Trojan.Siggen18.30527

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'kxesc' = '"%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxetray.exe" -autorun'

Sets the following service settings

[<HKLM>\System\CurrentControlSet\Services\kxescore] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\ksapi64] 'ImagePath' = '<DRIVERS>\ksapi64.sys'
[<HKLM>\System\CurrentControlSet\Services\ksapi64] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\kisnetm] 'ImagePath' = '%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64.sys'
[<HKLM>\System\CurrentControlSet\Services\kisnetm] 'Start' = '00000001'
[<HKLM>\SYSTEM\ControlSet002\services\kisknl] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet002\services\kisknl] 'ImagePath' = '<DRIVERS>\kisknl.sys'
[<HKLM>\SYSTEM\ControlSet001\services\kisknl] 'Start' = '00000002'
[<HKLM>\SYSTEM\ControlSet001\services\kisknl] 'ImagePath' = '<DRIVERS>\kisknl.sys'
[<HKLM>\System\CurrentControlSet\Services\kisknl] 'ImagePath' = '<DRIVERS>\kisknl.sys'
[<HKLM>\System\CurrentControlSet\Services\kisknl] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\kisnetflt] 'ImagePath' = '%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys'
[<HKLM>\System\CurrentControlSet\Services\kisnetflt] 'Start' = '00000002'
[<HKLM>\SYSTEM\CurrentControlSet\Services\KDHacker] 'Start' = '00000001'
[<HKLM>\SYSTEM\CurrentControlSet\Services\KDHacker] 'ImagePath' = '%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys'
[<HKLM>\System\CurrentControlSet\Services\kxescore] 'ImagePath' = '"%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore'
[<HKLM>\System\CurrentControlSet\Services\KAVBootC] 'Start' = '00000000'
[<HKLM>\System\CurrentControlSet\Services\KAVBootC] 'ImagePath' = 'system32\Drivers\KAVBootC64.sys'

Creates the following services

'kxescore' "%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe" /service kxescore
'KDHacker' %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys
'kisnetflt' %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys
'kisknl' <DRIVERS>\kisknl.sys
'kisnetm' %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64.sys
'ksapi64' <DRIVERS>\ksapi64.sys
'KAVBootC' <DRIVERS>\KAVBootC64.sys

Malicious functions

Registers file system filter

[<HKLM>\System\CurrentControlSet\Services\kisknl] 'Group' = 'FSFilter Anti-Virus'
[<HKLM>\System\CurrentControlSet\Services\ksapi64] 'Group' = 'FSFilter Anti-Virus'

