PUA.Win32.YouXun.M

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のプロセスを追加します。

• %Program Files%\YouWoBox\xe6\x88\x91\xe7\x9a\x84\xe6\xb8\xb8\xe6\x88\x8f.lnk
• %Program Files%\YouWoBox\youwo.exe

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。)

プログラムは、以下のフォルダを作成します。

• %Program Files%\YouWoBox\Cache\box_new\css
• %User Profile%\AppData
• %Program Files%\YouWoBox\download
• %Program Files%\YouWoBox\Cache\images
• %Program Files%\YouWoBox\skins\youwocommon\mygametool
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1
• %Start Menu%\?????
• %Application Data%\Microsoft\Internet Explorer\Quick Launch
• %System Root%\Users
• %Program Files%\YouWoBox\Cache\box_new
• %Program Files%\YouWoBox\Cache
• %Program Files%\YouWoBox\skins\youwocommon
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin
• %Program Files%\YouWoBox\Cache\js
• %Application Data%\YouWoBox
• %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned
• %Program Files%\YouWoBox\standby
• F:
• %Program Files%\YouWoBox\Cache\css
• %Program Files%\YouWoBox\Cache\box_new\images
• %Program Files%\YouWoBox\skins
• %Application Data%\YouWoBox\advertisement
• F:\PCGame\Install
• %Program Files%\YouWoBox\skins\youwocommon\AutorunHint
• %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer
• %Program Files%\YouWoBox\skins\yxphonegame
• %Program Files%\YouWoBox\Cache\box_new\js
• %Program Files%\YouWoBox
• %Program Files%\YouWoBox\Data
• %Program Files%\YouWoBox\Data\ImgCache
• %Program Files%\YouWoBox\skins\dzzv4
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default
• F:\PCGame

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %User Profile%フォルダは、現在ログオンしているユーザのプロファイルフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞" です。. %Start Menu%フォルダは、現在ログオンしているユーザのスタートメニューフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Windows\Start Menu" または "C:\Documents and Settings\＜ユーザ名＞\Start Menu" です。また、Windows Vista、7、8、8.1、2008(64-bit)、012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %System Root%フォルダは、オペレーティングシステム(OS)が存在する場所で、いずれのOSでも通常、 "C:" です。.)

他のシステム変更

プログラムは、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Taskband
FavoritesResolve = "{random characters}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Taskband
Favorites = "{random characters}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Taskband
FavoritesChanges = "14"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
Taskband
FavoritesVersion = "2"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
YouWoBox
DisplayName = "\xe6\xb8\xb8\xe7\xaa\x9d\xe6\xb8\xb8\xe6\x88\x8f\xe7\x9b\x92"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
YouWoBox
UninstallString = "%Program Files%\YouWoBox\uninst.exe"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
YouWoBox
DisplayIcon = "%Program Files%\YouWoBox\youwo.exe"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
YouWoBox
PRODUCT_Version = "1.2.3.9"

HKEY_CURRENT_USER\Software\Youxun\
stat
year = "2019"

HKEY_CURRENT_USER\Software\Youxun\
stat
month = "12"

HKEY_CURRENT_USER\Software\Youxun\
stat
day = "3"

HKEY_CURRENT_USER\Software\Youxun\
config
firstrun = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Internet Explorer\MAIN\
FeatureControl\FEATURE_BROWSER_EMULATION
youwo.exe = "11000"

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Microsoft\Internet Explorer\MAIN\
FeatureControl\FEATURE_BROWSER_EMULATION
youwopc.exe = "11000"

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Shell Extensions\
Cached
{random string} = "\x01\x00\x00\x00\x00\x00\x00\x00a\x07\xff\x13o\xa9\xd5\x01"

HKEY_CURRENT_USER\Software\Youxun\
stat
box_users = "1"

HKEY_CURRENT_USER\Software\Youxun\
stat
new_user_start = "1"

