Computer Hope
Software => Computer viruses and spyware => Topic started by: Whitebeard1 on March 31, 2013, 03:38:30 AM
-
I have pretty good experience with my pc and has no problem fixing problems like malware. A few days ago a malware file(my AV says so,and I agree with it) appeared because of an advertisement. It is undeletable and I tried many ways to delete it.
First, I cannot delete this file(autoguarder.exe) with any file shredder and other forceful ways.
Second, this file is causing java application to not respond, and when ever i wait for it to respond or end it, the screen began flashing red and white alternately.
-
Please follow the instructions in the following link and post your logs:
http://www.computerhope.com/forum/index.php/topic,46313.0.html
-
Hey Allan, I am sorry and I realise that u have said this couple times to me before. So when you said post my logs do you mean post a separate topic, or in this topic? Thank you.
-
In this thread
-
I have done all the instructions in the link you have me. The file was deleted but the screen still flashes. Maybe i should replace the hardrive or motherboard? or even a new computer? Thanks.
-
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.
1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Download Combofix from any of the links below, and save it to your DESKTOP.
If your version of Windows defaults to you download folder you will need to copy it to your desktop.
Link 1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)
Link 3 (http://subs.geekstogo.com/ComboFix.exe)
To prevent your anti-virus application interfering with ComboFix we need to disable it. See here (http://www.pchelpforum.com/anti-virus/110194-how-disable-your-security-applications-4.html) for a tutorial regarding how to do so if you are unsure.
- Close any open windows and double click ComboFix.exe to run it.
You will see the following image:
(http://i424.photobucket.com/albums/pp322/digistar/NSIS_disclaimer_ENG.png)
Click I Agree to start the program.
ComboFix will then extract the necessary files and you will see this:
(http://i424.photobucket.com/albums/pp322/digistar/NSIS_extraction.png)
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. This will not occur in Windows Vista and 7
It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
If you did not have it installed, you will see the prompt below. Choose YES.
(http://i424.photobucket.com/albums/pp322/digistar/RcAuto1.gif)
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
(http://i424.photobucket.com/albums/pp322/digistar/whatnext.png)
Click on Yes, to continue scanning for malware.
When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).
Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.
Note: Please Do NOT mouseclick combofix's window while its running because it may cause it to stall.
-
Here's the report:
ComboFix 13-03-14.02 - jian's famliy 4/2013 Sun 17:32:50.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.936.86.1033.18.4008.1809 [GMT 10:00]
执行位置: c:\users\jian's famliy\Downloads\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Trend Micro Titanium Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Trend Micro Titanium Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( 被删除的档案 )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\360Downloads
c:\360downloads\102057606.1001.zip
c:\program files (x86)\etype\fiLE2linktemplatex.dll
c:\program files (x86)\Savings Sidekick
c:\program files (x86)\Savings Sidekick\ButtonUtil.dll
c:\program files (x86)\Savings Sidekick\Savings Sidekick-bg.exe
c:\program files (x86)\Savings Sidekick\Savings Sidekick.dll
c:\program files (x86)\Savings Sidekick\Savings Sidekick.exe
c:\program files (x86)\Savings Sidekick\Savings Sidekick.ico
c:\program files (x86)\Savings Sidekick\Savings Sidekick.ini
c:\program files (x86)\Savings Sidekick\Savings SidekickInstaller.log
c:\program files (x86)\Savings Sidekick\Uninstall.exe
c:\programdata\FullRemove.exe
c:\users\Default\AppData\Roaming\SogouExplorer
c:\users\Default\AppData\Roaming\SogouExplorer\Bin\flash_wk.dll
c:\users\Default\AppData\Roaming\SogouExplorer\Bin\malurl.dat
c:\users\Default\AppData\Roaming\SogouExplorer\datapack1
c:\users\Default\AppData\Roaming\SogouExplorer\datapack2
c:\users\Default\AppData\Roaming\SogouExplorer\datapack3
c:\users\Default\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate1
c:\users\Default\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate2
c:\users\Default\AppData\Roaming\SogouExplorer\script.dat
c:\users\Default\AppData\Roaming\SogouExplorer\urlblack.dat
c:\users\Guest\AppData\Roaming\SogouExplorer
c:\users\Guest\AppData\Roaming\SogouExplorer\Bin\flash_wk.dll
c:\users\Guest\AppData\Roaming\SogouExplorer\Bin\malurl.dat
c:\users\Guest\AppData\Roaming\SogouExplorer\datapack1
c:\users\Guest\AppData\Roaming\SogouExplorer\datapack2
c:\users\Guest\AppData\Roaming\SogouExplorer\datapack3
c:\users\Guest\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate1
c:\users\Guest\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate2
c:\users\Guest\AppData\Roaming\SogouExplorer\script.dat
c:\users\Guest\AppData\Roaming\SogouExplorer\urlblack.dat
c:\users\jian's famliy\AppData\Local\Savings Sidekick
c:\users\jian's famliy\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx
c:\users\jian's famliy\AppData\Roaming\360SE
c:\users\jian's famliy\AppData\Roaming\360SE\360se.ini
c:\users\jian's famliy\AppData\Roaming\360SE\360se_s.ini
c:\users\jian's famliy\AppData\Roaming\360SE\360seie6.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1000\1000.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1000\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1000\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1015\1015.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1015\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1015\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1015\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\1018.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\ab.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\BankHelper.exe
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\banklist.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\bc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\boc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\caipiao.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\ccb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\ceb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\chongzhi.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\cib.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\citic.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\cmb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\cmbc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\dianka.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\fanli.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\gdb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\hxb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\icbc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\psbc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\sdb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\spdb.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\1018\tip.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2000\2000.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2000\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2000\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2000\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2001\2001.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2001\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2001\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2001\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2011\2011.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2011\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2011\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2011\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2022\2022.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2022\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2022\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2022\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2026\2026.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2026\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2026\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2026\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2049\2049.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2049\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2049\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2049\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2091\2091.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2091\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2091\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\2091\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3000\3000.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3000\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3000\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3000\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3000\workergame.swf
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3001\3001.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3001\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3001\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\3001\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\appdoct.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\appsi.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Appslocal.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Appslocal.ver
c:\users\jian's famliy\AppData\Roaming\360SE\apps\AppsServer.ver
c:\users\jian's famliy\AppData\Roaming\360SE\apps\AppStat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\baoku\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\baoku\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\baoku\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\baoku\baoku.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\config.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\default.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\download_temp\lvu4A7.tmp
c:\users\jian's famliy\AppData\Roaming\360SE\apps\download_temp\lvu4BB4.tmp
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtAppStore\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtAppStore\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtAppStore\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtAppStore\ExtAppStore.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtAppStore\ExtAppStore.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtFeedWeibo\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtFeedWeibo\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtFeedWeibo\ExtFeedWeibo.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtShare\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtShare\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtShare\ExtShare.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtSmartWiz\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtSmartWiz\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtSmartWiz\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtSmartWiz\ExtSmartWiz.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtSmartWiz\ExtSmartWiz.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtTuan\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtTuan\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtTuan\ExtTuan.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\ExtWebmail.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\ExtWebMail.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtWebmail\sidelogo.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\ExtYouxi.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\ExtYouxi.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\GameCenter.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\GameHelper.exe
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\QiWan.exe
c:\users\jian's famliy\AppData\Roaming\360SE\apps\ExtYouxi\sqlite3.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\maidongxi\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\maidongxi\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\maidongxi\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\maidongxi\maidongxi.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\NotifyDown.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\recmd.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Recmd2.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\recmdinfo.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\root.ver
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SEWebAppPlat.exe
c:\users\jian's famliy\AppData\Roaming\360SE\apps\shipin\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\shipin\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\shipin\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\shipin\shipin.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SnapPlugin\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SnapPlugin\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SnapPlugin\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SnapPlugin\SnapPlugin.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\SnapPlugin\SnapPlugin.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\TranslatorPlugin\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\TranslatorPlugin\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\TranslatorPlugin\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\TranslatorPlugin\TranslatorPlugin.dll
c:\users\jian's famliy\AppData\Roaming\360SE\apps\TranslatorPlugin\TranslatorPlugin.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\UseAppStat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\wanyouxi\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\wanyouxi\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\wanyouxi\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\wanyouxi\wanyouxi.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xiaoshuo\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xiaoshuo\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xiaoshuo\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xiaoshuo\xiaoshuo.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xinwen\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xinwen\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xinwen\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\xinwen\xinwen.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\yinyue\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\yinyue\app.ini
c:\users\jian's famliy\AppData\Roaming\360SE\apps\yinyue\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\yinyue\yinyue.png
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Youxi\app.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Youxi\app24.ico
c:\users\jian's famliy\AppData\Roaming\360SE\apps\Youxi\Youxi.png
c:\users\jian's famliy\AppData\Roaming\360SE\bin\360dl.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\360se.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\360SEUP.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\adfilter.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\admovie.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\bin\cloudurls.dat
c:\users\jian's famliy\AppData\Roaming\360SE\bin\doctor.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\download.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\extensions\SnapPlugin\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Favorites\Favorites.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\LoginEnrol\LoginEnrol.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Pages\newTab.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Pages\newTab2.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Pages\Pages.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\pluginbar.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\SafeAddressRes.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\SafeCentral.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\SiteVerifier.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\urllibauth.dat
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\urlproc.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\urlproc.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\urlprocnet.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\SafeCentral\wdui2.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\safelive.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\seext.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\sefix.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\sesvc.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\seup.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Skin\Angrybird.zip
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Skin\IE6Default.zip
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Skin\学校回忆.zip
c:\users\jian's famliy\AppData\Roaming\360SE\bin\sqlite3.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\suggest.dll
c:\users\jian's famliy\AppData\Roaming\360SE\bin\UnInst360SE.exe
c:\users\jian's famliy\AppData\Roaming\360SE\bin\update.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\bin\updateMsg.ini
c:\users\jian's famliy\AppData\Roaming\360SE\bin\Upgrade.ini
c:\users\jian's famliy\AppData\Roaming\360SE\bin\urlquery.dll
c:\users\jian's famliy\AppData\Roaming\360SE\data\360sefav.db
c:\users\jian's famliy\AppData\Roaming\360SE\data\360uyx.db
c:\users\jian's famliy\AppData\Roaming\360SE\data\360uyxe.db
c:\users\jian's famliy\AppData\Roaming\360SE\data\adfilter.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\BlankData.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\0b489fdcc81bac5fdfb7849ebfcab643.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\0bca92edb4cbff54c3141cd45de4e0b0.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\11ac35d6f27bfcd0bc938dc57ff7df94.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\1de3d19e19e27ef77d5c030581a6f1c3.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\1e834cfa71865232bebacdaa9f134a72.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\23e791d0f882e74da55a3c64c0c8a893.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\3872e0b6ee1fd73301ad2cb6365b00a2.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\407ef6753c448f7422269b96d20e44a0.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\41fb27e03b4a17b57c95e2fea0f7acac.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\4c31896c2e4b761366b66f76dc3cc898.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\4f12a25ee6cc3d6123be77df850e343e.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\54ed14093000c75d751574d2706c416d.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\55bec7be4c0804552178a4bb69546a45.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\6b09759e8a1437fb926b2f7b2093f91e.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\7c53dc4318f37b074ee2589294d5db69.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\a3d4287100650c5d4f24ef94fd710a6f.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\af84481196147f5dfe27ece717c0a074.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\b349f153a38fde939130f4cb00b4fc46.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\bfa89e563d9509fbc5c6503dd50faf2e.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\c596d77973581586db7e69211f2fb03c.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\d0f58dcfc07f405ed0a58ce494ef1343.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\d7be623d833ffdcc2ba17265ed51bebd.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\cachesnap\f6865421a0bad874dde8b23636e949cd.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\crainfo.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_14.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_15.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_17.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_20.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_21.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_25.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360sefav_2013_03_26.favdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DailyBackup\360uyxe_2012_10_03.uyxdb
c:\users\jian's famliy\AppData\Roaming\360SE\data\DeleteCookieFlag.txt
c:\users\jian's famliy\AppData\Roaming\360SE\data\FavouriteBar_Bits.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\gameurls.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\guardconfig.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\history.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico.bak
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\10554.new93.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\123558.uul.cc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\13707.newinstantsearch.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\1626.tudou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\184.164.153.229.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\2.bp.blogspot.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\211.89.225.121.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\265.52yeyou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\401ak47.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\43038.39157.filter.qualitycpv.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\6f83c9cd9c7e1ffee373d209b9643812.svp
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\7.rotator.wigetmedia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\79.142.69.31.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\79861f6d81643daabc7671595c8be78f.svp
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\7k7k7k.499pk.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\96prices.au.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\aandllandscapes.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\accommodationservice.sydney.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\account.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\accounts.google.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\accounts.kuaikuai.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\accounts.youtube.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\accountservices.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\acelandscapes.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\act.icson.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\actionbikeski.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad-apac.doubleclick.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad.adserve.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad.cabal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad.directrev.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad.doubleclick.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ad.yieldmanager.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\address.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ads.flixaddict.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ads.itshd.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\adserving.cpxinteractive.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\adsrich.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\aihdownload.adobe.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\airport.csair.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\altfarm.mediaplex.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\amch.questionmarket.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\answers.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\anz.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\anz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\api.viglink.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\apps.facebook.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\apps.hi.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\aq.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\art.findart.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\artshedonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ask.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ask.chinaxinge.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ask.ci123.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ask.metafilter.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.answers.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.ask.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.f385.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.finance.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.kumonglobal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.lifestyle.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.mc1204.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.mc1631.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.mc385.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.mg1.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.movies.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.news.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.overview.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.pfinance.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.price-selector.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.search.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.sports.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.totaltravel.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.tv.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.wow.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.x-1.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\au.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\auction.artrade.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\auction.artxun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\auction1.paipai.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\aus.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\australia.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\avc.