Перейти к содержанию

Trojan-Ransom.Win32.Xorist decryptor

Vobla
 Поделиться

Рекомендуемые сообщения

Vobla

Vobla

Опубликовано
Опубликовано

Доброе утро!

На ноутбуке появилась проблема - ЧЕРНЫЙ рабочий стол и надпись КРАСНЫМИ буквами:
"ВНИМАНИЕ! Все важные файлы на всех дисках вашего компьютера были зашифрованы..." + то же на английском.

 

В корне диска C текстовый файлы, в которых:

Ваши файлы были зашифрованы.

Чтобы расшифровать их, Вам необходимо отправить код:
7FFC0334CE39184AA09E|219|2|2
на электронный адрес files1147@gmail.com или post100023@gmail.com .
Далее вы получите все необходимые инструкции.  
Попытки расшифровать самостоятельно не приведут ни к чему, кроме безвозвратной потери информации.
 
 
All the important files on your computer were encrypted.
To decrypt the files you should send the following code:
7FFC0334CE39184AA09E|219|2|2
to e-mail address files1147@gmail.com or post100023@gmail.com .
Then you will receive all necessary instructions.
All the attempts of decryption by yourself will result only in irrevocable loss of your data.
 

CollectionLog-2015.06.24-02.05.zip

thyrex

thyrex

Опубликовано
Опубликовано

Выполните скрипт в AVZ

 

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll','');
QuarantineFile('C:\Program Files (x86)\Napnut\Nezavisimo\krip.exe','');
QuarantineFile('C:\Windows\system32\drivers\qrnfd_1_10_0_9.sys','');
DeleteService('TsDefenseBt');
DeleteService('TS888x64');
DeleteService('qrnfd_1_10_0_9');
DeleteService('QMUdisk');
DeleteService('QQPCRTP');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.7.16066.216\QQPCRtp.exe','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.7.16066.216\QMUdisk64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.7.16066.216\TS888x64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.7.16066.216\TsDefenseBT64.sys','32');
DeleteFile('C:\Windows\system32\drivers\qrnfd_1_10_0_9.sys','32');
DeleteFile('C:\Program Files (x86)\Napnut\Nezavisimo\krip.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Nezavisimo','command');
DeleteFile('c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Компьютер перезагрузится.

 

Выполните скрипт в AVZ

 

begin
CreateQurantineArchive('c:\quarantine.zip');
end.
c:\quarantine.zip отправьте по адресу newvirus@kaspersky.com

Полученный ответ сообщите здесь (с указанием номера KLAN)

 

Сделайте новые логи по правилам

Vobla

Vobla

Опубликовано
  • Автор
Опубликовано

"c:\quarantine.zip отправьте по адресу newvirus@kaspersky.com"

 

Отправил, жду ответа.

Но, как я понял, архив пуст.

Перед сбором логов (в 1 раз), я выполнял чистку с помощью Kaspersky Virus Removal Tool 2015

Папка C:\KVRT_Data\Quarantine не пуста.

Mark D. Pearlstone

Mark D. Pearlstone

Опубликовано
Опубликовано

@Vobla

Сделайте новые логи по правилам

thyrex

thyrex

Опубликовано
Опубликовано

Скачайте Farbar Recovery Scan Tool  NAAC5Ba.png и сохраните на Рабочем столе.

 

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

  • Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
  • Убедитесь, что в окне Optional Scan отмечены "List BCD" и "Driver MD5".
    B92LqRQ.png
  • Нажмите кнопку Scan.
  • После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
  • Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

thyrex

thyrex

Опубликовано
Опубликовано

Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в ту же папку, откуда была запущена утилита Farbar Recovery Scan Tool:

 

CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://hao.qq.com/?unc=o400493_1&s=o400493_1
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1425397288&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://hao.qq.com/?unc=o400493_1&s=o400493_1
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ru.msn.com/?ocid=iehp
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=119357&tt=gc_&babsrc=HP_ss_din2g&mntrId=AABB0016EAA4CB2D
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-21-499728817-4016318290-1214097693-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1425397288&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
HKU\S-1-5-21-499728817-4016318290-1214097693-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
HKU\S-1-5-21-499728817-4016318290-1214097693-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1434393840&from=mych123&uid=st9160314as_6vcmch9txxxx6vcmch9t&z=84ce8293c183c188d8b9171gczfc7z1catbcebcz8o
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?type=ds&ts=1425397259&from=cmi&uid=ST9160314AS_6VCMCH9TXXXX6VCMCH9T&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> bProtectorDefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> URL http://search.conduit.com/Results.aspx?ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP5D97A257-0117-401E-9E25-25C8939C2DC7&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> SuggestionsURL_JSON http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> 8A2F8E876C644C260036CE8A6BBDCB79 URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> Moikrug URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> Yandex URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://yandex.ru/yandsearch?win=181&clid=2052586-001&text={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = http://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} ->  No File
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} ->  No File
Toolbar: HKU\S-1-5-21-499728817-4016318290-1214097693-1001 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File
FF Extension: SuperMegaBest.com - C:\Users\Мария\AppData\Roaming\Mozilla\Extensions\jid1-n5ARdBzHkUEdAA@jetpack [2015-03-06]
2015-06-23 19:10 - 2015-06-23 19:10 - 03072054 _____ C:\Users\Мария\AppData\Roaming\14F6D58014F6D580.bmp
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README9.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README8.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README7.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README6.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README5.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README4.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README3.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README2.txt
2015-06-23 18:02 - 2015-06-23 18:02 - 00000905 _____ C:\README10.txt
2015-06-23 17:49 - 2015-06-23 22:03 - 00000000 __SHD C:\Users\Все пользователи\Windows
2015-06-23 17:49 - 2015-06-23 22:03 - 00000000 __SHD C:\ProgramData\Windows
2015-06-23 17:49 - 2015-06-23 17:49 - 00000000 ____D C:\Program Files (x86)\Napnut
2015-06-24 01:31 - 2015-03-03 18:41 - 00000000 ____D C:\Program Files (x86)\XTab
2015-06-24 01:31 - 2015-03-03 18:39 - 00000000 ____D C:\Users\Мария\AppData\Local\SmartWeb
2015-06-24 01:31 - 2015-03-03 18:27 - 00000000 ____D C:\Users\Мария\AppData\Local\38464E43-1425407271-4733-4A48-001E68B28379
2015-06-24 01:31 - 2015-03-03 18:22 - 00000000 ____D C:\Users\Мария\AppData\Roaming\38464E43-1425406937-4733-4A48-001E68B28379
2015-06-20 19:55 - 2015-03-03 18:18 - 00000000 ____D C:\Program Files (x86)\IQIYI Video
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(1).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(10).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(100).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(101).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(102).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(103).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(104).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(105).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(106).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(107).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(108).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(109).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(11).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(110).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(111).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(112).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(113).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(114).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(115).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(116).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(117).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(118).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(119).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(12).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(120).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(121).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(122).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(123).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(124).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(125).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(13).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(14).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(15).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(16).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(17).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(18).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(19).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(2).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(20).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(21).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(22).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(23).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(24).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(25).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(26).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(27).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(28).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(29).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(3).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(30).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(31).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(32).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(33).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(34).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(35).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(36).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(37).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(38).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(39).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(4).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(40).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(41).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(42).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(43).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(44).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(45).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(46).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(47).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(48).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(49).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(5).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(50).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(51).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(52).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(53).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(54).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(55).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(56).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(57).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(58).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(59).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(6).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(60).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(61).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(62).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(63).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(64).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(65).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(66).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(67).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(68).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(69).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(7).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(70).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(71).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(72).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(73).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(74).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(75).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(76).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(77).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(78).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(79).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(8).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(80).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(81).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(82).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(83).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(84).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(85).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(86).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(87).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(88).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(89).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(9).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(90).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(91).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(92).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(93).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(94).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(95).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(96).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(97).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(98).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114(99).exe
C:\Users\?????\AppData\Local\Temp\TempQMDTLSDKSetup20141114.exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(1).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(10).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(2).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(3).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(4).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(5).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(6).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(7).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(8).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884(9).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.5.15816.217_393520884.exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(1).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(10).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(100).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(101).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(102).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(103).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(104).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(105).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(106).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(107).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(108).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(109).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(11).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(110).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(111).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(112).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(113).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(114).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(115).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(116).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(117).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(118).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(119).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(12).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(120).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(121).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(122).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(123).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(124).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(125).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(126).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(127).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(13).