作成活動

プログラムは、以下のファイルを作成します。

• %Program Files%\YouWoBox\standby\start.png
• %Program Files%\YouWoBox\skins\yxphonegame\gbsybtn.png
• %Program Files%\YouWoBox\skins\youwocommon\tickling.png
• %Program Files%\YouWoBox\skins\youwocommon\tsbox.png
• %Program Files%\YouWoBox\Cache\box_new\js\item_dj1.js
• %Program Files%\YouWoBox\skins\youwocommon\nav_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\rank_pl.png
• %Program Files%\YouWoBox\Cache\box_new\images\ph_mub.gif
• %Program Files%\YouWoBox\Cache\images\tb-win7.png
• %Program Files%\YouWoBox\skins\youwocommon\close_tag.png
• %Program Files%\YouWoBox\libcurl_ssl_d.dll
• %Program Files%\YouWoBox\Data\allgameleft.json
• %Program Files%\YouWoBox\skins\dzzv4\sleeplowdownlodspeed_ico.png
• %Program Files%\YouWoBox\skins\youwocommon\downbk.png
• %Program Files%\YouWoBox\Cache\box_new\images\star_on.png
• %Program Files%\YouWoBox\skins\youwocommon\icon_delete.png
• %Program Files%\YouWoBox\skins\youwocommon\logo.png
• %Program Files%\YouWoBox\Cache\box_new\images\pstch_icocs.png
• %Program Files%\YouWoBox\skins\youwocommon\mycover.png
• %Program Files%\YouWoBox\skins\youwocommon\close.png
• %Program Files%\YouWoBox\xldl.dll
• %Program Files%\YouWoBox\Cache\images\khd-pzImg.png
• %Program Files%\YouWoBox\Cache\images\fxcg_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\no_game_ts.png
• %Program Files%\YouWoBox\Cache\box_new\js\patch_index.js
• %Program Files%\YouWoBox\Cache\box_new\index.html
• %Program Files%\YouWoBox\skins\youwocommon\help_menu_gray.png
• %Program Files%\YouWoBox\skins\youwocommon\iconshadow.png
• %Program Files%\YouWoBox\Cache\images\left_comment_hover.png
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_checkbox.png
• %Program Files%\YouWoBox\Cache\box_new\images\loading_down.gif
• %Program Files%\YouWoBox\Cache\box_new\js\i_con.js
• %Program Files%\YouWoBox\Cache\js\pztc_con.js
• %Program Files%\YouWoBox\Cache\box_new\js\imagesloaded.pkgd.min.js
• %Program Files%\YouWoBox\skins\youwocommon\cussmall.png
• %Program Files%\YouWoBox\skins\youwocommon\progress.png
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\layer.js
• %Program Files%\YouWoBox\libcurl_ssl_r.dll
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default\icon.png
• %Program Files%\YouWoBox\skins\youwocommon\update_tip_btn.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon-poptit.png
• %Program Files%\YouWoBox\skins\youwocommon\FilePath.png
• %Program Files%\YouWoBox\skins\yxphonegame\ztbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\Close2.png
• %Program Files%\YouWoBox\Cache\box_new\css\box.css
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\fn.png
• %Program Files%\YouWoBox\skins\youwocommon\cusclose.png
• %Program Files%\YouWoBox\standby\waitback.png
• %Program Files%\YouWoBox\skins\dzzv4\speed.exe
• %Program Files%\YouWoBox\skins\youwocommon\dlprior.png
• %Program Files%\YouWoBox\Cache\box_new\images\morefn_pl.png
• %Program Files%\YouWoBox\Cache\box_new\images\right_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\dstar.png
• %Program Files%\YouWoBox\skins\youwocommon\main.ico
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\remove.png
• %Program Files%\YouWoBox\Cache\check.html
• %Program Files%\YouWoBox\standby\atlj.png
• %Program Files%\YouWoBox\skins\dzzv4\InstallFaild_selfInstall.png
• %Program Files%\YouWoBox\Cache\images\px-noinfo.png
• %Program Files%\YouWoBox\skins\youwocommon\min2.png
• %Program Files%\YouWoBox\download\dl_peer_id.dll
• %Program Files%\YouWoBox\Config.ini
• %Program Files%\YouWoBox\skins\youwocommon\downloadmore.png
• %Program Files%\YouWoBox\Cache\box_new\images\hinfo_pl.gif
• %Program Files%\YouWoBox\standby\open-red.png
• %Program Files%\YouWoBox\Cache\box_new\css\search_con.css
• %Program Files%\YouWoBox\Cache\box_new\images\sptit.png
• %Program Files%\YouWoBox\Cache\box_new\images\tj_tb.gif
• %Program Files%\YouWoBox\skins\youwocommon\chatnew.png
• %Program Files%\YouWoBox\skins\youwocommon\dl_menu_gray.png
• %Program Files%\YouWoBox\Cache\box_new\images\imgview.png
• %Program Files%\YouWoBox\Cache\box_new\images\imagezz.png
• %Program Files%\YouWoBox\Cache\box_new\js\psearch.js
• %Program Files%\YouWoBox\Cache\box_new\images\gl_dbtn_sy.png
• %Program Files%\YouWoBox\Cache\css\peizi.css
• %Program Files%\YouWoBox\skins\youwocommon\msgbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\tray_menu.png
• %Program Files%\YouWoBox\Cache\images\pz-jiao.png
• %Program Files%\YouWoBox\download\zlib1.dll
• %Program Files%\YouWoBox\skins\dzzv4\repair.png
• %Program Files%\YouWoBox\standby\repair.png
• %Program Files%\YouWoBox\skins\youwocommon\share.png
• %Program Files%\YouWoBox\Cache\box_new\images\loader.gif
• %Program Files%\YouWoBox\skins\dzzv4\folder.png
• %Program Files%\YouWoBox\skins\youwocommon\xiufu_btn.png
• %Program Files%\YouWoBox\Cache\box_new\images\xx_pl.gif
• %Program Files%\YouWoBox\skins\youwocommon\ln_nav_a.png
• %Program Files%\YouWoBox\Cache\box_new\images\li_bg.png
• %Program Files%\YouWoBox\standby\dark.png
• %Program Files%\YouWoBox\skins\youwocommon\search_ph.png
• %Program Files%\YouWoBox\Cache\images\img_loading.gif
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_ok.png
• %Program Files%\YouWoBox\Cache\loading.html
• %Program Files%\YouWoBox\skins\youwocommon\Cancle.png
• %Program Files%\YouWoBox\skins\youwocommon\tagbk.png
• %Program Files%\YouWoBox\Cache\box_new\images\patch_hbg.png
• %Program Files%\YouWoBox\skins\dzzv4\bar.png
• %Program Files%\YouWoBox\Cache\box_new\images\prev.png
• %Program Files%\YouWoBox\skins\youwocommon\flashloading.png
• %Program Files%\YouWoBox\skins\youwocommon\gameback.png
