Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'kantonews' = '%PROGRAM_FILES%\kantonews\kantonews.exe'
- <SYSTEM32>\stdole2.tlb
- '%PROGRAM_FILES%\kantonews\kantonews.exe'
- '%PROGRAM_FILES%\c\kuping_n_90147.exe'
- '%PROGRAM_FILES%\c\setupX_2002_222.exe'
- '%PROGRAM_FILES%\YYMusic\2014930\YYJia.exe'
- '%PROGRAM_FILES%\YYMusic\2014930\YYMusic.exe' -tuopan
- '%APPDATA%\xc186\xc186.exe' [ѕІД¬°ь]setup_jmss_3209.exe
- '%PROGRAM_FILES%\c\setup_t10157.exe'
- '%PROGRAM_FILES%\c\Play_2059_28043.exe'
- '%PROGRAM_FILES%\c\setup_3102-28043.exe'
- '%PROGRAM_FILES%\c\setup_jmss_3209.exe'
- '%TEMP%\is-0214L.tmp\setup_t10157.tmp' /SL5="$1010E,3858864,119296,%PROGRAM_FILES%\c\setup_t10157.exe"
- '%PROGRAM_FILES%\c\setupX_2005_044.exe'
- Handler for all processes: %APPDATA%\xc186\HookKeyboard.dll
- %PROGRAM_FILES%\YYMusic\2014930\Skin\next0520.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\normalVolume.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\next.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\more.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\musiclibrary.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\play0520.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playerlist.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playersidebg.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playerbg02.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\play2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playerbg01.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\miniґ°.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\max.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\menu.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\mainframeshadow.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyricmute.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyrictoplay.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\MessageBox.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\mineahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\mini.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\minea.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\min.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\mine.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playinging.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_color.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_desktop.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_close.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_btn_down.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_btn_on.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_feedback.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_mutevol.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_next.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_itself.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_forward.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_icon.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_big.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingprev.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingpreva.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingplaying.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playinginga.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingnext.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingrandom.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_back.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_bg.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\PlayProgressForeImage.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingrandoma.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\playingvoice.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\headimg.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\history.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmWindowLrcParent.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmWebBrowser.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmWindowLrc.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\home.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\input-user.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\like.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\input-password.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\hotkeytipbk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\icon.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmSystemMenuFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmLrc.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmLrcChild.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmlogin.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmFeedBack.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmHotKeyTip.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmMenuFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmProgressToolTip.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmSetWindowLrcFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmPopWnd.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmplayer.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmplaylist.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lrclist.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyricdelete.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\LrcBk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\loading04.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\LoginBk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyricdeletea.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyriclikea.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyriclikea2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyriclike.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lyricdeletea2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\LyricFrameVoice.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\loading03.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_item_bg.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_pause.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_item.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\lista.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\listahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_play.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\loading01.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\loading02.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_title_bg.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_scroll_bar.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\list_scroll_bar2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnmini.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnsteup.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnmin.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnexit.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnfeedback.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btntop.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sys_check_btn_whiter.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\tab_comm.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sys_check_btn_red.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sys_check_btn.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sys_check_btn_blue.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\system_menu_btnexit - ё±±ѕ.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionmina.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionminahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionmin.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionfeedbackahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionlogin.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionset.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensiontopa.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensiontopahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensiontop.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionseta.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionsetahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\tooltipbk.png