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\kingsoft\kis\hg.dat
%ALLUSERSPROFILE%\kingsoft\kis\kich\4648-a0b69176-62e865e7-260.ich
%ALLUSERSPROFILE%\kingsoft\kis\kich\4648-f8da28b7-62e865e7-270.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcuploadinfo.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcuploadinfo.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcdetect.dll.log
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwctrl2_1.che
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dps.dat-journal
%ALLUSERSPROFILE%\kingsoft\kis\kich\config\duba_popcenter_startup.dat
%WINDIR%\temp\uddcfcc.tmp
%ALLUSERSPROFILE%\kingsoft\kis\kich\4647-be03b522-62e865e7-231.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dps.dat
%ALLUSERSPROFILE%\kingsoft\kis\kich\4647-a8adcd14-62e865e7-241.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfps.dat-journal
%ALLUSERSPROFILE%\kingsoft\kis\kich\1942-2a5afbb3-62e865e8-1b1.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kfloatwin.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\user.ini
%ALLUSERSPROFILE%\kingsoft\kis\kich\4692-26646806-62e865ec-268.ich
%ALLUSERSPROFILE%\kingsoft\kis\kich\4035-6247f63e-62e865eb-c3.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\kadblockcfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\userinterconf.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\interrecodr.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\interrecodr.db
%ALLUSERSPROFILE%\kingsoft\kis\kich\1942-538418b3-62e865e8-135.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\newcitys.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfps.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kavbootc64_ev.sys
%ALLUSERSPROFILE%\kingsoft\kis\kich\4647-8196d897-62e865e7-231.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\quarantine.count
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\金山毒霸\金山毒霸.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\金山毒霸\卸载金山毒霸.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\金山毒霸\访问官方网站.lnk
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\desktop.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxetray.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatwinsetting.ini
%ALLUSERSPROFILE%\kingsoft\kis\kich\4648-c74f4502-62e865df-23e.ich
%APPDATA%\kingsoft\duba\pophistory\pophistory.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\fdsdcache.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kslaunch.exe
%ALLUSERSPROFILE%\kingsoft\kis\kich\5789-3ba7b691-62e865df-24e.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\shrink_skin_history.ini
%ALLUSERSPROFILE%\kingsoft\kis\kich\4648-a9a1ba0f-62e865e2-323.ich
%APPDATA%\kingsoft\duba\persona\persona.db-journal
%APPDATA%\kingsoft\duba\persona\persona.db
%ALLUSERSPROFILE%\kingsoft\kis\kws\dfcache.dat
%ALLUSERSPROFILE%\kingsoft\kis\kws\urlcache.dat
%ALLUSERSPROFILE%\kingsoft\kis\kich\3956-c30cdf53-62e865e6-8c.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\webui\icon\btbg.gif
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\fdsdcache.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\scache.dat
%APPDATA%\kingsoft\duba\pophistory\pophistory.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kislive.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdehuser.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kws_init.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\cityupdateinfo.ini
%TEMP%\~ee7de\res\10002.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\ksdectrl_trace.log
%TEMP%\~ee7de\installconfig.xml
%ProgramFiles(x86)%\khealtheye\data\popup\2f6938b1d3bf1282d0dedc0f3f8c9a80.png
%ProgramFiles(x86)%\khealtheye\data\popup\4f8de7323566a1204da40d40695dcd32.png
%ProgramFiles(x86)%\khealtheye\data\popup\acdd67bbdeae4300c8106cb8beeb03e6.png
%ProgramFiles(x86)%\khealtheye\data\popup\e57ac4487de2ddc6f95fa4253fd1f777.png
%ProgramFiles(x86)%\khealtheye\keyeprotect.ico
%ProgramFiles(x86)%\khealtheye\microsoft.vc80.crt.manifest
%ProgramFiles(x86)%\khealtheye\microsoft.vc80.mfc.manifest
%TEMP%\~ee7de\res\10001.xml
%ProgramFiles(x86)%\khealtheye\ressrc\chs\citys.xml
%ProgramFiles(x86)%\khealtheye\data\config.dat
%TEMP%\~ee7de\res\11004.xml
%ProgramFiles(x86)%\khealtheye\data\healthbaseinfo.dat
%ProgramFiles(x86)%\khealtheye\data\healthctrlwallpaper.dat
%ProgramFiles(x86)%\khealtheye\operation\cas\kctrl.dat
%ProgramFiles(x86)%\khealtheye\kdumpcfg.dat
%ProgramFiles(x86)%\khealtheye\operation\cas\kfmt.datx
%ProgramFiles(x86)%\khealtheye\ressrc\chs\uplive.svr
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\defmsg.log
%WINDIR%\temp\uddedb9.tmp
%ProgramFiles(x86)%\khealtheye\cmlive.exe
%ProgramFiles(x86)%\khealtheye\installconfig.xml
%TEMP%\~ee7de\res\10000.xml
%ALLUSERSPROFILE%\kingsoft\kis\kich\5105-4d4e7f1d-62e865ed-247.ich
%ProgramFiles(x86)%\khealtheye\data\healthctrlcfg.dat
%TEMP%\~ee7de\res\11001.xml
%TEMP%\~ee7de\res\9.png
%TEMP%\~ee7de\res\8.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rule.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\deconfig.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\expand_rule.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\weathercache.ini
%TEMP%\~ee7de\res\22.png
%TEMP%\~ee7de\res\3.png
%TEMP%\~ee7de\res\4.png
%TEMP%\~ee7de\res\40.png
%TEMP%\~ee7de\res\41.png
%TEMP%\~ee7de\res\42.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat
%TEMP%\~ee7de\res\43.png
%TEMP%\~ee7de\res\50.png
%TEMP%\~ee7de\res\54.png
%TEMP%\~ee7de\res\55.png
%TEMP%\~ee7de\res\56.png
%TEMP%\~ee7de\res\57.png
%TEMP%\~ee7de\res\58.png
%TEMP%\~ee7de\res\59.png
%TEMP%\~ee7de\res\60.png
%TEMP%\~ee7de\res\61.png
%TEMP%\~ee7de\res\62.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kislive.exe
%TEMP%\~ee7de\res\44.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksepnf.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxetray.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsui64.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsui.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwhrequestor.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwssp.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsui.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsui64.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxebase.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxebscsp.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxecore\kxecore.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxereg.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktrashscanex.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktoolupd.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kxesansp.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kweatherquerier.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\msvcp80.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\netbuyprot.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\pegasus.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\scom.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\sqlite.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\wfs.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\zlib1.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kavbootc.sys
<DRIVERS>\kavbootc.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\lbhelper.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\lblocker.dll
%ProgramFiles(x86)%\khealtheye\feedback.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\msvcr80.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kupdatesp.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktrashscan.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksysopteng.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksdecs.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksdecsex.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksdectrl.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksdepopex.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kseescan.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksesscan.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kseutil.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kshelper.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kshighvaluesp.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2shmpg.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kscanner.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kshmpgext.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kskinmgr.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksoftdefendpop.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksoftmgrengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksoftpurifyengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kspupwnd.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksreng3.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksscore.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kstools.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kswbc.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2swebshield.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kswscxex.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksingularities.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kavbootc64.sys
<DRIVERS>\kavbootc64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksbwdet2.dll
<DRIVERS>\kavbootc64_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi.sys
<DRIVERS>\ksapi.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi64.sys
<DRIVERS>\ksapi64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi64_ev.sys
<DRIVERS>\ksapi64_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi_ev.sys
<DRIVERS>\ksapi_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetmxp.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksskrpr.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\extendimg\1.jpg
<DRIVERS>\kisnetm_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\extendimg\2.jpg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\extendimg\4.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\extendimg\5.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kisfdpro64.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ks3rdhmpg.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ks3rdhmpg32.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ks3rdhmpg64.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kshmpg.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kswebshield.dll
<DRIVERS>\ksskrpr.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kuidsrv.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsprotect64.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\extendimg\3.jpg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm_ev.sys
<DRIVERS>\kisnetmxp.sys
<DRIVERS>\kisnetm64_ev.sys
<DRIVERS>\kdhacker.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys
<DRIVERS>\kdhacker64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker64_ev.sys
<DRIVERS>\kdhacker64_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kdhacker_ev.sys
<DRIVERS>\kdhacker_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisknl.sys
<DRIVERS>\kisknl.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kavbootc_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisknl64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisknl64_ev.sys
<DRIVERS>\kisknl64_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisknl_ev.sys
<DRIVERS>\kisknl_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisnetflt.sys
<DRIVERS>\kisnetflt.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kisnetflt64.sys
<DRIVERS>\kisnetflt64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm.sys
<DRIVERS>\kisnetm.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64.sys
<DRIVERS>\kisknl64.sys
<DRIVERS>\kisnetm64.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kisnetm64_ev.sys
<DRIVERS>\kavbootc_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksdecache.dll
%WINDIR%\temp\uddeed3.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decache.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfsu.dat
%WINDIR%\syswow64\config\systemprofile\desktop\desktop.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softreport.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\download_engine.dll
%ALLUSERSPROFILE%\kingsoft\kis\kich\4222-18482442-62e8660e-4c.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softextinfo.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\competing_pop_cloud_cfg.ini
%APPDATA%\kingsoft\duba\trashscan\ktrashscan.dll.doc
%ALLUSERSPROFILE%\kingsoft\kis\kich\816-5cfab7a7-62e86611-384.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\id.dat.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dsu.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfsu.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\id.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\ksoft_category.dat.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\data\ksoft_category.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kclearak.dat_t
%ALLUSERSPROFILE%\kingsoft\kis\kich\4469-706bc3b8-62e86617-1c4.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\ktoolcommon.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgr.exe.z
%WINDIR%\temp\udd8a2a.tmp
%ALLUSERSPROFILE%\kingsoft\kis\kich\5383-be6aff8f-62e8661a-87.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgr.exe
%ALLUSERSPROFILE%\kingsoft\kis\kich\742-37943683-62e8661d-277.ich
%ALLUSERSPROFILE%\kingsoft\kis\kich\4944-526be958-62e86611-1fc.ich
%APPDATA%\kingsoft\duba\trashscan\ktrashscanex.dll.doc
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\clearplugin\ksreng3.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsprotect64.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\depopexlog.db
%ALLUSERSPROFILE%\kingsoft\kis\kich\4035-d7e98873-62e86604-3e7.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmdtool.dll.rcmdtmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\atl71.dll.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\atl71.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat_t
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\leakreinforce.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksbwdet2.dll.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\dl_peer_id.dll.z
%WINDIR%\temp\udd4637.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\download_engine.dll.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrindex.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dsu.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deexlog.db-journal
%ALLUSERSPROFILE%\kingsoft\kis\kich\4725-997c3cfd-62e86608-150.ich
%ALLUSERSPROFILE%\kingsoft\kis\kich\5054-6f8a813a-62e86608-17e.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\kbootacc.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\switch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bksq.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skyeye2.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bksq.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skyeye2.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\depopexlog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\xlmodule\download\dl_peer_id.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deexlog.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skinrecord.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deflog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrengine.dll.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000056.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000061.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000067.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000068.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000071.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000078.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000087.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000088.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000089.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000090.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000039.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000091.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000057.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000093.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000095.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000128.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\81000001.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\81000002.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\81000003.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\91000001.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\91000002.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\91000003.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\91000004.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000092.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60047637.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\61000094.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60047501.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60045166.png
%ALLUSERSPROFILE%\kingsoft\kis\kich\742-40b1d283-62e86622-155.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000002.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kclearak.dat.d
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000030.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000043.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000047.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000057.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000116.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000118.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000234.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000399.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60000404.png