• %Program Files%\YouWoBox\skins\dzzv4\background.png
• %Program Files%\YouWoBox\Cache\box_new\images\boxitem_Img.png
• %Program Files%\YouWoBox\Cache\box_new\images\s_tb.gif
• %Program Files%\YouWoBox\skins\youwocommon\downing.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\add_next.png
• %Program Files%\YouWoBox\Data\ImgCache\gametool8.jpg
• %Program Files%\YouWoBox\Cache\box_new\images\120x120.png
• %Program Files%\YouWoBox\skins\youwocommon\Downbg.png
• %Program Files%\YouWoBox\skins\youwocommon\refresh.png
• %Program Files%\YouWoBox\skins\youwocommon\update_tip_check.png
• %Program Files%\YouWoBox\Cache\box_new\images\detail_spt_bg.png
• %Program Files%\YouWoBox\Cache\box_new\config.json
• %Program Files%\YouWoBox\skins\youwocommon\xztool.png
• %Program Files%\YouWoBox\Cache\box_new\images\80x80.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon_keys.gif
• %Program Files%\YouWoBox\Cache\box_new\gl_item.html
• %Program Files%\YouWoBox\Cache\box_new\images\pit1.png
• %Program Files%\YouWoBox\skins\youwocommon\cno.png
• %Program Files%\YouWoBox\Cache\box_new\images\downImg.png
• %Program Files%\YouWoBox\skins\youwocommon\protype.png
• %Program Files%\YouWoBox\Cache\box_new\images\add_prev.png
• %Program Files%\YouWoBox\Cache\box_new\js\pl.js
• %Program Files%\YouWoBox\Cache\box_new\css\normalize.css
• %Program Files%\YouWoBox\standby\red_closing.png
• %Program Files%\YouWoBox\Cache\box_new\css\downpage_wl.css
• %Program Files%\YouWoBox\skins\dzzv4\ok.png
• %Program Files%\YouWoBox\Cache\box_new\images\imagezz_yaz.png
• %Program Files%\YouWoBox\skins\youwocommon\temp.png
• %Program Files%\YouWoBox\download\XLCrypto.dll
• %Program Files%\YouWoBox\skins\dzzv4.zip
• %Program Files%\YouWoBox\skins\dzzv4\red_closing.png
• %Program Files%\YouWoBox\skins\youwocommon\customers.png
• %Program Files%\YouWoBox\Cache\box_new\js\pinglun.js
• %Program Files%\YouWoBox\Cache\box_new\images\go_star.gif
• %Program Files%\YouWoBox\Cache\box_new\css\item_dj.css
• %Program Files%\YouWoBox\Cache\box_new\images\pit4.png
• %Program Files%\YouWoBox\skins\dzzv4\InstallFaild_installHelp.png
• %Program Files%\YouWoBox\Cache\box_new\images\downmub.png
• %Program Files%\YouWoBox\Data\ImgCache\gametool14.jpg
• %Program Files%\YouWoBox\skins\youwocommon\shaomatip.png
• %Program Files%\YouWoBox\standby\buy.png
• %Program Files%\YouWoBox\Cache\box_new\images\box_fImg.png
• %Program Files%\YouWoBox\Cache\box_new\images\tp_bg_b.png
• %Program Files%\YouWoBox\Cache\box_new\images\tp_bg_c.png
• %Program Files%\YouWoBox\skins\youwocommon\status.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_newbg.png
• %Program Files%\YouWoBox\Cache\box_new\images\tit_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\canclebox.png
• %Program Files%\YouWoBox\Cache\box_new\images\go_end.gif
• %Program Files%\YouWoBox\skins\youwocommon\home.png
• %Program Files%\YouWoBox\Cache\box_new\js\qrcode.min.js
• %Program Files%\YouWoBox\Cache\box_new\images\gameinfo_bg_pl_b.png
• %Program Files%\YouWoBox\skins\youwocommon\Close3.png
• %Program Files%\YouWoBox\skins\youwocommon\set_menu_hover.png
• %Program Files%\YouWoBox\Cache\box_new\images\morepx_hover.png
• %Program Files%\YouWoBox\Cache\box_new\images\dj_more1.png
• %Program Files%\YouWoBox\skins\youwocommon\ExpedPay.png
• %Program Files%\YouWoBox\Cache\box_new\images\zz_pl.png
• %Program Files%\YouWoBox\Cache\images\pz-tc-pl.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon-collection1.png
• %Program Files%\YouWoBox\Cache\box_new\images\right_bg_index.png
• %Program Files%\YouWoBox\Cache\box_new\images\title_bom_search.gif
• %Program Files%\YouWoBox\Cache\images\close-btn.png
• %Program Files%\YouWoBox\skins\youwocommon\search_btn.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_c_tb.png
• %Program Files%\YouWoBox\skins\youwocommon\task_menu.png
• %Program Files%\YouWoBox\Cache\box_new\images\fn_tb.png
• %Program Files%\YouWoBox\Cache\box_new\images\game_tj_zz.png
• %Program Files%\YouWoBox\skins\youwocommon\ln_nav_c.png
• %Program Files%\YouWoBox\skins\youwocommon\down-btb.png
• %Program Files%\YouWoBox\skins\youwocommon\error_ico.png
• %Program Files%\YouWoBox\Cache\box_new\images\pro_zz.png
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default\icon-ext.png
• %Program Files%\YouWoBox\skins\youwocommon\cancleTip.png
• %Program Files%\YouWoBox\skins\youwocommon\downtab.png
• %Program Files%\YouWoBox\skins\dzzv4\InstallFaild_Text.png
• %Program Files%\YouWoBox\Cache\box_new\patch.html
• %Program Files%\YouWoBox\Cache\box_new\item_wy.html
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.ba-resize.min.js
• %Program Files%\YouWoBox\Cache\images\tb-ati.png
• %Program Files%\YouWoBox\download\atl71.dll
• %Program Files%\YouWoBox\Cache\box_new\images\star_off.png
• %Program Files%\YouWoBox\skins\youwocommon\weixin.png
• %Program Files%\YouWoBox\Cache\images\win-64.png
• %Program Files%\YouWoBox\Cache\box_new\css\jscrollpane.css
• %Program Files%\YouWoBox\skins\youwocommon\fk.png
• %Program Files%\YouWoBox\skins\youwocommon\ExpedSpeed.png
• %Program Files%\YouWoBox\skins\youwocommon\flashloadingbg.png
• %Program Files%\YouWoBox\Cache\box_new\images\ad_scroll_back.png
• %Program Files%\YouWoBox\skins\youwocommon\ln_navbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\set_menu1.png
• %Program Files%\YouWoBox\Cache\box_new\images\down_btn_loading.gif
• %Program Files%\YouWoBox\skins\youwocommon\ExpedPause.png
• %Program Files%\YouWoBox\skins\youwocommon\dstop.png
• %Program Files%\YouWoBox\skins\youwocommon\mypostion.png
• %Program Files%\YouWoBox\Cache\box_new\images\prev_page_hover.gif
• %Program Files%\YouWoBox\standby\patch.png
• %Program Files%\YouWoBox\skins\youwocommon\myright.png
• %Program Files%\YouWoBox\Cache\images\gamestartImg.png
• %Program Files%\YouWoBox\Cache\box_new\images\im-down.png
• %Program Files%\YouWoBox\uninst.exe
• %Program Files%\YouWoBox\skins\youwocommon\downstu.png
• %Program Files%\YouWoBox\Cache\box_new\images\a1.gif
• %Program Files%\YouWoBox\skins\youwocommon\closepage.png
• %Program Files%\YouWoBox\skins\youwocommon\cusmore.png
• %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\xe6\x88\x91\xe7\x9a\x84\xe6\xb8\xb8\xe6\x88\x8f.lnk
• %Program Files%\YouWoBox\Cache\box_new\images\img-wx.png
• %Program Files%\YouWoBox\Cache\box_new\js\item_fl.js
• %Program Files%\YouWoBox\skins\youwocommon\startgame.png
• %Program Files%\YouWoBox\Cache\box_new\images\gl_tb.gif
• %Program Files%\YouWoBox\Cache\box_new\js\item_gl.js
• %Program Files%\YouWoBox\Cache\box_new\set_url_temp.js
• %Program Files%\YouWoBox\Cache\box_new\images\icon_rate_detail (1).png
• %Program Files%\YouWoBox\skins\youwocommon\dopen.png
• %AppDataLocal%\Microsoft\Internet Explorer\MSIMGSIZ.DAT
• %Program Files%\YouWoBox\Cache\box_new\images\more_tb.png
• %Program Files%\YouWoBox\skins\youwocommon\ln_bg.png
• %Program Files%\YouWoBox\Cache\box_new\js\move6.js
• %Program Files%\YouWoBox\Cache\box_new\images\bannr_yy.png
• %Program Files%\YouWoBox\skins\youwocommon\tsbox_close.png
• %Program Files%\YouWoBox\Data\onlinegametool.json
• %Program Files%\YouWoBox\skins\youwocommon\small.png
• %Program Files%\YouWoBox\skins\dzzv4\loading.png
• %Program Files%\YouWoBox\Cache\images\jt-ts.gif
• %Program Files%\YouWoBox\download\minizip.dll
• %Program Files%\YouWoBox\Cache\box_new\images\gameinfo_pl.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon-right.png
• %Program Files%\YouWoBox\Cache\box_new\images\l_bg.gif
• %Program Files%\YouWoBox\skins\youwocommon\AutorunHint\arh_main_text.png
• %Program Files%\YouWoBox\skins\youwocommon\radio.png
• %Program Files%\YouWoBox\skins\youwocommon\loading.png
• %Program Files%\YouWoBox\skins\youwocommon\nav_hover.png
• %Program Files%\YouWoBox\Cache\box_new\images\page_pl.png
• %Program Files%\YouWoBox\Cache\box_new\item_dj.html
• %Program Files%\YouWoBox\pthreadVC2.dll
• %Program Files%\YouWoBox\Cache\box_new\js\box2_noad.js
• %Program Files%\YouWoBox\skins\youwocommon\forward.png
• %Program Files%\YouWoBox\skins\youwocommon\shadow.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon_rate_detail.png
• %Program Files%\YouWoBox\Cache\box_new\images\ad_scroll_forward.png
• %Program Files%\YouWoBox\Cache\box_new\images\jjfa_btn.png
• %Program Files%\YouWoBox\skins\youwocommon\finish.png
• %Program Files%\YouWoBox\skins\youwocommon\warn.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon_comm.png
• %Program Files%\YouWoBox\skins\youwocommon\minipagebt.png
• %Program Files%\YouWoBox\skins\youwocommon\task_menu_hover.png
• %Program Files%\YouWoBox\Cache\images\loading_text.gif
• %Program Files%\YouWoBox\Cache\css\gamestart_con.css
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default\loading-0.gif
• %Program Files%\YouWoBox\skins\youwocommon\ddele.png
• %Program Files%\YouWoBox\standby\expire-bg.png
• %Program Files%\YouWoBox\skins\youwocommon\net.png
• %Program Files%\YouWoBox\skins\youwocommon\EditBorder.png
• %Program Files%\YouWoBox\Cache\box_new\images\info_pl.gif
• %Program Files%\YouWoBox\Cache\box_new\images\pop-tbg.jpg
• %Program Files%\YouWoBox\Cache\box_new\images\icon.png
• %Program Files%\YouWoBox\Cache\box_new\images\ad_next.png
• %Program Files%\YouWoBox\skins\youwocommon\update_tip_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\big.png
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\bg.png
• %Program Files%\YouWoBox\skins\yxphonegame\sybtn.png
• %Program Files%\YouWoBox\skins\youwocommon\homepage.png
• %Program Files%\YouWoBox\skins\youwocommon\recheck.png
• %Program Files%\YouWoBox\download\download_engine.dll
• %Program Files%\YouWoBox\Cache\box_new\images\i_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\tit.png
• %Program Files%\YouWoBox\Cache\images\pzwin_close.png
• %Program Files%\YouWoBox\YGBrowser.exe
• %Program Files%\YouWoBox\Cache\box_new\images\imgbtn.gif
• %Program Files%\YouWoBox\download\MiniThunderPlatform.exe
• %Program Files%\YouWoBox\Cache\box_new\images\search_title_pl.png
• %Program Files%\YouWoBox\Cache\images\pl2.png
• %Program Files%\YouWoBox\skins\dzzv4\login.png
• %Program Files%\YouWoBox\Cache\box_new\images\top_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\star.png
• %Program Files%\YouWoBox\Cache\box_new\images\80x80.gif
• %Program Files%\YouWoBox\Cache\box_new\images\icon-p.png
• %Program Files%\YouWoBox\Cache\box_new\set_url.js
• %Program Files%\YouWoBox\skins\youwocommon\myleft.png
• %Program Files%\YouWoBox\standby\sleeplowdownlodspeed_service.png
• %Program Files%\YouWoBox\download\dl_lib.dll
• %Program Files%\YouWoBox\skins\youwocommon\ExpedBtn.png
• %Program Files%\YouWoBox\skins\youwocommon\seting.png
• %Program Files%\YouWoBox\Data\ImgCache\gametool5.jpg
• %Program Files%\YouWoBox\standby\buynew.png
• %Program Files%\YouWoBox\Cache\box_new\images\imgview_Rbtn.png
• %Program Files%\YouWoBox\Data\ImgCache\gametool7.jpg
• %Program Files%\YouWoBox\standby\atonce-btn.png
• %Program Files%\YouWoBox\skins\dzzv4\buynew.png
• %Program Files%\YouWoBox\skins\youwocommon\mypage.png
• %Program Files%\YouWoBox\youwopc.exe
• %Program Files%\YouWoBox\standby\repairnew.png
• %Program Files%\YouWoBox\Cache\box_new\images\gl_dbtn.png
• %Program Files%\YouWoBox\Cache\box_new\images\user.png
• %Program Files%\YouWoBox\skins\yxphonegame\back.png
• %Program Files%\YouWoBox\7z.dll
• %Program Files%\YouWoBox\Cache\box_new\images\nav_pl.gif
• %Program Files%\YouWoBox\skins\youwocommon\task_menu_gray.png
• %Program Files%\YouWoBox\Cache\box_new\images\indexleft_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\start.png
• %Program Files%\YouWoBox\Cache\box_new\set_swf.js
• %Program Files%\YouWoBox\Cache\images\tb-vista.png
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.cookie.js
• %Program Files%\YouWoBox\Cache\box_new\images\title_bom_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\mydeclare.png
• %Program Files%\YouWoBox\skins\youwocommon\Close1.png
• %Program Files%\YouWoBox\skins\youwocommon\progressBK.png
• %Program Files%\main.7z
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\layer.css
• %Program Files%\YouWoBox\Cache\box_new\images\tit_tb.gif
• %Program Files%\YouWoBox\standby\sleeplowdownlodspeed_ico.png
• %Program Files%\YouWoBox\skins\youwocommon\meok.png
• %Program Files%\YouWoBox\skins\youwocommon\tsbox_btn.png
• %Program Files%\YouWoBox\Cache\box_new\images\dj_btn.png
• %Program Files%\YouWoBox\Cache\box_new\css\item.css
• %Program Files%\YouWoBox\standby\background.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_tjbg.png
• %Program Files%\YouWoBox\Cache\box_new\js\lightbox.js
• %Program Files%\YouWoBox\Cache\box_new\images\nosy.png
• %Program Files%\YouWoBox\Cache\box_new\images\down_rank_bg.png
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.mousewheel.js
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_face2.png
• %Program Files%\YouWoBox\skins\youwocommon\igame.png
• %Program Files%\YouWoBox\Cache\box_new\images\nav_hoverbg.png
• %Program Files%\YouWoBox\Cache\box_new\images\no_img.jpg
• %Program Files%\YouWoBox\Log.dat
• %Program Files%\YouWoBox\skins\yxphonegame\btn_cq.png
• %Program Files%\YouWoBox\skins\youwocommon\ExpedFree.png
• %Program Files%\YouWoBox\skins\dzzv4\InstallFaild_Service.png
• %Program Files%\YouWoBox\Cache\box_new\images\pageboxdowntitle.png
• %Program Files%\YouWoBox\skins\dzzv4\dark3.png
• %Program Files%\YouWoBox\standby\customer.png
• %Program Files%\YouWoBox\skins\youwocommon\ExpedingBtn.png
• %Program Files%\YouWoBox\skins\youwocommon\set_menu.png
• %Program Files%\YouWoBox\skins\youwocommon\ques.png
• %Program Files%\YouWoBox\Cache\box_new\images\page_m_btn.png
• %Program Files%\YouWoBox\skins\youwocommon\Option_main.png
• %Program Files%\YouWoBox\Cache\box_new\css\patch_index.css
• %Program Files%\YouWoBox\skins\dzzv4\repairnew.png
• %Program Files%\YouWoBox\Cache\box_new\images\no-patch-img.jpg
• %Program Files%\YouWoBox\Cache\box_new\flash_game_right.html
• %Program Files%\YouWoBox\skins\youwocommon\drop_menu.png
• %Program Files%\YouWoBox\Cache\box_new\images\page_button_bg.jpg
• %Program Files%\YouWoBox\skins\dzzv4\close.png
• %Program Files%\YouWoBox\Cache\box_new\images\dj_more.png
• %Program Files%\YouWoBox\Cache\images\loading.gif
• %Program Files%\YouWoBox\skins\youwocommon\animate.png
• %Program Files%\YouWoBox\unrar.dll
• %Program Files%\YouWoBox\skins\dzzv4\customer.png
• %Program Files%\YouWoBox\skins\youwocommon\Thumbs.db
• %Program Files%\YouWoBox\20191203001643.dmp
• %Program Files%\YouWoBox\Cache\box_new\css\item_fl.css
• %Program Files%\YouWoBox\download\msvcr71.dll
• %Program Files%\YouWoBox\skins\youwocommon\dl_menu_hover.png
• %Program Files%\YouWoBox\skins\youwocommon\ln_nav_b.png
• %Desktop%\xe6\xb8\xb8\xe7\xaa\x9d\xe6\xb8\xb8\xe6\x88\x8f\xe7\x9b\x92.lnk
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.raty.min.js
• %Program Files%\YouWoBox\standby\login.png
• %Program Files%\YouWoBox\standby\ok.png
• %Start Menu%\xe6\xb8\xb8\xe7\xaa\x9d\xe6\xb8\xb8\xe6\x88\x8f\xe7\x9b\x92\xe5\x90\xaf\xe5\x8a\xa8\xe6\xb8\xb8\xe7\xaa\x9d\xe6\xb8\xb8\xe6\x88\x8f\xe7\x9b\x92.lnk
• %Program Files%\YouWoBox\Cache\images\bg.jpg
• %Program Files%\YouWoBox\Cache\box_new\item_newwl.html
• %Program Files%\YouWoBox\skins\youwocommon\opengame.png
• %Program Files%\YouWoBox\Cache\box_new\css\boxdown_pl.css
• %Program Files%\YouWoBox\Cache\box_new\images\list_Img.png
• %Program Files%\YouWoBox\skins\youwocommon\zizhen.png
• %Program Files%\YouWoBox\skins\youwocommon\horn.png
• %Program Files%\YouWoBox\standby\speed.exe
• %Program Files%\YouWoBox\Cache\js\get_con.js
• %Program Files%\YouWoBox\Cache\box_new\images\go_end_hover.gif
• %Program Files%\YouWoBox\Cache\box_new\images\sbtn.png
• %Program Files%\YouWoBox\Cache\box_new\images\search_title_tab_.png
• %Program Files%\YouWoBox\Cache\box_new\images\imgprev_btn.png
• %Program Files%\YouWoBox\skins\youwocommon\tag_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\pit3.png
• %Program Files%\YouWoBox\skins\youwocommon\continupay.png
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_continue.png
• %Program Files%\YouWoBox\standby\loading.png
• %Program Files%\YouWoBox\skins\youwocommon\menu.png
• %Program Files%\YouWoBox\Cache\box_new\images\b1.gif
• %Program Files%\YouWoBox\Cache\js\jquery.1.9.1.min.js
• %Program Files%\YouWoBox\Cache\tc.css
• %Program Files%\YouWoBox\Data\ImgCache\gametool3.jpg
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default\loading-2.gif
• %Program Files%\YouWoBox\Cache\box_new\images\search_loading.gif
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\new.png
• %Program Files%\YouWoBox\Cache\share.html
• %Program Files%\YouWoBox\skins\youwocommon\set_menu_gray.png
• %Program Files%\YouWoBox\skins\youwocommon\hotspot.png
• %Program Files%\YouWoBox\skins\youwocommon\backpg.png
• %Program Files%\YouWoBox\Cache\box_new\images\adbag.png
• %Program Files%\YouWoBox\Cache\box_new\js\item_sy.js
• %Program Files%\YouWoBox\skins\youwocommon\newtag.png
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_copy.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_pl.gif
• %Program Files%\YouWoBox\Cache\box_new\images\prev_page.gif
• %Program Files%\YouWoBox\Cache\images\bottompz-bg.png
• %Program Files%\YouWoBox\skins\youwocommon\AutorunHint\arh_btn_ok.png
• %Program Files%\YouWoBox\Cache\box_new\images\line_x760.png
• %Program Files%\YouWoBox\Cache\box_new\js\item_wl.js
• %Program Files%\YouWoBox\Cache\box_new\css\item_sy.css
• %Program Files%\YouWoBox\Cache\box_new\images\search_con_zz.png
• %Program Files%\YouWoBox\Cache\box_new\images\left_nav_bg.jpg
• %Program Files%\YouWoBox\skins\youwocommon\settab.png
• %Program Files%\YouWoBox\Cache\images\tb-nvidia.png
• %Program Files%\YouWoBox\skins\yxphonegame\ksbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\start.png
• %Program Files%\YouWoBox\Cache\box_new\images\deful_gamehj.png
• %Program Files%\YouWoBox\skins\youwocommon\aclose.png
• %Program Files%\YouWoBox\Cache\box_new\images\sy_btn.png
• %Program Files%\YouWoBox\Cache\box_new\item_wl.html
• %Program Files%\YouWoBox\skins\youwocommon\chat.png
• %Program Files%\YouWoBox\skins\youwocommon\miniPage.png
• %Program Files%\YouWoBox\standby\bar.png
• %Program Files%\YouWoBox\Cache\images\ck_btn.png
• %Program Files%\YouWoBox\Cache\images\pzdf-pl.png
• %Program Files%\YouWoBox\skins\youwocommon\msgtip_close.png
• %Program Files%\YouWoBox\Cache\box_new\images\go_star_hover.gif
• %Program Files%\YouWoBox\msvcr100.dll
• %Program Files%\YouWoBox\download\XLBugHandler.dll
• %Program Files%\YouWoBox\Cache\box_new\layer-v2.1\layer\skin\default\loading-1.gif
• %Program Files%\YouWoBox\Cache\box_new\images\pgbg.gif
• %Program Files%\YouWoBox\Cache\images\win-32.png
• %Program Files%\YouWoBox\Cache\box_new\images\imgnext_btn.png
• %Program Files%\YouWoBox\Data\localgametool.json
• %Program Files%\YouWoBox\skins\youwocommon\capaciity.png
• %Program Files%\YouWoBox\Cache\images\pz-bg-img.png
• %Program Files%\YouWoBox\skins\youwocommon\xiufu_ico.png
• %Start Menu%\xe6\xb8\xb8\xe7\xaa\x9d\xe6\xb8\xb8\xe6\x88\x8f\xe7\x9b\x92\xe5\x8d\xb8\xe8\xbd\xbd\xe7\x9b\x92\xe5\xad\x90.lnk
• %Program Files%\YouWoBox\skins\youwocommon\gametag.png
• %Program Files%\YouWoBox\standby\folder.png
• %Program Files%\YouWoBox\skins\youwocommon\checkbox.png
• %AppDataLocal%\GDIPFONTCACHEV1.DAT
• %Program Files%\YouWoBox\standby\sleeplowdownlodspeed_text.png
• %Program Files%\YouWoBox\Cache\box_new\images\down_btn.png
• %Program Files%\YouWoBox\Cache\box_new\item_sy.html
• %Program Files%\YouWoBox\skins\youwocommon\allgame.png
• %Program Files%\YouWoBox\Cache\images\fx-btn.png
• %Program Files%\YouWoBox\standby\money_picture.png
• %Program Files%\YouWoBox\Cache\box_new\images\gameinfo_bg.png
• %Program Files%\YouWoBox\skins\dzzv4\dark1.png
• %Program Files%\YouWoBox\skins\youwocommon\gamecover.png
• %Program Files%\YouWoBox\Cache\box_new\images\sydown_btn.png
• %Program Files%\YouWoBox\Cache\box_new\images\new_tb.gif
• %Program Files%\YouWoBox\MainInstanceCfg.json
• %Program Files%\YouWoBox\skins\dzzv4\buy.png
• %Program Files%\YouWoBox\Cache\box_new\js\box2_set.js
• %Program Files%\YouWoBox\Cache\box_new\images\no_img_m.jpg
• %Program Files%\YouWoBox\skins\youwocommon\miniPage2.png
• %Program Files%\YouWoBox\skins\youwocommon\ok.png
• %Program Files%\YouWoBox\Cache\box_new\images\yanbg.png
• %Program Files%\YouWoBox\Cache\images\zzpz.gif
• %Program Files%\YouWoBox\Cache\images\left_comment.png
• %Program Files%\YouWoBox\Cache\images\tb-intel.png
• %Program Files%\YouWoBox\Cache\box_new\images\left_nav_pl.jpg
• %Program Files%\YouWoBox\skins\youwocommon\help.png
• %Program Files%\YouWoBox\standby\red-packet.png
• %Program Files%\YouWoBox\skins\youwocommon\canclePay.png
• %Program Files%\YouWoBox\skins\youwocommon\left_bg.png
• %Program Files%\YouWoBox\Cache\box_new\css\box_gl.css
• %Program Files%\YouWoBox\Cache\box_new\images\icon-popclose.png
• %Program Files%\YouWoBox\skins\youwocommon\mydelete.png
• %Program Files%\YouWoBox\Cache\box_new\images\opa75.png
• %Program Files%\YouWoBox\Cache\box_new\images\yanbg_small.png
• %Program Files%\YouWoBox\Cache\images\px-right.png
• %Program Files%\YouWoBox\Cache\box_new\images\pit2.png
• %Program Files%\YouWoBox\Cache\box_new\images\gameinfo_bg_pl_a.png
• %Program Files%\YouWoBox\Cache\box_new\js\html5.js
• %Program Files%\YouWoBox\Cache\images\pz-df.png
• %Program Files%\YouWoBox\skins\youwocommon\search.png
• %Program Files%\YouWoBox\skins\youwocommon\stop.png
• %Program Files%\YouWoBox\Cache\images\px-ok.png
• %Program Files%\YouWoBox\skins\youwocommon\mecancle.png
• %Program Files%\YouWoBox\skins\youwocommon\right_ico.png
• %Program Files%\YouWoBox\skins\youwocommon\bottom_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\right_big.png
• %Program Files%\YouWoBox\Cache\box_new\images\jp_ts.png
• %Program Files%\YouWoBox\skins\youwocommon\star.png
• %Program Files%\YouWoBox\Cache\images\px-error.png
• %Program Files%\YouWoBox\Cache\box_new\images\i_Img.png
• %Program Files%\YouWoBox\Cache\box_new\js\search.js
• %Program Files%\YouWoBox\skins\dzzv4\sleeplowdownlodspeed_service.png
• %Program Files%\YouWoBox\skins\youwocommon\mymore.png
• %Program Files%\YouWoBox\Cache\box_new\images\morepx_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\proimg_yy.png
• %Program Files%\YouWoBox\Cache\box_new\images\next_page.gif
• %Program Files%\YouWoBox\skins\youwocommon\tray_menu_hover.png
• %Program Files%\YouWoBox\skins\youwocommon\SetTitle.png
• %Program Files%\YouWoBox\skins\youwocommon\drop.png
• %Program Files%\YouWoBox\Cache\box_new\images\120x170.png
• %Program Files%\YouWoBox\Cache\box_new\images\next.png
• %Program Files%\YouWoBox\Cache\box_new\images\loading_pz.gif
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.1.9.1.min.js
• %Program Files%\YouWoBox\youwo.exe
• %Program Files%\YouWoBox\Cache\box_new\images\title_bom_bg_a.png
• %Program Files%\YouWoBox\Cache\box_new\images\next_page_hover.gif
• %Program Files%\YouWoBox\Cache\box_new\images\qrod_box_826.png
• %Program Files%\YouWoBox\Cache\images\tb-amd.png
• %Program Files%\YouWoBox\skins\youwocommon\defaultico.png
• %Program Files%\YouWoBox\skins\yxphonegame\nav_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\ts_bottom_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\megtip.png
• %Program Files%\YouWoBox\skins\youwocommon\game_bg.png
• %Program Files%\YouWoBox\skins\youwocommon\mtitle.png
• %Program Files%\YouWoBox\skins\youwocommon\message.png
• %Program Files%\YouWoBox\skins\youwocommon\morebg.png
• %Program Files%\YouWoBox\skins\youwocommon\back.png
• %Program Files%\YouWoBox\skins\yxphonegame\btn_ime.png
• %Program Files%\YouWoBox\skins\dzzv4\sleeplowdownlodspeed_text.png
• %Program Files%\YouWoBox\Cache\box_new\images\tj_zz_hover.png
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\navbg.png
• %Program Files%\YouWoBox\Cache\box_new\images\icon-collection2.png
• %Program Files%\YouWoBox\skins\yxphonegame\cxksbtn.png
• %Program Files%\YouWoBox\Cache\box_new\js\search1.js
• %Program Files%\YouWoBox\skins\youwocommon\back_pl.png
• %Program Files%\YouWoBox\Cache\box_new\images\list_zz.png
• %Program Files%\YouWoBox\skins\youwocommon\msgbg.png
• %Program Files%\YouWoBox\Cache\box_new\js\item_newwl.js
• %Program Files%\YouWoBox\skins\youwocommon\mygametool\close.png
• %Program Files%\YouWoBox\Cache\box_new\SpecialGames.json
• %Program Files%\YouWoBox\Cache\box_new\images\down_page_bg.png
• %Program Files%\YouWoBox\Cache\box_new\images\title_bg.gif
• %Program Files%\YouWoBox\Cache\box_new\js\jquery.jscrollpane.min.js
• %Program Files%\YouWoBox\Cache\box_new\images\adbg_close.png
• %Program Files%\YouWoBox\Cache\box_new\images\loading.gif
• %Program Files%\YouWoBox\Cache\box_new\js\box2.js
• %Program Files%\YouWoBox\Cache\box_new\js\jcarousellite.js
• %Program Files%\YouWoBox\skins\yxphonegame\screen.png
• %Program Files%\YouWoBox\Cache\box_new\images\tj_zz.png
• %Program Files%\YouWoBox\Cache\box_new\config.ini
• %Program Files%\YouWoBox\Cache\box_new\js\responsiveslides.min.js
• %Program Files%\YouWoBox\skins\youwocommon\installgame.png
• %Program Files%\YouWoBox\skins\youwocommon\thunder.png
• %Program Files%\YouWoBox\Cache\box_new\images\im-tt.png
• %Program Files%\YouWoBox\Cache\box_new\images\error.png
• %Program Files%\YouWoBox\skins\youwocommon\cok.png
• %Program Files%\YouWoBox\skins\youwocommon\bigwarn.png
• %Program Files%\YouWoBox\Cache\box_new\images\searchbtn_0707.png
• %Program Files%\YouWoBox\Cache\box_new\images\pfsussce.gif
• %Program Files%\YouWoBox\Cache\box_new\images\imgview_Lbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\install_apk.png
• %Program Files%\YouWoBox\skins\youwocommon\loadpage.png
• %Program Files%\YouWoBox\skins\youwocommon\tag.png
• %Program Files%\YouWoBox\xe6\x88\x91\xe7\x9a\x84\xe6\xb8\xb8\xe6\x88\x8f.lnk
• %Program Files%\YouWoBox\MyGame.ico
• %Program Files%\YouWoBox\Cache\box_new\images\down_rank_pl.png
• %Program Files%\YouWoBox\skins\youwocommon\new.png
• %Program Files%\YouWoBox\Cache\box_new\images\gl_dbtn.gif
• %Program Files%\YouWoBox\skins\youwocommon\xiufu_btn2.png
• %Program Files%\YouWoBox\Cache\loading_con.html
• %Program Files%\YouWoBox\download\XLBugReport.exe
• %Program Files%\YouWoBox\skins\yxphonegame\qp_sq.png
• %Program Files%\YouWoBox\Cache\box_new\images\sptit.gif
• %Program Files%\YouWoBox\Cache\box_new\images\tab_pl_b.gif
• %Program Files%\YouWoBox\skins\dzzv4\close_redpacket.png
• %Program Files%\YouWoBox\Cache\box_new\css\downpage.css
• %Program Files%\YouWoBox\skins\youwocommon\thunderbg.jpg
• %Program Files%\YouWoBox\skins\dzzv4\money_picture.png
• %Program Files%\YouWoBox\skins\youwocommon\down_ads.png
• %Program Files%\YouWoBox\Cache\box_new\images\ts_bg.gif
• %Program Files%\YouWoBox\skins\youwocommon\service.png
• %Program Files%\YouWoBox\skins\youwocommon\zxbg.png
• %Program Files%\YouWoBox\skins\dzzv4\patch.png
• %Program Files%\YouWoBox\skins\youwocommon\staybox.png
• %Program Files%\YouWoBox\download\msvcp71.dll
• %Program Files%\YouWoBox\skins\youwocommon\AutorunHint\arh_checkbox.png
• %Program Files%\YouWoBox\Cache\box_new\css\psearch.css
• %Program Files%\YouWoBox\skins\youwocommon\starbg.png
• %Program Files%\YouWoBox\skins\dzzv4\barYellow.png
• %Program Files%\YouWoBox\skins\yxphonegame\sqqpbtn.png
• %Program Files%\YouWoBox\standby\barYellow.png
• %Program Files%\YouWoBox\Cache\box_new\images\game_pxbtn.png
• %Program Files%\YouWoBox\skins\youwocommon\fresh.png
• %Program Files%\YouWoBox\skins\dzzv4\waitclose.png
• %Program Files%\YouWoBox\Cache\box_new\images\ad_prev.png
• %Program Files%\YouWoBox\Cache\box_new\search.html
• %Program Files%\YouWoBox\Cache\images\tb-winxp.png
• %Program Files%\YouWoBox\Cache\box_new\psearch.html
• %Program Files%\YouWoBox\skins\youwocommon\allgame_btn.png
• %Program Files%\YouWoBox\skins\youwocommon\ExpedDowning.png
• %Program Files%\YouWoBox\Cache\images\left_tool_hover.png
• %Program Files%\YouWoBox\Cache\images\left_tool.png
• %Program Files%\YouWoBox\Cache\box_new\images\tab_pl.gif
• %Program Files%\YouWoBox\Cache\box_new\js\item_dj.js

(註：%Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Application Data%フォルダは、現在ログオンしているユーザのアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming" です。. %AppDataLocal%フォルダは、ローカルアプリケーションデータフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Local Settings\Application Data" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local" です。. %Desktop%フォルダは、現在ログオンしているユーザのデスクトップです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザ名＞\Desktop" です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\Desktop" です。. %Start Menu%フォルダは、現在ログオンしているユーザのスタートメニューフォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Windows\Start Menu" または "C:\Documents and Settings\＜ユーザ名＞\Start Menu" です。また、Windows Vista、7、8、8.1、2008(64-bit)、012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Roaming\Microsoft\Windows\Start Menu" です。)

その他

プログラムは、以下の不正なWebサイトにアクセスします。

• http://census.{BLOCKED}z.52kfly.com/count.do?{random characters}
• http://dnlod.{BLOCKED}y.com/yxh/game_buy.json
• http://api.{BLOCKED}z.52kfly.com/open/group/data.json?{random characters}
• http://ustats.{BLOCKED}z.52kfly.com/count.do?{random characters}
• http://hzconfig.{BLOCKED}y.com/open/new_tiepian.js
• http://i.{BLOCKED}y.com/api/op.ashx/login/islogin.js?{random characters}
• http://api.{BLOCKED}z.52kfly.com/open/box/config.do?{random characters}
• http://api.{BLOCKED}z.52kfly.com/open/gt/soft/list.json?sort=number
• http://dnlod.{BLOCKED}y.com/yxh/paget/setting/msettingv1_yw.json
• http://i-3.{BLOCKED}n.com/2016/4/26/{GUID}.png
• http://i-3-yxdown.{BLOCKED}3.com/2016/4/26/{GUID}.png?imageView2/2/q/85
• http://dnlod.{BLOCKED}y.com/yxh/gamestart/dzzv4.zip
• http://i-3.{BLOCKED}n.com/2016/6/28/{GUID}.png
• http://i-3-yxdown.{BLOCKED}3.com/2016/6/28/{GUID}.png?imageView2/2/q/85
• http://i-3.{BLOCKED}n.com/2016/4/27/{GUID}.png
• http://i-3-yxdown.{BLOCKED}3.com/2016/4/27/{GUID}.png?imageView2/2/q/85
• http://kl.{BLOCKED}y.com/{random path}?{random characters}
• http://ggstats.{BLOCKED}z.52kfly.com/pinforesults.do?{random characters}
• http://www.{BLOCKED}u.com

このウイルス情報は、自動解析システムにより作成されました。