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\awhitecarousel.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\b2c.icbc.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\baby.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\baike.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\baike.china.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bamboowa.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\banking3.anz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\banking4.anz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bathurst-panorama-holiday-park.nsw.big4.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bay156.mail.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.55bbs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.aigou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.cnnb.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.goumin.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.jbzyw.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.jiaju.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.leju.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.liba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.qcoco.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.qinzhou360.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.tt86.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bbs.wangjing.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bc.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beejeux.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beijing.aifang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beijing.anjuke.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beijing.haozu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beijing.homelink.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beijing.koofang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bestoffers.au.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beta.arabic.arabia.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\beta.skype.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bettereducation.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\big4.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bingogroup-px.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.58.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.5i5j.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.bbs.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.esf.eju.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.esf.focus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.esf.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.fang.anjuke.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.ganji.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.gtja.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.house.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.jiwu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.mayi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.ohqly.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.taofang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bj.yofang.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bjmsg.focus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blakesmarine-px.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.renren.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.wenxuecity.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blog.wxjy.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blogs.abc.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blogs.cisco.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\blogs.norman.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\boards.straightdope.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\book.cathaypacific.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\book.cxholidays.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\book.qantas.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\book.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bookings.countrylink.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bookings.jucy.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\box.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\browsergame.travian.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\bs.serving-sys.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\btsuperforlife.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\buildipedia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\business.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\buyinvite.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\by156w.bay156.mail.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\c.aa.sdo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\c.youku.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\c2c01.ulterius.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\camelliaparknursery.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\camping.anaconda.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cancer.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cars.mitula.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\catalogs.indiamart.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\catalogue.membershiprewards.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdn.box.img4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdn.boxdice.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdn.comment.4399pk.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdn.dickblick.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdn.nueview.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cdnimg4.artxun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cgi.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\china.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\china.findlaw.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\chopinandmysaucepan.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\classifieds.unsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\click.icptrack.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\click.p4p.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\click2.systemaffiliate.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\clk.atdmt.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\club.china.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\club.travel.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\club.xywy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.api.reg.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.bing.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.jimdo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cn.yimg.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\commons.wikimedia.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\commsec.viotv.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\community.boredofstudies.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\community.mathletics.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\community.ozchinese.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\community.skype.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\compare.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\config.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\contact.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\coolmath-games.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\coralair.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\corgicash.pixnet.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ct.invisionzone.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cube.safebox.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cul.china.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cyberstore.tpg.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\cz.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\czwhyt.cn.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\d1.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\daducha.hexunnet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\data.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dating.yahoo.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ddt.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\detail.china.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dgcs.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dh.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dict.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dict.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dict.cnki.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dict.hjenglish.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dict.youdao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\digitaljournal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ditu.google.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\diy.cits.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dl.client.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dl.p2sp.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dm.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dme.064.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dns.robtex.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dog.aigou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dogs.about.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dogspired.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\down.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\down.360safe.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\down.it168.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\download.cnet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\download.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\downloads.cxholidays.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dsparking.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dubhappy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\dzh.mop.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\east.phoenix.mathletics.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ebay.realestate.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\edit.bjs.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\edit.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\electricboat-conversion.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\email.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\email.americanexpress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\email.qantas.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\en.wikipedia.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\enewsletter.t-bone.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\engine.4dsply.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ent.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ent.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ent.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\entertainment.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\entry.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\esf.focus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\esf.nanjing.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\esf.sh.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\esf.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\everydaypromos.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\eye.mz16.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fancythatcostumes-px.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fang.99fang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fangchengyuan.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fanyi.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fanyi.youdao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\farm.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fashion.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\feedback.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fight.pet.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\filmfanatic.mywebsearch.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\filter.ctrtraffic.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\finance.eastmoney.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\finance.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\finance.jrj.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\finance.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\find.accommodation.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\findcruiser.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\flash-player-update.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fleon.me.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\flight.cits.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\flixjunky.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\flowerpower.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\forum.rpg.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\forums.ski.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\forums.whirlpool.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\fwapps.freewebs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g1a36.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g1a57.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g1a89.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g1a91.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g2a14.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g3a16.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g3a29.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\g4a33.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\game.ad1111.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\game.kaixin001.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\gd.064.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\get.adobe.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\gg.txwy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\global.americanexpress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\global.ard.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\go.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\goabroad.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\goldprice.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\googleads.g.doubleclick.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\gou.aigou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\group.wanda.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\gypsyju.blogspot.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\h.bbs.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hao.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hd.club.travel.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\health.petking.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\help.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\help.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hero.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hi.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\history.paypal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hkg.secure.agoda.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\home.autos.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\home.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\host.petbarn.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hotel.elong.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hotel.mapbar.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hotel.qunar.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hotels.ctrip.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.china.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.enorth.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.focus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.hexun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.ksou.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\housingcode.planning.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hqvideo.cc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\http.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hysj.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\hzdaily.hangzhou.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\i.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\i.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\i1.au.reastatic.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\i3gw.taobao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\iask.fh21.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\iask.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\iat.ninemsn.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\image.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\images.google.com.hk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\imagetrack.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\img1.126.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\img1.soufunimg.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\img15.artxun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\imgcache.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\immigration.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\invest.etrade.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ishare.iask.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\itunes.apple.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\java.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jbk.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jingyan.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jishi.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jiudian.qunar.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jjb.yuku.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\johnnybhm.weebly.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jonathan12038378.blog.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\js.4738.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\jtxm.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\kanema.pixnet.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\kb.rspca.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\kindkid.jimdo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\km.ganji.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\km.mayi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ks.cn.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\kumonglobal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\l.youxitui.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\labradorpuppiesforsalebyregisteredlabradorbreeders.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\laiba.tianya.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\lananlishe.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\lazydaytrader.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\life.dayoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\listings.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\live.myfootballclub.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\login.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\login.skype.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\login.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\longzhugongyu010.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\lxs.cncn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\m507.mail.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\m579.mail.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.cn.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.google.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mail.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\makefun.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mannabredlabradorretrievers.webs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\maps.google.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\marketplace.ski.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mcsd.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\me.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\media.17leyi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\media.edmgateway.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\melbourne.gumtree.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mesgmy.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mhzx.tgbus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mobile.netbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mobile.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\money.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\monfashionbuy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\more.starfall.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\more2.starfall.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\movie.tudou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\movie25.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\moving.about.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\movingtoaustralia.westpac.asia.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mrbamboo.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mrd.mail.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\msg.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\msn.foxsports.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\my.2144.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\my.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\my.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\my.tv.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\my.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mybank.icbc.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mybill.vodafone.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mybroadbandusage.virginbroadband.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\mycorgi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\myfun.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\myworld.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\nanjing.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\new-south-wales.pups4sale.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\new.060s.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\new.arts365.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.7k7k.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.cn.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.cntv.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.dichan.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.discovery.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.hfhouse.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.nb.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.pptv.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.wf.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\news.xinhuanet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\newsmarketgenonline7.nl.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\newsolidsearch.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ninemsn.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\northcross.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\northern-district-times.whereilive.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ocs.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ocsnext.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\offer.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\office.focus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\office.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\old.mall.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\op.52pk.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\open.login.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\os.qzs.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\p.club.news.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\p2.1lo0.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\packages.webjet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pagead2.googlesyndication.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pages.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\passport.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pay3.chinabank.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\payment.nswlotteries.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\payments.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pelicanair.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pengyou.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\people.aapt.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\performanceforums.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pet.poco.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pet.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pets.webmd.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\photo.163.com.ico
c:\
-