%ALLUSERSPROFILE%\kingsoft\kis\kich\4944-526be958-62e86624-c5.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60001467.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60002916.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60002917.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60005482.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60005485.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60005486.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60038242.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60039558.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60039769.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60040408.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60044347.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrindex.dat.z
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\60001814.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\newinstcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deflog.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\klengine.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\klnk.dat
%WINDIR%\temp\uddf8b3.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa1.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe.0.log
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog3.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog3.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwfile.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa0.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwfile.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwbase.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa1.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoft.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpurifylist.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpurifylist.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ktrustlist.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ktrustlist.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoftpurifyrecord.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoftpurifyrecord.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifyrecord.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifyrecord.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwbase.dat-journal
%ALLUSERSPROFILE%\kingsoft\kis\kich\3060-d97feb43-62e865f2-329.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bootoptcfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoft.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\ksdecsex_trace.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kseexf.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kseset.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\urlmon.cfg
%ProgramFiles(x86)%\khealtheye\keyemain.exe
%ProgramFiles(x86)%\khealtheye\khealthctrlspread.exe
%ProgramFiles(x86)%\khealtheye\uninstall.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decache.db
%ProgramFiles(x86)%\khealtheye\kdump.dll
%ProgramFiles(x86)%\khealtheye\keasyipcn.dll
%ProgramFiles(x86)%\khealtheye\keyeprotect.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\autoflux.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\ksdecs_trace.log
%ProgramFiles(x86)%\khealtheye\kdumprepn.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\procinfo.dat
%ALLUSERSPROFILE%\kingsoft\kis\kich\5476-716fdfeb-62e865f1-212.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\fluxcache.dat
%ProgramFiles(x86)%\khealtheye\operation\cas\kinfoc.dll
%ProgramFiles(x86)%\khealtheye\kschrodingercat.dll
%ProgramFiles(x86)%\khealtheye\kskinmgr.dll
%ProgramFiles(x86)%\khealtheye\ktoolupd.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\fluxstastic.dat
%ProgramFiles(x86)%\khealtheye\kweatherquerier.dll
%ProgramFiles(x86)%\khealtheye\msvcp80.dll
%ProgramFiles(x86)%\khealtheye\msvcr80.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifystate.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\startupbrowser.dat
%ProgramFiles(x86)%\khealtheye\kdumprep.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa0.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\kmctrl_trace.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifystate.dat
%ALLUSERSPROFILE%\kingsoft\kfc\kfcbase.dat
%ALLUSERSPROFILE%\kingsoft\kis\kich\4035-496aa5fd-62e865fc-396.ich
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdlfdb.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz1ff4.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf1ebb.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf2785.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\kat2795.tmp
%ALLUSERSPROFILE%\kingsoft\kis\kich\1877-aa5c5cf-62e865fe-131.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bdmisc.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf1e3d.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdl2053.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kxesetting.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdlocal.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\indexkav.datx
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz2b2f.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdl2fc2.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz3168.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcfileinfo.che
%ALLUSERSPROFILE%\kingsoft\kis\kich\4035-507194bc-62e86602-293.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\index.datx
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\index.txt
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\krcmdmon\updatebin.xml
%ALLUSERSPROFILE%\kingsoft\kis\kich\3595-9320bf6c-62e865ff-74.ich
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsfd0c.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\interrecord.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\indexkav.txt
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbw_wib.fsg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksantiloaddll.ini
%ALLUSERSPROFILE%\kingsoft\kis\kich\4656-1b782b7e-62e865f9-3ba.ich
%ALLUSERSPROFILE%\kingsoft\kfc\kfcwsign.dat-journal
%ALLUSERSPROFILE%\kingsoft\kfc\kfcwsign.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\fileuploadinfo.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\fileuploadinfo.dat
%ALLUSERSPROFILE%\kingsoft\ksbw\kns2.che
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksuset.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksuset.db
%ALLUSERSPROFILE%\kingsoft\kfc\temp\ksg905.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksbcache.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\cityinfo.dat
%ALLUSERSPROFILE%\kingsoft\kfc\kfcbase.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsgaab.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\data.fsg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\progrule.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\progrule.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\adinterccore_trace.log
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\option.ini
%ALLUSERSPROFILE%\kingsoft\kfc\temp\data.fsg
%ALLUSERSPROFILE%\kingsoft\kfc\temp\conf.ini
%ALLUSERSPROFILE%\kingsoft\kis\kich\4693-a29fbafe-62e865f8-7f.ich
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\poplog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\poplog.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\interrecord.db-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\conf.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksecachecfg.ini
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\ksbw_apptype_cfg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi64.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksapi.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg64.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\shijiebei2018_skin_imgex.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_aistarry.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_aitimes.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_cloudnetwork.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_merry.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_newyear.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_sea.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_space.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_worlcup.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\reinstall_duba.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\skin_youth.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\search.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\stvltd_skin_imgex.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\tengxunlive.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\tianshizhiyi_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\trash_scan.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\weixin_index3.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\weixin_rcmd_imgb.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\wendujishrink_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\wifi_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\wifi_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\xianshifengqiang-taobao.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\start_acc.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\duba123.ico
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\stxmas_skin_imgex.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\duba123ienew.ico
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_youku.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_realtimeopt_tianmao_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_orange_btn.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_qiangpiao.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_softpurifier.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_sysdoct.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_taobao1212_test1_main.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_tianmao_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_tianmao_icon0415.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_software_analyze.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_wifibaby.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_tianmao_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_avdr.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_olympic_realtime.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_yeyounewicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_icon_sub.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_kuwo.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_liebaologo.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_liebao_subicon1.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_new_qq_music.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_new_qq_music_sub.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_olympic_2016.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_olympic_normal.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_tianmao_icon0415.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\duba123ie.ico
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_guomei_online.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmd_icon_common.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\scancfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\duba123new.ico
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\kcommon.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\kdock.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\khcacfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\khistory.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\kismain.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksbwdt.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksecfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksedset.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\gamemode\floatwingamemode.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksedset.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksrengurl.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecore.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksscfgx.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kwbc.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\litecommoncfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcdpt\scene\loopp.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\mempopscene.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\nointerrupt.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\opt_popcfg_uplive.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcdpt\scene\productcmpp.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\push_msg_city_list.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kshmpg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\deheurcfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\config.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\kswitchlist.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\cityupdateinfo_kislive.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\khealthctrl.ico
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\microsoft.vc80.crt.manifest
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\capricorn\cfgmap.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\citys.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\clear.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\forecastmsg.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\game.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\install.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kcleanerselectallrisk.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksoft.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\newcitys_kislive.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\open_url_tool_cfg.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\packet_ud.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\microsoft.vc80.mfc.manifest
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\capricorn\scenes.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kstools\showctrl.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\speedtest.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\weatherconfig.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\web\kingsoft_bbs.htm
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\web\kingsoft_duba.htm
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\web\kingsoft_main.htm
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\web\kingsoft_weibo.htm
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\adintercfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\broplugver.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_realtimeopt_orange_btn.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_realtimeopt_green_btn2.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\scom.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_roundicon_fullscan.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_realtimeopt_green_btn.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_realtimeopt_gameicon_bird.png
%ALLUSERSPROFILE%\installrename.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\autorunkxetray_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\chaodijiage-taobao.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\computer_acc.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\computer_doctor.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\dbetm_skin_imgex.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\defaultshrink_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\double11_mainlogo1.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\double11_speedpop3.png
%TEMP%\kantivirus\~e4587\installrename_def.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\double11_sublogoc2.png
%TEMP%\kantivirus\~e4587\ksoft.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\autorunkxetray_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\double11_sublogos2.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\haohuojingxuan-taobao.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_aistarry.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_aitimes.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_cloudnetwork.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_default.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_merry.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_newyear.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_sea.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\double11_sublogoh2.png
%TEMP%\kantivirus\~e4587\setup.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\dudubao_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\forbidmobile.png
%TEMP%\kantivirus\~e4587\product.xml
%TEMP%\kantivirus\~e4587\install_res\1.jpg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\quarantine.ini
%TEMP%\kantivirus\~e4587\install_res\3.jpg
%TEMP%\kantivirus\~e4587\install_res\110.png
%TEMP%\kantivirus\~e4587\install_res\4.png
%TEMP%\kantivirus\~e4587\install_res\5.png
%TEMP%\kantivirus\~e4587\install_res\501.png
%TEMP%\kantivirus\~e4587\install_res\502.png
%TEMP%\kantivirus\~e4587\install_res\503.png
%TEMP%\kantivirus\~e4587\install_res\504.png
%TEMP%\kantivirus\~e4587\install_res\506.png
%TEMP%\kantivirus\~e4587\install_res\507.png
%TEMP%\kantivirus\~e4587\install_res\508.png
%TEMP%\kantivirus\~e4587\install_res\2.jpg
%TEMP%\kantivirus\~e4587\install_res\509.png
%TEMP%\kantivirus\~e4587\install_res\511.png
%TEMP%\kantivirus\~e4587\install_res\512.png
%TEMP%\kantivirus\~e4587\install_res\514.png
%TEMP%\kantivirus\~e4587\install_res\515.png
%TEMP%\kantivirus\~e4587\install_res\516.png
%TEMP%\kantivirus\~e4587\install_res\517.png
%TEMP%\kantivirus\~e4587\install_res\518.png
%TEMP%\kantivirus\~e4587\install_res\200.bmp
%TEMP%\kantivirus\~e4587\install_res\201.bmp
%TEMP%\kantivirus\~e4587\clear_i.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_space.png
