PUA.Win32.CseBrowser.ACSCRC

To delete the registry value this malware created:

1. Open Registry Editor. To do this:
   » For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, 10, and Windows Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>360chrome>Chrome
3. In the right panel, locate and delete the entry:
   bookmark_mode =
4. Again In the right panel, locate and delete the entry:
   flash =
5. Again In the right panel, locate and delete the entry:
   gpu =
6. Again In the right panel, locate and delete the entry:
   smart_preheat =
7. Again In the right panel, locate and delete the entry:
   ie_popwindow_newtab =
8. Again In the right panel, locate and delete the entry:
   gpulv = {Random Characters}
9. Again In the right panel, locate and delete the entry:
   gpuwl =
10. Again In the right panel, locate and delete the entry:
    LastDate =
11. Again In the right panel, locate and delete the entry:
    LastPages =
12. Again In the right panel, locate and delete the entry:
    LastFail =
13. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>360chrome>RecuseSafe
14. In the right panel, locate and delete the entry:
    LastSuccess =
15. Again In the right panel, locate and delete the entry:
    LastTime =
16. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Clients>StartMenuInternet>360Chrome
17. In the right panel, locate and delete the entry:
    = 360极速浏览器
18. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Clients>StartMenuInternet>360Chrome>Capabilities
19. In the right panel, locate and delete the entry:
    ApplicationName = 360极速浏览器
20. Again In the right panel, locate and delete the entry:
    ApplicationIcon = C:\Users\dyituser_732\AppData\Local\360Chrome\Chrome\Application\360chrome.exe,
21. Again In the right panel, locate and delete the entry:
    ApplicationDescription = 360极速浏览器是一款可高速运行网页和应用程序的网络浏览器。它快捷、稳定且易于使用。360极速浏览器内置的恶意软件和网上诱骗防护功能可让您更加安全地浏览网页。
22. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>Clients>StartMenuInternet
23. In the right panel, locate and delete the entry:
    = 360极速浏览器
24. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>LiveUpdate360
25. In the right panel, locate and delete the entry:
    IsLowPC =
26. Again In the right panel, locate and delete the entry:
    proxytype =
27. Again In the right panel, locate and delete the entry:
    ieproxy = 127.0.0.0{Random Hex}
28. Close Registry Editor.

To delete registry keys this malware/grayware created:

1. Open Registry Editor. To do this:
   » For Windows 7 and Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>
3. Still in the left panel, locate and delete the key:
   360chrome
4. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>360chrome>
5. Still in the left panel, locate and delete the key:
   Chrome
6. Again Still in the left panel, locate and delete the key:
   Update
7. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>360chrome>Update>
8. Still in the left panel, locate and delete the key:
   Clients
9. In the left panel of the Registry Editor window, double-click the following:
   HKEY_CURRENT_USER>Software>360chrome>Update>Clients>
10. Still in the left panel, locate and delete the key:
    {Random Character}
11. Again Still in the left panel, locate and delete the key:
    StabilityMetrics
12. Again Still in the left panel, locate and delete the key:
    Homepage
13. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>360chrome>Homepage>
14. Still in the left panel, locate and delete the key:
    Default
15. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>360>
16. Still in the left panel, locate and delete the key:
    360se
17. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>360>360se6>
18. Still in the left panel, locate and delete the key:
    Chrome
19. In the left panel of the Registry Editor window, double-click the following:
    HKEY_CURRENT_USER>Software>360>360se6>Chrome>
20. Still in the left panel, locate and delete the key:
    GPU
21. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>
22. Still in the left panel, locate and delete the key:
    LiveUpdate
23. Again Still in the left panel, locate and delete the key:
    360bdoctor
24. Again Still in the left panel, locate and delete the key:
    360Safe
25. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>360Safe>
26. Still in the left panel, locate and delete the key:
    Liveup
27. Again Still in the left panel, locate and delete the key:
    RecuseSafe
28. Close Registry Editor.

To manually delete a malware/grayware file from an affected system:

•For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

1. Open a Windows Explorer window.
   • For Windows 7 and Server 2008 (R2) users, click Start>Computer.
   • For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\CR_{Random Character}.tmp\SETUP.EX_
   • %User Temp%\CR_{Random Character}.tmp\setup.exe
   • %AppDataLocal%\{Random Character}.tmp
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\360base.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\360bdoctor.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\360BDoctorExt\bin\360FeedBack.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\audiomute.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\change_wallpaper.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\chrome.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\chrome_100_percent.pak
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\chrome_elf.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\cloudurls.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\config
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\d3dcompiler_47.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\eacl.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\errorpage.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\exts.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\gamebox.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\gpubl.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\history.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\icudtl.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\360net.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\360NetBase.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\360P2SP.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\chromeup.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\CombineExt.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\livep.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\LiveUpd360.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\PDown.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\Safelive.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\setup.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\setup64.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\khtn.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\last_tabs.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\libEGL.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\libGLESv2.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\Locales\en-US.pak
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\Locales\zh-CN.pak
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\MobileAdapter.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\nacl64.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\nacl_irt_x86_32.nexe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\nacl_irt_x86_64.nexe
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\navhome.htm
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\nblk.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\newtab.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\nocoin.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\options.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\itrusenroll.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\np-mswmp.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\npaliedit.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\npAliSecCtrl.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\npalissologin.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\npcombrg.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\plugins\pta.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\presetui.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\resources.pak
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\safe505.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\seapp.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\sesafe.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\setdefbrowser.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\sibc.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\en_skin.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\iframe.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\jisu11.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\jisu9.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\jisu9wallpaper.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\jisu9_chrome.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\jisu9_dark.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\skin\skin.srx
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\smartpreheat.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\smartpreheat64.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\smart_preheat.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\SnapPlugin.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\snapshot_blob.bin
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\sslblock.zip
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\swiftshader\libEGL.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\swiftshader\libGLESv2.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\switcher
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\updatecfg.ini
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\urllibauth.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\urlproc.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\v8_context_snapshot.bin
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\wdcnf.dat
   • %AppDataLocal%\360Chrome\Chrome\Application\unpack_360chrome.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\download.7z
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\chrome.7z
   • %Desktop%\360极速浏览器.lnk
   • %User Temp%\360极速浏览器.lnk
   • %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\360极速浏览器.lnk
   • %Application Data%\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\360极速浏览器.lnk
   • %Application Data%\Microsoft\Windows\Start Menu\Programs\360安全中心\360极速浏览器\360极速浏览器.lnk
   • %Application Data%\Microsoft\Windows\Start Menu\360极速浏览器.lnk
   • %Application Data%\Microsoft\Windows\Start Menu\Programs\360安全中心\360极速浏览器\了解功能特性.lnk
   • %Application Data%\Microsoft\Windows\Start Menu\Programs\360安全中心\360极速浏览器\卸载360极速浏览器.lnk
   • %AppDataLocal%\360Chrome\Chrome\User Data\ShaderCache\GPUCache\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\ShaderCache\GPUCache\data_0
   • %AppDataLocal%\360Chrome\Chrome\User Data\ShaderCache\GPUCache\data_1
   • %AppDataLocal%\360Chrome\Chrome\User Data\ShaderCache\GPUCache\data_2
   • %AppDataLocal%\360Chrome\Chrome\User Data\ShaderCache\GPUCache\data_3
   • %User Temp%\{Random Character}.tmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\GrShaderCache\GPUCache\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\lockfile
   • %AppDataLocal%\360Chrome\Chrome\User Data\Last Version
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\README
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\360History
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\360History-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Media History
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Media History-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Site Characteristics Database\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Site Characteristics Database\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Site Characteristics Database\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Site Characteristics Database\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\HisDailyBackup\History_2021_11_22.db
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Favicons
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Favicons-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Web Data-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\First Run
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync Data\LevelDB\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync Data\LevelDB\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\wasm\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\js\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\{Random Character}
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync360_V8.sqlite3
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync360_V8.sqlite3-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync Data\LevelDB\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sessions\Tabs_13282036075345231
   • %AppDataLocal%\360Chrome\Chrome\User Data\GrShaderCache\GPUCache\data_0
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Storage\leveldb\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sync Data\LevelDB\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\GrShaderCache\GPUCache\data_1
   • %AppDataLocal%\360Chrome\Chrome\User Data\GrShaderCache\GPUCache\data_2
   • %AppDataLocal%\360Chrome\Chrome\User Data\GrShaderCache\GPUCache\data_3
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cookies
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cookies-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Login Data
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Login Data-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Platform Notifications\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Platform Notifications\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Platform Notifications\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Session Storage\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Session Storage\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Session Storage\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Session Storage\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Session Storage\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Platform Notifications\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\MANIFEST-000002
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\000002.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\CURRENT~RF331ea7.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Top Sites-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\GPUCache\index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\wasm\index-dir\temp-index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\metadata\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\metadata\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\metadata\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\metadata\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Visited Links
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\shared_proto_db\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Sessions\Session_{Random Number}
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Google Profile.ico~RF{Random Hex}.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\SnapPlugin.ini
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences~RF332491.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\360program\mp.dat
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\data_0
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\GPUCache\data_0
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\data_1
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\data_2
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\GPUCache\data_1
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\data_3
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\GPUCache\data_2
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\GPUCache\data_3
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension State\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension State\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension State\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension State\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension State\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\js\aced16ee7981fb58_0
   • %AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\{Random Hex}
   • %AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\{Random Hex}
   • %User Temp%\Cab{Random Hex}.tmp
   • %User Temp%\Tar{Random Hex}.tmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\{Random Character}].tmp
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\dc.ini
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\MiniThunderPlatform.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\XLBugReport.exe
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\360dl.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\atl71.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\dl_peer_id.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\download_engine.dll
   • %AppDataLocal%\360Chrome\Chrome\User Data\v3update\config\updatecfg.ini
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\minizip.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\mini_unzip_dll.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\msvcp71.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\msvcr71.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\XLBugHandler.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\zlib1.dll
   • %AppDataLocal%\360Chrome\Chrome\Application\components\download\3.2.1.47\download\id.dat
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KZJEKTK\helpgame[1]
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000002
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Bookmarks
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Cache\f_000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\000002.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT~RF{Random Hex}.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\previews_opt_out.db
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\previews_opt_out.db-journal
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Network Action Predictor
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Network Action Predictor-journal
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVUI4L47\helpgame[1]
   • %AppDataLocal%\360Chrome\Chrome\User Data\Last Browser
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KZJEKTK\browse[1]
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\BL7GWO8U\guess[1]
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences~RF334c2d.TMP
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEFGVF95\loginconnects[1].dat
   • %AppDataLocalLow%\Microsoft\CryptnetUrlCache\MetaData\{Random Hex}_{Random Hex}
   • %AppDataLocalLow%\Microsoft\CryptnetUrlCache\Content\{Random Hex}_{Random Hex}
   • %AppDataLocal%\360Chrome\Chrome\User Data\{Random Character}.tmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Local State~RF336190.TMP
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVUI4L47\gamebar_new[1].htm
   • %AppDataLocal%\360Chrome\Chrome\User Data\v3update\download\~TA{Random Hex}.cab.~p2s
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\{Random Character}.tmp
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\manifest.json
   • %AppDataLocal%\360Chrome\Chrome\User Data\v3update\download\{Random Character}\360chrome.ini
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\options.html
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\popup.html
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\css\popup.css
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\css\options.css
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\css\chunk-vendors.316bc8e5.css
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\fonts\element-icons.ttf
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\fonts\element-icons.woff
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\128.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\16.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\48.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\action-dark.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\action.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\img\change-to.png
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\js\bg.js
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\js\chunk-vendors.5e0b4e7e.js
   • %AppDataLocal%\360Chrome\Chrome\Application\13.0.2256.0\installer\updatecache.dat
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\js\content.js
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\js\popup.js
   • %User Temp%\scoped_dir{Random Number}_{Random Number}\CRX_INSTALL\js\options.js
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension Rules\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension Rules\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension Rules\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension Rules\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Extension Rules\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Extension Settings\{Random Character}\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Extension Settings\{Random Character}\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Extension Settings\{Random Character}\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Extension Settings\{Random Character}\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Local Extension Settings\{Random Character}\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\History Provider Cache
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\BudgetDatabase\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\BudgetDatabase\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\BudgetDatabase\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\BudgetDatabase\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\BudgetDatabase\000003.log
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\AutofillStrikeDatabase\LOCK
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\AutofillStrikeDatabase\MANIFEST-000001
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\AutofillStrikeDatabase\000001.dbtmp
   • %AppDataLocal%\360Chrome\Chrome\User Data\FontLookupTableCache\font_unique_name_table.pb
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\AutofillStrikeDatabase\000003.log
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KZJEKTK\ExtYouxi_9.0.1[1].cab
   • %User Temp%\extyouxi_cfg.cab
   • %User Temp%\extyouxi_cfg.ini
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index~RF337a00.TMP
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\BL7GWO8U\promlib[1].cab
   • %User Temp%\ewl{Random Hex}.tmp
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEFGVF95\wlist_new[1].cab
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\ExtYouxi.ini
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVUI4L47\wlist2[1].cab
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\server\wlist2.dat
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\wlist2.dat
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KZJEKTK\ProcSpeciaData[1].cab
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\server\ProcSpeciaData.dat
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences~RF339186.TMP
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\BL7GWO8U\resource[1].xml
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\keywordlist.xml
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\apps\ExtYouxi\wlist.dat
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEFGVF95\pull[1]
   • %AppDataLocal%\360Chrome\Chrome\User Data\Local State~RF33df86.TMP
   • %User Temp%\{Random Number}_{Random Number}\crl-set
   • %User Temp%\{Random Number}_{Random Number}\manifest.json
   • %User Temp%\{Random Number}_{Random Number}\LICENSE
   • %User Temp%\{Random Number}_{Random Number}\_metadata\verified_contents.json
   • %User Temp%\{Random Number}_{Random Number}\manifest.fingerprint
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Preferences~RF342d86.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\{Random Character}
   • %AppDataLocal%\360Chrome\Chrome\User Data\Local State~RF342efc.TMP
   • %AppDataLocal%\360Chrome\Chrome\User Data\Default\Network Persistent State~RF344366.TMP
   • %User Temp%\{Random Number}_{Random Number}\download_file_types.pb
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVUI4L47\helpgame[2]
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\7KZJEKTK\helpgame[2]
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\BL7GWO8U\helpgame[1]
   • %User Temp%\{Random Number}_{Random Number}\ssl_error_assistant.pb
   • %User Temp%\{Random Number}_{Random Number}\preloaded_data.pb
   • %AppDataLocal%\Microsoft\Windows\Temporary Internet Files\Content.IE5\YEFGVF95\getbversion[1]
   • %User Temp%\{Random Number}_{Random Number}\safety_tips.pb
   • %User Temp%\{Random Number}_{Random Number}\tls_deprecation_config.pb
   • %User Temp%\{Random Number}_{Random Number}\us_tv_and_film.txt
3. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7 and Windows Server 2008 (R2).