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(14).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(15).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(16).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(17).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(18).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(19).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(2).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(20).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(21).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(22).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(23).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(24).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(25).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(26).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(27).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(28).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(29).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(3).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(30).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(31).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(32).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(33).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(34).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(35).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(36).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(37).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(38).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(39).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(4).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(40).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(41).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(42).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(43).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(44).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(45).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(46).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(47).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(48).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(49).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(5).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(50).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(51).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(52).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(53).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(54).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(55).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(56).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(57).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(58).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(59).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(6).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(60).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(61).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(62).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(63).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(64).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(65).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(66).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(67).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(68).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(69).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(7).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(70).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(71).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(72).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(73).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(74).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(75).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(76).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(77).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(78).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(79).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(8).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(80).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(81).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(82).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(83).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(84).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(85).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(86).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(87).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(88).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(89).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(9).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(90).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(91).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(92).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(93).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(94).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(95).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(96).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(97).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(98).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715(99).exe
C:\Users\?????\AppData\Local\Temp\TempQMSystemSetup_10.7.16066.216_479812715.exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(1).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(10).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(100).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(101).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(102).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(103).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(104).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(105).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(106).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(107).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(108).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(109).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(11).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(110).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(111).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(112).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(113).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(114).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(115).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(116).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(117).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(118).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(119).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(12).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(120).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(121).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(122).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(13).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(14).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(15).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(16).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(17).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(18).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(19).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(2).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(20).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(21).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(22).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(23).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(24).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(25).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(26).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(27).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(28).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(29).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(3).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(30).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(31).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(32).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(33).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(34).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(35).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(36).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(37).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(38).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(39).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(4).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(40).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(41).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(42).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(43).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(44).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(45).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(46).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(47).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(48).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(49).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(5).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(50).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(51).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(52).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(53).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(54).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(55).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(56).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(57).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(58).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(59).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(6).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(60).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(61).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(62).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(63).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(64).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(65).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(66).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(67).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(68).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(69).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(7).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(70).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(71).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(72).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(73).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(74).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(75).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(76).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(77).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(78).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(79).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(8).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(80).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(81).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(82).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(83).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(84).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(85).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(86).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(87).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(88).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(89).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(9).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(90).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(91).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(92).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(93).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(94).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(95).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(96).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(97).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(98).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721(99).exe
C:\Users\?????\AppData\Local\Temp\TempQQPhoneManager-5.0.0_710202.4468.pas_2740314721.exe
FirewallRules: [{E8E189DE-FDC3-4692-9C07-75D021948D5B}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{B3380B5D-792E-4AAA-ACA3-72BD5EAAC4DA}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{9D3FFA73-1810-4ED8-97B9-CFF4A9582928}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{74FAE55E-31D3-48FC-BDCC-D557AF627D38}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
Reboot:

  • Запустите FRST, нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении!
  • Обратите внимание, что компьютер будет перезагружен.

thyrex

thyrex

Опубликовано
Опубликовано

Мусор почистили.

 

С расшифровкой не поможем.

 

По имеющейся информации техподдержка ЛК оказывает индивидуально помощь в расшифровке обладателям действующей лицензии

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Поделиться
Перейти к списку тем
×
×
  • Создать...