- %HOMEPATH%\Start Menu\Programs\YYMusic\YYMusic.lnk
- %HOMEPATH%\Start Menu\Programs\YYMusic\№Щ·ЅЦчТі.lnk
- %PROGRAM_FILES%\YYMusic\2014930\YYMusic.exe
- %PROGRAM_FILES%\YYMusic\2014930\Unins.exe
- %PROGRAM_FILES%\YYMusic\2014930\YYJia.exe
- %HOMEPATH%\Start Menu\Programs\YYMusic\ЕдЦГ№¤ѕЯ\Р¶ФШYYMusic.lnk
- %HOMEPATH%\Favorites\Гв·СЙПНшµјєЅ.url
- %HOMEPATH%\Favorites\МмТнѕьКВНш.url
- %PROGRAM_FILES%\YYMusic\2014930\Data\user2.ini
- %TEMP%\oem_te.tmp
- %TEMP%\nsf7.tmp\System.dll
- %PROGRAM_FILES%\YYMusic\2014930\SysConfig.ini
- %PROGRAM_FILES%\YYMusic\2014930\Skin\voice0a0528.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\voice1000528.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\voice0520.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\update.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\voice00528.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\voiceall0528.png
- %PROGRAM_FILES%\YYMusic\2014930\source.dll
- %PROGRAM_FILES%\YYMusic\2014930\swresample-0.dll
- %PROGRAM_FILES%\YYMusic\2014930\Skin\ТфБїµчЅЪµг.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\WindowLrcbkIamge.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\ТфБїМх.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\progress_fore.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pushedVolume.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\progresstooltipbk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\prevention.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\progresstooltip.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random02.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random02a.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random01hover.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random01.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random01a.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\prev0520.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_res.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_set.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_prev.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_pause.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_play.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_small.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\power.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\prev.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pop_bkimage.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_split.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\pl_vol.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random02hover.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionbig.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionbiga.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\steup.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sound.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sound100.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionbigahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionfeedback.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionfeedbacka.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensioncloseahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionclose.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\suspensionclosea.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\sound (2).jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random0520.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\reflash.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random03hover.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random03.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\random03a.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\remembertt.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\SetTipFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\slider_bg.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\SelectColor_SliderBar_Thumb.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\scrollbar.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\search.png
- %APPDATA%\xc186\skin\logo\3.png
- %APPDATA%\xc186\skin\logo\4.png
- %APPDATA%\xc186\skin\logo\2.png
- %APPDATA%\xc186\skin\logo\0.png
- %APPDATA%\xc186\skin\logo\1.png
- %APPDATA%\xc186\skin\logo\5.png
- %APPDATA%\xc186\uninst.exe
- %TEMP%\is-1M8LG.tmp\info.iam
- %HOMEPATH%\Desktop\їмЅЭЛСЛч.lnk
- %HOMEPATH%\Start Menu\Programs\їмЅЭЛСЛч\їмЅЭЛСЛч.lnk
- %HOMEPATH%\Start Menu\Programs\їмЅЭЛСЛч\Р¶ФШіМРт.lnk
- %APPDATA%\xc186\skin\list\s_d_lfet_bg.png
- %APPDATA%\xc186\skin\s_s_highlight.png
- %APPDATA%\xc186\skin\s_s_normal.png
- %APPDATA%\xc186\skin\s_s_down.png
- %PROGRAM_FILES%\kantonews\kantonews.url
- %PROGRAM_FILES%\kantonews\uninst.exe
- %APPDATA%\xc186\skin\search_bk.png
- %APPDATA%\xc186\skin\list\S_d_right_bg_highlight.png
- %APPDATA%\xc186\skin\list\s_d_left_line.png
- %APPDATA%\xc186\skin\list\S_d_right_bg.png
- %APPDATA%\xc186\skin\t_down.png
- %APPDATA%\xc186\skin\t_top.png
- %APPDATA%\xcss\config.ini
- %PROGRAM_FILES%\YYMusic\2014930\libav.dll
- %PROGRAM_FILES%\YYMusic\2014930\lyrics\baidu_13766042.lrc
- %PROGRAM_FILES%\YYMusic\2014930\favorfm.xml
- %PROGRAM_FILES%\YYMusic\2014930\Data\version.ini
- %PROGRAM_FILES%\YYMusic\2014930\DuiLib.dll
- %PROGRAM_FILES%\YYMusic\2014930\lyrics\baidu_13881991.lrc
- %PROGRAM_FILES%\YYMusic\2014930\picture\baidu_e1fe9925bc315c60bbe955728cb1cb134954772a.jpg
- %PROGRAM_FILES%\YYMusic\2014930\PlayerUpdate.exe
- %PROGRAM_FILES%\YYMusic\2014930\picture\baidu_c8ea15ce36d3d539f9c9305e3b87e950342ab0b2.jpg
- %PROGRAM_FILES%\YYMusic\2014930\lyrics\baidu_262581.lrc
- %PROGRAM_FILES%\YYMusic\2014930\picture\baidu_c2cec3fdfc03924517c1df928694a4c27d1e2532.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Data\setup.ini
- %PROGRAM_FILES%\YYMusic\2014930\avcore.dll
- %APPDATA%\xcss\uninstall.exe
- %APPDATA%\xcss\updateTool.exe
- %PROGRAM_FILES%\YYMusic\2014930\audio.dll
- %PROGRAM_FILES%\YYMusic\2014930\avcodec-54.dll
- %PROGRAM_FILES%\YYMusic\2014930\avformat-54.dll
- %PROGRAM_FILES%\YYMusic\2014930\Data\dh.ini
- %PROGRAM_FILES%\YYMusic\2014930\Data\server.ini
- %PROGRAM_FILES%\YYMusic\2014930\Data\client.ini
- %PROGRAM_FILES%\YYMusic\2014930\avutil-52.dll
- %PROGRAM_FILES%\YYMusic\2014930\channels.xml
- %APPDATA%\xc186\HookKeyboard.dll
- %TEMP%\is-1M8LG.tmp\webctrl.dll
- %TEMP%\is-1M8LG.tmp\WSysInfo.dll
- %TEMP%\is-1M8LG.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-1M8LG.tmp\ItDownload.dll
- %TEMP%\is-1M8LG.tmp\CallbackCtrl.dll
- %APPDATA%\xc186\uninstall.exe
- %APPDATA%\xc186\updateTool.exe
- %APPDATA%\xc186\temp.data
- %TEMP%\is-1M8LG.tmp\botva2.dll
- %APPDATA%\xc186\sqlite3.dll
- %PROGRAM_FILES%\kantonews\kantonews.exe
- %PROGRAM_FILES%\c\setup_jmss_3209.exe
- %PROGRAM_FILES%\c\setupX_2005_044.exe
- %PROGRAM_FILES%\c\setupX_2002_222.exe
- %PROGRAM_FILES%\c\setup_3102-28043.exe
- %PROGRAM_FILES%\c\kuping_n_90147.exe
