small.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\screen.css (14 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\background.js (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\css\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (571 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7B8944BA8AD0EFDF0E01A43EF62BECD0_374AF031F22A1FC086DCBA0C50021437 (696 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_baidu.png (870 bytes)
C:\Users\"%CurrentUserName%"\Desktop\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account\down.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\index.html (1 bytes)
%Program Files%\Tencent\QQBrowser\service\xperf.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\qqbrowser_home.jpg (14 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_ceil.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\index.html (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\manifest.json (261 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_bing.png (442 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}.qrx (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\icon_not_recommended.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\css\base.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\bkg.gif (22 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcp90.dll (3934 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcr90.dll (4185 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___www.3366.com__ADTAG=cop.QQbrowser.8new.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\icon_suggested_action.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\hse.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\down.png (960 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\image.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___www.qq.com__pgv_ref=qqBrowserPC.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\plugin1.png (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\css\ycalendar.css (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\night.png (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___s.click.taobao.com_khr1bAy.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\accountInfo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\TridentCore.dll (9754 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\shadow-bottom.png (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\business.js (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (448 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\random.db (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\green.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#history.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\inforBar.html (800 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowser.exe (723 bytes)
%Program Files%\Tencent\QQBrowser\QRCode.dll (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\QBUtils.dll (12336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\manifest.json (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\BugReport.exe (7256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\bkg.gif (22 bytes)
%Program Files%\Tencent\QQBrowser\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\accountInfo.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\wbg.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowser.exe (1661 bytes)
%Program Files%\Tencent\QQBrowser\service\perfctrl.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Dialogs.dll (7385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\icon.fw.png (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\7z.exe (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3E9C7A5B-D249-4C28-A451-53E1024AD354} (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{ACC06D2A-2285-4ed9-B4E4-0F3198501410}.qrx (12 bytes)
%Program Files%\Tencent\QQBrowser\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QQBrowserLiveup.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QRCode.dll (31 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (16 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\sogou_web.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\site_text.png (5 bytes)
%Program Files%\Tencent\QQBrowser\resources.pri (3 bytes)
%Program Files%\Tencent\QQBrowser\Downloader.dll (3073 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___speed.qq.com_act_a20141103plan_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\MouseGesture.dll (872 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{B00DFF21-511E-4249-BCB9-EECC370D796B} (430 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\wbg.png (136 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___browser.qq.com_new_wechat1.0.html_type=1.jpg (10 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\icon_not_recommended.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\license.txt (17 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\homepage.db (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#app.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (244 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\history.db (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\atbk1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\css\ycalendar.css (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\Private-icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\background.html (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\qqtrack.xml (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\up-down.png (999 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{7E2975A3-E661-42F2-8614-A9D18CBB20FE}.qrx (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\addressbar_white.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___qzone.qq.com_.jpg (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\addressbar_blank.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\yellow.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\index.ini (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\checkbox.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\down.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\installed_arrow.png (176 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\event\bg.png (28 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\js\inforBar.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\css\style.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{00000000-0000-0000-0000-000000000000}\jquery.js (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\init.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\skin\LightStripes.gt (94 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{E5914276-7752-43C4-9723-50EE9CF51AD8}.qrx (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\nsis_skin.gt (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\content.js (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\index.html (86 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bggradient_day.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\del.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_blank_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_fav.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\search.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\{43789A6F-8316-54A6-96D4-87874B9CC177} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\app.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\small_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\js\inforBar.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\large_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin1.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\QBUtils.dll (12287 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\small.html (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.easing.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\resources.pri (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_login.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\hse.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\QQTrace.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\icon_suggested_action.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_fav.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\sliderman.1.3.7.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\search.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\site_text.png (5 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_toast_locked.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\search_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{6970B802-2F13-4038-B620-33B0211D26A0} (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\pixel.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\pixel.gif (43 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\text_light.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}_1\manifest.json (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_suggested_action.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.easing.js (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