%TEMP%\kantivirus\~e4587\install_res\510.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_worlcup.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\hmpgconfig.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\img_btn_rcmd_green.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\jijian_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kphonehelper_small_icon_app.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kphonehelper_small_icon_fun.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kspeeder.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kuaikuaikantu.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kugou.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_newwifi.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_calendar_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_calendar_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_juhuasuan_3_8.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_happy_notes.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_qiangpiao_main.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kdesk.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_qiangpiao_sub1.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_qiangpiao_sub3.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_taobao1212_test1_main.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_taobao1212_test1_sub1.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_taobao1212_test1_sub2.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_taobao1212_test1_sub3.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_panda_notes.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_qidou.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_qq_browser.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_loan_bootopt.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_icon_sub_qqgame.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\share\kfxspring.gif
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_normal_qiangpiao_sub2.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_kcleaner_deep_clean.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_gamepop_icon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_gamebox2.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\kdesk_logo.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\kfxspring_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\kfxspring_skin_imgex.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\kongqizhiliang_skin_img.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\lockpage.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\logo_player.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\phonehelper_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\pop.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\pps_rcmd_mainicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\pps_rcmd_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\img_data_revert.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\qq_pcmgr_rcmd.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2roundiconcheetan.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2roundiconthemecmnbtn.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2roundiconthemecmnicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2roundiconthemegameicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_baidushurufa.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_baofeng.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_bobo.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_bobo_new.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_close_antivir.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_gamebox1.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\dynamicctrl\hotfuncentrance_youth.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\qq_pcmgr_rcmd_subicon.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\img_btn_rcmd_orange.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\pic\rcmdv2_juhuasuan_3_8_boot.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\scan_virus.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\scanctrl.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcmpp.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\khealtheye.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\khonorwall.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kinst.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kintercept.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kis2live.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kismain.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\knetbuysecuritydetector.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krecycle.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcleaner.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kscan.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ks2launch.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdrvmgr.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kslaunchex.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kupdata.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kweibotool.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwhcommonpop.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsprotect64.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxe2score.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxe2tray.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rcmdhelper.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rcmdhelper64.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksetupwiz.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcddltool.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\space.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksoftpurifier.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdf.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavlog2.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore_sp.xcf
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcommonpid.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\khackfix.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kvmpid2.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwifitool.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxeksgpid.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\denyip.krf
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\krmcdm.krf
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\netrule.krf
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rule.krf
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\spt\u6h7b1s4e9z0z0m1x2.lat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\youth.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\clearplugin\plugin.nlb
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\cacert.pem
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\dudubao.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\jijian.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\kfxspring.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\kongqizhiliang.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\shijiebei2018.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\tianshizhiyi.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\wenduji.skin
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\uplive.svr
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kset.vdb
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\uni0nst.exe
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\sp3a.nlb
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\worlcup.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\scriptconfig.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavpid.kid
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\adintercore.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kanthack.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\klengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kluaengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kmctrl.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksnetm\kmonstat.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\knetctrl.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\knetstgy.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\knetworkpanel.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\knpescanner.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\operation\cas\kinfoc.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpassport.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpopcenter.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kismain.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpopclt.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpopsvr.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmdbase.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmdengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmdui.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmdutils.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krsctrl.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg32.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpersona.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\khistory.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\jsonv6.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kpopinterengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\kislog.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kheur.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\khandler.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kavdevc.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavevent.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavmenu.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavmenu64.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kavquara.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kbootacc.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kbootopt.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcapricorn.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcctrl.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcleaner.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kaeunpack.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kclearpanel.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdefendpop.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdgui2.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdgui2opt.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdjudge.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\keasyipcn.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\keyeprotect.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\keyeproxy.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcdetect.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kfloatmain.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kfloatwin.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\defendmon.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcmppinvoker.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2isfdpro64.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ktool_update\kdownload\kav\ksoftmgrengine.dll
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksofticondownloader.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\merry.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\delaydownloader.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\depopex.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\deswitch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\fnsign.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\fysign.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\gamesdb_dc_mini.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ic.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ichash.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon48\index.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decswitch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\deccfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\deexswitch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon\softicon32\index.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kae\kaearcha.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kae\kaearchb.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kae\kaecore.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kae\karchive.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kbootfilter.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\operation\cas\kctrl.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kdh.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kdjudgecfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kexam_br_guard.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\inject.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kaccclear.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\kadblockrule.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decommon.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\spt\d3w8w8q2h7e9t6v4r8g7.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kguidcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\shrink_skin_config.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\signs.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\skinconfig.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\stuptswarntp.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninstall\uninstallcfg.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\uninsthvuhs.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksingularities\urldetector.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\vinfo.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\sg.db
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\floatskin\skinicon\shijiebei2018.anim
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\bro.cfg
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kcdpt\selfdetect.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\cloudctrl.config
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\recommendctrl.config
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\adinterrule.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\antilib.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\bc.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bdscancg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\bredirect.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\browsercfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\cleanlist.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\config3a.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\crb.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\crw.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\liectrl.config
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\newyear.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\sea.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\klminfo.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kplc.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rsctrl.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\safepatch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\safeurl.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\safe_business.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\safe_business_ex.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\se.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\se_redirect_ex2.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softicon.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\softpurify.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\clearplugin\plugin.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\spdupcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\spt\q2o0b1f5t6m1i5r8k3.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\system64.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\upcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\userinterconf.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\wc.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\whiteurl.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\winesystem001.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\operation\cas\kfmt.datx
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\aistarry.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\aitimes.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skin\theme\cloudnetwork.dubatheme
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\system.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\deexcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\spt\u6b1h7f5i5r8g7x2t6.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\productinfo.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ns.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\nlmgr.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpld.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpopdata.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kpretend.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kqsccfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\krcmddata.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\krcmddb.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\rcmdv2sp01\cfg\krcmdui.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\config\ksesysfiles.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kseta.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\ksfilter.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpersonacfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kslm.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kswitch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kunioncfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kupdateworkcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwnp.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwssp.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsu.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\lpolicy.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\naviconfig.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\netbank.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\netmodeconfig.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\netsign.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ksm3rdex.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\netswitch.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\km.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\deflist.dat

Deletes the following files

%ALLUSERSPROFILE%\installrename.dat
%TEMP%\~ee7de\res\10002.xml
%TEMP%\~ee7de\res\10001.xml
%TEMP%\~ee7de\res\10000.xml
%TEMP%\~ee7de\installconfig.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deexlog.db-journal
%WINDIR%\temp\udd4637.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\newinstcfg.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deflog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwifitool.kid
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdl2fc2.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz1ff4.tmp
%TEMP%\~ee7de\res\11001.xml
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz2b2f.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf2785.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf1ebb.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdlfdb.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\ksbw_apptype_cfg
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsf1e3d.tmp
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsfd0c.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\poplog.db-journal
%ALLUSERSPROFILE%\kingsoft\kfc\temp\ksg905.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\temp\conf.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\progrule.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\conf.ini
%ALLUSERSPROFILE%\kingsoft\kfc\temp\kdl2053.tmp
%TEMP%\~ee7de\res\56.png
%WINDIR%\temp\udd8a2a.tmp
%TEMP%\~ee7de\res\3.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfsu.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dsu.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\depopexlog.db-journal
%TEMP%\~ee7de\res\9.png
%TEMP%\~ee7de\res\8.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat
%TEMP%\~ee7de\res\62.png
%TEMP%\~ee7de\res\61.png
%TEMP%\~ee7de\res\60.png
%TEMP%\~ee7de\res\59.png
%TEMP%\~ee7de\res\58.png
%ALLUSERSPROFILE%\kingsoft\ksbw\temp\fsgaab.tmp
%TEMP%\~ee7de\res\57.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skyeye2.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bksq.dat-journal
%TEMP%\~ee7de\res\55.png
%TEMP%\~ee7de\res\54.png
%TEMP%\~ee7de\res\50.png
%TEMP%\~ee7de\res\44.png
%TEMP%\~ee7de\res\43.png
%TEMP%\~ee7de\res\42.png
%TEMP%\~ee7de\res\41.png
%TEMP%\~ee7de\res\40.png
%TEMP%\~ee7de\res\4.png
%TEMP%\~ee7de\res\11004.xml
%TEMP%\~ee7de\res\22.png
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\ksuset.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\fdsdcache.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxe2tray.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxe2score.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ks2launch.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kis2live.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsui64.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsui.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2wsprotect64.exe.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2swebshield.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2shmpg.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg64.dll.bak
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg32.dll.bak
%APPDATA%\kingsoft\duba\pophistory\pophistory.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2s3rdhmpg.dll.bak
<DRIVERS>\kisknl.sys
<DRIVERS>\ksapi64_ev.sys
<DRIVERS>\ksapi_ev.sys
<DRIVERS>\kisnetm64_ev.sys
<DRIVERS>\kisnetm_ev.sys
<DRIVERS>\kisknl64_ev.sys
<DRIVERS>\kisknl_ev.sys
<DRIVERS>\kdhacker64_ev.sys
<DRIVERS>\kdhacker_ev.sys
<DRIVERS>\kavbootc64_ev.sys
<DRIVERS>\kavbootc_ev.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\k2isfdpro64.dll.bak
%WINDIR%\temp\uddf8b3.tmp
%ALLUSERSPROFILE%\kingsoft\kfc\kfcwsign.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcuploadinfo.dat-journal
%ALLUSERSPROFILE%\kingsoft\kfc\kfcbase.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\config\interrecord.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifystate.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kincomingsoftpurifyrecord.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoftpurifyrecord.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ktrustlist.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kpurifylist.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoft.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwbase.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwfile.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog3.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\fileuploadinfo.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa1.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa0.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decache.db-journal
%WINDIR%\temp\uddeed3.tmp
%WINDIR%\temp\uddedb9.tmp
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\cityupdateinfo.ini
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\ressrc\chs\newcitys.xml
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kadblock\interrecodr.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_hfps.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfc_dps.dat-journal
%WINDIR%\temp\uddcfcc.tmp
%APPDATA%\kingsoft\duba\persona\persona.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kclearak.dat.d

Moves the following files

from <DRIVERS>\kisknl.sys to <DRIVERS>\kisknl_del.sys
from %ALLUSERSPROFILE%\kingsoft\kfc\temp\data.fsg to %ALLUSERSPROFILE%\kingsoft\kfc\kfc_topw.ksg
from %ALLUSERSPROFILE%\kingsoft\ksbw\temp\data.fsg to %ALLUSERSPROFILE%\kingsoft\ksbw\ksbw_wi.fsg
from %ALLUSERSPROFILE%\kingsoft\ksbw\temp\kat2795.tmp to %ALLUSERSPROFILE%\kingsoft\ksbw\ksbw_appt.che
from %ALLUSERSPROFILE%\kingsoft\kfc\temp\kuz3168.tmp to %ALLUSERSPROFILE%\kingsoft\kfc\kfcdyncfg.ini
from %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat_t to %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat
from %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kclearak.dat_t to %ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kclearak.dat

Substitutes the following files

<DRIVERS>\kisknl.sys
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat_t
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\skyeye2.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\bksq.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deexlog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\log\deflog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\poplog.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\ksde\progrule.dat-journal
%ALLUSERSPROFILE%\kingsoft\kfc\kfcbase.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\ksysoptak47_tmp.dat
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\kinstalledsoft.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwfile.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwlog.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa1.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kse_wfsdata\01c45e18_wfsexa0.dat-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\data\decache.db-journal
%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\security\kxescan\kfcuploadinfo.dat-journal
%APPDATA%\kingsoft\duba\persona\persona.db-journal
%APPDATA%\kingsoft\duba\pophistory\pophistory.dat-journal
%ALLUSERSPROFILE%\kingsoft\ksbw\ksbwbase.dat-journal
%ALLUSERSPROFILE%\kingsoft\kfc\kfcwsign.dat-journal

Network activity

Connects to

'di#.##inshan.com':80
'dl.##inshan.com':80
'rc##.##p.ijinshan.com':80
'rq.###.cloud.duba.net':80
'12#.#2.183.150':80
'hu###.www.duba.net':80
'rq.#####de.cloud.duba.net':80
'fs###s.duba.net':80
'kn#.#uba.net':80
'cf.#uba.net':80
'cu###.www.duba.net':80
'in##.#2pcfree.com':80
'we####r2db.cmcm.com':80
'in###2.duba.net':80
'tj.####n.ijinshan.com':80
'12#.#07.105.156':8080
'he######client.ksmobile.com':80
'cv.#uba.net':80
'si##.com':80
'db##.cmcm.com':80
'ct.#uba.net':80
'co####.i.duba.net':80
'23##.35go.net':80
'in###0.duba.net':80
'b.###.pc120.com':80
'11#.#30.3.67':80

TCP

HTTP GET requests

http://23##.35go.net/defend/o1/installrename.dat
http://11#.#3.89.14/
http://hu###.www.duba.net/duba/2010/bin/1335/kav/318f8ac06dbcdb14acab3592d8c56dc7
http://cu###.www.duba.net/duba/tools/dubatools/kclearak.dat
http://hu###.www.duba.net/duba/2010/bin/1335/kav/data/b3b15fba6f1b94935674cc2716d3a13a
http://hu###.www.duba.net/duba/2010/bin/1335/kav/xlmodule/download/3ad1b0fc47eb870ff41b8f0e2e95bac0
http://dl.##inshan.com/duba/config/competing_pop_cloud_cfg.ini
http://hu###.www.duba.net/duba/2010/bin/1335/kav/xlmodule/download/cb02dbaee15d1c9ecf7a7f012e044253
http://hu###.www.duba.net/duba/2010/bin/1335/kav/xlmodule/download/f0955a681cb6919e432556e783fb04ed
http://hu###.www.duba.net/duba/2010/bin/1335/kav/xlmodule/download/627a3da95ced254e8ae2c9592153015b
http://rc##.##p.ijinshan.com/krcmdinst/1335/krcmdtool.dll
http://rc##.##p.ijinshan.com/rcmdpop.ini
http://cu###.www.duba.net/duba/tools/dubatools/ksysoptak47.dat
http://hu###.www.duba.net/duba/2010/bin/1335/kav/7fa2567c4edbce545470dc5725d63db7
http://b.###.pc120.com/utp/%20?p=############################
http://rc##.##p.ijinshan.com/krcmdinst/1335/updatebin.xml
http://cu###.www.duba.net/kcs/kfsg/config/kfcdyncfg
http://12#.#2.183.150/
http://hu###.www.duba.net/duba/2010/bin/1335/839b9526.datx
http://fs###s.duba.net/df/libs/1.17.0
http://fs###s.duba.net/dl/libs/180.a
http://fs###s.duba.net/df/fm
http://fs###s.duba.net/dl/fs
http://cu###.www.duba.net/kcs/kfsg/fsgs/kswfsign
http://cu###.www.duba.net/kcs/kfsg/config/ksbwdtnet
http://cu###.www.duba.net/kcs/kfsg/fsgs/kswfsign3
http://cv.#uba.net/cv?uu###################################################################
http://co####.i.duba.net/install_avoid/installavoidcfg.dat?ti##############
http://co####.i.duba.net/install_avoid//installfilter.dat?ti##############
http://hu###.www.duba.net/duba/2010/bin/1335/kav/07e1bd050d3848b1c5b8c1a5db5a4e57
http://hu###.www.duba.net/duba/2010/bin/1335/kav/945826be4b2b44f891fdb393f1b5428c

HTTP POST requests

http://di#.##inshan.com/db/?v=#############################################################################################################
http://rq.###.cloud.duba.net/query?16########
http://kn#.#uba.net/kns-query?98###########
http://in###2.duba.net/c/
http://rq.#####de.cloud.duba.net/query?98####
http://kn#.#uba.net/kns-query?98####
http://cf.#uba.net/query3?98####
http://we####r2db.cmcm.com/ip/cityid
http://12#.###.105.156:8080/kurl_query?98#### via 12#.#07.105.156
http://in##.#2pcfree.com/c/
http://tj.####n.ijinshan.com/c/
http://12#.###.105.156:8080/kurl_query?96#### via 12#.#07.105.156
http://he######client.ksmobile.com/nep/v1/
http://db##.cmcm.com/uv?t=##########
http://ct.#uba.net/itid
http://in###0.duba.net/nep/v1/
http://11#.#30.3.67/query3
http://in###0.duba.net/c/

UDP

DNS ASK di#.##inshan.com
DNS ASK dl.##inshan.com
DNS ASK rq.###.cloud.duba.net
DNS ASK rc##.##p.ijinshan.com
DNS ASK hu###.www.duba.net
DNS ASK rq.#####de.cloud.duba.net
DNS ASK kn#.#uba.net
DNS ASK fs###s.duba.net
DNS ASK cf.#uba.net
DNS ASK cu###.www.duba.net
DNS ASK in##.#2pcfree.com
DNS ASK we####r2db.cmcm.com
DNS ASK in###2.duba.net
DNS ASK tj.####n.ijinshan.com
DNS ASK cv.#uba.net
DNS ASK he######client.ksmobile.com
DNS ASK db##.cmcm.com
DNS ASK si##.com
DNS ASK ct.#uba.net
DNS ASK co####.i.duba.net
DNS ASK 23##.35go.net
DNS ASK in###0.duba.net
DNS ASK b.###.pc120.com
DNS ASK pc##0.com

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: '{677B9715-5692-49f6-979F-CD11EC963EFE}'
ClassName: 'XLUEFrameHostWnd' WindowName: 'TopBearWnd'
ClassName: 'RarReminder' WindowName: ''
ClassName: 'QTool' WindowName: 'TypeEasy Notify Window'
ClassName: 'QWidget' WindowName: 'ВЅГ°Г‰ВЅВґГІГ—Г–ГЌВЁ ГѓВїГ€Г•ВЅВ№ВµГЈ'
ClassName: 'TfrmMain' WindowName: ''
ClassName: '#32770' WindowName: 'WPS В№ВєГЋГЇ'
ClassName: 'QTool' WindowName: ''
ClassName: 'MinisiteAdvWin' WindowName: ''
ClassName: '#32770' WindowName: 'Г€Г€ВµГЈГђГ‚ГЋГ…'
ClassName: 'QWidget' WindowName: 'WPS Г€Г€ВµГЈ'
ClassName: '#32770' WindowName: 'WPS Г€Г€ВµГЈ'
ClassName: 'XLUEFrameHostWnd' WindowName: 'Thunder.WindowedTips.Window'
ClassName: 'XLUEFrameHostWnd' WindowName: 'Г‘ВёГЂГ—Г“В°Г‘В¶'
ClassName: '*FangPYMiniNewsMainFrame' WindowName: ''
ClassName: 'DongFangMiniNewsMainFrame' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'PopWindowGif' WindowName: ''
ClassName: 'PluginMainFrame' WindowName: 'WindowPop'
ClassName: '*FangMiniNewsMainFrame*' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'CBFTipsTitleWnd' WindowName: ''
ClassName: 'XLUEMaskWnd' WindowName: ''
ClassName: 'XLUEHostWndDefaultOwner' WindowName: 'Г“В°ГЉГ“ГЌВ·ГЊГµ'
ClassName: 'XLUEFrameHostWnd' WindowName: ''
ClassName: '#32770' WindowName: 'Г“ГЋГЏВ·ВєГђГ—Г“ГЌГ†ВјГ¶'
ClassName: 'DlgPopup@LdsGameHall' WindowName: ''
ClassName: '#32770' WindowName: '2345ВєГѓГ‘В№*'
ClassName: 'RCShadowWindow' WindowName: ''
ClassName: 'RCToolBarGiftBoxTipWnd' WindowName: ''
ClassName: 'ATL:*' WindowName: '2345ГЉГ¤Г€Г«В·ВЁ'
ClassName: '' WindowName: 'Internet Explorer_Server'
ClassName: '*DongFangMiniNewsMainFrame*' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'LDSMiniNewsMainWnd' WindowName: ''
ClassName: 'Afx:*' WindowName: 'ВЅГ±Г€Г•Г€Г€ВµГЈ'
ClassName: 'Tfrmmnw' WindowName: ''
ClassName: 'TThreadFrame' WindowName: ''
ClassName: 'RL_WebCtrlContainer' WindowName: ''
ClassName: 'WebAdWin' WindowName: 'WebAdWin'
ClassName: '{3C9D9E21-4A17-46B1-9316-9208DE315F0F}' WindowName: ''
ClassName: '{9BB67D76-FBAE-4A77-A447-6AB84A7A323E}' WindowName: ''
ClassName: 'AtlAxWin110' WindowName: ''
ClassName: 'SDWnd' WindowName: 'tip_wnd'
ClassName: 'ATL:*' WindowName: 'ГЋВўГ€ГГ‰ГЁВ±ВёВЅВЎВїВµГ–ГєГЉГ–'
ClassName: '#32770' WindowName: 'Windows Update'
ClassName: 'DuDuWnd' WindowName: ''
ClassName: 'SmartCloudMiniNewsMainFrame' WindowName: ''
ClassName: 'WTWindow' WindowName: ''
ClassName: 'QQGameExpandUI' WindowName: 'QQGame'
ClassName: '' WindowName: 'Г—ГЂГѓГ¦Г†ГёГ…Гќ'
ClassName: 'DuiWebWnd' WindowName: 'DuiWebWnd'
ClassName: '#32770' WindowName: 'В°В®ВґГЉВ°Г”ВѕВ«Г‘ВЎ'
ClassName: 'ATL:*' WindowName: 'ГђГ‚ГЋГ…ГЌВ·ГЊГµ'
ClassName: 'ATL:*' WindowName: ''
ClassName: 'ATL:*' WindowName: '{*-*-*-*-*}'
ClassName: 'mini' WindowName: 'ВїГ¬Г‘В№ГЌВ·ГЊГµ'
ClassName: '' WindowName: 'ГђВЎВїГ¬ГЌВ·ГЊГµ'
ClassName: 'mini' WindowName: 'ГђВЎВїГ¬ГЌВ·ГЊГµ'
ClassName: 'kzmini' WindowName: ''
ClassName: 'kzmini' WindowName: 'ГђВЎВїГ¬ГЌВ·ГЊГµ'
ClassName: 'kzminigouwu' WindowName: ''
ClassName: 'kzminigouwu' WindowName: 'ВїГ¬Г‘В№В№ВєГЋГЇ'
ClassName: 'tpop3' WindowName: ''
ClassName: 'kzmini' WindowName: 'ВїГ¬Г‘В№ГђГ‚ГЋГ…'
ClassName: 'SOGOUPDA_WGT_WARNPOP_WND_UI' WindowName: ''
ClassName: 'UIWindowClassName.loach' WindowName: 'ГђГ‚ГЂГ‹UC ВЅГ±Г€Г•Г—ГЉГ‘В¶'
ClassName: 'Afx:*' WindowName: ''
ClassName: '' WindowName: 'ВЅГ±Г€Г•Г€Г€ВµГЈ'
ClassName: '' WindowName: 'Г€В«Г†ГЃГ—ГЂГѓГ¦Г†ГёГ…Гќ'
ClassName: '' WindowName: 'miniPage'
ClassName: 'Internet Explorer_Server' WindowName: ''
ClassName: 'NewsFlash' WindowName: 'NewsFlash'
ClassName: 'SmartCloudMiniNewsMainFrame' WindowName: 'Г–Г‡Г„ГњГЌВ·ГЊГµ'
ClassName: '' WindowName: 'В»Г®В¶ВЇ5'
ClassName: '' WindowName: 'В»Г®В¶ВЇ4'
ClassName: '' WindowName: 'В»Г®В¶ВЇ3'
ClassName: '' WindowName: 'В»Г®В¶ВЇ2'
ClassName: '' WindowName: 'В»Г®В¶ВЇ1'
ClassName: '' WindowName: 'В»Г®В¶ВЇ0'
ClassName: 'mininews' WindowName: ''
ClassName: 'kxShadow' WindowName: ''
ClassName: '#32770' WindowName: 'Desktoptip'
ClassName: '' WindowName: 'WPS Г€Г€ВµГЈ'
ClassName: '#32770' WindowName: ''
ClassName: 'Tfrmfyad' WindowName: ''
ClassName: 'PerryAdvOurWnd' WindowName: ''
ClassName: 'MininewsAttachWnd' WindowName: ''
ClassName: '' WindowName: 'ГђВЎВєГљГЌВ·ГЊГµ'
ClassName: 'kzminigouwu' WindowName: 'ГђВЎВєГљВ№ВєГЋГЇ'
ClassName: 'PerryShadowWnd' WindowName: ''
ClassName: '' WindowName: 'ГЌГёГ–В·ВµВјВєВЅ'
ClassName: '' WindowName: 'В»Г®В¶ВЇ**'
ClassName: '' WindowName: 'ВіВЎВѕВ°**'
ClassName: 'kxetray_hiddenDpiAwarenessWindow' WindowName: ''
ClassName: '' WindowName: 'gameoptwnd'
ClassName: '' WindowName: '{4044CBB9-7C93-4095-9FCE-400297879571}_keyelockscreen'
ClassName: 'kingsoft antivirus package win' WindowName: '金山毒霸-安装向导'
ClassName: '' WindowName: '{77620EC1-593C-4666-A428-D285D34B56AE}_eyeprotect'
ClassName: 'kislive_hiddenDpiAwarenessWindow' WindowName: ''
ClassName: '{677B9715-5692-49f6-979F-CD11EC963EFE}' WindowName: ''
ClassName: 'QWidget' WindowName: '1BEEF4DE-*'
ClassName: 'XLUEModalHostWnd' WindowName: 'В¶В«В·ВЅГЌВ·ГЊГµ'
ClassName: 'PerryAdvOutWnd' WindowName: ''
ClassName: 'AfxWnd100su' WindowName: ''
ClassName: '' WindowName: 'NewsFlash'
ClassName: 'ATL:**' WindowName: 'Г—ГЂГѓГ¦Г†ГёГ…Гќ'
ClassName: 'SGNewsWindow' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'tips' WindowName: ''
ClassName: 'RecommendWnd_Pure' WindowName: 'Г€Г€ВµГЈГЌГ†ВјГ¶'
ClassName: 'TipsMainFrame' WindowName: ''
ClassName: '' WindowName: 'WPlayerГЌВ·ГЊГµ'
ClassName: '**PUSH**' WindowName: ''
ClassName: '' WindowName: 'Г“ГЋГЏВ·ВєГђГ—Г“ГЌГ†ВјГ¶'
ClassName: '' WindowName: '2144ГЌВ·ГЊГµ'
ClassName: 'MY' WindowName: 'ВµВЇВґВ°'
ClassName: '#32770' WindowName: 'Г€Г€ГѓГ…Г—ГЉГ‘В¶'
ClassName: 'Q360NetmonClass' WindowName: ''
ClassName: 'BizhiDesktopMiniNewsMainWnd' WindowName: 'Г‚ВіГ‘В¶ГѓГ”Г„ГЈГђГ‚ГЋГ…Г’Ві'
ClassName: '' WindowName: 'Г–Г‡Г„ГњГЌВ·ГЊГµ'
ClassName: 'ShadowEdge' WindowName: ''
ClassName: 'Shell Embedding' WindowName: ''
ClassName: 'ComputerZMonitorPopularizeWnd' WindowName: ''
ClassName: 'Ludashi_SiJiao' WindowName: ''
ClassName: 'LdsLinkPopWndClass' WindowName: ''
ClassName: '' WindowName: 'Г‚ВіГ‘В¶ГѓГ”Г„ГЈГђГ‚ГЋГ…Г’Ві'
ClassName: 'MiniPageWnd' WindowName: ''
ClassName: 'mx_mini_web_browser_wnd' WindowName: 'Г‹В«12В°ГЃГ“ГЋВ№ВҐГ‚Г”'
ClassName: 'WinnerPicMiniNewsMainFrame' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: '' WindowName: 'В¶В«В·ВЅГЌВ·ГЊГµ'
ClassName: '' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'DongFangMiniNewsMainFrame' WindowName: ''
ClassName: '' WindowName: 'WP'
ClassName: 'MainFrame' WindowName: 'ГЌГёГ–В·ВµВјВєВЅ'
ClassName: 'NewsMiniFrame' WindowName: 'ГЌВ·ГЊГµГђГ‚ГЋГ…'
ClassName: 'KwMiniSiteDlg' WindowName: 'ВїГЎГЋГ’ВЅГ±Г€Г•ВїВґВµГЈ'
ClassName: 'TfrmPop' WindowName: ''

Creates and executes the following

'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavlog2.exe' -install
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kslaunch.exe' -report
'%ProgramFiles(x86)%\khealtheye\keyemain.exe' /backgroud /updateindex:3
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rcmdhelper.exe' -kdeskcanrcmd
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rcmdhelper.exe' -updateliebaowifi
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\rcmdhelper.exe' -updatetaguser
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kislive.exe' /autorun /std /skipcs3
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kupdata.exe' -locknb
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\khealtheye.exe' /at=591 /independent=0 /from=3
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsprotect64.exe' (null)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe' /start kxescore
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxetray.exe' /autorun /hidefloatwin /silentinstrcmd
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe' /service kxescore
'%ProgramFiles(x86)%\khealtheye\keyemain.exe' /backgroud /sysresources
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kavlog2.exe' -install' (with hidden window)
'%ProgramFiles(x86)%\khealtheye\keyemain.exe' /backgroud /updateindex:3' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\khealtheye.exe' /at=591 /independent=0 /from=3' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxescore.exe' /start kxescore' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kwsprotect64.exe' (null)' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kslaunch.exe' -report' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kislive.exe' /autorun /std /skipcs3' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kxetray.exe' /autorun /hidefloatwin /silentinstrcmd' (with hidden window)
'%ProgramFiles(x86)%\kingsoft\kingsoft antivirus\kupdata.exe' -locknb' (with hidden window)
'%ProgramFiles(x86)%\khealtheye\keyemain.exe' /backgroud /sysresources' (with hidden window)

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial