マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.StartPage.56508

Added to the Dr.Web virus database: 2013-10-30

Virus description added:

Technical Information

Malicious functions:
Terminates or attempts to terminate
the following user processes:
  • firefox.exe
  • chrome.exe
Sets a new unauthorized home page for Windows Internet Explorer.
Modifies file system :
Creates the following files:
  • %TEMP%\nse2.tmp
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\manifest.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\zh_CN\weather.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\weather.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\tools.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\taobaoPlus.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\skins.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\siteNav.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\setup.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\redirect.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\quickSearch.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\pop.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\js\notification.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\notice.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\lastVisited.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\jq.mobi.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\injectTaobaoPlus.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\help.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\extensions.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\createWebsite.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudWebsite.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\cloudWallpaper.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudApp.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloud.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\de\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\icons.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es_419\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\dialog\img\skin_0\headerBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\google.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\download.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\dialBoxStyle.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\delete.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\del.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\img\skin_0\coinIcon.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\categoryBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\categoryBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\buttonBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\bing.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\baidu.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\add.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading2.gif
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading.gif
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Preferences
  • %APPDATA%\Maxthon3\Users\guest\Addons\weidu.mxaddon
  • %TEMP%\nsz3.tmp\locate.dll
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\ru\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_TW\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_CN\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_PT\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_BR\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\classification.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\en\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\bookmarks.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\wedo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\weather.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\titleBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\taobao.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\tabsBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\selected.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\selected.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchLeft.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\searchButton.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\searchButton.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchButton.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\skin_0\searchButton.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\right.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_right.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_left.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_bg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\qBoxBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oNewtab.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oHistory.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oExtensions.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oDownloads.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oBookmarks.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\main.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\webstore.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\yahoo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\all.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\defaultBg.svg
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\zh_CN\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\injectTaobaoPlus.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\css\all.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\redirect.html
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\pop.html
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\notification.html
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\index.html
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\background.html
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\background.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_bg.png
  • %TEMP%\nsz3.tmp\Internet.dll
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_128.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\createWebsite.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudWebsite.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\cloudWallpaper.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudApp.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloud.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\classification.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\bookmarks.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\background.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\all.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\zh_CN\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\extensions.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\injectTaobaoPlus.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\icons.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\jq.mobi.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\ru\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_TW\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_CN\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_PT\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_BR\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es_419\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\en\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\de\messages.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\manifest.json
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\zh_CN\weather.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\weather.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\tools.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\taobaoPlus.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\skins.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\siteNav.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\setup.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\redirect.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\quickSearch.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\pop.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\js\notification.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\notice.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\lastVisited.js
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\css\skin_0.css
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\css\skin_0.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\qBoxBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oHistory.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oExtensions.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oDownloads.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oBookmarks.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\main.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\logo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\locationIcon.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\loading.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\line.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\left.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\ios5_button.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\idialog_s.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_16.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oNewtab.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\icons.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\css\all.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_left.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\redirect.html
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\pop.html
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\notification.html
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\index.html
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\background.html
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\defaultBg.svg
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\yahoo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\wedo.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\webstore.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\weather.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\titleBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\taobao.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\tabsBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\selected.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\selected.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchLeft.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\searchButton.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\searchButton.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchButton.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\skin_0\searchButton.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchBg.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\right.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_right.png
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\injectTaobaoPlus.css
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\help.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\categoryBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\defaultBg.svg
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\yahoo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\wedo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\webstore.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\weather.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\titleBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\taobao.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\tabsBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\selected.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\selected.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchLeft.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\searchButton.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\searchButton.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchButton.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\skin_0\searchButton.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\searchBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\right.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_right.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_left.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\q_bg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\qBoxBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oNewtab.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oHistory.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\background.html
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\notification.html
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloud.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\pop.html
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\classification.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\bookmarks.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\background.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\all.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\zh_CN\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\css\skin_0.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\css\injectTaobaoPlus.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\css\all.css
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\redirect.html
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oExtensions.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\index.html
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oDownloads.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\dialBoxStyle.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\del.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\img\skin_0\coinIcon.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\categoryBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\categoryBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\buttonBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\bing.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\baidu.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\add.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading2.gif
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading.gif
  • %APPDATA%\chromeExtensions\Preferences
  • %TEMP%\nsz3.tmp\nsis7z.dll
  • %APPDATA%\chromeExtensions\InternetExplorer.html
  • %APPDATA%\chromeExtensions\weidunewtab.7z
  • %APPDATA%\chromeExtensions\maxthon.7z
  • %APPDATA%\chromeExtensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk.7z
  • %APPDATA%\chromeExtensions\PreferencesDragon.7z
  • %APPDATA%\chromeExtensions\Preferences.7z
  • %APPDATA%\chromeExtensions\sqlite.dll
  • %APPDATA%\chromeExtensions\sqlite3.dll
  • %TEMP%\nsz3.tmp\modern-wizard.bmp
  • %TEMP%\nsz3.tmp\ioSpecial.ini
  • %TEMP%\nsz3.tmp\KillProcDLL.dll
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\delete.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\download.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\main.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\google.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\locationIcon.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\loading.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\line.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\left.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\ios5_button.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\idialog_s.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_16.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_128.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\icons.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\icons.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\icons.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\dialog\img\skin_0\headerBg.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\app\img\skin_0\oBookmarks.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_CN\messages.json
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\logo.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudWebsite.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\buttonBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\bing.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\baidu.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\add.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading2.gif
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\loading.gif
  • <LS_APPDATA>\Chromium\User Data\Default\Preferences
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\options.xul
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\newtabplus.xul
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\install.rdf
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\locale\zh-TW\locale.dtd
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\locale\zh-CN\locale.dtd
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\locale\en-US\locale.dtd
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\locale\de\locale.dtd
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\js\options.js
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\js\newtabplus.js
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\js\newtab.js
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\default.css
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\content\newtab.html
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome.manifest
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\logo.ico
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\settings.png
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\categoryBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\img\skin_0\coinIcon.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\cloudWallpaper.js
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\skin_0\del.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\classification\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\bookmarks\img\logo.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\locationIcon.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\loading.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\img\skin_0\line.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\left.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\ios5_button.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\skin_0\idialog_s.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_16.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\img\icon_128.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\icons.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\icons.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\img\skin_0\icons.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\dialog\img\skin_0\headerBg.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\google.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\download.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\img\skin_0\dialBoxStyle.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\img\skin_0\delete.png
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\iconsmall.png
  • <LS_APPDATA>\Chromium\User Data\Default\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\img\logo.png
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\icon.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_PT\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es_419\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\es\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\en\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\de\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\manifest.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\zh_CN\weather.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\weather\weather.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\tools\tools.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\taobaoPlus.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\skins\skins.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\siteNav\siteNav.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\setup\setup.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\redirect.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\quickSearch\quickSearch.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\pop.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notification\html\js\notification.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\notice\notice.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\lastVisited\lastVisited.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\jq.mobi.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\taobaoPlus\injectTaobaoPlus.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\app\help\help.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\extensions\extensions.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\createWebsite.js
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\pt_BR\messages.json
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\js\plugin\cloud\cloudApp.js
  • %APPDATA%\chromeExtensions\20130924.log
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\zh_TW\messages.json
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
  • %TEMP%\nsz3.tmp\nsArray.dll
  • %TEMP%\nsz3.tmp\System.dll
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\options.xul
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\newtabplus.xul
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\install.rdf
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\locale\zh-TW\locale.dtd
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\locale\zh-CN\locale.dtd
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\locale\en-US\locale.dtd
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\locale\de\locale.dtd
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\js\options.js
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\js\newtabplus.js
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\js\newtab.js
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\default.css
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\content\newtab.html
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome.manifest
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\logo.ico
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\settings.png
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\logo.png
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\iconsmall.png
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\icon.png
  • %APPDATA%\chromeExtensions\weidunewtab@gmail.com\chrome\skin\help.png
  • C:\Extensions\nejjhhjbbdlbnpfhbclcilanmofmgdlk\4.5.2_0\_locales\ru\messages.json
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\weidunewtab@gmail.com\chrome\skin\help.png
  • %TEMP%\nsz3.tmp\InstallOptions.dll
Deletes the following files:
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
  • <LS_APPDATA>\COMODO\Dragon\User Data\Default\Preferences
Network activity:
Connects to:
  • 'ha#.##wtabplus.com':80
TCP:
HTTP GET requests:
  • ha#.##wtabplus.com/package_install.php?c=#################################################################################################################################
UDP:
  • DNS ASK ha#.##wtabplus.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: '#32770' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android