用户服务中心

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

CN

RU CN DE EN ES FR IT JP KZ UZ PL BY
Close
服务
扫描仪
Dr.Web vxCube
试用
计算机病毒事件调查
病毒知识库
知识库

技术

术语

教育培训

误区

新闻

Trojan.DownLoader26.50866

Added to the Dr.Web virus database: 2018-06-14

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\B5TService] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\B5TService] 'ImagePath' = '<LS_APPDATA>\B5T\Share\B5TService.exe'
Malicious functions:
Terminates or attempts to terminate
the following user processes:
  • chrome.exe
Modifies file system:
Creates the following files:
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\search.jpg
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\setting_chrome.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\setting.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • <LS_APPDATA>\B5T\Plugin\NaMsgHost\com.b5t.chrome.namsg.b5t-win.json
  • <LS_APPDATA>\B5T\Plugin\NaMsgHost\B5TAdaptorFx.dll
  • <LS_APPDATA>\B5T\Plugin\NaMsgHost\B5TAdaptorChrm.exe
  • <LS_APPDATA>\B5T\Plugin\sites.dat
  • <LS_APPDATA>\B5T\Plugin\npB5TPlugin64.dll
  • <LS_APPDATA>\B5T\Plugin\npB5TPlugin.dll
  • <LS_APPDATA>\B5T\Plugin\B5TShoppingAssistant64.dll
  • <LS_APPDATA>\B5T\Plugin\B5TShoppingAssistant.dll
  • <LS_APPDATA>\B5T\Share\B5TService.exe
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • <LS_APPDATA>\B5T\6.0.3\Extensions\ChromeCore\setting_360.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\B5TShoppingAssistant.crx
  • <LS_APPDATA>\B5T\6.0.3\Extensions\B5TShoppingAssistant.mxaddon
  • <LS_APPDATA>\B5T\6.0.3\B5TShoppingAssistant.dll
  • <LS_APPDATA>\B5T\6.0.3\B5TService.exe
  • <LS_APPDATA>\B5T\6.0.3\B5TPopup.exe
  • <LS_APPDATA>\B5T\6.0.3\b5tconfig.xml
  • <LS_APPDATA>\B5T\6.0.3\B5TClient.exe
  • <LS_APPDATA>\B5T\6.0.3\B5TChecker.exe
  • <LS_APPDATA>\B5T\6.0.3\B5TAssist.exe
  • <LS_APPDATA>\B5T\6.0.3\resource\wtl.exe.manifest
  • <LS_APPDATA>\B5T\6.0.3\resource\whiteBK.png
  • <LS_APPDATA>\B5T\6.0.3\resource\trayShowWindow.png
  • <LS_APPDATA>\B5T\6.0.3\B5TUninstall.exe
  • <LS_APPDATA>\B5T\6.0.3\resource\traySetting.png
  • <LS_APPDATA>\B5T\6.0.3\resource\trayMin.png
  • <LS_APPDATA>\B5T\6.0.3\resource\trayExit.png
  • <LS_APPDATA>\B5T\6.0.3\resource\trayAbout .png
  • <LS_APPDATA>\B5T\6.0.3\resource\tabBK.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\share.png
  • <LS_APPDATA>\B5T\6.0.3\resource\searchIcon.jpg
  • <LS_APPDATA>\B5T\6.0.3\resource\searchEditBK.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\update_text_bk.jpg
  • <LS_APPDATA>\B5T\ServerConfig.ini
  • <LS_APPDATA>\B5T\6.0.3\B5TUpdate.exe
  • %TEMP%\2e72a\UninstMgr.exe
  • %TEMP%\2e72a\MainConfig.ini
  • %TEMP%\2e72a\B5TAssist.exe
  • %HOMEPATH%\Start Menu\Programs\帮5淘\帮5淘桌面版.lnk
  • %HOMEPATH%\Start Menu\Programs\帮5淘\卸载帮5淘.lnk
  • %HOMEPATH%\Start Menu\Programs\帮5淘\帮5淘使用攻略.lnk
  • %HOMEPATH%\Start Menu\Programs\帮5淘\帮5买官方首页.lnk
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\b5t.modules@b5t\B5TAdaptorFx.dll
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\extension@b5m.com.json
  • <LS_APPDATA>\B5T\6.0.3\resource\search.jpg
  • <LS_APPDATA>\B5T\6.0.3\B5TShoppingAssistant64.dll
  • <LS_APPDATA>\B5T\6.0.3\帮5买官方首页.url
  • <LS_APPDATA>\B5T\6.0.3\UninstMgr.exe
  • <LS_APPDATA>\B5T\6.0.3\sites.dat
  • <LS_APPDATA>\B5T\6.0.3\resconfig.dll
  • <LS_APPDATA>\B5T\6.0.3\npB5TPlugin64.dll
  • <LS_APPDATA>\B5T\6.0.3\npB5TPlugin.dll
  • <LS_APPDATA>\B5T\6.0.3\merchantPic.xml
  • <LS_APPDATA>\B5T\6.0.3\logo.ico
  • <LS_APPDATA>\B5T\6.0.3\chrm.exe
  • <LS_APPDATA>\B5T\6.0.3\帮5淘使用攻略.url
  • <LS_APPDATA>\B5T\6.0.3\BugReport.exe
  • <LS_APPDATA>\B5T\6.0.3\resource\remindQue.png
  • <LS_APPDATA>\B5T\6.0.3\resource\remindlogo.png
  • <LS_APPDATA>\B5T\6.0.3\resource\remindDetail.png
  • <LS_APPDATA>\B5T\6.0.3\resource\bubble\bubble_close.png
  • <LS_APPDATA>\B5T\6.0.3\resource\AppMini.png
  • <LS_APPDATA>\B5T\6.0.3\resource\Applogo.png
  • <LS_APPDATA>\B5T\6.0.3\resource\AppClose.png
  • <LS_APPDATA>\B5T\6.0.3\resource\aboutBG.png
  • <LS_APPDATA>\B5T\6.0.3\resource\mini\skin1\setting.json
  • <LS_APPDATA>\B5T\6.0.3\resource\mini\skin1\min.png
  • <LS_APPDATA>\B5T\6.0.3\resource\mini\skin1\close.png
  • <LS_APPDATA>\B5T\6.0.3\resource\mini\skin1\chkbox.png
  • <LS_APPDATA>\B5T\B5TMain.exe
  • <LS_APPDATA>\B5T\6.0.3\resource\bg.png
  • <LS_APPDATA>\B5T\6.0.3\resource\bubble\bubble_bk2.png
  • <LS_APPDATA>\B5T\6.0.3\resource\bubble\bubble_bk1.png
  • <LS_APPDATA>\B5T\6.0.3\NaMsgHost\com.b5t.chrome.namsg.b5t-win.json
  • <LS_APPDATA>\B5T\6.0.3\NaMsgHost\B5TAdaptorFx.dll
  • <LS_APPDATA>\B5T\6.0.3\NaMsgHost\B5TAdaptorChrm.exe
  • <LS_APPDATA>\B5T\6.0.3\Extensions\Firefox.json
  • <LS_APPDATA>\B5T\6.0.3\Extensions\B5TShoppingAssistantNativeMsg.crx
  • <LS_APPDATA>\B5T\6.0.3\Extensions\B5TShoppingAssistant.xpi
  • <LS_APPDATA>\B5T\6.0.3\Extensions\B5TShoppingAssistant.sext
  • <LS_APPDATA>\B5T\6.0.3\resource\mini\skin1\bg.png
  • <LS_APPDATA>\B5T\6.0.3\resource\find_update.png
  • <LS_APPDATA>\B5T\6.0.3\resource\bg_setting.png
  • <LS_APPDATA>\B5T\6.0.3\resource\check_box.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\bg_unbk.png
  • <LS_APPDATA>\B5T\6.0.3\resource\remindClose.png
  • <LS_APPDATA>\B5T\6.0.3\resource\remindBkBig.png
  • <LS_APPDATA>\B5T\6.0.3\resource\remindBk.png
  • <LS_APPDATA>\B5T\6.0.3\resource\progressUnBk.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\progressBk.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\phone.png
  • <LS_APPDATA>\B5T\6.0.3\resource\orangeButtonBK.png
  • <LS_APPDATA>\B5T\6.0.3\resource\orangeBK.png
  • <LS_APPDATA>\B5T\6.0.3\resource\checkstop.png
  • <LS_APPDATA>\B5T\6.0.3\resource\min.png
  • <LS_APPDATA>\B5T\6.0.3\resource\AppSet.png
  • <LS_APPDATA>\B5T\6.0.3\resource\exitDlgBK.png
  • <LS_APPDATA>\B5T\6.0.3\resource\editBK.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\Demo3.png
  • <LS_APPDATA>\B5T\6.0.3\resource\Demo2.png
  • <LS_APPDATA>\B5T\6.0.3\resource\Demo1.png
  • <LS_APPDATA>\B5T\6.0.3\resource\close.png
  • <LS_APPDATA>\B5T\6.0.3\resource\choose.png
  • <LS_APPDATA>\B5T\6.0.3\resource\check_box3.bmp
  • <LS_APPDATA>\B5T\6.0.3\resource\jspopclose.png
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\extension@b5m.com.xpi
  • <LS_APPDATA>\B5T\MainConfig.ini
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TUninstall.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\find_update.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\exitDlgBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\exitDlgBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\downArrow.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo3.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\jspopclose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\min.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\share.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindQue.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindDetail.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindClose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindBkBig.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindBk.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\phone.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\orangeButtonBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\orangeButtonBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\orangeBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\orangeBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\min.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo2.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo1.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\b5t_setup_bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppSet.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppMini.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Applogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppClose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\aboutBG.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\update_text_bk.jpg
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\searchIcon.jpg
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg_setting.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg_unbk.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\choose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\chkbox.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\checkstop.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_bk1.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_bk2.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\btn_white.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\btn_installing.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayAbout .png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\setting.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\setting.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Firefox.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\com.b5t.chrome.namsg.b5t-win.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\setting_chrome.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\sites.dat
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistantNativeMsg.crx
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.crx
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • %ALLUSERSPROFILE%\B5TTmp\files.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\npB5TPlugin64.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.mxaddon
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\npB5TPlugin.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TShoppingAssistant64.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TShoppingAssistant.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\B5TAdaptorFx.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\UninstMgr.exe
  • %ALLUSERSPROFILE%\B5TTmp\chrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\chrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\BugReport.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TUpdate.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\setting_360.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TPopup.exe
  • %ALLUSERSPROFILE%\B5TTmp\B5TMain.exe
  • %ALLUSERSPROFILE%\B5TTmp\B5TInstall.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TClient.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TChecker.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TAssist.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\B5TAdaptorChrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\帮5淘使用攻略.url
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\帮5买官方首页.url
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TService.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.sext
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\check_box.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollArrowUp.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollArrowDown.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\progressUnBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\progressUnBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\progressBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\progressBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\editBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\check_box3.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resconfig.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\searchEditBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\whiteBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\whiteBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\upArrow.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayShowWindow.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\traySetting.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayMin.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayExit.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\check_box.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\srollBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.xpi
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\tabBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\logo.ico
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollBar.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\merchantPic.xml
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\b5tconfig.xml
  • %ALLUSERSPROFILE%\B5TTmp\resource\wtl.exe.manifest
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\wtl.exe.manifest
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • <LS_APPDATA>\B5T\UserConfig.ini
Deletes the following files:
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TAssist.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\check_box.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\check_box3.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\choose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo1.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo2.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Demo3.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\editBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\npB5TPlugin.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\exitDlgBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\jspopclose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\min.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\chkbox.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\min.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\mini\skin1\setting.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\orangeBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_close.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\checkstop.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_bk2.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bubble\bubble_bk1.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg_unbk.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\setting.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\setting_360.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Firefox.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\logo.ico
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\merchantPic.xml
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\B5TAdaptorChrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\B5TAdaptorFx.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\orangeButtonBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\find_update.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\NaMsgHost\com.b5t.chrome.namsg.b5t-win.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resconfig.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\aboutBG.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppClose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\Applogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppMini.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\AppSet.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\bg_setting.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\npB5TPlugin64.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\phone.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\progressBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\progressUnBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\B5TMain.exe
  • %ALLUSERSPROFILE%\B5TTmp\chrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\files.json
  • %ALLUSERSPROFILE%\B5TTmp\resource\b5t_setup_bg.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\btn_installing.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\btn_white.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\check_box.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\close.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollArrowDown.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollBar.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\srollBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\downArrow.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\exitDlgBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\orangeBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\orangeButtonBK.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\progressBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\progressUnBk.bmp
  • %ALLUSERSPROFILE%\B5TTmp\resource\upArrow.png
  • %ALLUSERSPROFILE%\B5TTmp\resource\whiteBK.png
  • %ALLUSERSPROFILE%\B5TTmp\B5TInstall.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\tabBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\帮5淘使用攻略.url
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\share.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindBk.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindBkBig.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindClose.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindDetail.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\remindQue.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\search.jpg
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\searchEditBK.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\searchIcon.jpg
  • %ALLUSERSPROFILE%\B5TTmp\resource\wtl.exe.manifest
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\UninstMgr.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayAbout .png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayExit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayMin.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\traySetting.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\trayShowWindow.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\update_text_bk.jpg
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\whiteBK.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\resource\wtl.exe.manifest
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\sites.dat
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\帮5买官方首页.url
  • %ALLUSERSPROFILE%\B5TTmp\resource\DirectUI\scrollArrowUp.bmp
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\chrm.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\shezhi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TClient.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\b5tconfig.xml
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TPopup.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TService.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TShoppingAssistant.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TShoppingAssistant64.dll
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TUninstall.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TUpdate.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\BugReport.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.mxaddon
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.sext
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.xpi
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistantNativeMsg.crx
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\B5TChecker.exe
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\B5TShoppingAssistant.crx
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_32.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_48.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_64.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\b5m-icons.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\mlogo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\qukankan.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\selected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\top-bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\images\unselected.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\jquery-1.7.1.min.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\js\tinyScrollbar.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\background.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\contentscript.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_24.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_19.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\setting_chrome.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\manifest.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\notification.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\views\popup.js
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\en\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\Chrome\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\_locales\zh_CN\messages.json
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\options.html
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_128.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\b5m-plugin-ng.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg-8bit.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\bg.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-b5t.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi-focused.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\btn-kuaidi.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\images\co-logo.png
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\css\popup.css
  • %ALLUSERSPROFILE%\B5TTmp\6.0.3\Extensions\ChromeCore\nklfajnmfbchcceflgddnkignfheooic\6.0.3_0\assets\icons\icon_16.png
  • %TEMP%\2e72a\UninstMgr.exe
Moves the following files:
  • from %TEMP%\2e72a\UninstMgr.exe to %TEMP%\2e72a\UninstMgr.exe.tmp2fe1d
Network activity:
Connects to:
  • 'p.##m.com':80
  • 'rp#.#.b5m.com':80
TCP:
HTTP GET requests:
  • http://p.##m.com/plugin.do?me#####################################################################################
  • http://p.##m.com/plugin.do?me################################
  • http://p.##m.com/plugin.do?&d####################################################################################################################################################################...
  • http://p.##m.com/plugin.do?me###################################################################################
  • http://p.##m.com/plugin.do?me#############################################################################
HTTP POST requests:
  • http://rp#.#.b5m.com/dau.php
UDP:
  • DNS ASK p.##m.com
  • DNS ASK rp#.#.b5m.com
Miscellaneous:
Creates and executes the following:
  • '%ALLUSERSPROFILE%\B5TTmp\B5TInstall.exe' 119
  • '<LS_APPDATA>\B5T\Share\B5TService.exe'
  • '<LS_APPDATA>\B5T\6.0.3\B5TChecker.exe' ComDet
  • '%TEMP%\2e72a\UninstMgr.exe' PATH=%ALLUSERSPROFILE%\B5TTmp
Executes the following:
  • '<SYSTEM32>\regsvr32.exe' /s "<LS_APPDATA>\B5T\Plugin\B5TShoppingAssistant.dll"
  • '<SYSTEM32>\regsvr32.exe' /s "<LS_APPDATA>\B5T\Plugin\npB5TPlugin.dll"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play
Wechat