%Program Files%\Tencent\QQBrowser\BugReport.exe (2321 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account\down.png (971 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\event\bg.png (28 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\qqbrowser_home.jpg (14 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{3349050F-829E-4bb2-AACF-03E3A6B68677} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\search.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Downloader.dll (4010 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\loading.gif (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\large_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme_ie.png (15 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\history2.js (21 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\ycalendar.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\small.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\atbk1.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\certerror.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{CAA4306F-826C-4c1b-8FC6-571F84949DB4} (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_game_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{3349050F-829E-4bb2-AACF-03E3A6B68677} (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_toast_unlocked.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\blue.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546}\extplayer.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}.qrx (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Assistant.dll (6284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\hse.png (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\template.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_recommendcelltag_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\css\history.css (8 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\msvcm90.dll (1281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\msvcp90.dll (3361 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\NetWork.dll (2602 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_google.png (919 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\search_btn.png (1 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserLiveup.exe (1425 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã¤Â¸Å Ã§Â½â€˜Ã¥Â¯Â¼Ã¨Ë†Âª.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\pixel.gif (43 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\bggradient_day.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\default-icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\Desktop\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\Private-icon.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (12 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Video\vd.ini (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\tool.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\xperf.exe (5001 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_normal.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{132A61AD-1025-4629-960D-B21EE8BAABB3}.qrx (17 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\init.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\UserPinnedTemp\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\close.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\tab_bg_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___qzone.qq.com_.jpg (12 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\security.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\css\ycalendar.css (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\searchbar_searchengine_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBExtensionFramework.dll (3766 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\sogou_web.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\js\init.js (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\history.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\down.png (960 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\WebpDecodeFilter.dll (2128 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{6970B802-2F13-4038-B620-33B0211D26A0} (99 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\skin_selected_blank.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\pink.png (716 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\pink.png (716 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\large_installed_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\PrScrn.dll (1281 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_bing.png (442 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\video\vd.ini (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\gray.png (501 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\dr.dll (864 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\imgSearch.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ã¨â€¦Â¾Ã¨Â®Â¯Ã¨Â½Â¯Ã¤Â»Â¶\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\navi.ico (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\tssafeedit.dat (41 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\global.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\HomePage\0\website\bgsearch_day.jpg (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\css\style.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\del2.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\articlecontent.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserFrame.dll (13493 bytes)
%Program Files%\Tencent\QQBrowser\uninst.exe (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\css\style.css (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\css\style.css (6 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\account_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\EventTracing.dll (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\yellow.png (626 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{0508DF1F-2AB6-4fac-A99E-45BBBF24E1E6}\8.0.0.12\manifest.json (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\css\articlecontent.css (12 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\imgSearch.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___s.click.taobao.com_khr1bAy.jpg (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js\injectReader.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\sliderman.1.3.7.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_active_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QBUtils.dll (17689 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\{B00D20E2-207A-431A-9712-E1279792681B} (89 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\icon.png (487 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\gray.png (501 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ã¨â€¦Â¾Ã¨Â®Â¯Ã¨Â½Â¯Ã¤Â»Â¶\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Adblock\mainlist.ze (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_normal.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_selected_white_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\error.html (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\history2.js (21 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\PrScrn.dll (2517 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\picker_ceil.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\css\style.css (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\del.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\small.png (2 bytes)
%Program Files%\Tencent\QQBrowser\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\app.js (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___speed.qq.com_act_a20141103plan_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\accountInfoBar.html (794 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\icon.fw.png (8 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
%Program Files%\Tencent\QQBrowser\QQBrowserSecurityCenter.exe (673 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\closeBtnSearchbar.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\icon.png (487 bytes)
%Program Files%\Tencent\QQBrowser\service\qqtrack.xml (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\theme.png (25 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\QQTrace.ini (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\nsis_skin.gt (106 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\index.html (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\lock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\tab_bg_white.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\js\business.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\https___mail.qq.com_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#history.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\manifest.json (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\default-icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\theme.png (25 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\green.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin2.png (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_baidu.png (870 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_recommendcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\uninst.exe (3649 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\css\base.css (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_close_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\qblogo.png (868 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_soso.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_login.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\~QÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.tmp (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_active_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\ycalendar.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (364 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\small_installed_arrow.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcr90.dll (8224 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\js\base.js (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\template.js (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\atbk2.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\shadow-bottom.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\qqtrack.xml (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{B00D20E2-207A-431A-9712-E1279792681B} (89 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\js\injectReader.js (19 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserSecurityCenter.exe (2015 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\image.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{CD36E3DB-304A-48EF-A8A2-D873F608D2AE}.qrx (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\jquery.mCustomScrollbar.concat.min.js (37 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (39 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_cancel_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\up-down.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\quicklink_newcelltag.