查看: 5867|回复: 16
收起左侧

[讨论] 关于荣耀电脑管家附带的奇安信安全组件

[复制链接]
风屿法师
发表于 2026-6-29 00:57:24 | 显示全部楼层 |阅读模式
本帖最后由 风屿法师 于 2026-6-29 18:27 编辑

看到论坛之前的讨论(https://bbs.kafan.cn/thread-2257795-1-1.html),现在可以确定荣耀电脑管家附带的杀毒模块是奇安信提供。首先,其安装目录下有一个名为“MBAAntiVirus.exe”的文件,另外还有一整个文件夹名为“qspublic”的文件夹,里面放着很多奇安信的文件。


其次,任务管理器的进程也有一些奇安信的进程:

再次,在荣耀电脑管家安装/更新的时候会在安装目录下短暂出现一个名为“RYSDKSetup.exe”的文件(“RYSDKSetup.exe”可以通过解压荣耀电脑管家的安装包得到,点此进入荣耀电脑管家下载地址。),备注显示为奇安信的安装程序,其数字签名也是奇安信;但文件大小比奇安信天守的安装包大幅缩水,双击也无法打开:


放一张天守离线安装包的属性页作对比:

最后,荣耀电脑管家后台运行时会频繁访问奇安信的服务器“fanghu.qianxin.com”和“ts.qianxin.com”。
所以可以确定荣耀电脑管家的安全组件是奇安信提供,有传言说这个奇安信的授权是与硬件绑定的。

使用体验的话,感觉误报有点严重(年初时我常用的“DupFilesSearchAndLink”老是被荣耀电脑管家报毒,有时候甚至弹出Powershell的报毒弹窗,这个误报都不知道该找谁),报毒详情页过于简陋;而且没有办法像联想电脑管家一样在保持管家完整性的情况下单独关闭安全组件,也找不到手动更新病毒库的按钮。


我有几个问题想请教各位大神:
  • 这个奇安信组件究竟有原版奇安信的几成战力,阉割了哪些功能?
  • 有没有大神知道它多久更新一次病毒库,有没有云查杀?
  • 有没有办法给它装到纯离线的虚拟机上面(我很想用它来测病毒样本包,但是又不敢在实体机上测,为防止病毒逃逸,我一般断网进行测试)?



附:奇安信组件安装目录“config\uninst\fileslist.xml”的部分内容(略去文件特征码):
<Root>
<FileList>
<File Name="7z.dll" IsPE="true" Version="21.7.0.0" Size="0" (特征码略)/>
<File Name="7z.x64.dll" IsPE="true" Version="21.7.0.0" Size="0" (特征码略)/>
<File Name="abinstall.dll" IsPE="true" Version="1.0.0.40" Size="0" (特征码略)/>
<File Name="abinstallsdk.x64.dll" IsPE="true" Version="1.0.0.8" Size="0" (特征码略)/>
<File Name="api-ms-win-core-console-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-datetime-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-debug-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-errorhandling-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-file-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-file-l1-2-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-file-l2-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-handle-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-heap-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-interlocked-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-libraryloader-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-localization-l1-2-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-memory-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-namedpipe-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-processenvironment-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-processthreads-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-processthreads-l1-1-1.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-profile-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-rtlsupport-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-string-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-synch-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-synch-l1-2-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-sysinfo-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-timezone-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-core-util-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-conio-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-convert-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-environment-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-filesystem-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-heap-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-locale-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-math-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-multibyte-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-private-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-process-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-runtime-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-stdio-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-string-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-time-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="api-ms-win-crt-utility-l1-1-0.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="autorunmanager.dll" IsPE="true" Version="1.0.0.45" Size="0" (特征码略)/>
<File Name="autorunmanager.x64.dll" IsPE="true" Version="1.0.0.20" Size="0" (特征码略)/>
<File Name="binary\basicinfo.dll" IsPE="true" Version="10.0.0.1450" Size="0" (特征码略)/>
<File Name="browseraddin.x64.dll" IsPE="true" Version="1.0.0.4" Size="0" (特征码略)/>
<File Name="commonconfig.dll" IsPE="true" Version="10.1.0.1100" Size="0" (特征码略)/>
<File Name="commonconfig.x64.dll" IsPE="true" Version="10.1.0.1100" Size="0" (特征码略)/>
<File Name="config\clean.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\hufu\values.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\markmode.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\runs.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\sys_events.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\values\values.base.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\values\values.defender.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\values\values.scan.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\values\values.security.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="config\xd.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="crashreport.dll" IsPE="true" Version="1.0.0.7" Size="0" (特征码略)/>
<File Name="data\smart.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\crule.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\dwslt.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\ips.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\nd.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\ndconfig.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\nddefender.dll" IsPE="true" Version="10.0.0.1330" Size="0" (特征码略)/>
<File Name="defender\plugmgr.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\ruleengcnf.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xdantirm.dll" IsPE="true" Version="10.0.0.1250" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xdcloudperf.dll" IsPE="true" Version="10.0.0.1340" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xdcmdline.dll" IsPE="true" Version="10.0.0.1270" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xddnsplugin.dll" IsPE="true" Version="10.0.0.1340" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xddownload.dll" IsPE="true" Version="10.0.0.1260" Size="0" (特征码略)/>
<File Name="defender\ruleplugs\xdlocallevrule.dll" IsPE="true" Version="10.0.0.1350" Size="0" (特征码略)/>
<File Name="defender\sdk_xdrule.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\xdasyncscan.dll" IsPE="true" Version="10.0.0.1330" Size="0" (特征码略)/>
<File Name="defender\xdcache.dll" IsPE="true" Version="10.0.0.1280" Size="0" (特征码略)/>
<File Name="defender\xddeepscan.dll" IsPE="true" Version="10.0.0.1240" Size="0" (特征码略)/>
<File Name="defender\xddeepscanplugin.ext" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\xddefender.dll" IsPE="true" Version="10.0.0.1330" Size="0" (特征码略)/>
<File Name="defender\xddefendercnf.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\xddrvmgr.dll" IsPE="true" Version="10.0.0.1290" Size="0" (特征码略)/>
<File Name="defender\xdengconf.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\xdextfunc.dll" IsPE="true" Version="10.0.0.1330" Size="0" (特征码略)/>
<File Name="defender\xdhandler.dll" IsPE="true" Version="10.0.0.1260" Size="0" (特征码略)/>
<File Name="defender\xdprocesstree.dll" IsPE="true" Version="10.0.0.1280" Size="0" (特征码略)/>
<File Name="defender\xdregscan.dll" IsPE="true" Version="10.0.0.1270" Size="0" (特征码略)/>
<File Name="defender\xdrule.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="defender\xdruleeng.dll" IsPE="true" Version="10.0.0.1380" Size="0" (特征码略)/>
<File Name="defenderchecker.dll" IsPE="true" Version="1.0.0.4" Size="0" (特征码略)/>
<File Name="defenderchecker.x64.dll" IsPE="true" Version="1.0.0.6" Size="0" (特征码略)/>
<File Name="documents\icon\system-cache.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\system-log.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\system-temp.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\system-trash.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\system-update.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\system-windows.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\icon\windows-app.png" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\popblock\popblock_rule.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\popblock\trpopblock_en_us.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\popblock\trpopblock_fr_fr.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\popblock\trpopblock_zh_cn.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\resource\description_en.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\resource\description_fr.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\resource\description_zh.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\rules.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\sysopt.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\trustzone_sdk.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="documents\rules\userenvs.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="edr_rule.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="engineproxy.dll" IsPE="true" Version="1.0.0.1" Size="0" (特征码略)/>
<File Name="filesver.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="gobridge.dll" IsPE="true" Version="1.0.0.19" Size="0" (特征码略)/>
<File Name="libcrypto-3.dll" IsPE="true" Version="3.0.0.0" Size="0" (特征码略)/>
<File Name="libcrypto-3.x64.dll" IsPE="true" Version="3.0.0.0" Size="0" (特征码略)/>
<File Name="libcurl.dll" IsPE="true" Version="7.80.0.0" Size="0" (特征码略)/>
<File Name="libegl.dll" IsPE="true" Version="5.14.1.0" Size="0" (特征码略)/>
<File Name="libglesv2.dll" IsPE="true" Version="5.14.1.0" Size="0" (特征码略)/>
<File Name="libstdc++-6.dll" IsPE="true" Version="" Size="1557006" (特征码略)/>
<File Name="libwinpthread-1.dll" IsPE="true" Version="1.0.0.0" Size="0" (特征码略)/>
<File Name="localappcenter.dll" IsPE="true" Version="1.0.0.134" Size="0" (特征码略)/>
<File Name="localappcenter.x64.dll" IsPE="true" Version="1.0.0.9" Size="0" (特征码略)/>
<File Name="logagent.exe" IsPE="true" Version="1.0.0.92" Size="0" (特征码略)/>
<File Name="logsdk.x64.dll" IsPE="true" Version="1.0.0.1" Size="0" (特征码略)/>
<File Name="msvcp140.dll" IsPE="true" Version="14.29.30139.0" Size="0" (特征码略)/>
<File Name="nghttp2.dll" IsPE="true" Version="1.40.0.0" Size="0" (特征码略)/>
<File Name="plugin\cloudagent.ext" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="popblockeng.x64.dll" IsPE="true" Version="1.0.0.17" Size="0" (特征码略)/>
<File Name="qaxbase.config.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="qaxbase.dll" IsPE="true" Version="10.0.0.4077" Size="0" (特征码略)/>
<File Name="qaxbase.win32.dll" IsPE="true" Version="10.0.0.4042" Size="0" (特征码略)/>
<File Name="qaxbase.win32.x64.dll" IsPE="true" Version="10.0.0.4042" Size="0" (特征码略)/>
<File Name="qaxbase.x64.dll" IsPE="true" Version="10.0.0.3050" Size="0" (特征码略)/>
<File Name="qaxdefender.exe" IsPE="true" Version="1.0.0.397" Size="0" (特征码略)/>
<File Name="qaxdefenderhelper.exe" IsPE="true" Version="1.0.0.8" Size="0" (特征码略)/>
<File Name="qaxrpcproxy.dll" IsPE="true" Version="1.0.0.7" Size="0" (特征码略)/>
<File Name="qaxsecurityver.dll" IsPE="true" Version="1.5.7.2022" Size="0" (特征码略)/>
<File Name="qaxsecurityver.x64.dll" IsPE="true" Version="1.0.2.1001" Size="0" (特征码略)/>
<File Name="qbrowsernative.exe" IsPE="true" Version="1.0.0.44" Size="0" (特征码略)/>
<File Name="qcleanrubbish.x64.dll" IsPE="true" Version="1.0.0.16" Size="0" (特征码略)/>
<File Name="qsbase.dll" IsPE="true" Version="1.0.0.251" Size="0" (特征码略)/>
<File Name="qsbase.x64.dll" IsPE="true" Version="1.0.0.6" Size="0" (特征码略)/>
<File Name="qsetting.dll" IsPE="true" Version="1.0.0.88" Size="0" (特征码略)/>
<File Name="qsetting.x64.dll" IsPE="true" Version="1.0.0.2" Size="0" (特征码略)/>
<File Name="qseventlog.dll" IsPE="true" Version="1.0.0.130" Size="0" (特征码略)/>
<File Name="qseventparser.dll" IsPE="true" Version="1.0.0.47" Size="0" (特征码略)/>
<File Name="qslonglink.dll" IsPE="true" Version="1.0.0.21" Size="0" (特征码略)/>
<File Name="qupdateplugin.dll" IsPE="true" Version="1.0.0.109" Size="0" (特征码略)/>
<File Name="safebase.dll" IsPE="true" Version="10.0.0.4010" Size="0" (特征码略)/>
<File Name="safebase.x64.dll" IsPE="true" Version="10.0.0.3050" Size="0" (特征码略)/>
<File Name="scan.x64\avconfigmgr.dll" IsPE="true" Version="10.1.0.2000" Size="0" (特征码略)/>
<File Name="scan.x64\avconfigs.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\bsgn.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\cloudservice.dll" IsPE="true" Version="10.1.0.2290" Size="0" (特征码略)/>
<File Name="scan.x64\dsauthzone.dll" IsPE="true" Version="10.0.0.4300" Size="0" (特征码略)/>
<File Name="scan.x64\dsengconf.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\dsengcore.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dsenummgr.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dsenumrator.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dsextscaneng.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dshandler.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dsmiskilling.dll" IsPE="true" Version="10.0.0.2635" Size="0" (特征码略)/>
<File Name="scan.x64\dsmondata.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\dsquarant.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dsscanengbase.dll" IsPE="true" Version="10.0.0.2710" Size="0" (特征码略)/>
<File Name="scan.x64\dssystemfilereplace.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan.x64\dstrustedzone.dll" IsPE="true" Version="10.1.0.2210" Size="0" (特征码略)/>
<File Name="scan.x64\extscanruleconf.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\localrule.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libapk.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libcompound.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libdef.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libelf.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libengine.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libextract.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libffr.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\liblnk.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libmacho.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libmpe.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libole.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libpdf.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libpe.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libscanelf.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libscanex.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libscanpe.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libscanse.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libswf.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\owl\libupr.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\qde\conf\exports_111.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\qde\conf\imports_5015.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\qde\conf\qde.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\qde\conf\sectionnames_66.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\scanbase\qde\qde.dll" IsPE="true" Version="2.0.0.19" Size="0" (特征码略)/>
<File Name="scan.x64\udiskscaneng.dll" IsPE="true" Version="10.0.0.2100" Size="0" (特征码略)/>
<File Name="scan.x64\virusclass.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\wcrt.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan.x64\wsgn.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\avconfigmgr.dll" IsPE="true" Version="10.1.0.2000" Size="0" (特征码略)/>
<File Name="scan\avconfigs.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\bsgn.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\cloudservice.dll" IsPE="true" Version="10.1.0.2360" Size="0" (特征码略)/>
<File Name="scan\core_evaluation.dll" IsPE="true" Version="1.0.0.2" Size="0" (特征码略)/>
<File Name="scan\dsauthzone.dll" IsPE="true" Version="10.0.0.4320" Size="0" (特征码略)/>
<File Name="scan\dsengconf.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\dsengcore.dll" IsPE="true" Version="10.0.0.2650" Size="0" (特征码略)/>
<File Name="scan\dsenummgr.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan\dsenumrator.dll" IsPE="true" Version="10.0.0.2600" Size="0" (特征码略)/>
<File Name="scan\dsextscaneng.dll" IsPE="true" Version="10.0.0.2610" Size="0" (特征码略)/>
<File Name="scan\dshandler.dll" IsPE="true" Version="10.0.0.2620" Size="0" (特征码略)/>
<File Name="scan\dsmiskilling.dll" IsPE="true" Version="10.0.0.2610" Size="0" (特征码略)/>
<File Name="scan\dsmondata.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\dsquarant.dll" IsPE="true" Version="10.0.0.2625" Size="0" (特征码略)/>
<File Name="scan\dsscanengbase.dll" IsPE="true" Version="10.0.0.2700" Size="0" (特征码略)/>
<File Name="scan\dssystemfilereplace.dll" IsPE="true" Version="10.0.0.2610" Size="0" (特征码略)/>
<File Name="scan\dstrustedzone.dll" IsPE="true" Version="10.1.0.2210" Size="0" (特征码略)/>
<File Name="scan\extscanruleconf.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\localrule.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0000.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0003.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0004.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0005.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0006.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0007.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0008.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0009.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0010.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base0018.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1000.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1003.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1004.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1005.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1006.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1007.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1008.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1009.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1010.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1011.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1014.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1015.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1017.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1018.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1019.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1020.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1025.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1026.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1027.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base1028.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base2001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base2002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base2003.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base2005.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3000.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3011.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3012.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3013.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base3014.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4000.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4003.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4004.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4005.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4006.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4007.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4008.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4009.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4010.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4011.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4014.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4017.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4018.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4019.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4020.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4600.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4603.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4604.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4605.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4606.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4607.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4608.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4610.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4611.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4614.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4617.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4618.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\base4620.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\baseinfo.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0000.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0003.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0004.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0005.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0006.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0007.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0008.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0009.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0010.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0011.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0012.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0013.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0014.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0015.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0016.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0017.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0018.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0019.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0020.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0021.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0022.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0023.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0024.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0025.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0026.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0027.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0028.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0029.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0030.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0031.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0033.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0034.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0035.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0036.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0037.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0038.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0039.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0040.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0041.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0042.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0043.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0044.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0045.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0046.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0047.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0048.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0049.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0050.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0051.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0052.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0053.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0054.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0055.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0056.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0057.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0058.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0059.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0060.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0061.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0062.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0063.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0064.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0065.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0066.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0067.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0068.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0069.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0070.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0071.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0072.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0073.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0075.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0076.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0077.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0078.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0079.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0080.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0081.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0082.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0083.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0084.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0085.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0086.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0088.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0090.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0094.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0095.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0096.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0097.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0100.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0101.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0103.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0104.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0105.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0108.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0109.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0110.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0115.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0116.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0117.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0118.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0119.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0120.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0122.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0123.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0124.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0125.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0126.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\d0127.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\dn001.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\dn002.def" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\def\update_owl.txt" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libapk.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libcompound.dll" IsPE="true" Version="2.0.0.4" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libdef.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libelf.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libemu.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libengine.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libextract.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libffr.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\liblnk.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libmacho.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libmpe.dll" IsPE="true" Version="2.0.0.6" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libneo.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libole.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libpdf.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libpe.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libqs.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libqsbase.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libscanelf.dll" IsPE="true" Version="2.0.0.1" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libscanex.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libscanpe.dll" IsPE="true" Version="2.0.0.5" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libscanse.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libswf.dll" IsPE="true" Version="2.0.0.3" Size="0" (特征码略)/>
<File Name="scan\scanbase\owl\libupr.dll" IsPE="true" Version="2.0.0.2" Size="0" (特征码略)/>
<File Name="scan\scanbase\qde\conf\exports_111.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\qde\conf\imports_5015.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\qde\conf\qde.json" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\qde\conf\sectionnames_66.dct" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\scanbase\qde\qde.dll" IsPE="true" Version="2.0.0.19" Size="0" (特征码略)/>
<File Name="scan\udiskscaneng.dll" IsPE="true" Version="10.0.0.2100" Size="0" (特征码略)/>
<File Name="scan\virusclass.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\wcrt.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\wsfl3_10.0" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\wsfl3_10.0.19564" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\wsfl3_10.0.22000" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scan\wsgn.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="scansdk.x64.dll" IsPE="true" Version="1.0.0.1" Size="0" (特征码略)/>
<File Name="security.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="security.x64\avutils.dll" IsPE="true" Version="10.1.0.1010" Size="0" (特征码略)/>
<File Name="security.x64\filecachecom.dll" IsPE="true" Version="10.1.0.1200" Size="0" (特征码略)/>
<File Name="security.x64\libcimautoruns.dll" IsPE="true" Version="10.0.0.4260" Size="0" (特征码略)/>
<File Name="security.x64\libcimfile.dll" IsPE="true" Version="10.1.0.2300" Size="0" (特征码略)/>
<File Name="security.x64\libcimps.dll" IsPE="true" Version="10.1.0.2110" Size="0" (特征码略)/>
<File Name="security\avutilcfg.xml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="security\avutils.dll" IsPE="true" Version="10.0.0.1020" Size="0" (特征码略)/>
<File Name="security\filecachecom.dll" IsPE="true" Version="10.1.0.1230" Size="0" (特征码略)/>
<File Name="security\libcimautoruns.dll" IsPE="true" Version="10.1.0.2220" Size="0" (特征码略)/>
<File Name="security\libcimfile.dll" IsPE="true" Version="10.1.0.2315" Size="0" (特征码略)/>
<File Name="security\libcimps.dll" IsPE="true" Version="10.1.0.2120" Size="0" (特征码略)/>
<File Name="security\qaxsp.dat" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="sqlcipher.dll" IsPE="true" Version="1.0.0.4" Size="0" (特征码略)/>
<File Name="sqlcipher_x64.dll" IsPE="true" Version="" Size="1139712" (特征码略)/>
<File Name="trantor.cfg.yaml" IsPE="false" Version="" Size="0" (特征码略)/>
<File Name="trantoragent.dll" IsPE="true" Version="10.4.0.1013" Size="0" (特征码略)/>
<File Name="trantoragent.exe" IsPE="true" Version="10.1.3500.1014" Size="0" (特征码略)/>
<File Name="ucenter.dll" IsPE="true" Version="1.0.0.92" Size="0" (特征码略)/>
<File Name="ucrtbase.dll" IsPE="true" Version="10.0.10137.0" Size="0" (特征码略)/>
<File Name="uninstall.exe" IsPE="true" Version="1.0.0.81" Size="0" (特征码略)/>
<File Name="vcruntime140.dll" IsPE="true" Version="14.29.30139.0" Size="0" (特征码略)/>
<File Name="vcruntime140_1.dll" IsPE="true" Version="14.29.30139.0" Size="0" (特征码略)/>
<File Name="xdcommdata.dat" IsPE="false" Version="" Size="0" (特征码略)/>
</FileList>
</Root>


此外,该目录下还有一个名为“shanji.setup”的有意思的文件,用记事本打开,内容如下:
<?xml version="1.0" encoding="utf-16"?>
<test>
        <Setup>
          <Main Name="Qi-anxin security SDK" MakeHoney="true" ProductVersion="2.0.1.2310" Version="1.0.0.1221" AppVersion="2.0.1.2310" Executable="setup.exe" Title="" UninstallTitle="" MinimizeSpace="512" RebootFlagName="" MutexName="qsafe_installer" IsBeta="0" DefaultSkin="defaultskin"/>
          <Application MainApp="QAXSecurity.SDK.exe" VersionBaseFile="QAXSecurityver.dll"/>
          <RegAppPath HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QAXSecurity.SDK.exe" Value="Path"/>         
          <UnInstall HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\QAXSecurity.SDK" DisplayName="奇安信安全防护SDK" UninstallString="uninstall.exe" Publisher="奇安信安全防护" Version="2.0.1.2310" DisplayVersion="2.0.1.2310" />
          <DefaultPath Root="ProgramFiles" Dir="" ForceCreateFolder="" CanChange="TRUE"/>
         
          <UnInstallKillApp File="QAXDefender.exe"/>
          <UnInstallKillApp File="trantorAgent.exe"/>
          <UnInstallKillApp File="IFLPack.exe"/>
          <UnInstallKillApp File="QAXDefenderHelper.exe"/>
          <UnInstallKillApp File="QaxEngManager.exe"/>
         
          <UnInstallPath Path="CommonAppData" Name="QI-ANXIN Security SDK"/>
          <UnInstallPath Path="CommonAppData" Name="QI-ANXIN Tianqing"/>
          <UnInstallPath Path="CommonAppData" Name="HonorSDK"/>
         
          <FileList RootDir="bin" List="filelist.xml"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QI-ANXIN Tianqing" Path="InstallLocation" Name="奇安信天擎" StatID="21"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\360天擎" Path="InstallLocation" Name="360天擎" StatID="21"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallWIX_{(略去)}" Path="UninstallString" Name="卡巴斯基安全软件" StatID="1"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{(略去)}" Path="UninstallString" Name="Avira" StatID="2"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NAV" Path="UninstallString" Name="Norton AntiVirus" StatID="3"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NGC" Path="UninstallString" Name="Norton AntiVirus" StatID="3"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NIS" Path="UninstallString" Name="Norton Internet Security" StatID="4"/>         
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr" Path="UninstallString" Name="电脑管家" StatID="5"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kingsoft Internet Security" Path="UninstallString" Name="金山毒霸" StatID="6"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2345PCSafe" Path="UninstallString" Name="安全卫士 - 2345" StatID="8"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\360SD" Path="UninstallString" Name="360安全中心" StatID="9"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\360TotalSecurity" Path="UninstallString" Name="360安全中心" StatID="10"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HuorongSysdiag" Path="UninstallString" Name="火绒安全软件" StatID="11"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{(略去)}" Path="UninstallString" Name="ESET Security" StatID="12"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MSC" Path="UninstallString" Name="迈克菲® 全面安全保护套装" StatID="13"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Antivirus" Path="UninstallString" Name="AVG AntiVirus FREE" StatID="14"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bitdefender Agent" Path="UninstallString" Name="Bitdefender Agent" StatID="15"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bitdefender" Path="UninstallString" Name="Bitdefender Agent" StatID="15"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{(略去)}" Path="UninstallString" Name="PC-cillin 雲端版" StatID="16"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Avast Antivirus" Path="UninstallString" Name="Avast Free Antivirus" StatID="17"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\G DATA TOTAL SECURITY" Path="UninstallString" Name="G DATA TOTAL SECURITY" StatID="18"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\G DATA ANTIVIRUS" Path="UninstallString" Name="G DATA TOTAL SECURITY" StatID="18"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{(略去)}_is1" Path="UninstallString" Name="Malwarebytes" StatID="19"/>
          <ConflictApp HKEY="HKEY_LOCAL_MACHINE" SubKey="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\360安全卫士" Path="UninstallString" Name="360安全卫士" StatID="7"/>
         
          <ExclusiveFileList RootDir="bin" List="ExclusiveFileList.xml"/>
          <Register File="Register.xml"/>
          <Plugin File="plugin.xml"/>
          <NotPEFileVersion File="updatecfg.ini"/>
          <UninstallRootDirFileList File="UninstallRootDirFileList.xml"/>
          <CloseAllPrograms>
          </CloseAllPrograms>
          <!-- 重启之后才能覆盖的文件 -->        
          <RebootReplaceFile>
          </RebootReplaceFile>
          <Param File="Param.xml"/>
          <Whitelist RootDir="bin" List="whitelist.xml"/>
        </Setup>
</test>

劳烦各路大神解答!

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
YSL
发表于 2026-6-29 05:24:45 | 显示全部楼层
我现在在用荣耀的笔记本,这个管家鸡肋的要死还不能删,驱动和触控板多指功能都要开着管家
神算子
发表于 2026-6-29 09:08:24 | 显示全部楼层
YSL 发表于 2026-6-29 05:24
我现在在用荣耀的笔记本,这个管家鸡肋的要死还不能删,驱动和触控板多指功能都要开着管家

荣耀笔记本有什么优缺点
风屿法师
 楼主| 发表于 2026-6-29 11:33:00 | 显示全部楼层
YSL 发表于 2026-6-29 05:24
我现在在用荣耀的笔记本,这个管家鸡肋的要死还不能删,驱动和触控板多指功能都要开着管家

驱动感觉还好,用Windows Update以及厂商的更新程序(如Intel的DSA)也能解决;但我是真没注意到触控板也和这个有关
我用得最多的就是性能模式以及护眼,这两个是我离不开的功能,否则我早删了。
貌似奇安信组件的文件夹下面有一个uninstall.exe可以用来卸载奇安信组件,但貌似更新完后它又会自己回去,而且有人碰到卸不干净的情况。有点纠结要不要把奇安信组件单独卸掉。
风屿法师
 楼主| 发表于 2026-6-29 11:39:57 | 显示全部楼层
神算子 发表于 2026-6-29 09:08
荣耀笔记本有什么优缺点

如果你用的手机、平板也是荣耀,那肯定是方便些的。
我手机是华为,只能用荣耀分享传文件,所以互联对我没什么用,当时买这款主要是看了笔吧评测室的选购指南,综合配置和性价比选了这款。
但如果你是极简党/需要自己完全掌控电脑的用户/工作需要重度码字的用户,感觉这款机子不太适合。
  • 荣耀全家桶越塞越多,而且全都是静默安装,越来越臃肿不说,还带了一堆的bug进来;特别是它的AI组件(YOYO助手和YOYO Claw),开机项关不掉,禁用服务它会自己重新打开。
  • 荣耀电脑管家自带的奇安信组件误报率高,但不像联想电脑管家一样能单独关闭安全组件。
  • 键盘布局很诡异,我用了一年了,到现在打字还是会经常按错键;由于塞了小键盘的缘故,字母区偏左,但是触控板仍然在正中间,这就导致打字的时候手掌很容易碰到触控板。
  • 我这款机子(Magicbook Pro 2025)的USB接口在后面,每次插拔USB设备都很不方便。

kbsjFCB
发表于 2026-6-29 11:57:57 | 显示全部楼层
老荣耀羡慕新荣耀的magic视界
风屿法师
 楼主| 发表于 2026-6-29 12:02:54 | 显示全部楼层
kbsjFCB 发表于 2026-6-29 11:57
老荣耀羡慕新荣耀的magic视界

没啥好羡慕的,一堆bug,我都没把它打开。前段时间甚至火绒和Magic视界互杀。
你想要吗?可以给你分享安装包。
kbsjFCB
发表于 2026-6-29 12:03:56 | 显示全部楼层
风屿法师 发表于 2026-6-29 12:02
没啥好羡慕的,一堆bug,我都没把它打开。前段时间甚至火绒和Magic视界互杀。
你想要吗?可以给你分享安 ...

我有单文件版本那种,就是挺好看的
YSL
发表于 2026-6-29 18:50:44 | 显示全部楼层
kbsjFCB 发表于 2026-6-29 11:57
老荣耀羡慕新荣耀的magic视界

用起来真的很一般
YSL
发表于 2026-6-29 18:52:29 | 显示全部楼层
风屿法师 发表于 2026-6-29 11:33
驱动感觉还好,用Windows Update以及厂商的更新程序(如Intel的DSA)也能解决;但我是真没注意到触控板也 ...

我已经单独卸掉杀毒功能了,连带着自检功能、清理功能都失效了
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-19 08:47 , Processed in 0.095420 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表