PUA.Win32.SoftCNApp.ASHGI

To restart in Safe Mode:

• For Windows 7 and Windows Server 2008 (R2) users

1. Restart your computer.
2. Press F8 after the Power-On Self Test (POST) routine is done. If the Advanced Boot Options menu does not appear, try restarting and then pressing F8 several times after the POST screen is displayed.
3. On the Advanced Boot Options menu, use the arrow keys to select the Safe Mode option, and then press Enter.

• For Windows 8, Windows 8.1, and Windows Server 2012 users

1. Access the Charms bar by moving your mouse pointer to the upper right corner of the screen.
2. Move your mouse pointer down and click Settings>Change your PC Settings.
3. In the left panel, click General.
4. In the right panel, scroll down to the bottom to find the Advanced startup section, then click the Restart now button and wait for the system to restart.
5. In the Advanced Startup menu, click Troubleshoot>Advanced Options>Startup Settings>Restart and wait for the system to restart.
6. In the Startup Settings menu, press 4 to enable safe mode.

• For Windows 10 users

1. Press Windows logo key + I on your keyboard to open Settings. If that doesn't work, select the Start button, then select Settings.
2. Select Update & Security > Recovery.
3. Under Advanced startup, select Restart now.
4. After your PC restarts to the Choose an option screen, select Troubleshoot > Advcanced options > Startup settings > Restart.
5. After your PC restarts, you'll see a list og options. Select 4 or press F4 to start your PC in Safe Mode.

Disabling a Malware Service

To disable a service:

1. Open a command prompt window:
   » For Windows 7 and Windows 2008 (R2) users, click the Start button, type cmd in the Search input field, and press Enter.
   » For Windows 8, Windows 8.1 and Windows Server 2012 (R2) users, right-click on the lower-left corner of the screen,click Command Prompt.
   » For Windows 10 users, right-click on the lower-left corner of the screen,click Run, type cmd in the text box provided, and press Enter.
2. At the command prompt, type the following:
   NET STOP HpSvc
3. Press Enter. A message should indicate that the service has been stopped successfully.
4. Close the command prompt window.

To manually delete a malware/grayware file from an affected system:

•For Windows 7, Windows Server 2008 (R2), Windows 8, Windows 8.1, Windows 10, and Windows Server 2012 (R2):

1. Open a Windows Explorer window.
   • For Windows 7 and Server 2008 (R2) users, click Start>Computer.
   • For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower-left corner of the screen,then click File Explorer.
2. In the Search Computer/This PC input box, type:
   
   • %User Temp%\{Random Characters}.tf
   • %User Temp%\lud7789.tmp
   • %User Temp%\NetBridge.dll
   • %Application Data%\360NetUL\{Random Characters}.netul.log
   • %Program Files%\LuDaShi\{Random Characters}.tf
   • %User Temp%\lud87BC.tmp
   • %Application Data%\ludashi\trans_helper\trans_sdk.dll
   • %Temporary Internet Files%\Content.IE5\E6P952NO\url2[1].txt
   • %Application Data%\ludashi\trans_helper\pub_store.dat
   • %Application Data%\ludashi\trans_helper\CidStore.DB
   • %Application Data%\ludashi\trans_helper\CidStore.DB-journal
   • %Temporary Internet Files%\Content.IE5\U90PRGHH\url2[1].txt
   • %Application Data%\ludashi\trans_helper\setting.cfg
   • %Temporary Internet Files%\Content.IE5\01JIXJH3\url2[1].txt
   • %Application Data%\ludashi\trans_helper\dht.id
   • %Temporary Internet Files%\Content.IE5\I5U7DXRH\url2[1].txt
   • %Application Data%\ludashi\.setup.dll.js
   • %Application Data%\ludashi\setup.dll
   • %Application Data%\ludashi\trans_helper\statstorage_v5.xml
   • %Application Data%\ludashi\trans_helper\seq_id
   • %Application Data%\ludashi\trans_helper\xl_sdk_statstorage_v5.xml
   • %Application Data%\ludashi\trans_helper\dhtnodes.dat
   • %Application Data%\ludashi\trans_helper\dhtnodes6.dat
   • %Temporary Internet Files%\Content.IE5\U90PRGHH\url2[2].txt
   • %User Temp%\{Random Characters}.tmp\7z.dll
   • %User Temp%\{Random Characters}.tmp\NetBridge.dll
   • %Temporary Internet Files%\Content.IE5\U90PRGHH\pc[1].php
   • %All Users Profile%\{Random Characters}.tmp\{Random Characters}.tf
   • %User Temp%\{Random Characters}.tmp
   • %User Temp%\{Random Characters}.tmp\FileList.xml
   • %User Temp%\{Random Characters}.tmp\LDS.LDSPRJ
   • %User Temp%\{Random Characters}.tmp\UninstallRootDirFileList.xml
   • %Program Files%\LuDaShi\lds_setup.log
   • %All Users Profile%\{Random Characters}.tmp\BenchmarkData\core.spk
   • %All Users Profile%\{Random Characters}.tmp\BenchmarkData\lds.spk
   • %All Users Profile%\{Random Characters}.tmp\BenchmarkData\shaders_sm_3_0.cache
   • %All Users Profile%\{Random Characters}.tmp\BenchmarkData\shaders_sm_5_0.cache
   • %All Users Profile%\{Random Characters}.tmp\deviceid.ini
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\360LibDrvmgr.dat
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\config.xml
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin\defaultskin.ui
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin\MiniUI.xml
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedback.ui
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedBack.xml
   • %All Users Profile%\{Random Characters}.tmp\game\ModeIdentify.dat
   • %All Users Profile%\{Random Characters}.tmp\Monitors.dat
   • %All Users Profile%\{Random Characters}.tmp\motherboard.dat
   • %All Users Profile%\{Random Characters}.tmp\nBench\NNET.DAT
   • %All Users Profile%\{Random Characters}.tmp\Plugin\Basic.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\BrowserBasic.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\CleanTip.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\Misc.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\NetShield.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\PopMgr.tpi
   • %All Users Profile%\{Random Characters}.tmp\Plugin\RunExtention.tpi
   • %All Users Profile%\{Random Characters}.tmp\ProcSpecial.dat
   • %All Users Profile%\{Random Characters}.tmp\SchemeLib.dat
   • %All Users Profile%\{Random Characters}.tmp\sweeper\RubbishCleanEngine.dat
   • %All Users Profile%\{Random Characters}.tmp\sweeper\SysSweeper.dat
   • %All Users Profile%\{Random Characters}.tmp\sweeper\tracesweeper.dat
   • %All Users Profile%\{Random Characters}.tmp\sweeper\WhiteList.dat
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage\BenchmarkPage_theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage\BenchmarkPage_theme.xml
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage\CleanPage_Theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage\clean_page_theme.xml
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\default_theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr\DownMgr_theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr\downmgr_theme.xml
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage\GamePage_Theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage\GamePage_theme.xml
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite\LdsLite_theme.ui
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite\LdsLite_theme.xml
   • %All Users Profile%\{Random Characters}.tmp\updatecfg.ini
   • %All Users Profile%\{Random Characters}.tmp\Utils\gamecenter.json
   • %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.ui
   • %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.xml
   • %All Users Profile%\{Random Characters}.tmp\Utils\navskin.ui
   • %All Users Profile%\{Random Characters}.tmp\360Base.dll
   • %All Users Profile%\{Random Characters}.tmp\360Base64.dll
   • %All Users Profile%\{Random Characters}.tmp\360Common.dll
   • %All Users Profile%\{Random Characters}.tmp\360Conf.dll
   • %All Users Profile%\{Random Characters}.tmp\360net.dll
   • %All Users Profile%\{Random Characters}.tmp\360P2SP.dll
   • %All Users Profile%\{Random Characters}.tmp\aapt.exe
   • %All Users Profile%\{Random Characters}.tmp\AMDRyzenMasterDriver.sys
   • %All Users Profile%\{Random Characters}.tmp\atiags32.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerMonZ.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ.sys
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ1.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ10.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ11.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ2.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ5.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ7.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ7_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZBrowser.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZHelper_x64.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZService.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerzService_x64.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZTinyTray.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZTray.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ_Accelerator.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ_CN.exe
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ_HardwareDll.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ_PowerSaveDll.dll
   • %All Users Profile%\{Random Characters}.tmp\ComputerZ_x64.sys
   • %All Users Profile%\{Random Characters}.tmp\DataMgr.dll
   • %All Users Profile%\{Random Characters}.tmp\DataMgr_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\Device.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\360NetBase.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\360NetUL.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\7za.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\cloudcom2.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DIFxAPI_x86.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DownloadMgr.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvInst64.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvMgr.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvmgrCore.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\DrvMgrUI.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\dynlenv.dll
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\360ScreenCapture.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\DrvMgrFeedBack.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LdsMMFeedback.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback\LuDaShiFeedBack.exe
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\ScriptExecute.exe
   • %All Users Profile%\{Random Characters}.tmp\game\GamePage.dll
   • %All Users Profile%\{Random Characters}.tmp\game\GameTray.dll
   • %All Users Profile%\{Random Characters}.tmp\game\ModeIdentify.dll
   • %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_battery.dll
   • %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_gpu.dll
   • %All Users Profile%\{Random Characters}.tmp\Hardware\hdw_launcher.dll
   • %All Users Profile%\{Random Characters}.tmp\HardwareEx_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\HardwareProtectEx.sys
   • %All Users Profile%\{Random Characters}.tmp\HardwareProtectEx_x64.sys
   • %All Users Profile%\{Random Characters}.tmp\HardwareProtectSlim.sys
   • %All Users Profile%\{Random Characters}.tmp\HardwareProtectSlim_x64.sys
   • %All Users Profile%\{Random Characters}.tmp\LDSBenchmark.dll
   • %All Users Profile%\{Random Characters}.tmp\LdsLite.exe
   • %All Users Profile%\{Random Characters}.tmp\LiteUninst.exe
   • %All Users Profile%\{Random Characters}.tmp\LiveUpd360.dll
   • %All Users Profile%\{Random Characters}.tmp\LiveUpdate360.exe
   • %All Users Profile%\{Random Characters}.tmp\lpi\CheckHp.dll
   • %All Users Profile%\{Random Characters}.tmp\lpi\HpSvc.dll
   • %All Users Profile%\{Random Characters}.tmp\lpi\TmSvc.dll
   • %All Users Profile%\{Random Characters}.tmp\MiniUI.dll
   • %All Users Profile%\{Random Characters}.tmp\ModuleUpdate.exe
   • %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkLauncher.exe
   • %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkLauncher_x64.exe
   • %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkPage.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\BenchmarkSuite.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\ComputerZ_Bench.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\ComputerZ_Bench_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\D3DCompiler_43.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\d3dx11_43.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\D3DX9_43.dll
   • %All Users Profile%\{Random Characters}.tmp\nBench\Display3DEx.exe
   • %All Users Profile%\{Random Characters}.tmp\nBench\OCLBenchmark.dll
   • %All Users Profile%\{Random Characters}.tmp\NetBridge.dll
   • %All Users Profile%\{Random Characters}.tmp\PDown.dll
   • %All Users Profile%\{Random Characters}.tmp\Platform.dll
   • %All Users Profile%\{Random Characters}.tmp\Plugin\ConfigCenter.dll
   • %All Users Profile%\{Random Characters}.tmp\Plugin\ConfigCenterStub.dll
   • %All Users Profile%\{Random Characters}.tmp\Plugin\PopMgrStub.dll
   • %All Users Profile%\{Random Characters}.tmp\PowerSaveZ.sys
   • %All Users Profile%\{Random Characters}.tmp\PowerSaveZ_x64.sys
   • %All Users Profile%\{Random Characters}.tmp\Safelive.dll
   • %All Users Profile%\{Random Characters}.tmp\SignHelper.dll
   • %All Users Profile%\{Random Characters}.tmp\sites.dll
   • %All Users Profile%\{Random Characters}.tmp\SiteUIHelper.dll
   • %All Users Profile%\{Random Characters}.tmp\softmgr\DownMgr.dll
   • %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgr.dll
   • %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgrInst.exe
   • %All Users Profile%\{Random Characters}.tmp\softmgr\SoftMgrPage.dll
   • %All Users Profile%\{Random Characters}.tmp\sqlite3.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\CleanHelper64.exe
   • %All Users Profile%\{Random Characters}.tmp\sweeper\CleanPage.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\CleanPageEngine.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\ComputerZS1.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\HardwareCleaner.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\heavygate.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\MemoryOptimizer.exe
   • %All Users Profile%\{Random Characters}.tmp\sweeper\SysSweeper.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\TEngine.dll
   • %All Users Profile%\{Random Characters}.tmp\sweeper\Tracehelper.exe
   • %All Users Profile%\{Random Characters}.tmp\sweeper\TrashClean.dll
   • %All Users Profile%\{Random Characters}.tmp\TrayHelper.exe
   • %All Users Profile%\{Random Characters}.tmp\uninst.exe
   • %All Users Profile%\{Random Characters}.tmp\update.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\arctrl.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\CefHelper.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\CommonBrowser.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ12.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ12_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ14.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ8.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\ComputerZ8_x64.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\DisPatchMini.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\Down.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\DumpUper.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\guardhp.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\ie\IeView.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\iosdb.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\iosdb64.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\KitTip.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\Launcher.del.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\LDSBasic.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\LdsDrvInst32.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\LdsDrvInst64.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\Ldshelper.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\LdsMobile.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\LdsVolumeCtrl.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiHelper.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\LuDaShiPreview.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\MedalWall.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\mininews.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\MobileDeviceSrv.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\NavAd.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\NavLauncher.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\NavLauncher64.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\NavPlugin.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\NavProxy64.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\PageMgr.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\pgstation.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\Pop.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\PopEx.dll
   • %All Users Profile%\{Random Characters}.tmp\Utils\RunDll.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\SoulDancer.exe
   • %All Users Profile%\{Random Characters}.tmp\Utils\WebView.dll
   • %Application Data%\lds\lds.set
   • %Application Data%\lds\ComputerZ.set
   • %System%\config\systemprofile\AppData\Roaming\lds\lds.set
   • %Program Files%\LuDaShi\ComputerZ.set
   • %Program Files%\LuDaShi\lpi\svc.dat
   • %System%\config\systemprofile\AppData\Roaming\360NetUL\svchost.netul.log
   • %Application Data%\ludashi\ComputerZ.set
   • %Application Data%\360NetUL\ComputerZ14.netul.log
   • %Application Data%\ludashi\invaildhp_temp.dat
   • %Application Data%\lockhomepage\LockHomePage.ini
   • %Application Data%\ludashi\external.dat
   • %Program Files%\LuDaShi\BenchmarkData\core.spk
   • %Program Files%\LuDaShi\BenchmarkData\lds.spk
   • %Program Files%\LuDaShi\BenchmarkData\shaders_sm_3_0.cache
   • %Program Files%\LuDaShi\BenchmarkData\shaders_sm_5_0.cache
   • %Program Files%\LuDaShi\deviceid.ini
   • %Program Files%\LuDaShi\DrvMgr\360LibDrvmgr.dat
   • %Program Files%\LuDaShi\DrvMgr\config\config.xml
   • %Program Files%\LuDaShi\DrvMgr\config\defaultskin\defaultskin.ui
   • %Program Files%\LuDaShi\DrvMgr\config\defaultskin\MiniUI.xml
   • %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedback.ui
   • %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedBack.xml
   • %Program Files%\LuDaShi\game\ModeIdentify.dat
   • %Program Files%\LuDaShi\Monitors.dat
   • %Program Files%\LuDaShi\motherboard.dat
   • %Program Files%\LuDaShi\nBench\NNET.DAT
   • %Program Files%\LuDaShi\Plugin\Basic.tpi
   • %Program Files%\LuDaShi\Plugin\BrowserBasic.tpi
   • %Program Files%\LuDaShi\Plugin\CleanTip.tpi
   • %Program Files%\LuDaShi\Plugin\Misc.tpi
   • %Program Files%\LuDaShi\Plugin\NetShield.tpi
   • %Program Files%\LuDaShi\Plugin\PopMgr.tpi
   • %Program Files%\LuDaShi\Plugin\RunExtention.tpi
   • %Program Files%\LuDaShi\ProcSpecial.dat
   • %Program Files%\LuDaShi\SchemeLib.dat
   • %Program Files%\LuDaShi\sweeper\RubbishCleanEngine.dat
   • %Program Files%\LuDaShi\sweeper\SysSweeper.dat
   • %Program Files%\LuDaShi\sweeper\tracesweeper.dat
   • %Program Files%\LuDaShi\sweeper\WhiteList.dat
   • %Program Files%\LuDaShi\Themes\Default\BenchmarkPage\BenchmarkPage_theme.ui
   • %Program Files%\LuDaShi\Themes\Default\BenchmarkPage\BenchmarkPage_theme.xml
   • %Program Files%\LuDaShi\Themes\Default\CleanPage\CleanPage_Theme.ui
   • %Program Files%\LuDaShi\Themes\Default\CleanPage\clean_page_theme.xml
   • %Program Files%\LuDaShi\Themes\Default\default_theme.ui
   • %Program Files%\LuDaShi\Themes\Default\DownMgr\DownMgr_theme.ui
   • %Program Files%\LuDaShi\Themes\Default\DownMgr\downmgr_theme.xml
   • %Program Files%\LuDaShi\Themes\Default\GamePage\GamePage_Theme.ui
   • %Program Files%\LuDaShi\Themes\Default\GamePage\GamePage_theme.xml
   • %Program Files%\LuDaShi\Themes\Default\LdsLite\LdsLite_theme.ui
   • %Program Files%\LuDaShi\Themes\Default\LdsLite\LdsLite_theme.xml
   • %Program Files%\LuDaShi\updatecfg.ini
   • %Program Files%\LuDaShi\Utils\gamecenter.json
   • %Program Files%\LuDaShi\Utils\LuDaShiPreview.ui
   • %Program Files%\LuDaShi\Utils\LuDaShiPreview.xml
   • %Program Files%\LuDaShi\Utils\navskin.ui
   • %Program Files%\LuDaShi\360Base.dll
   • %Program Files%\LuDaShi\360Base64.dll
   • %Program Files%\LuDaShi\360Common.dll
   • %Program Files%\LuDaShi\360Conf.dll
   • %Program Files%\LuDaShi\360net.dll
   • %Program Files%\LuDaShi\360P2SP.dll
   • %Program Files%\LuDaShi\aapt.exe
   • %Program Files%\LuDaShi\AMDRyzenMasterDriver.sys
   • %Program Files%\LuDaShi\atiags32.dll
   • %Program Files%\LuDaShi\ComputerMonZ.dll
   • %Program Files%\LuDaShi\ComputerZ.sys
   • %Program Files%\LuDaShi\ComputerZ1.dll
   • %Program Files%\LuDaShi\ComputerZ10.dll
   • %Program Files%\LuDaShi\ComputerZ11.dll
   • %Program Files%\LuDaShi\ComputerZ2.dll
   • %Program Files%\LuDaShi\ComputerZ5.dll
   • %Program Files%\LuDaShi\ComputerZ7.dll
   • %Program Files%\LuDaShi\ComputerZ7_x64.dll
   • %Program Files%\LuDaShi\ComputerZBrowser.exe
   • %Program Files%\LuDaShi\ComputerZHelper_x64.exe
   • %Program Files%\LuDaShi\ComputerZService.exe
   • %Program Files%\LuDaShi\ComputerzService_x64.exe
   • %Program Files%\LuDaShi\ComputerZTinyTray.exe
   • %Program Files%\LuDaShi\ComputerZTray.exe
   • %Program Files%\LuDaShi\ComputerZ_Accelerator.dll
   • %Program Files%\LuDaShi\ComputerZ_CN.exe
   • %Program Files%\LuDaShi\ComputerZ_HardwareDll.dll
   • %Program Files%\LuDaShi\ComputerZ_PowerSaveDll.dll
   • %Program Files%\LuDaShi\ComputerZ_x64.sys
   • %Program Files%\LuDaShi\DataMgr.dll
   • %Program Files%\LuDaShi\DataMgr_x64.dll