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\search_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\css\history.css (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\https___mail.qq.com_.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Thumb\http___www.qq.com__pgv_ref=qqBrowserPC.jpg (16 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\icon_not_recommended.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\{CAA4306F-826C-4c1b-8FC6-571F84949DB4} (6 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_sogou.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\site_text.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\private.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\mainlist.ze (29 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\app_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\plugin1.png (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_sogou.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\service\perfctrl.dll (3447 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\images\searchlogo_24_baidu.png (870 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\small_installed_arrow.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\css\app.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_hover_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.min.js (92 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\DB\random.db (10 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\jquery.mCustomScrollbar.css (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{B9C6ADA1-8B36-4c8d-97E5-1F89AE3A5341}\images\night.png (546 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcp90.dll (3934 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\favicon\index.html#app.ico (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\index.html (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\CustomerJoinPlan.txt (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\bkg.gif (22 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\index.ini (16 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\text_light.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\EventTracing.dll (1326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\db\history.db (108 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\searchlogo_24_bing.png (442 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#skin.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\thumb\http___tq.qq.com_qbrcenter_index.html_adtag=8gongge.jpg (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\lib\jquery.easing.js (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\warn-dialog-close.png (295 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\history\img\up-down.png (999 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\css\style.css (11 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\skin\picker_floor.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\favicon\index.html#account.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\lock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\delete_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\arrowdown.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\history.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\delete_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\security.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\private.html (3 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\skin_selected_white.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{C74EB4B8-B51A-4BF7-A213-E29859D69D83}.qrx (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\global.js (394 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6 (404 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\api.js (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\images\searchlogo_24_google.png (919 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\Private-icon.png (3 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_active.png (1 bytes)
%Program Files%\Tencent\QQBrowser\service\PerfTraceService.exe (1707 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\QQBrowserLiveup.exe (3502 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\content.js (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\lib\template.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\arrowdown_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\css\history.css (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\qqtrack.xml (7 bytes)
%Program Files%\Tencent\QQBrowser\Infobar\image\infobar_close_hover.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\app\images\uninstallBtn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\close.png (1 bytes)
%Program Files%\Tencent\QQBrowser\skin\LightStripes.gt (601 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Adblock\whitelist.ze (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\theme_ie.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\event\bg.png (28 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_floor_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\delete.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\grid\unlock_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_offlineurl.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}\8.0.0.25\image\infobar_close_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Microsoft.VC90.CRT\msvcp90.dll (6900 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\js\business.js (9 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\skin_mask.png (923 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\history.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\skin\theme_ie.png (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Liveup\Temp\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\7B8944BA8AD0EFDF0E01A43EF62BECD0_374AF031F22A1FC086DCBA0C50021437 (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\manifest.json (5 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\quicklink_newcelltag_ie.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\app\images\plugin3.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game_active.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Dialogs.dll (10771 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\small.html (2 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\addressbar_blank.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\grid\arrowdown_hover_ie.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\private.html (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\lib\ycalendar.js (4 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manifest.json (197 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{309147A1-5CA9-4082-BAB3-BF9020CDE0C2}_1\accountInfoBar.html (794 bytes)
%Program Files%\Tencent\QQBrowser\Resource.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\default.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\QQÃ¦ÂµÂÃ¨Â§Ë†Ã¥â„¢Â¨.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CabF22A.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\js\search.js (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\skin\picker_ceil_hover.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\homepage\0\website\bgsearch_day.jpg (4 bytes)
%Program Files%\Tencent\QQBrowser\app.ico (284 bytes)
%Program Files%\Tencent\QQBrowser\Html\images\shadow-bottom.png (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\js\business.js (8 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{A1D7EDF6-6151-4F2D-B39E-01D6FABE0325}.qrx (19 bytes)
%Program Files%\Tencent\QQBrowser\QBUtils.dll (12336 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\QBInstaller.dll (1275 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\quickaccess\img\dock_game_active.png (3 bytes)
%Program Files%\Tencent\QQBrowser\NetWork.dll (673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\Config.xml (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\history\img\del.png (1 bytes)
%Program Files%\Tencent\QQBrowser\TridentCore.dll (7345 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}.qrx (2105 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\history\img\atbk1.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\img\app.png (1 bytes)
%Program Files%\Tencent\QQBrowser\Html\manage\favicon\index.html#history.ico (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\quickaccess\img\dock_game.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\bin\Infobar\image\infobar_close_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\InstModules\Microsoft.VC90.CRT\msvcr90.dll (4840 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\{5062F1C6-D76B-43c8-ADAE-D060662C6546}\extplayer.js (30 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\grid\unlock.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\img\account_active.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\Temp\{807849B3-40D8-42E3-8001-D541FD7CEBFB}_1\Html\manage\app\images\wifi_dialog_continue_btn.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\account\up.png (971 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\12au6a025\appdata\Extensions8\Temp\{44A126BF-51C2-48AD-A593-94B50071EB64}.qrx (39 bytes)
%Program Files%\Tencent\QQBrowser\Html\quickaccess\img\dock_video_hover.png (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Tencent\QQBrowser\Extensions8\{807849B3-40D8-42E3-8001-D541FD7CEBFB}\8.0.3.25\Html\manage\img\close.png (1 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5\Ã¥ÂÂ¸Ã¨Â½Â½Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (4 bytes)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Baidu\BDPlayer\conf\TaskBar\Ã§â„¢Â¾Ã¥ÂºÂ¦Ã¥Â½Â±Ã©Å¸Â³5.lnk (2 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDPlayer_AutoRun" = "%Program Files%\baidu\BDPlayer\5.1.1.9\BDPlayerTray.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.GenericKD.3018359_93e8ea94ab

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.GenericKD.3018359_93e8ea94ab

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet