Call: 75
Call: 2375
Delete: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp"
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp" (0)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp" created
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: wrote 11264 to "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 169
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 216
Jump: 245
==============================
06/05/2023 (Saturday) 10:26:16
InstDir=C:\Users\xukai\AppData\Roaming\Tencent\Logs
Call: 256
Jump: 273
Jump: 290
CmdLine=/S /QQ_INST_PATH="C:\Program Files (x86)\Common Files\Tencent" /QQ_RES_FOLDER_NAME=Resource.9.7.6 /QQ_VERSION=59.71.0.28997.0
Call: 296
Jump: 316
Jump: 318
Jump: 318
Jump: 361
Jump: 375
Jump: 386
Original:C:\Program Files (x86)\Common Files\Tencent
Stripped:C:\Program Files (x86)\Common Files\Tencent
Call: 296
Jump: 318
Jump: 318
Jump: 316
Jump: 361
Call: 296
Jump: 318
Jump: 318
Jump: 316
Version:59.71.0.28997.0(4.5.0.18)
Call: 296
Jump: 318
Jump: 318
Extract Mode:
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll"
File: wrote 14848 to "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll"
Call: 296
Jump: 318
Jump: 318
Action= C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe /fp disable
Section: "Q盾核心文件"
settings logging to 1
logging set to 1
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 847
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect" does not exist, jumping 884
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.tpc"
File: wrote 194 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\QQProtect.tpc"
File: overwriteflag=0, allowskipfilesflag=2, name="common.xml.txd"
File: wrote 15778 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\common.xml.txd"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" does not exist, jumping 985
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" created
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="LSPtloginPlugin.dll"
File: wrote 99320 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins\LSPtloginPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LSPlugins.dat"
File: wrote 460 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins\LSPlugins.dat"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QPLocalSvrPlugin.dll"
File: wrote 1551864 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPLocalSvrPlugin.dll"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.exe"
File: wrote 117880 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectEngine.dll"
File: wrote 1328632 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectEngine.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUpd.exe"
File: wrote 1388024 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectUpd.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.dll"
File: wrote 573432 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUI.dll"
File: wrote 135672 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectUI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectVi.dat"
File: wrote 199 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectVi.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="QPPluginMgr.dll"
File: wrote 45048 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPPluginMgr.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPCheckPlugin.dll"
File: wrote 70136 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPCheckPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPUpdPlugin.dll"
File: wrote 506872 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPUpdPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPGF.dll"
File: wrote 207352 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPGF.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.xml"
File: wrote 162 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="res.zip"
File: wrote 179635 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\res.zip"
File: overwriteflag=0, allowskipfilesflag=2, name="BugReport.exe"
File: wrote 342008 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\BugReport.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QPNotify.exe"
File: wrote 100344 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPNotify.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QPPluginInfo.dat"
File: wrote 472 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPPluginInfo.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="common.dll"
File: wrote 1933304 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\common.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="AsyncTask.dll"
File: wrote 92664 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\AsyncTask.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libtcmalloc.dll"
File: wrote 186360 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\libtcmalloc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="zlib.dll"
File: wrote 83960 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\zlib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libexpatw.dll"
File: wrote 138232 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\libexpatw.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="tinyxml.dll"
File: wrote 101880 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\tinyxml.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPSection.dll"
File: wrote 190456 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPSection.dll"
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Jump: 1887
Jump: 1908
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectX64.sys"
File: wrote 118904 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectX64.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectX64_ev.sys"
File: wrote 121344 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectX64_ev.sys"
Call: 1804
Call: 1804
Call: 1804
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" does not exist, jumping 2234
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectConfig.xml"
File: wrote 297 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\QQProtectConfig.xml"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" does not exist, jumping 2306
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUrlBundle.xml.enc"
File: wrote 1304 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052\QQProtectUrlBundle.xml.enc"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectStringBundle.xml"
File: wrote 11408 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052\QQProtectStringBundle.xml"
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\AccessControl.dll")
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\xukai\AppData\Local\Temp\nsm1D34.tmp\")
Call: 75
Call: 2375
Delete: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp"
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp" (0)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp" created
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: wrote 11264 to "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 169
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 216
Jump: 245
==============================
17/06/2023 (Saturday) 19:31:46
InstDir=C:\Users\xukai\AppData\Roaming\Tencent\Logs
Call: 256
Jump: 273
Jump: 290
CmdLine=/S /EXTRACT_MODE=1 /QQ_INST_PATH="C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410"
Call: 296
Jump: 316
Jump: 318
Jump: 318
Jump: 375
Jump: 386
Original:C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410
Stripped:C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410
Call: 296
Jump: 318
Jump: 318
Call: 296
Jump: 318
Jump: 318
Version:(4.5.0.18)
Call: 296
Jump: 316
Jump: 361
Extract Mode:1
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll"
File: wrote 14848 to "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll"
Call: 296
Jump: 318
Jump: 318
Action= C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe /fp disable
Section: "Q盾核心文件"
settings logging to 1
logging set to 1
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 847
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect" does not exist, jumping 884
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect" (1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.tpc"
File: wrote 194 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\QQProtect.tpc"
File: overwriteflag=0, allowskipfilesflag=2, name="common.xml.txd"
File: wrote 15778 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\common.xml.txd"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\LSPlugins" does not exist, jumping 985
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\LSPlugins" (1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin" created
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\LSPlugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="LSPtloginPlugin.dll"
File: wrote 99320 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\LSPlugins\LSPtloginPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LSPlugins.dat"
File: wrote 460 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\LSPlugins\LSPlugins.dat"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QPLocalSvrPlugin.dll"
File: wrote 1551864 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QPLocalSvrPlugin.dll"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.exe"
File: wrote 117880 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtect.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectEngine.dll"
File: wrote 1328632 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtectEngine.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUpd.exe"
File: wrote 1388024 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtectUpd.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.dll"
File: wrote 573432 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtect.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUI.dll"
File: wrote 135672 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtectUI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectVi.dat"
File: wrote 199 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtectVi.dat"
Call: 663
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QQProtect.exe" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 697
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
File: overwriteflag=0, allowskipfilesflag=2, name="common.dll"
File: wrote 1933304 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\common.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="AsyncTask.dll"
File: wrote 92664 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\AsyncTask.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libtcmalloc.dll"
File: wrote 186360 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\libtcmalloc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="zlib.dll"
File: wrote 83960 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\zlib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libexpatw.dll"
File: wrote 138232 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\libexpatw.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="tinyxml.dll"
File: wrote 101880 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\tinyxml.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPSection.dll"
File: wrote 190456 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin\QPSection.dll"
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Jump: 1887
Jump: 1908
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
Call: 1804
Call: 1804
Call: 1804
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.ATL\*.dll"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.ATL\*.manifest"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.CRT\*.dll"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.CRT\*.manifest"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.MFC\*.dll"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.MFC\*.manifest"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.MFCLOC\*.dll"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\SysDir\Microsoft.VC80.MFCLOC\*.manifest"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
CopyFiles "C:\Users\xukai\AppData\Roaming\Tencent\QQ\STemp\TXQQ2052~0\*100.dll"->"C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\Bin"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N" does not exist, jumping 2234
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N" (1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectConfig.xml"
File: wrote 297 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\QQProtectConfig.xml"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\2052" does not exist, jumping 2306
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\2052" (1)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\2052" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUrlBundle.xml.enc"
File: wrote 1304 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\2052\QQProtectUrlBundle.xml.enc"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectStringBundle.xml"
File: wrote 11408 to "C:\Users\xukai\AppData\Local\Temp\qp_tmp_15410\QQProtect\I18N\2052\QQProtectStringBundle.xml"
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\AccessControl.dll")
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\xukai\AppData\Local\Temp\nsoEFE0.tmp\")
Call: 75
Call: 2375
Delete: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp"
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp" (0)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp" created
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: wrote 11264 to "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 169
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 216
Jump: 245
==============================
17/06/2023 (Saturday) 19:32:22
InstDir=C:\Users\xukai\AppData\Roaming\Tencent\Logs
Call: 256
Jump: 273
Jump: 290
CmdLine=/S /QQ_INST_PATH="C:\Program Files (x86)\Common Files\Tencent" /QQ_RES_FOLDER_NAME=Resource.9.7.9 /QQ_VERSION=59.89.0.29059.0
Call: 296
Jump: 316
Jump: 318
Jump: 318
Jump: 361
Jump: 375
Jump: 386
Original:C:\Program Files (x86)\Common Files\Tencent
Stripped:C:\Program Files (x86)\Common Files\Tencent
Call: 296
Jump: 318
Jump: 318
Jump: 316
Jump: 361
Call: 296
Jump: 318
Jump: 318
Jump: 316
Version:59.89.0.29059.0(4.5.0.18)
Call: 296
Jump: 318
Jump: 318
Extract Mode:
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll"
File: wrote 14848 to "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll"
Call: 296
Jump: 318
Jump: 318
Action= C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe /fp disable
Section: "Q盾核心文件"
settings logging to 1
logging set to 1
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 847
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect" does not exist, jumping 884
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.tpc"
File: wrote 194 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\QQProtect.tpc"
File: overwriteflag=0, allowskipfilesflag=2, name="common.xml.txd"
File: wrote 15778 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\common.xml.txd"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" does not exist, jumping 985
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" created
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins" created
File: overwriteflag=0, allowskipfilesflag=2, name="LSPtloginPlugin.dll"
File: wrote 99320 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins\LSPtloginPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="LSPlugins.dat"