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\photo.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.2012.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.cul.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.my4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.mz16.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.news.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.sports.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.women.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pic.yule.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\plantworld.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\plsm.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\plus.google.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pm.findart.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pnpnet.qvalent.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\poker.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\postcodes.qpzm.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\postoffice.tpg.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\premier.ticketek.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\preview.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\prezi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\processing.csa.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\product.ebdoor.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\promotions.sportsbet.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\puppyintraining.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\pvz.youkia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\qianbao.chinabank.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\qixi.hao.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\qqbaby.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\quotagarden.virginbroadband.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\qy.58.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rd.bookingbuddy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\readingeggs.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\readswaste-lp.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\redirect.ad-feeds.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\reg.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\reg.email.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\reg.pengyou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\reg.pengyou.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\reg.youdao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rent.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rent2move.move2rent.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\res.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\res.webjet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\resolutioncentre.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rosewoodretrievers.wordpress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rover.ebay.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\royalwolf-px.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rsc.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rsjd.en.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\rsup10.rising.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\saa.auto.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\safecart.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\scallywagandvagabond.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\scholarship.sydgram.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sd.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\se.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\seafarerboats.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\search.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\search.searchcraze.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\search.spotxchange.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\search.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\search8.taobao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\secure.booking.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\secure.nch.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\securepayments.paypal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\securev2.quickbeds.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\selector.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sh.ganji.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sh.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shbbs.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shell.windows.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shop.artxun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shop.kmart.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shop.lands.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shop.perisher.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shop.target.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shopping.sina.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shouji.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\shouji.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\show.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\show.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\signin.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\signout.live.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sina.allyes.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\skylo.me.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\snowskierswarehouse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\so.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\so.redocn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\so.tv.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\so2.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\soft.baike.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\software-files-a.cnet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sohu.ad-plus.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sos.helpton.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sports.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\srx.au.ebayrtm.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\star.news.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\store-f6712.mybigcommerce.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\store.snowskierswarehouse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\stores.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\student.readingeggspress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\students.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\studyabroad.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\supersavings.directinsure.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\support.google.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\survey.client.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\survey.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\surveys.anz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\suzhou.bbs.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sx.bbs.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sy.house.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sydc.cd.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sydney.cinon.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sydney.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sydney.partyfun.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\sydneypowerboat.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\t.iloveyouxi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\t.tj0573.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tag.admeld.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\test1.xdwan.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\thehydrantblog.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\thepoodleanddogblog.typepad.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tieba.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tinyurl.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tnt.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\topeuro.biz.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\topical-stamps.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\transact.nab.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\travel.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\traveltips.usatoday.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\trmarine.rtrk.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tv.sogou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tv.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tvtropes.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\tw.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\twebmail.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\twomovies.name.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\u.unionli.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ucn.dealernet.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\uk.answers.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\uninstall.feedback.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\upload.wikimedia.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\us.etrade.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\us.lrd.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\user.qzone.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.4399pk.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.hudong.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.ku6.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.xi666.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\v.youku.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\vacations.webjet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\video.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\video.google.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\villa.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\vip.asus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\vip.tq.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\viruslist.rising.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\voices.yahoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\w.mail.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\warn.se.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wasm.usyd.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\weather.smh.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\web.7k7k.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\web.im.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\web.pet.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\web.qantas.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\web.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\webchat.tq.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\webmail.mail.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\webtrackerplus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\weeklyworldnews.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wei.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\weifang.dzwww.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wenda.chinabaike.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wenda.so.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wenda.tianya.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wenku.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wenwen.soso.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\whois.domaintools.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wholesalecostumeclub.custhelp.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wiki.answers.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\windows.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wp.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.0559u.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.10flash.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.120ask.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.123rf.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.17u.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.17u.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.2100cn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.2144.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.22dm.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.22dog.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.28dayslaterthemovie.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.3lian.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.45575.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.456.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.4999.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.499pk.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.4aqq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.51seer.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.5544.co.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.56.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.580yahui.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.597mm.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.5i5j.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.66law.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.7k7k.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.9ye.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.aattc.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.abc.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.abcboating.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.absolutealpine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.acrobat.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.actionbikeski.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.adamflooring.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.adcash.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.admaimai.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.adobe.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.adoptapet.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.affordableportable.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.agoda.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.agoda.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.airnewzealand.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.akc.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.akunacare.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.alexandalexa.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.alibaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.allhillsfencing.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.allmarine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.alloyfold.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.alugueldeflat.com.br.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.amaysim.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.amazon.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.amblesideprimary.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.americanexpress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.anaconda.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.anjuke.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.anz.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.anz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.apbusinesscentres.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.apple.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.appliancesonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.aptchina.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.arcadeprehacks.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ardoch.asn.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.art-search.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artdiscount.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artgallery.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.articlesbase.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artmaterials.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artrade.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artsense.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artsfans.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.artshedonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.asiamusic.hk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.asianpacificgroup.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.asko.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.asus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.atomicmarine.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.au.timeout.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.aussie-info.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.aussiemarine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.aussiestockforums.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.australialisted.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.australiandirect.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.auzziefamilies.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.avanquest.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.avclabs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.avg.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.avg.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.avira.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.axlscloset.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.b2web.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.babyschool.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.backcountry.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.backyardchickens.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.balmain-h.schools.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bamboodownunder.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bamboogarden.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bambooland.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bamboos.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bamboowholesale.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.barsec.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.baulkhamhillshighschool.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.becod.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bestb2b.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bfreebies3.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.big4.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bing.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.binglee.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bjpaintingservices.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.blurtit.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatinglicence.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatpoint.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatsales.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatsandoutboards.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatsmarinemall.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boatsonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.boattrader.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bom.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bonehamoptom.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bonzuna.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bookabin.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bookingbuddy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.breederinfocenter.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bswz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.btsmth.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.budgetbinhire.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.budtrol.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.bunnings.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.burkesbackyard.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.busaustralia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.businesswarehouse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.buzzle.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.byronbamboo.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.c185.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cabal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cafepress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.canismajor.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carbuddy.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carnivalandparty.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carpoint.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carsales.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carservice.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.carsguide.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.casino.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cataloguedeals.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cathaypacific.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cattechneering.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cb.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cbsheating.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ccc-inc.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cdcbus.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.centrelink.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cguardian.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chachaba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chatswoodhighschool.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cheaperoz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chinabank.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chinacath.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chinadaily.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chinanews.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chinesefirst.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chongwujiaoyi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.christchurch.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.christchurchschool.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.christies.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.chsmith.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cinajus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cits.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cityrail.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.civicvideo.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.clarinet.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.clevercanines.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.climatesmarthome.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.closepuppyfactories.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cn-education.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cncn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cnki.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.comsec.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.concretecoloursystems.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.coolmath-games.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.coolmath.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.coolmath4kids.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.coolpctips.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.coralseas.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.corgisavvy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.corpred.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.costumebox.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.countrylink.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.crust.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.csa.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cubbyhouse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.cylex.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.daifumd.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dailycliq.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dailymail.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.datalounge.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.davey.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dfrt.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dickblick.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.digu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.directory.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.discountart.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.discountusedcars.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.discoveryholidayparks.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dlcatholic.org.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dlook.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dm456.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dog126.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogbreedinfo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.doggish.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogs4sale.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogsey.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogster.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogwoods.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dogzonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.domain.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.douban.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dpam.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.dpi.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.drive.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.drugcite.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.eatability.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ebay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ec21.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.echoairconditioning.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.edmodo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.edutest.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.eduwo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.edzx.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.eeloves.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ehealthme.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ehow.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.eju.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.emoney.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.environment.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.environmentalgraffiti.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ethicsdepot.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.eventcinemas.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.evo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.evolutionboats.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.facebook.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.facilities.usyd.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.faisco.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.feecation.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.feikong.tv.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.file-extensions.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.filepuma.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fishingmonthly.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fishraider.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fixthisfile.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.flatoutboats.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.flixaddict.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.foods1.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.formalimage.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.forpaws.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fortstreet.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.foxnews.com.happyhcgultracustomers.new.msnbc-story.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.foxnews.com.happynews.americastopdiet.ultradrops.msbbc-story.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.foxsymes.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.free-tv-video-online.me.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.freerepublic.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fx120.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fxhangingsystems.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.fyjs.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gaiastone.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gallery4u.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gamestopica.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ganji.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gemtree.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.geodata.us.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ghfa.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gladesvill-p.schools.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gladesvilleravens.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.glarysoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.glenhavenparkaust.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.globeedu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.glowmonkey.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gmail.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.go2au.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gobookee.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.goldengatecorgis.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gongchang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.google.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.google.com.hk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.google.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.googleadservices.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gotoread.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.goumin.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.goupuzi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.greataustralianvoucher.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.greenwaygiants.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gucn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.guidedogs.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gumtree.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.gumtree.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hackol.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hanrob.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.haodf.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.haozu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.harbourparty.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.harveynorman.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hawkesburytourism.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hb.xinhuanet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hireaskipbin.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hiren.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hlgzs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.homelink.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hotdvd360.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hotelscombined.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hotfrog.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.housebeautiful.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.houseminders.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.housing.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.housing.unsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hoyts.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.huatan.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.hudong.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.humanesociety.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.humanservices.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.huntershd-h.schools.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.huntershill.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.icbc.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ichacha.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.iciba.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.idofishing.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.iehua.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ikcw.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.imdb.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.independentschools.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.intercontinental.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.international.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.international.unsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.internationalstudent.unsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.itshd.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jamberoo.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jecair.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jetpets.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jianpu.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jianpu8.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jiathis.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jiulong120.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.johndomeney.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.johnnybhm.weeby.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.joiebridal.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jonahome.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jucy.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.justlabradors.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.juwai.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.jz5u.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kanglu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kankedy.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.khionesnowwear.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kidspot.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kindkid.jimdo.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.king.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kings.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kingschools.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kmart.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kogan.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ku4399.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.kumby.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.labrador-retrievers.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.labuladuo.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.legislation.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.licence.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.lifestylecabins.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.littledream.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.liuxueshenggongyu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ljhooker.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.lucyclothing.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.m1905.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.manythings.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.marcade-cadeau.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.marineengine.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.marinews.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.marioworker.softendo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.maritime.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.maritimetrainingschool.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.markwalton.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.marriott.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.masada.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.masterchef.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.math.yorku.ca.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mathletics.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.maxrules.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mayi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mcgrath.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mcssl.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mediaxinan.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.meishichina.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mercury.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mercurymarine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mercurymarine.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mercuryracing.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.minecraft.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.miniclip.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.minidisc.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.moka99.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.montmarte.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.moriah.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mousebreaker.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.move2rent.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.move4rent.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.movie2k.to.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.moviestorm.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mpet.cc.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.msnbc.msn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.my.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mycorgi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mydealerads.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mydog.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mydogs.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mydogsupplies.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.myer.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.myfootballclub.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.myrp.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.myshopping.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mysoul.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.mytomnet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nadaguides.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nadfs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.namoc.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nchsoftware.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nciku.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.netyy.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.newlaptop.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.newtownartsupplies.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nextag.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ngclubs.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nipic.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nirenokennels.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nitrome.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.northbridgemarineservices.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.northcross.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nrma.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nsbhs.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nsi.tafensw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nswrail.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.nurseriesonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ocn.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.olx.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.oncy.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.oneyao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.onthehouse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.open.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.optimum-installer.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.otoogood.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.oursteps.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.outboards4sale.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ozhomestay.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ozlotteries.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.oznativeplants.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.paddysmarkets.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.patientsville.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pattukkottaiinfo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.paypal-australia.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.paypal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pchouse.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pcworld.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pedigreedatabase.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.penderlea.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.people.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.performersoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.perisher.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.perthstreetbikes.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petdianping.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petdirectory.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.peterglenn.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petersofkensington.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.peterwarrentoyota.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petkoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petsonline.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.petwave.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.photographyblogger.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pinkpages.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.plantworld.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.playcow.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pomsinoz.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.poodleforum.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.poodlesinaustralia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.poptropica.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.poptropicagames.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.porta-bote.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.porta-bote.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ppqu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pr.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.prizegiveaway.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.prodoggroomingsupplies.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.publicrecords.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.puppiesden.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.puppyfind.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pups4sale.co.nz.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.pups4sale.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.purina.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.putlocker.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qantas.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qihoo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qk100.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qq.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qq937.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.qtedu.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.quibids.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.quickbeds.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.quicksales.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.quiz2winmycar.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.realcommercial.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.realestate.cei.gov.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.realestate.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rebelsport.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.reddit.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.registeredbreeders.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.renovate.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.renovateforum.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.renren.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rhch.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.riverview.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.robtex.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.room4rent.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.roseville.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rottentomatoes.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.roulettebotplus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rs.realestate.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rsc.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rspcansw.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.rta.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ryde-athletics.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ryde.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.s1288.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.saintambrosebarlow.wigan.sch.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sandstonetiles.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sanwen8.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.savetherain.info.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.schools.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sczq.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sdro.nsw.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.selfcatering.co.uk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.selfservice.domain.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sheji777.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sheknows.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sheknows.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.shirleypeters.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.shishang789.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.shouyao8.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.showbizjunkies.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.shutterstock.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.shweeashbamboo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.simpletrade.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.siscospoodles.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.skikaos.com.au.ico
c:\users\jian's famliy\AppData\Roamin
-
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.skikaos.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.skype.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.slqgjg.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.smartertimberflooring.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.smartertravel.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.snowcentral.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.snowdenparkes.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.so.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sogou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sohu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.soku.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.soso.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sothebys.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.speedycomputer.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.spellingcity.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.spokeo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sportscourts.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.spurling.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.starfall.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.starfishkids.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.startlocal.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.stickpage.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.stoneandcraft.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.stonebiz.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.street-directory.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.students.mq.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.studyladder.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.subfloorinsulation.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sulit.com.ph.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sunandski.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sunriseimports.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.supacentamoorepark.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.supercheapauto.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.superski.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.surveymonkey.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.suttons.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.suvads.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydgram.nsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydney.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydney.partyfun.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneyboating.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneyboyshigh.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneycitytoyota.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneypubguide.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneytemporaryfence.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.sydneywater.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.szdog.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tahua.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tailsrwagging.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.taofang.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tcgcal.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.temporaryfence.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.temporaryfencehiresydney.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.terrificpets.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.theconcourse.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.thehulltruth.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.theravensclub.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.thredboskiaccommodation.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.threefifteen.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ticketek.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tigtag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.timberlinehomes.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.timeanddate.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tisahome.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.toiletmap.gov.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.torquetoyota.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.totaljerkface.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tourette.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.toyota.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.toyotausedcars.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tpg.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tradetag.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tradingpost.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.trailerboat.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.trailerspareparts.net.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.travelaustralia.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.travelmath.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.trialpay.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tripadvisor.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.trmarine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.truelocal.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tudou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.tujia.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.twomovies.name.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.ucadogs.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.unsw.edu.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.usastudy.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.veterinarypartner.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.vigay.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.virginmobile.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.virtuallythere.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.vistaprint.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.voc.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.volvocars.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.watersportsmarine.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.wcfquality.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.wearitagainsam.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.weather.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.webjet.com.hk.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.webjet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.webstatsdomain.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.webtrackerplus.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.westerntoyota.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.whereis.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.whitepages.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.wholesalecostumeclub.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.windowslive.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.woaixungou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.woaw.org.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.womo.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.woozworld.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.xcar.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.xdwan.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.xixishow.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yachtchina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yeeyi.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yellowpages.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yelp.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yixinzhai.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yiyuan18.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yongyao.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.youdao.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.youku.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yourpurebredpuppy.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.youtube.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yuanlin365.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yuhuagu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.yyhh.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.zhcchina.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.zhongguohuo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www.zoomdownloader.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www1.my.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www1.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www1.zmovie.co.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www17.jimdo.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www2.comsec.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www2.my.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www212.americanexpress.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www3.netbank.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www3.yha.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www5.netbank.commbank.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\www7.buyoffice.microsoft.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wxfy.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wzap.ask.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\wzus1.ask.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\xf.house.163.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\xml.ctrtraffic.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yahoo.carsales.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yahoo.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yahoo.seeklearning.com.au.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yh.artxun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yijun.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\yn.people.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\youxi.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ypk.39.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zh-cn.facebook.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zh.wikipedia.org.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhidao.aigou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhidao.baidu.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhidao.ttpet.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhongyi.ifeng.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhq.ok2099.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zhuli.aigou.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ziliao.sina.com.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\ziti.cndesign.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zixun.haodf.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zoom-thx.fordownloading.net.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zorram.amigakit.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zqjl.wan.360.cn.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zt.cndesign.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zu.sh.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zu.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zu1.soufun.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\zuowen.chazidian.com.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\支付类.asc
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\网购类.asc
c:\users\jian's famliy\AppData\Roaming\360SE\data\ico\银行类.asc
c:\users\jian's famliy\AppData\Roaming\360SE\data\IECompat.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\IEXCompat.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\newskin.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\preset.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\querrysgt.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\SetupInfo.log
c:\users\jian's famliy\AppData\Roaming\360SE\data\seu.dll
c:\users\jian's famliy\AppData\Roaming\360SE\data\seupdr.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\Sffix4x.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\Sffix4x2.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_FAVADD.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_FAVBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_FAVFOLDER.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_FAVSIDEBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_FAVURL.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_NET_NOT_LOGIN.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤\ICON_SEARCH.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\3.14版默认皮肤_preview.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_FAVADD.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_FAVBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_FAVFOLDER.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_FAVSIDEBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_FAVURL.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_NET_NOT_LOGIN.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird\ICON_SEARCH.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\Angrybird_preview.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_FAVADD.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_FAVBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_FAVFOLDER.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_FAVSIDEBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_FAVURL.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_NET_NOT_LOGIN.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default\ICON_SEARCH.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\IE6Default_preview.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\学校回忆\ICON_FAVADD.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\学校回忆\ICON_FAVSIDEBAR.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\学校回忆\ICON_FAVURL.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\学校回忆\ICON_SEARCH.ico
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinMisc\学校回忆_preview.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\Preview0.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\Preview1.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\preview2.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\preview3.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\Preview4.png
c:\users\jian's famliy\AppData\Roaming\360SE\data\SkinUpdate\update.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\snapcache\snap.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\switch.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\urls.dat
c:\users\jian's famliy\AppData\Roaming\360SE\data\URLTitle.ini
c:\users\jian's famliy\AppData\Roaming\360SE\data\user.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtAddons\ExtStats.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtAddons\ExtStats.ini.cfg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtAdfilter\ExtAdfilter.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bank.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bank2.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bank2.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bank3.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bankbox.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bankbox_up.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\banklist.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bankmode.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\bankmode3.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\ExtBank.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\icon\icbc.com.cn.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\icon\tip.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_10_18.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_10_23.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_10_27.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_10_31.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_11_01.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_11_02.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\Log\360log_2011_11_07.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtBank\stat_bankbox.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\360Doctor.exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\ax.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\back.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\bhoshield.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\doctor.dl_
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\doctor.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\doctor.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\DoctorSyn.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\ExtDoctor.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\flash.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\Flash10l\Flash10l.ocx
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\HttpClientW.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\rule.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\rule.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\seshopping.exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDoctor\url_stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\ExtDownload.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\ExtDownload.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\extdownload1.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\livep.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\=_gb2312_B_zKvJ8cbmwcstMS5wcHM=_=(1)
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\360compkill5.0(1).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\360compkill64(1).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Attachments_2011_12_26(1).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\attachments_2012_02_22(1).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\attachments_2012_02_22(2).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\attachments_2012_03_27.zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\attachments_2012_05_03(1).zip
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\BaiduPlayerNetSetup_71010048(1).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\BaiduPlayerNetSetup_71010048(2).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\BaiduPlayerNetSetup_71010048(3).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Extreme_Flash_Player_Setup(1).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Extreme_Flash_Player_Setup(2).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Extreme_Flash_Player_Setup(3).exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\IMG(1).pdf
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\myPic(1).png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\V.2011A(1).pdf
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Xmas(1)
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Xmas(2)
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtDownload\temp\Xmas(3)
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtLoginMagic\ExtLoginMagic.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\extpageblank\stat.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtPages\urlopt.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtProxy\proxy.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\app_stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\barbg.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\closebar.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\barbg.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\barbg2.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\btnweb.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\button.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\button_title.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\enginemask.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\line.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\menu_bg.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\menu_line.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\images\menumask.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\item.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\menu.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\menu_item.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\360buy.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\360video.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\Amazon.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\baidu.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\google.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\jike.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\qihoo.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\sogou.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\soku.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\taobao.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\vancle.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\weibo.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\youdao.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\zonghe.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\search-icon-hot\zonghe1.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\setting.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\settingbar.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\res\subitm.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtSmartWiz\SmartWizRes.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\360seNotify.exe
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\360webmail_ver2.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\downloadstate.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\webmail.bin
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\webmail.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtWebmail\WebMailHost.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\360pyx.db
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\360pyx2.db
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\360pyx3.db
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\adsoft\ExtYouxi_soft.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\adsoft\ExtYouxi_soft2.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\app_stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\BinConfig2.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\err\404.html
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\err\err.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\ExtYouxi.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\ExtYouxi_3.0.1.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\ExtYouxi_4.1.0.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\ExtYouxi_url.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\360WebGames.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\game_recomm.html
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\default_170.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\default_64.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\game_sprite.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\game_top_bg.gif
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\game_top_sprite.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\longjiang-s.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\longjiang.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\shenqu-s.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\shenqu.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\xianjianqing-s.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\image\xianjianqing.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\100000536.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\100000758.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\100000759.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\100012701.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\100039724.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1005.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1011.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1016.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\102060106.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\102095786.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1046.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1064.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1067.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1070.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1076.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1087.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1091.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1114.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1123.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1137.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1168.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1214.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1231.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1243.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1373.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1374.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1495.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1512.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1514.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1516.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameCenter\pic\1559.jpg
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\4VGIYI0D\background_gradient[1]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\4VGIYI0D\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\4VGIYI0D\navcancl[1]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\index.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\JFLC8P2N\bullet[1]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\JFLC8P2N\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\JFLC8P2N\info_48[2]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\QV4264PH\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\QV4264PH\ErrorPageTemplate[1]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\YM0YZ96E\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\YM0YZ96E\dnserrordiagoff_webOC[2]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\YM0YZ96E\errorPageStrings[2]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\Content.IE5\YM0YZ96E\httpErrorPagesScripts[1]
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCache\desktop.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameHelper\1\GameCookies\index.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\14.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\2.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\32.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\43.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\85.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\config.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\ExtYouxi_GameMode.xml
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameMode\Histroy.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameNews\config.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\GameNews\news.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\cqgd.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\ddt.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\dgwm.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\frg.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\frxz.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\hhsh.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\mhxx.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\tdyx.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\yjjh.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\yxyz.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\icons\zwjs.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\100001.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\100002.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\100004.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\100005.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\100022.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200002.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200003.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200004.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200006.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200008.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200009.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200014.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200017.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200019.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200020.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\pngs\200099.png
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\promlib.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\stat3.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\ver.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\ExtYouxi\wlist.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Favorites.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Favorites2.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_03_30.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_03_31.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_04_01.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_04_02.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_04_03.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_04_04.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Log\360log_2013_04_06.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\Quick.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\titleopt.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Favorites\titleopt.dll.bak
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\data.dll
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\icon\shouji.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\icon\youxi.ico
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\Pluginbar.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\Pluginbar\ver.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\esimple.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\log\2012-02-24.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\log\2013-01-23.log
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\SafeCentral.in
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\SafeCentral.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\safehfc.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\SafeProtect.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\urllib.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\urllibauth.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SafeCentral\urllibw.dat
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\SnapPlugin\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\TranslatorPlugin\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\extensions\TranslatorPlugin\translate.ini
c:\users\jian's famliy\AppData\Roaming\360SE\Hang\360se_hang.log
c:\users\jian's famliy\AppData\Roaming\360SE\seup.ini
c:\users\jian's famliy\AppData\Roaming\360SE\stat.ini
c:\users\jian's famliy\AppData\Roaming\360SE\v3update\updatecfg.ini
c:\users\jian's famliy\AppData\Roaming\360SE\v3update\updateinstall.ini
c:\users\jian's famliy\AppData\Roaming\360SE\v3update\v3install\360se_chs_5.0.2.1027.exe
c:\users\jian's famliy\AppData\Roaming\360SE\WebCache\hao.360.cn.html
c:\users\jian's famliy\AppData\Roaming\360SE\zmt\up2se5.exe
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\Bin\flash_wk.dll
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\Bin\malurl.dat
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\datapack1
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\datapack2
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\datapack3
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate1
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\MetaSearch\metasearchupdate2
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\script.dat
c:\users\UpdatusUser\AppData\Roaming\SogouExplorer\urlblack.dat
c:\windows\PFRO.log
D:\360Downloads
d:\360downloads\360安全卫士_8.5正式版.exe
d:\360downloads\360安全卫士8.3Beta.exe
d:\360downloads\360安全桌面_1.4Beta.insp
d:\360downloads\360杀毒64位_3.1.exe
d:\360downloads\360电脑专家_5.3.320.801.exe.P2P
d:\360downloads\360电脑专家_5.3.320.801.insp
d:\360downloads\Adobe Flash Player Plugin_11.6.exe.P2P
d:\360downloads\Firefox 3.6.23.exe.P2P
d:\360downloads\Firefox 3.6.23.insp
d:\360downloads\Firefox_6.0.exe.P2P
d:\360downloads\Firefox_6.0.insp
d:\360downloads\McAfee_13.3.117.zip.P2P
d:\360downloads\QQ2011.exe
d:\360downloads\The_KMPlayer_1441.exe.P2P
d:\360downloads\The_KMPlayer_1441.insp
d:\360downloads\wpcache\360wallpaper.jpg
d:\360downloads\wpcache\p17.qhimg.com\bdm\1366_768_85\d\_open360\fresh0116\32.jpg
d:\360downloads\wpcache\p19.qhimg.com\bdm\1366_768_85\d\_open360\fresh0204\13.jpg
d:\360downloads\zhuyuanCAD_3.1\killcadvirus.chm
d:\360downloads\zhuyuanCAD_3.1\killcadvirus.ini
d:\360downloads\zhuyuanCAD_3.1\筑原CAD病毒专杀 V3.1.exe
D:\install.exe
.
.
((((((((((((((((((((((((( 2013-03-07 至 2013-04-07 的新的档案 )))))))))))))))))))))))))))))))
.
.
2013-04-07 08:07 . 2013-04-07 08:07 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-04-07 08:07 . 2013-04-07 08:07 -------- d-----w- c:\users\Guest\AppData\Local\temp
2013-04-07 08:07 . 2013-04-07 08:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-04-07 07:29 . 2013-04-07 07:29 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{902F3DC4-2915-4C73-99E9-437DDB88097C}\offreg.dll
2013-04-06 07:27 . 2013-03-18 18:50 9311288 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{902F3DC4-2915-4C73-99E9-437DDB88097C}\mpengine.dll
2013-04-04 10:27 . 2013-04-04 12:18 -------- d-----w- c:\program files (x86)\7-Zip
2013-04-04 10:26 . 2013-04-04 10:27 -------- d-----w- c:\users\jian's famliy\AppData\Local\Smartbar
2013-04-04 10:25 . 2013-04-07 04:34 -------- d-----w- c:\users\jian's famliy\AppData\Roaming\Yontoo
2013-04-04 10:25 . 2013-04-04 10:25 -------- d-----w- c:\program files (x86)\Yontoo
2013-04-04 10:25 . 2013-04-04 10:25 -------- d-----w- c:\programdata\Tarma Installer
2013-03-22 10:39 . 2013-02-12 14:02 19968 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-03-14 12:34 . 2013-03-14 12:34 -------- d-----w- c:\program files\Microsoft Silverlight
2013-03-14 12:34 . 2013-03-14 12:34 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
.
.
.
(((((((((((((((((((((((((((((((((((((((( 在三个月内被修改的档案 ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-04-07 07:26 . 2011-02-24 22:43 17920 ----a-w- c:\windows\system32\rpcnetp.exe
2013-04-07 04:33 . 2011-02-25 00:22 45056 ----a-w- c:\windows\SysWow64\acovcnt.exe
2013-04-07 04:33 . 2011-07-24 23:58 58288 ----a-w- c:\windows\SysWow64\rpcnet.dll
2013-03-13 23:08 . 2012-04-23 00:58 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-13 23:08 . 2011-08-15 11:36 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-11 14:10 . 2012-09-26 23:34 282744 ------w- c:\windows\system32\MpSigStub.exe
2013-02-03 09:00 . 2013-02-03 09:00 0 ----a-w- c:\windows\system32\nsk47EE.tmp
2013-01-31 08:04 . 2013-01-31 08:04 5143664 ----a-w- c:\windows\system32\SogouPY.ime
2013-01-31 08:04 . 2013-01-31 08:04 2972272 ----a-w- c:\windows\SysWow64\SogouPY.ime
2013-01-15 00:20 . 2011-02-24 22:45 17920 ----a-w- c:\windows\SysWow64\rpcnetp.dll
2013-01-15 00:18 . 2011-02-24 22:43 17920 ----a-w- c:\windows\SysWow64\rpcnetp.exe
.
.
((((((((((((((((((((((((((((((((((((( 重要登入点 ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*注意* 空白与合法缺省登录将不会被显示
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]
2009-11-25 02:47 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{61e0ef7a-9bc0-45ea-9b2f-f3e9f02692bd}]
2009-11-25 02:47 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{94C3E4BB-A261-4A83-B437-EA6F7A28CA68}]
2011-11-18 03:38 186256 ----a-w- c:\program files (x86)\Kuaiwan\QvodGameExtend.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{A7AF277D-1466-4A7B-93AF-B043984A5671}]
2012-07-30 23:38 2669408 ------w- c:\program files (x86)\Glarysoft Toolbar\tbcore3.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{A8502600-B272-4F68-A67B-A0305D46D297}]
2012-04-21 03:11 173968 ----a-w- c:\qvodplayer\QvodExtend.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{E5C66DD8-308B-4a4f-AF0A-3D04F25B5343}]
2009-11-25 02:47 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2013-03-23 01:59 197920 ----a-w- c:\program files (x86)\Yontoo\YontooIEClient.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{32D47EA5-9473-4CAD-805D-9999F15D5AE2}"= "c:\program files (x86)\Glarysoft Toolbar\tbcore3.dll" [2012-07-30 2669408]
"{3A6BE320-DC9B-4D24-A6E8-621B81544F4B}"= "c:\program files (x86)\Search Core Systems\Dynamo Toolbar\ie\dtb.dll" [2013-01-04 618032]
.
[HKEY_CLASSES_ROOT\clsid\{32d47ea5-9473-4cad-805d-9999f15d5ae2}]
[HKEY_CLASSES_ROOT\TBSB05810.TBSB05810.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB05810.TBSB05810]
.
[HKEY_CLASSES_ROOT\clsid\{3a6be320-dc9b-4d24-a6e8-621b81544f4b}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Syncables"="c:\program files (x86)\syncables\syncables desktop\Syncables.exe" [2010-07-19 370480]
"Yontoo Desktop"="c:\users\jian's famliy\AppData\Roaming\Yontoo\YontooDesktop.exe" [2013-03-23 42784]
"Browser Infrastructure Helper"="c:\users\jian's famliy\AppData\Local\Smartbar\Application\QuickShare.exe" [2013-02-10 13824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"SonicMasterTray"="c:\program files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe" [2010-07-10 984400]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2011-08-04 1612920]
"IJNetworkScannerSelectorEX"="c:\program files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" [2011-01-15 452016]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-12-10 3147384]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-24 1601536]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe [2011-2-25 548528]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2011-2-25 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\keyboard layouts\e0200804]
Ime File REG_SZ SOGOUPY.IME
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VAGP ATX Chipset]
@="Driver Group"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
"BaofengPlatform"="c:\program files (x86)\Baofeng\StormPlayer\BaofengPlatform.exe" /autorun
"MINIFLASHGET"="c:\program files (x86)\FlashGet Network\
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-03-19 3289208]
R3 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe
R3 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe [2012-02-10 193816]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe [2012-02-10 240408]
R3 BeepMbr;BeepMbr;c:\program files (x86)\360\360Safe\firstaid\Fix\BeepMbr64.sys
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [2009-10-21 243200]
R3 KSVSDRV;KSVSDRV;c:\program files (x86)\Common Files\KuaiKuai\ksvs\ksvsdrv.sys [2011-08-10 174712]
R3 KSVSSVC;Kuaikuai Streaming and Virtualization Service;c:\program files (x86)\Common Files\KuaiKuai\ksvs\ksvssvc.exe [2011-08-10 971120]
R3 KSVSUPD;Kuaikuai Runtime Update Service;c:\program files (x86)\Common Files\KuaiKuai\ksvs\ksvsupd.exe [2011-08-10 211312]
R3 RsMgrSvc;Rsd Service;c:\program files (x86)\Rising\RSD\RsMgrSvc.exe [2011-11-30 150168]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2010-08-03 290920]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
R3 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-27 53760]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-07-26 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-14 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-20 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-11-15 111968]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-13 40800]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2010-12-27 25960]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2010-07-26 17024]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-01 185696]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-20 200032]
S1 Safebox;Safebox;c:\program files (x86)\360Safebox\SafeBoxKrnl64.sys [2010-06-12 22064]
S2 360js;360电脑技师服务;c:\program files (x86)\360\360jishi\360js.exe [2013-01-29 241512]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [2010-11-30 379520]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 ICBC Daemon Service;ICBC Daemon Service;c:\program files (x86)\ICBCEbankTools\ICBCAntiPhishing\ICBC_WIN64\IcbcDaemon_64.exe [2011-12-26 554112]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-09-30 508776]
S2 TiMiniService;TiMiniService;c:\program files\Trend Micro\Titanium\TiMiniService.exe [2010-09-17 241488]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [2010-09-17 67664]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-04-17 13832]
S2 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-04-17 134928]
S2 Yontoo Desktop Updater;Yontoo Desktop Updater;c:\program files (x86)\Yontoo\Y2Desktop.Updater.exe [2013-03-23 23552]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-12-13 138024]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 333928]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-09-30 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-09-30 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-09-30 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-09-30 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-09-30 219496]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8BCB0605-D909-4c3b-B490-DEFE88BA95FA}]
2011-12-26 06:48 466048 ----a-w- c:\program files (x86)\ICBCEbankTools\ICBCAntiPhishing\ICBC_WIN64\Icbc_AntiPhishing_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49 70656 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BVDLinkIconOverlay]
@="{1DE3AF1F-C296-45DA-A64C-F295F720585E}"
[HKEY_CLASSES_ROOT\CLSID\{1DE3AF1F-C296-45DA-A64C-F295F720585E}]
2013-02-27 06:12 173944 ----a-w- c:\program files (x86)\Baofeng\BFVKanDianYing\BFVShellIcon64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2010-03-16 1754448]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2010-10-12 192520]
"Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\VizorShortCut.exe" [2010-09-17 322384]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-12-03 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-12-03 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-12-03 417304]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-12-10 2186856]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2010-01-21 909824]
"ICBCEBankAssist"="c:\program files\ICBCEbankTools\ICBCSetupIntegration\RunEBank.exe" [2012-01-04 47744]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2011-03-14 2779024]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- 而外的扫描 -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.searchbrowsing.com/?uid=55fcd09b441d772f5db32333e9afbe26&pid=100&v=1
mStart Page = hxxp://www.searchbrowsing.com/?uid=55fcd09b441d772f5db32333e9afbe26&pid=100&v=1
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: 使用迅雷精简版下载 - c:\program
-
IE: 使用迅雷精简版下载 - c:\program files (x86)\Thunder Network\MiniThunder\BHO\minixlgeturl.htm
IE: 使用迅雷精简版下载全部链接 - c:\program files (x86)\Thunder Network\MiniThunder\BHO\minixlgetAllurl.htm
IE: 使用迷你快车下载 - c:\program files (x86)\FlashGet Network\FlashGet Mini\GetUrl.htm
IE: 使用迷你快车下载全部链接 - c:\program files (x86)\FlashGet Network\FlashGet Mini\GetAllUrl.htm
IE: 使用迷你快车下载该网页FLV - c:\program files (x86)\FlashGet Network\FlashGet Mini\FlashGetFlvdetector.htm
IE: 添加网址到360安全桌面 - c:\program files (x86)\360\360Desktop\Bin\addapp.html
Trusted Zone: icbc.com.cn
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{EFF2D18C-5AEF-4403-8F53-57F754AF74D0}: NameServer = 123.200.191.17 123.200.191.18
DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} - hxxps://mybank.icbc.com.cn/icbc/newperbank/AxSafeControls.cab
DPF: {BC878AFA-767A-47D8-B61E-AD96F210833A} - hxxps://mybank.icbc.com.cn/icbc/newperbank/icbcEnvCtrl.cab
.
.
------- 文件类型 -------
.
txtfile=c:\windows\notepad.exe %1
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{d0230100-3044-43b1-a44e-70dc12fd418c} - c:\program files (x86)\etype\file2linktemplateX.dll
Toolbar-Locked - (no file)
Toolbar-{d0230100-3044-43b1-a44e-70dc12fd418c} - c:\program files (x86)\etype\file2linktemplateX.dll
Toolbar-{b278d9f8-0fa9-465e-9938-0c392605d8e3} - (no file)
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe
AddRemove-{23F3F476-BE34-4f48-9C77-2806A8393EC4} - c:\users\jian's famliy\AppData\Roaming\360se\bin\UnInst360SE.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Print\Forms\IQ豽Xb豽 *G*]
"FormKeyword"=hex:
.
完成时间: 2013-04-07 18:16:59
ComboFix-quarantined-files.txt 2013-04-07 08:16
.
Pre-Run: 61,802,250,240 bytes free
Post-Run: 61,149,765,632 bytes free
.
- - End Of File - - B2ACB83D74B6E9AB1B94D44FE774D98B
-
The log shows two AV's on your computer; AVG AntiVirus Free Edition 2013 and Trend Micro Titanium Internet Security. Please make sure that only one AV is enabled at any time on your computer otherwise, they will cause conflicts.
Internet Explorer's security is based upon a set of zones. Each zone has different security in terms of what scripts and applications can be run from a site that is in that zone. There is a security zone called the Trusted Zone. This zone has the lowest security and allows scripts and applications from sites in this zone to run without your knowledge. It is therefore a popular setting for malware sites to use so that future infections can be easily done on your computer without your knowledge as these sites will be in the Trusted Zone. Therefore, I recommend that nothing be allowed in the trusted zone. If you agree, please do the following.
Re-running ComboFix to remove infections:
- Close any open browsers.
- Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
- Open notepad and copy/paste the text in the quotebox below into it:
KillAll::
Firefox::
Trusted Zone: icbc.com.cn
DDS::
Trusted Zone: icbc.com.cn
- Save this as CFScript.txt, in the same location as ComboFix.exe
(http://i424.photobucket.com/albums/pp322/digistar/cfscriptb4.gif)
- Referring to the picture above, drag CFScript into ComboFix.exe
- When finished, it shall produce a log for you at C:\ComboFix.txt
- I don't need to see the log from this script if you decide to run it.
*********************************************
Please download Rooter (http://eric71.geekstogo.com/tools/Rooter.exe) and Save it to your desktop.
- Double click it to start the tool.Vista and Windows7 run as administrator.
- Click Scan.
- Eventually, a Notepad file containing the report will open, also found at C:\Rooter.txt. Post that log in your next reply.
***********************************************
- Download RogueKiller (http://tigzy.geekstogo.com/Tools/RogueKiller.exe) on the desktop
- Close all the running programs
- Windows Vista/7 users: right click on RogueKiller.exe, click Run as Administrator
- Otherwise just double-click on RogueKiller.exe
- Pre-scan will start. Let it finish.
- Click on SCAN button.
- A report (RKreport.txt) should open. Post its content in your next reply. (RKreport could also be found on your desktop)
- If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again
-
Hello Dave, I have done what you had told and I have got all the logs, and I will post them. But before posting it, I would like to ask if I do not allow anything in the trusted zone, would it affect my internet?
-
Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows 7 Home Edition (6.1.7600)
[32_bits] - Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
.
[wscsvc] (Security Center) RUNNING (state:4)
[MpsSvc] RUNNING (state:4)
Windows Firewall -> Enabled
Windows Defender -> Enabled
User Account Control (UAC) -> Disabled !
.
Internet Explorer 9.0.8112.16421
.
C:\ [Fixed-NTFS] .. ( Total:149 Go - Free:53 Go )
D:\ [Fixed-NTFS] .. ( Total:425 Go - Free:420 Go )
E:\ [CD_Rom]
Q:\ [Fixed-NTFS] .. ( Total:0 Go - Free:0 Go )
.
Scan : 21:39.03
Path : C:\TDDownload\Rooter.exe
User : jian's famliy ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
Locked System (4)
______ 烕盿????葼盿萰盿 (328)
______ 烕盿????葼盿萰盿 (768)
______ 烕盿????葼盿萰盿 (872)
______ 烕盿????葼盿萰盿 (892)
______ 烕盿????葼盿萰盿 (928)
______ 烕盿????葼盿萰盿 (952)
______ 烕盿????葼盿萰盿 (960)
______ 烕盿????葼盿萰盿 (460)
______ 烕盿????葼盿萰盿 (776)
______ 烕盿????葼盿萰盿 (772)
______ 烕盿????葼盿萰盿 (956)
______ 烕盿????葼盿萰盿 (1072)
______ 烕盿????葼盿萰盿 (1132)
______ 烕盿????葼盿萰盿 (1176)
______ 烕盿????葼盿萰盿 (1300)
______ 烕盿????葼盿萰盿 (1492)
______ 烕盿????葼盿萰盿 (1540)
______ 烕盿????葼盿萰盿 (1552)
______ 烕盿????葼盿萰盿 (1744)
______ 烕盿????葼盿萰盿 (1788)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (1812)
______ C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (1864)
______ 烕盿????葼盿萰盿 (1924)
______ C:\Program Files (x86)\360\360jishi\360js.exe (2124)
______ C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2156)
______ C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (2236)
______ 烕盿????葼盿萰盿 (2276)
______ 烕盿????葼盿萰盿 (2304)
______ C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (2336)
______ C:\Windows\SysWOW64\rpcnet.exe (2400)
______ C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2708)
______ 烕盿????葼盿萰盿 (2852)
______ 烕盿????葼盿萰盿 (2920)
______ 烕盿????葼盿萰盿 (2944)
______ 烕盿????葼盿萰盿 (2952)
______ 烕盿????葼盿萰盿 (2960)
______ 烕盿????葼盿萰盿 (3012)
______ C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe (2140)
______ 烕盿????葼盿萰盿 (1224)
______ C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (3436)
______ C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (3600)
______ 烕盿????葼盿萰盿 (4020)
______ 烕盿????葼盿萰盿 (3624)
______ 烕盿????葼盿萰盿 (820)
______ 烕盿????葼盿萰盿 (4120)
______ 烕盿????葼盿萰盿 (4132)
______ 烕盿????葼盿萰盿 (4188)
______ C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (4200)
______ C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (4212)
______ C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (4236)
______ C:\Program Files (x86)\360\360Desktop\Bin\360AppCore.exe (4248)
______ 烕盿????葼盿萰盿 (4272)
______ 烕盿????葼盿萰盿 (4316)
______ C:\Windows\SysWOW64\ACEngSvr.exe (4424)
______ C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (4772)
______ 烕盿????葼盿萰盿 (4984)
______ C:\Program Files (x86)\360Safebox\safeboxtray.exe (4996)
______ 烕盿????葼盿萰盿 (5072)
______ 烕盿????葼盿萰盿 (5092)
______ 烕盿????葼盿萰盿 (5100)
______ 烕盿????葼盿萰盿 (4160)
______ 烕盿????葼盿萰盿 (4592)
______ C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (4596)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (2620)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (1452)
______ 烕盿????葼盿萰盿 (1384)
______ 烕盿????葼盿萰盿 (4964)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (1396)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (1724)
______ C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (1852)
______ C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (5036)
______ C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (5136)
______ C:\Program Files (x86)\iTunes\iTunesHelper.exe (5144)
______ C:\Program Files (x86)\AVG\AVG2013\avgui.exe (5216)
______ C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (5400)
______ 烕盿????葼盿萰盿 (5876)
______ 烕盿????葼盿萰盿 (5540)
______ 烕盿????葼盿萰盿 (6184)
______ 烕盿????葼盿萰盿 (6920)
______ 烕盿????葼盿萰盿 (7104)
______ 烕盿????葼盿萰盿 (1484)
______ 烕盿????葼盿萰盿 (6148)
______ 烕盿????葼盿萰盿 (6764)
______ 烕盿????葼盿萰盿 (624)
______ 烕盿????葼盿萰盿 (6612)
______ C:\Program Files (x86)\SogouInput\Components\AddressSearch\1.0.0.1169\SGImeGuard.exe (2848)
______ C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (688)
______ C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (516)
______ 烕盿????葼盿萰盿 (11160)
______ 烕盿????葼盿萰盿 (10620)
______ C:\Users\jian's famliy\AppData\Local\360Chrome\Chrome\Application\360chrome.exe (2552)
______ C:\Users\jian's famliy\AppData\Local\360Chrome\Chrome\Application\360chrome.exe (14284)
______ C:\Users\jian's famliy\AppData\Local\360Chrome\Chrome\Application\360chrome.exe (11208)
______ C:\Users\jian's famliy\AppData\Local\360Chrome\Chrome\Application\360chrome.exe (15092)
______ 烕盿????葼盿萰盿 (12012)
______ 烕盿????葼盿萰盿 (4464)
Locked audiodg.exe (6312)
______ 烕盿????葼盿萰盿 (14696)
______ C:\Program Files (x86)\Baofeng\BFVKanDianYing\BFVServer.exe (12820)
______ C:\TDDownload\Rooter.exe (3076)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 (Start_Offset:32256 | Length:23071878144)
\Device\Harddisk0\Partition2 --[ MBR ]-- (Start_Offset:23071910400 | Length:160031789568)
\Device\Harddisk0\Partition0 (Start_Offset:183104438272 | Length:457029189632)
\Device\Harddisk0\Partition3 (Start_Offset:183105486848 | Length:457028141056)
.
----------------------\\ Scheduled Tasks
.
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
----------------------\\ Scan completed at 21:39.35
.
C:\Rooter$\Rooter_1.txt - (10/04/2013 | 21:39.35)
-
I would like to ask if I do not allow anything in the trusted zone, would it affect my internet?
Yes. Putting sites in the trusted zone is just opening the door for all kinds of malware.
Could I see the RogueKiller log please?
-
Hi Dave, I am very sorry but RougeKiller did not work on my computer, and it says it is not supported. :(
-
I'd like to scan your machine with ESET OnlineScan
•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan (http://eset.com/onlinescan)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetOnline.png) button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstall.png) to download the ESET Smart Installer. Save it to your desktop.
- Double click on the (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstallDesktopIcon-1.png) icon on your desktop.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetAcceptTerms.png)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetStart.png) button.
•Accept any security warnings from your browser.
- Leave the check mark next to Remove found threats.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetScanArchives.png)
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push (http://i424.photobucket.com/albums/pp322/digistar/esetListThreats.png)
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetExport.png), and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the (http://i424.photobucket.com/albums/pp322/digistar/esetBack.png) button.
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetFinish.png)
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
-
Here's the log:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=ce424a03787b5a449a8f843cacaa48cb
# engine=13635
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-04-17 12:06:41
# local_time=2013-04-17 10:06:41 (+1000, AUS Eastern Standard Time)
# country="Australia"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=1799 16775165 100 96 0 0 0 0
# compatibility_mode=5893 16776573 100 94 0 117833851 0 0
# compatibility_mode=6657 16777214 0 14 23114310 23114310 0 0
# scanned=265839
# found=5
# cleaned=3
# scan_time=8117
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Users\All Users\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="a variant of Win32/Adware.Yontoo.B application (cleaned by deleting - quarantined)" ac=C fn="C:\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll"
sh=800E4F9CAD354DBEF9E64F23375C61DB3107C290 ft=1 fh=cd4294964f0acafb vn="multiple threats (cleaned by deleting - quarantined)" ac=C fn="C:\TDDownload\SpeedyComputer.exe"
-
Please run ESET and see if anything shows up.
-
Hi Dave, I ran ESET but nothing came up. No threats was found. I found that my computer is not bad now, and programs are running okay. Except AVG kept saying that C:/program files/autoguarder/autoguarder.exe is still there. I cannot find it in the location provided.
-
Ok, download and install MSE and run a scan and see if it finds the same thing as AVG.
Microsoft Security Essentials for Windows Vista\Windows 7 (http://majorgeeks.com/Microsoft_Security_Essentials_for_Windows_VistaWindows_7_d6242.html) - 64 bit Download (http://majorgeeks.com/downloadget.php?id=6242&file=5&evp=9112d44b71f157fc5d7fcd7724b088ca)
-
Ni Dave, MSE says that Autoguarder.exe is still there, but in a different location. It looks like it copied itself to another location at c:/system32/autoguarder.exe.
Now I know that system32 is a very important file so I tried to remove it with MSE. It did, but somehow the virus file come up again after reboot or shutting down. Also I realised that a file(C:/program files/Autoguarder/Folder.bat) was created by something, and my AVG keep detecting them but failed to remove them completely. I opened the batch file in notepad and found that it tries to delete all "dll" files in system32. So everytime My pc boots up a cmd window shows up. But most of the action were denied. However I think 5 dll files were still deleted by the virus.somehow it's not affecting my system mch, but I am very worried.
thanks!
-
Ok Please uninstall this program: C:/program files/Autoguarder
Please download aswMBR.exe (http://public.avast.com/%7Egmerek/aswMBR.exe) ( 511KB ) to your desktop.
Double click the aswMBR.exe to run it
(http://i424.photobucket.com/albums/pp322/digistar/aswMBR_Scan.jpg)
Click the "Scan" button to start scan
Note: Do not take action against any **Rootkit** entries until I have reviewed the log. Often there are false positives
(http://i424.photobucket.com/albums/pp322/digistar/aswMBR_SaveLog.png)
On completion of the scan click save log, save it to your desktop and post in your next reply
-
Hi Dave, I tried to uninstall Autoguarder.exe, but it say's access denied. I tried changing the security settings on access, but it didn't work.
Anyways heres the log:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-22 11:34:16
-----------------------------
11:34:16.420 OS Version: Windows x64 6.1.7600
11:34:16.420 Number of processors: 4 586 0x2A07
11:34:16.421 ComputerName: JIANSFAMLIY-PC UserName: jian's famliy
11:34:18.848 Initialize success
11:35:16.930 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
11:35:16.936 Disk 0 Vendor: Size: 0MB BusType: 0
11:35:17.053 Disk 0 MBR read successfully
11:35:17.058 Disk 0 MBR scan
11:35:17.063 Disk 0 Windows 7 default MBR code
11:35:17.070 Disk 0 MBR hidden
11:35:17.077 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 22003 MB offset 63
11:35:17.096 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 152618 MB offset 45062325
11:35:17.104 Disk 0 Partition - 00 0F Extended LBA 435857 MB offset 357625856
11:35:17.149 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 435856 MB offset 357627904
11:35:17.187 Disk 0 scanning C:\Windows\system32\drivers
11:35:29.094 Service scanning
11:35:45.144 Modules scanning
11:35:45.169 Disk 0 trace - called modules:
11:35:45.518 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys hal.dll
11:35:45.530 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006992060]
11:35:45.541 3 CLASSPNP.SYS[fffff880010bf43f] -> nt!IofCallDriver -> [0xfffffa8004a62200]
11:35:45.552 5 ACPI.sys[fffff88000f9a781] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004ac0050]
11:35:45.561 Scan finished successfully
11:36:21.976 Disk 0 MBR has been saved successfully to "C:\Users\jian's famliy\Documents\MBR.dat"
11:36:21.979 The log file has been saved successfully to "C:\Users\jian's famliy\Documents\aswMBR.txt"
-
By the way I cannot find Autoguarder.exe in the Programfiles folder, but 2 other locations, and each of them has a batch file contained called Folder.bat. That's the batch file which tried to delete important files. It says Access Denied when I try to delete it. :(
-
You could try UnLocker.
You can download and install Unlocker (http://download.cnet.com/Unlocker/3000-2248_4-10493998.html) .
-
Hello Dave, I got Unlocker and deleted the batch file. :)Thank you very much for helping me through this problem! My computer is running fine now.
-
Good, let's do some cleanup and we'll be finished.
Download this program and run it Uninstall ComboFix (http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE) .It will remove ComboFix for you.
******************************************
To set a new Restore Point.
Click Start button , click Control Panel, click System and Maintenance, and then clicking System. In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. To turn off System Protection for a hard disk, clear the check box next to the disk, and then click OK. Reboot to Normal Mode.
Click the Start button , click Control Panel, click System and Maintenance, and then click System.
In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
To turn on System Protection for a hard disk, select the check box next to the disk, and then click OK.
This will give you a new, clean Restore Point.
***************************************
Click Start> Computer> right click the C Drive and choose Properties> enter
Click Disk Cleanup from there.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup2.jpg)
Click OK on the Disk Cleanup Screen.
Click Yes on the Confirmation screen.
(http://i424.photobucket.com/albums/pp322/digistar/diskcleanup.jpg)
This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive)
***************************************
Go to Microsoft Windows Update (http://windowsupdate.microsoft.com/) and get all critical updates.
----------
I suggest using WOT - Web of Trust (http://www.mywot.com/). WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.
SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html)- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer (http://www.bleepingcomputer.com/forums/tutorial49.html) from Spyware and Malware
* If you don't know what ActiveX controls are, see here (http://www.webopedia.com/TERM/A/ActiveX_control.html)
Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. (http://www.safer-networking.org/en/spybotsd/index.html) Guide: Use Spybot's Immunize Feature (http://www.bleepingcomputer.com/tutorials/tutorial43.html#immunize) to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ (http://www.safer-networking.org/en/faq/index.html)
Check out Keeping Yourself Safe On The Web (http://evilfantasy.wordpress.com/2008/05/20/keeping-yourself-safe-on-the-web/) for tips and free tools to help keep you safe in the future.
Also see Slow Computer? It may not be Malware (http://evilfantasy.wordpress.com/2008/05/24/slow-computer-it-may-not-be-malware/) for free cleaning/maintenance tools to help keep your computer running smoothly.
Safe Surfing!
-
Hey Dave, after doing the instructions you gave me in the last post, my computer got a lot faster:). Thankyou very much for helping me with malware this time, and I learnt a lot. I am thinking of installing WOT instead of AVG too.
Whitebeard1
-
Hey Dave, after doing the instructions you gave me in the last post, my computer got a lot faster:). Thankyou very much for helping me with malware this time, and I learnt a lot. I am thinking of installing WOT instead of AVG too.
Whitebeard1
You're welcome. Just one note. WOT is not an Anti-Virus program. It's just an aid to keep you from clicking on some dangerous sites. If you want to dump AVG, I would suggest MSE.
I will lock this thread. If you need it re-opened, please send me a pm.