   • %Program Files%\LuDaShi\Device.dll
   • %Program Files%\LuDaShi\DrvMgr\360NetBase.dll
   • %Program Files%\LuDaShi\DrvMgr\360NetUL.dll
   • %Program Files%\LuDaShi\DrvMgr\7za.dll
   • %Program Files%\LuDaShi\DrvMgr\cloudcom2.dll
   • %Program Files%\LuDaShi\DrvMgr\DIFxAPI_x86.dll
   • %Program Files%\LuDaShi\DrvMgr\DownloadMgr.dll
   • %Program Files%\LuDaShi\DrvMgr\DrvInst64.exe
   • %Program Files%\LuDaShi\DrvMgr\DrvMgr.exe
   • %Program Files%\LuDaShi\DrvMgr\DrvmgrCore.dll
   • %Program Files%\LuDaShi\DrvMgr\DrvMgrUI.dll
   • %Program Files%\LuDaShi\DrvMgr\dynlenv.dll
   • %Program Files%\LuDaShi\DrvMgr\feedback\360ScreenCapture.exe
   • %Program Files%\LuDaShi\DrvMgr\feedback\DrvMgrFeedBack.exe
   • %Program Files%\LuDaShi\DrvMgr\feedback\LdsMMFeedback.exe
   • %Program Files%\LuDaShi\DrvMgr\feedback\LuDaShiFeedBack.exe
   • %Program Files%\LuDaShi\DrvMgr\ScriptExecute.exe
   • %Program Files%\LuDaShi\game\GamePage.dll
   • %Program Files%\LuDaShi\game\GameTray.dll
   • %Program Files%\LuDaShi\game\ModeIdentify.dll
   • %Program Files%\LuDaShi\Hardware\hdw_battery.dll
   • %Program Files%\LuDaShi\Hardware\hdw_gpu.dll
   • %Program Files%\LuDaShi\Hardware\hdw_launcher.dll
   • %Program Files%\LuDaShi\HardwareEx_x64.dll
   • %Program Files%\LuDaShi\HardwareProtectEx.sys
   • %Program Files%\LuDaShi\HardwareProtectEx_x64.sys
   • %Program Files%\LuDaShi\HardwareProtectSlim.sys
   • %Program Files%\LuDaShi\HardwareProtectSlim_x64.sys
   • %Program Files%\LuDaShi\LDSBenchmark.dll
   • %Program Files%\LuDaShi\LdsLite.exe
   • %Program Files%\LuDaShi\LiteUninst.exe
   • %Program Files%\LuDaShi\LiveUpd360.dll
   • %Program Files%\LuDaShi\LiveUpdate360.exe
   • %Program Files%\LuDaShi\lpi\CheckHp.dll
   • %Program Files%\LuDaShi\lpi\HpSvc.dll
   • %Program Files%\LuDaShi\lpi\TmSvc.dll
   • %Program Files%\LuDaShi\MiniUI.dll
   • %Program Files%\LuDaShi\ModuleUpdate.exe
   • %Program Files%\LuDaShi\nBench\BenchmarkLauncher.exe
   • %Program Files%\LuDaShi\nBench\BenchmarkLauncher_x64.exe
   • %Program Files%\LuDaShi\nBench\BenchmarkPage.dll
   • %Program Files%\LuDaShi\nBench\BenchmarkSuite.dll
   • %Program Files%\LuDaShi\nBench\ComputerZ_Bench.dll
   • %Program Files%\LuDaShi\nBench\ComputerZ_Bench_x64.dll
   • %Program Files%\LuDaShi\nBench\D3DCompiler_43.dll
   • %Program Files%\LuDaShi\nBench\d3dx11_43.dll
   • %Program Files%\LuDaShi\nBench\D3DX9_43.dll
   • %Program Files%\LuDaShi\nBench\Display3DEx.exe
   • %Program Files%\LuDaShi\nBench\OCLBenchmark.dll
   • %Program Files%\LuDaShi\NetBridge.dll
   • %Program Files%\LuDaShi\PDown.dll
   • %Program Files%\LuDaShi\Platform.dll
   • %Program Files%\LuDaShi\Plugin\ConfigCenter.dll
   • %Program Files%\LuDaShi\Plugin\ConfigCenterStub.dll
   • %Program Files%\LuDaShi\Plugin\PopMgrStub.dll
   • %Program Files%\LuDaShi\PowerSaveZ.sys
   • %Program Files%\LuDaShi\PowerSaveZ_x64.sys
   • %Program Files%\LuDaShi\Safelive.dll
   • %Program Files%\LuDaShi\SignHelper.dll
   • %Program Files%\LuDaShi\sites.dll
   • %Program Files%\LuDaShi\SiteUIHelper.dll
   • %Program Files%\LuDaShi\softmgr\DownMgr.dll
   • %Program Files%\LuDaShi\softmgr\SoftMgr.dll
   • %Program Files%\LuDaShi\softmgr\SoftMgrInst.exe
   • %Program Files%\LuDaShi\softmgr\SoftMgrPage.dll
   • %Program Files%\LuDaShi\sqlite3.dll
   • %Program Files%\LuDaShi\sweeper\CleanHelper64.exe
   • %Program Files%\LuDaShi\sweeper\CleanPage.dll
   • %Program Files%\LuDaShi\sweeper\CleanPageEngine.dll
   • %Program Files%\LuDaShi\sweeper\ComputerZS1.dll
   • %Program Files%\LuDaShi\sweeper\HardwareCleaner.dll
   • %Program Files%\LuDaShi\sweeper\heavygate.dll
   • %Program Files%\LuDaShi\sweeper\MemoryOptimizer.exe
   • %Program Files%\LuDaShi\sweeper\SysSweeper.dll
   • %Program Files%\LuDaShi\sweeper\TEngine.dll
   • %Program Files%\LuDaShi\sweeper\Tracehelper.exe
   • %Program Files%\LuDaShi\sweeper\TrashClean.dll
   • %Program Files%\LuDaShi\TrayHelper.exe
   • %Program Files%\LuDaShi\uninst.exe
   • %Program Files%\LuDaShi\update.exe
   • %Program Files%\LuDaShi\Utils\arctrl.dll
   • %Program Files%\LuDaShi\Utils\CefHelper.dll
   • %Program Files%\LuDaShi\Utils\CommonBrowser.exe
   • %Program Files%\LuDaShi\Utils\ComputerZ12.dll
   • %Program Files%\LuDaShi\Utils\ComputerZ12_x64.dll
   • %Program Files%\LuDaShi\Utils\ComputerZ14.exe
   • %Program Files%\LuDaShi\Utils\ComputerZ8.dll
   • %Program Files%\LuDaShi\Utils\ComputerZ8_x64.dll
   • %Program Files%\LuDaShi\Utils\DisPatchMini.dll
   • %Program Files%\LuDaShi\Utils\Down.exe
   • %Program Files%\LuDaShi\Utils\DumpUper.exe
   • %Program Files%\LuDaShi\Utils\guardhp.exe
   • %Program Files%\LuDaShi\Utils\ie\IeView.exe
   • %Program Files%\LuDaShi\Utils\iosdb.exe
   • %Program Files%\LuDaShi\Utils\iosdb64.exe
   • %Program Files%\LuDaShi\Utils\KitTip.dll
   • %Program Files%\LuDaShi\Utils\Launcher.del.exe
   • %Program Files%\LuDaShi\Utils\LDSBasic.dll
   • %Program Files%\LuDaShi\Utils\LdsDrvInst32.exe
   • %Program Files%\LuDaShi\Utils\LdsDrvInst64.exe
   • %Program Files%\LuDaShi\Utils\Ldshelper.exe
   • %Program Files%\LuDaShi\Utils\LdsMobile.exe
   • %Program Files%\LuDaShi\Utils\LdsVolumeCtrl.dll
   • %Program Files%\LuDaShi\Utils\LuDaShiHelper.dll
   • %Program Files%\LuDaShi\Utils\LuDaShiPreview.exe
   • %Program Files%\LuDaShi\Utils\MedalWall.exe
   • %Program Files%\LuDaShi\Utils\mininews.exe
   • %Program Files%\LuDaShi\Utils\MobileDeviceSrv.exe
   • %Program Files%\LuDaShi\Utils\NavAd.dll
   • %Program Files%\LuDaShi\Utils\NavLauncher.dll
   • %Program Files%\LuDaShi\Utils\NavLauncher64.dll
   • %Program Files%\LuDaShi\Utils\NavPlugin.exe
   • %Program Files%\LuDaShi\Utils\NavProxy64.exe
   • %Program Files%\LuDaShi\Utils\PageMgr.dll
   • %Program Files%\LuDaShi\Utils\pgstation.dll
   • %Program Files%\LuDaShi\Utils\Pop.dll
   • %Program Files%\LuDaShi\Utils\PopEx.dll
   • %Program Files%\LuDaShi\Utils\RunDll.exe
   • %Program Files%\LuDaShi\Utils\SoulDancer.exe
   • %Program Files%\LuDaShi\Utils\WebView.dll
   • %Program Files%\LuDaShi\Utils\7z.dll
   • %Program Files%\LuDaShi\HardwareProtect.sys
   • %Program Files%\LuDaShi\HardwareProtect_x64.sys
   • %Application Data%\ludashi\invalidhp.dat
3. Once located, select the file then press SHIFT+DELETE to delete it.
   *Note: Read the following Microsoft page if these steps do not work on Windows 7 and Windows Server 2008 (R2).

To delete the registry value this malware created:

1. Open Registry Editor. To do this:
   » For Windows 7 and Windows Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, Windows 8.1, 10, and Windows Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Ludashi
3. In the right panel, locate and delete the entry:
   (Default) = %Program Files%\LuDaShi\ComputerZ_CN.exe
4. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>ComputerZ
5. In the right panel, locate and delete the entry:
   (Default) = %Program Files%\LuDaShi\ComputerZ_CN.exe
6. Again In the right panel, locate and delete the entry:
   ReadyFor360START = 1
7. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Ludashi_is1
8. In the right panel, locate and delete the entry:
   DisplayIcon = %Program Files%\LuDaShi\ComputerZ_CN.exe
9. Again In the right panel, locate and delete the entry:
   DisplayName = {Hex Values}
10. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HpSvc
11. In the right panel, locate and delete the entry:
    ImagePath = %SystemRoot%\System32\svchost.exe -k netsvcs
12. Again In the right panel, locate and delete the entry:
    Start = 2
13. Again In the right panel, locate and delete the entry:
    DelayedAutostart = 0
14. Again In the right panel, locate and delete the entry:
    Description = {Hex Values}
15. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HpSvc>Parameters
16. In the right panel, locate and delete the entry:
    ServiceDll = %Program Files%\LuDaShi\lpi\HpSvc.dll
17. Again In the right panel, locate and delete the entry:
    ServiceMain = SM
18. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>360Safe>Liveup
19. In the right panel, locate and delete the entry:
    mid = {Random Characters}
20. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>ComMaster
21. In the right panel, locate and delete the entry:
    m2 = {Random Characters}
22. Again In the right panel, locate and delete the entry:
    CreateShortcut = 1
23. Again In the right panel, locate and delete the entry:
    VendorID = buychannel_27
24. Again In the right panel, locate and delete the entry:
    AppType = normal
25. Again In the right panel, locate and delete the entry:
    Type = 0
26. Again In the right panel, locate and delete the entry:
    buy = 1
27. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Svchost
28. In the right panel, locate and delete the entry:
    netsvcs = {Hex Values}
29. Again In the right panel, locate and delete the entry:
    ServiceDll = %Program Files%\LuDaShi\lpi\HpSvc.dll
30. Again In the right panel, locate and delete the entry:
    ServiceMain = SM
31. Again In the right panel, locate and delete the entry:
    Setup Path = %Program Files%\LuDaShi
32. Again In the right panel, locate and delete the entry:
    Setup Path = %Program Files%\LuDaShi
33. Again In the right panel, locate and delete the entry:
    DisplayVersion = 5.1021.1300.610
34. Again In the right panel, locate and delete the entry:
    Publisher = {Hex Values}
35. Again In the right panel, locate and delete the entry:
    UninstallString = %Program Files%\LuDaShi\uninst.exe
36. Again In the right panel, locate and delete the entry:
    URLInfoAbout = www.ludashi.com
37. Again In the right panel, locate and delete the entry:
    InstallLocation = %Program Files%\LuDaShi
38. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HardwareProtect
39. In the right panel, locate and delete the entry:
    Type = 1
40. Again In the right panel, locate and delete the entry:
    Start = 1
41. Again In the right panel, locate and delete the entry:
    ErrorControl = 1
42. Again In the right panel, locate and delete the entry:
    ImagePath = %Program Files%\LuDaShi\HardwareProtect.sys
43. Again In the right panel, locate and delete the entry:
    DisplayName = HardwareProtect
44. Again In the right panel, locate and delete the entry:
    Port = 19531
45. Close Registry Editor.

To delete registry keys this malware/grayware created:

1. Open Registry Editor. To do this:
   » For Windows 7 and Server 2008 (R2) users, click the Start button, type regedit in the Search input field then press Enter.
   » For Windows 8, 8.1, 10, and Server 2012 (R2) users, right-click on the lower left corner of the screen, click Run, type regedit in the text box provided, and then press Enter.
2. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>Software>360Safe>
3. Still in the left panel, locate and delete the key:
   Liveup
4. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>360Safe>Liveup>
5. Still in the left panel, locate and delete the key:
   mid
6. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>
7. Still in the left panel, locate and delete the key:
   ComMaster
8. In the left panel of the Registry Editor window, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>ComMaster>
9. Still in the left panel, locate and delete the key:
   m2
10. Again Still in the left panel, locate and delete the key:
    LiveUpdate360
11. Again Still in the left panel, locate and delete the key:
    Ludashi
12. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Ludashi>
13. Still in the left panel, locate and delete the key:
    CreateShortcut
14. Again Still in the left panel, locate and delete the key:
    VendorID
15. Again Still in the left panel, locate and delete the key:
    AppType
16. Again Still in the left panel, locate and delete the key:
    Type
17. Again Still in the left panel, locate and delete the key:
    buy
18. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HpSvc>
19. Still in the left panel, locate and delete the key:
    Parameters
20. Again Still in the left panel, locate and delete the key:
    ImagePath
21. Again Still in the left panel, locate and delete the key:
    Start
22. Again Still in the left panel, locate and delete the key:
    DelayedAutostart
23. Again Still in the left panel, locate and delete the key:
    Description
24. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HpSvc>Parameters>
25. Still in the left panel, locate and delete the key:
    ServiceDll
26. Again Still in the left panel, locate and delete the key:
    ServiceMain
27. Again Still in the left panel, locate and delete the key:
    Setup Path
28. Again Still in the left panel, locate and delete the key:
    ComputerZ
29. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>ComputerZ>
30. Still in the left panel, locate and delete the key:
    Setup Path
31. Again Still in the left panel, locate and delete the key:
    InstallDate
32. Again Still in the left panel, locate and delete the key:
    FirstInstallDate
33. Again Still in the left panel, locate and delete the key:
    (Default)
34. Again Still in the left panel, locate and delete the key:
    (Default)
35. Again Still in the left panel, locate and delete the key:
    ReadyFor360START
36. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>
37. Still in the left panel, locate and delete the key:
    Ludashi_is1
38. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>CurrentVersion>Uninstall>Ludashi_is1>
39. Still in the left panel, locate and delete the key:
    DisplayIcon
40. Again Still in the left panel, locate and delete the key:
    DisplayName
41. Again Still in the left panel, locate and delete the key:
    DisplayVersion
42. Again Still in the left panel, locate and delete the key:
    Publisher
43. Again Still in the left panel, locate and delete the key:
    UninstallString
44. Again Still in the left panel, locate and delete the key:
    URLInfoAbout
45. Again Still in the left panel, locate and delete the key:
    InstallLocation
46. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>
47. Still in the left panel, locate and delete the key:
    HardwareProtect
48. In the left panel of the Registry Editor window, double-click the following:
    HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>services>HardwareProtect>
49. Still in the left panel, locate and delete the key:
    Type
50. Again Still in the left panel, locate and delete the key:
    Start
51. Again Still in the left panel, locate and delete the key:
    ErrorControl
52. Again Still in the left panel, locate and delete the key:
    ImagePath
53. Again Still in the left panel, locate and delete the key:
    DisplayName
54. Again Still in the left panel, locate and delete the key:
    Port
55. Close Registry Editor.

To delete the malware/grayware folder:

1. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
2. In the Named input box, type:
   
   • %Program Files%\LuDaShi
   • %Application Data%\ludashi
   • %Application Data%\ludashi\trans_helper
   • %User Temp%\{Random Characters}.tmp
   • %User Temp%\{Random Characters}.tmp
   • %All Users Profile%\{Random Characters}.tmp
   • %User Temp%\{Random Characters}.tmp
   • %All Users Profile%\{Random Characters}.tmp\BenchmarkData
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\config
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\config\defaultskin
   • %All Users Profile%\{Random Characters}.tmp\DrvMgr\feedback
   • %All Users Profile%\{Random Characters}.tmp\game
   • %All Users Profile%\{Random Characters}.tmp\Hardware
   • %All Users Profile%\{Random Characters}.tmp\lpi
   • %All Users Profile%\{Random Characters}.tmp\nBench
   • %All Users Profile%\{Random Characters}.tmp\Plugin
   • %All Users Profile%\{Random Characters}.tmp\softmgr
   • %All Users Profile%\{Random Characters}.tmp\sweeper
   • %All Users Profile%\{Random Characters}.tmp\Themes
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\BenchmarkPage
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\CleanPage
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\DownMgr
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\GamePage
   • %All Users Profile%\{Random Characters}.tmp\Themes\Default\LdsLite
   • %All Users Profile%\{Random Characters}.tmp\Utils
   • %All Users Profile%\{Random Characters}.tmp\Utils\ie
   • %Program Files%\LuDaShi\BenchmarkData
   • %Program Files%\LuDaShi\DrvMgr
   • %Program Files%\LuDaShi\DrvMgr\config
   • %Program Files%\LuDaShi\DrvMgr\config\defaultskin
   • %Program Files%\LuDaShi\DrvMgr\feedback
   • %Program Files%\LuDaShi\game
   • %Program Files%\LuDaShi\nBench
   • %Program Files%\LuDaShi\Plugin
   • %Program Files%\LuDaShi\sweeper
   • %Program Files%\LuDaShi\Themes
   • %Program Files%\LuDaShi\Themes\Default
   • %Program Files%\LuDaShi\Themes\Default\BenchmarkPage
   • %Program Files%\LuDaShi\Themes\Default\CleanPage
   • %Program Files%\LuDaShi\Themes\Default\DownMgr
   • %Program Files%\LuDaShi\Themes\Default\GamePage
   • %Program Files%\LuDaShi\Themes\Default\LdsLite
   • %Program Files%\LuDaShi\Utils
   • %Program Files%\LuDaShi\Hardware
   • %Program Files%\LuDaShi\lpi
   • %Program Files%\LuDaShi\softmgr
   • %Program Files%\LuDaShi\Utils\ie
   • %Application Data%\lds
   • %System%\config\systemprofile\AppData\Roaming\lds
   • %Application Data%\lockhomepage
3. In the Look In drop-down list, select My Computer, then press Enter.
4. Once located, select the folder then press SHIFT+DELETE to permanently delete the folder.