File: wrote 460 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\LSPlugins\LSPlugins.dat"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QPLocalSvrPlugin.dll"
File: wrote 1551864 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPLocalSvrPlugin.dll"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 838
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" exists, jumping 0
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll" (overwriteflag=1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.exe"
File: wrote 117880 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectEngine.dll"
File: wrote 1328632 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectEngine.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUpd.exe"
File: wrote 1388024 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectUpd.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.dll"
File: wrote 573432 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUI.dll"
File: wrote 135672 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectUI.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectVi.dat"
File: wrote 199 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectVi.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="QPPluginMgr.dll"
File: wrote 45048 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPPluginMgr.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPCheckPlugin.dll"
File: wrote 70136 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPCheckPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPUpdPlugin.dll"
File: wrote 506872 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPUpdPlugin.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPGF.dll"
File: wrote 207352 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPGF.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtect.xml"
File: wrote 162 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.xml"
File: overwriteflag=0, allowskipfilesflag=2, name="res.zip"
File: wrote 179635 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\res.zip"
File: overwriteflag=0, allowskipfilesflag=2, name="BugReport.exe"
File: wrote 342008 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\BugReport.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QPNotify.exe"
File: wrote 100344 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPNotify.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="QPPluginInfo.dat"
File: wrote 472 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPPluginInfo.dat"
File: overwriteflag=0, allowskipfilesflag=2, name="common.dll"
File: wrote 1933304 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\common.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="AsyncTask.dll"
File: wrote 92664 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\AsyncTask.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libtcmalloc.dll"
File: wrote 186360 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\libtcmalloc.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="zlib.dll"
File: wrote 83960 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\zlib.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="libexpatw.dll"
File: wrote 138232 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\libexpatw.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="tinyxml.dll"
File: wrote 101880 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\tinyxml.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="QPSection.dll"
File: wrote 190456 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QPSection.dll"
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Jump: 1887
Jump: 1908
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 1804
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectX64.sys"
File: wrote 118904 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectX64.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectX64_ev.sys"
File: wrote 121344 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtectX64_ev.sys"
Call: 1804
Call: 1804
Call: 1804
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" does not exist, jumping 2234
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectConfig.xml"
File: wrote 297 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\QQProtectConfig.xml"
Call: 752
Call: 2375
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll" (overwriteflag=1)
IfFileExists: file "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" does not exist, jumping 2306
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" (1)
CreateDirectory: "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052" created
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectUrlBundle.xml.enc"
File: wrote 1304 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052\QQProtectUrlBundle.xml.enc"
File: overwriteflag=0, allowskipfilesflag=2, name="QQProtectStringBundle.xml"
File: wrote 11408 to "C:\Program Files (x86)\Common Files\Tencent\QQProtect\I18N\2052\QQProtectStringBundle.xml"
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\AccessControl.dll")
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\xukai\AppData\Local\Temp\nsj7C03.tmp\")
Call: 75
Call: 3038
Delete: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp"
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp" (0)
CreateDirectory: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp" created
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
File: wrote 11264 to "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
Call: 3038
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll" (overwriteflag=1)
Jump: 169
Call: 3038
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll" (overwriteflag=1)
Call: 3038
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll" (overwriteflag=1)
Jump: 216
Jump: 245
==============================
13/07/2023 (Thursday) 19:40:28
InstDir=C:\Users\xukai\AppData\Roaming\Tencent\Logs
Call: 3038
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll" (overwriteflag=1)
Start=79531
Call: 264
Jump: 281
Jump: 298
CmdLine=/ACTION=2 /QQ_INST_PATH="C:\Program Files (x86)\Common Files\\Tencent" /QQ_PATH="C:\Program Files (x86)\Tencent\QQ\\" /ProductID=1000001 /QQ_VERSION=60.01.0.29088.0 /S
Call: 304
Jump: 324
Jump: 326
Jump: 326
Jump: 369
Jump: 383
Jump: 394
ReleaseDir:C:\Program Files (x86)\Common Files\\Tencent
Stripped:C:\Program Files (x86)\Common Files\\Tencent
Call: 304
Jump: 326
Jump: 326
Jump: 324
Jump: 326
Jump: 326
Jump: 369
Jump: 383
QQPath:C:\Program Files (x86)\Tencent\QQ\\
Jump: 413
Jump: 413
Stripped:C:\Program Files (x86)\Tencent\QQ
Call: 304
Jump: 326
Jump: 326
Jump: 326
Jump: 326
Extract Mode:
Call: 3038
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\AccessControl.dll"
File: wrote 14848 to "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\AccessControl.dll"
Call: 304
Jump: 324
Jump: 369
Call: 304
Jump: 326
Jump: 326
Jump: 326
Jump: 326
Jump: 324
Jump: 369
Action=2,1000001
OldQP=C:\Program Files (x86)\Tencent\QQ\QQProtect
Call: 3038
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll"
File: wrote 159288 to "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll"
Call: 3038
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll" (overwriteflag=1)
GetAction=4
Action2=4
ExitCode=1002 not support
Call: 3038
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll"
File: skipped: "C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll" (overwriteflag=1)
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\AccessControl.dll")
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll")
Delete: DeleteFile on Reboot("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\QPInstallMgr_i.dll")
Delete: DeleteFile("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\")
RMDir: RemoveDirectory on Reboot("C:\Users\xukai\AppData\Local\Temp\nss369D.tmp\")