- %PROGRAM_FILES%\c\setup_t10157.exe
- %TEMP%\nsj4.tmp
- <SYSTEM32>\VB6CHS.DLL
- <SYSTEM32>\VB6STKIT.DLL
- %PROGRAM_FILES%\c\Play_2059_28043.exe
- %TEMP%\is-0214L.tmp\setup_t10157.tmp
- %HOMEPATH%\Start Menu\Programs\ЅсИХРВОЕ\ЅсИХРВОЕ.lnk
- %APPDATA%\xc186\skin\s_button_down.png
- %HOMEPATH%\Desktop\Internet 9їй9°ьУК.lnk
- %APPDATA%\xc186\skin\s_box_bg.png
- %HOMEPATH%\Desktop\Internet Etoutiao.lnk
- %APPDATA%\xc186\skin\logo.png
- %APPDATA%\xc186\skin\s_button_highlight.png
- %APPDATA%\xc186\skin\s_close_highlight.png
- %APPDATA%\xc186\skin\s_close_normal.png
- %APPDATA%\xc186\skin\s_close_down.png
- %APPDATA%\xc186\skin\s_button_normal.png
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internet Etoutiao_.url
- %APPDATA%\xc186\Microsoft.VC90.CRT\msvcr90.dll
- %APPDATA%\xc186\xc186.exe
- <SYSTEM32>\MSCMCCHS.DLL
- %PROGRAM_FILES%\kantonews\32.ico
- %HOMEPATH%\Desktop\ЅсИХРВОЕ.lnk
- %PROGRAM_FILES%\kantonews\parameter.ini
- %TEMP%\nsf7.tmp\inetc.dll
- %PROGRAM_FILES%\Internet Explorer\2.ico
- %PROGRAM_FILES%\Internet Explorer\4.ico
- %TEMP%\nst2.tmp\System.dll
- %APPDATA%\xc186\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest
- %APPDATA%\xc186\Microsoft.VC90.CRT\msvcp90.dll
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_011.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_012.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_010.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_008highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_009.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_013.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_bg.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_list_bk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_016.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_014.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_015.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_008.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_004.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_004highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_003highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_002highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_003.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_005.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_007.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_007highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_006highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_005highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_006.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_unsel.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_5.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_6.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_4.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_3.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_7.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\frmdownmenu.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmDropDownMenuFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmConfig.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forgettt.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\FrmColor.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\forecolor_1.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\downda.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\downdahover.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\downd.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\dash.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\DefaultUserImage.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\DownLoadProgressForeImage.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\font_bkcolor.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\font_forecolor.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\feedback.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\exit.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\fbcaptionbk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_6.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_7.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_5.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_3.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_4.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\border.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-login.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-login2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-fav.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-anonymity.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-delete.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\astop.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\AutoRunTipFrame.xml
- %PROGRAM_FILES%\YYMusic\2014930\Skin\320x225.png
- %PROGRAM_FILES%\YYMusic\2014930\pthreadGC2.dll
- %PROGRAM_FILES%\YYMusic\2014930\Skin\125x125.jpg
- %PROGRAM_FILES%\YYMusic\2014930\Skin\back.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bk.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bkcolor_1.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bg_2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bg2.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\bg3.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-next.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_xm.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\button.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_sc.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_ok_blue.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_ok_red.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\channel.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_001highlight.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_002.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\color_001.bmp
- %PROGRAM_FILES%\YYMusic\2014930\Skin\close.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\collection.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_ok.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\BtnRightTop.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_9k.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\BtnHidePlayList.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-pause.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn-play.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_bd.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_fh.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_kw.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_db.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_close.png
- %PROGRAM_FILES%\YYMusic\2014930\Skin\btn_comm.png
- from %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internet Etoutiao_.url to %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internet Etoutiao.url
- 'up####.redshu.com':80
- 'as######.###rwqer.com.weqrqwe.mac.700e.net':8321
- 'localhost':1050
- 'localhost':1037
- 'localhost':1038
- 'localhost':1043
- up####.redshu.com/daohang/jm21.html
- DNS ASK up####.yinyue.fm
- DNS ASK www.lz##s.com
- DNS ASK ma#.#zgzs.com
- DNS ASK to####.yinyue.fm
- DNS ASK ha#.43.cn
- DNS ASK to####.toutiao001.com
- DNS ASK as######.###rwqer.com.weqrqwe.mac.700e.net
- DNS ASK up####.redshu.com
- DNS ASK im#.#allba.com
- DNS ASK ne##.#outiao001.com
- DNS ASK www.cx##ly.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: '3dfe22d3' WindowName: '°ІЧ°ЦР....'
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '3dfe22d3' WindowName: '??????....'