[cocofile] Install log : 906ms / 2013-09-24

프로그램분석

[cocofile] Install log : 906ms / 2013-09-24

프로세스 천국 2013. 9. 24. 07:09

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz / 2,047.49 MB
Intel64 Family 6 Model 42 Stepping 7
Date : 2013-09-24
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\clickvaccine\clickvaccine.exe
DF001 C:\Program Files (x86)\clickvaccine\clickvaccinectrl.exe
DF002 C:\Program Files (x86)\clickvaccine\clickvaccineu.exe
DF003 C:\Program Files (x86)\clickvaccine\clickvaccineusb.exe
DF004 C:\Program Files (x86)\clickvaccine\traking.dll
DF005 C:\Program Files (x86)\clickvaccine\uninst_111clickvaccine.exe
DF006 C:\Program Files (x86)\clickvaccine\uninst_clickvaccine.exe
DF007 C:\Program Files (x86)\clickvaccine\ware.dll
DF008 C:\Program Files (x86)\clickvaccine\홈페이지.url
DF009 C:\Program Files (x86)\cocofile\MetaUpdate.exe
DF010 C:\Program Files (x86)\cocofile\Rmcocofile.exe
DF011 C:\Program Files (x86)\enumerate\gt\enumerate_gt.dll
DF012 C:\Program Files (x86)\enumerate\gt\enumerate_gtu.exe
DF013 C:\Program Files (x86)\enumerate\gt\enumst.exe
DF014 C:\Program Files (x86)\insafeclient v1.1\isext.exe
DF015 C:\Program Files (x86)\insafeclient v1.1\ismctrl.exe
DF016 C:\Program Files (x86)\insafeclient v1.1\ISMgr.dll
DF017 C:\Program Files (x86)\insafeclient v1.1\ismsvc.exe
DF018 C:\Program Files (x86)\insafeclient v1.1\ismsvp.exe
DF019 C:\Program Files (x86)\InsideTool\InsideTool.dll
DF020 C:\Program Files (x86)\InsideTool\InsideTool.exe
DF021 C:\Program Files (x86)\ISZone\ISZone.exe
DF022 C:\Program Files (x86)\ISZone\ISZoneUpdate.exe
DF023 C:\Program Files (x86)\ISZone\nhopen.dll
DF024 C:\Program Files (x86)\ISZone\timeAdd.dll
DF025 C:\Program Files (x86)\KeyPang\fgo.exe
DF026 C:\Program Files (x86)\KeyPang\keypang.exe
DF027 C:\Program Files (x86)\KeyPang\move.exe
DF028 C:\Program Files (x86)\KeyPang\rkp.exe
DF029 C:\Program Files (x86)\SeStPage\SeStPacnt.exe
DF030 C:\Program Files (x86)\SeStPage\SeStPage.exe
DF031 C:\Program Files (x86)\speedcleaner\speedcleaner.exe
DF032 C:\Program Files (x86)\speedcleaner\speedcleanerse.exe
DF033 C:\Program Files (x86)\speedcleaner\speedcleanerU.exe
DF034 C:\Program Files (x86)\speedcleaner\uninst_speedcleaner.exe
DF035 C:\Program Files (x86)\Speller\SpellerCtrl.dll
DF036 C:\Program Files (x86)\Speller\SpellerSvc.exe
DF037 C:\Program Files (x86)\Speller\SpellerUninst.exe
DF038 C:\Program Files (x86)\Window Network Manager\cCommon.ocx
DF039 C:\Program Files (x86)\Window Network Manager\WindowNetworkManager.exe
DF040 C:\Program Files (x86)\Window Network Manager\WindowNetworkManager_.exe
DF041 C:\Program Files (x86)\Window Network Manager\WindowNetworkManagerUninstall.exe
DF042 C:\Program Files (x86)\Windows CloudGet v1.4\clgext.exe
DF043 C:\Program Files (x86)\Windows CloudGet v1.4\clgsve.exe
DF044 C:\Program Files (x86)\Windows CloudGet v1.4\clgsvp.exe
DF045 C:\Program Files (x86)\Windows CloudGet v1.4\clgsvr.exe
DF046 C:\Program Files (x86)\Windows Winerspop 2.0\winspep.exe
DF047 C:\Program Files (x86)\Windows Winerspop 2.0\winspext.exe
DF048 C:\Program Files (x86)\Windows Winerspop 2.0\winspop.exe
DF049 C:\Program Files (x86)\Windows Winerspop 2.0\winspsp.exe
DF050 C:\Program Files (x86)\Windows Winerspop 2.0\winspst.exe
DF051 C:\Program Files (x86)\Windows Winerspop 2.0\winspstu.exe
DF052 C:\Program Files (x86)\Windows Winerspop 2.0\winspsu.exe
DF053 C:\Program Files (x86)\Windows Winerspop 2.0\winspsv.exe
DF054 C:\ProgramData\Microsoft\Windows\Templates\SeStPage_.exe
DF055 C:\ProgramData\Microsoft\Windows\Templates\굿닥터_.E13_.130916_.HDTV_.H264_.720p-Baros_.torrent[1]_.exe
DF056 C:\skeypang.exe
DF057 C:\Users\Administrator\AppData\Local\KoreanKeyword\c_updater.exe
DF058 C:\Users\Administrator\AppData\Local\KoreanKeyword\updater231.exe
DF059 C:\Users\Administrator\AppData\Local\KoreanKeyword\WinKeyword.exe
DF060 C:\Users\Administrator\AppData\Local\KoreanKeyword\WinKeyword_Up.exe
DF061 C:\Users\Administrator\AppData\Local\KoreanKeyword\WKK_uninstaller.exe
DF062 C:\Users\Administrator\AppData\Local\MetablogNewIssues\metablogagent.exe
DF063 C:\Users\Administrator\AppData\Local\MetablogNewIssues\MetablogNewIssues.exe
DF064 C:\Users\Administrator\AppData\Local\MetablogNewIssues\newissue.dll
DF065 C:\Users\Administrator\AppData\Local\MetablogNewIssues\updater_temp.exe
DF066 C:\Users\Administrator\AppData\Local\signkey\e_signkey.exe
DF067 C:\Users\Administrator\AppData\Local\signkey\signkey.exe
DF068 C:\Users\Administrator\AppData\Local\signkey\skun.exe
DF069 C:\Users\Administrator\AppData\Local\Temp\192\WinKeyword.exe
DF070 C:\Users\Administrator\AppData\Local\Temp\7370\newissue.dll
DF071 C:\Users\Administrator\AppData\Local\Temp\8105\MetablogNewIssues.exe
DF072 C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbib.dll
DF073 C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbim.dll
DF074 C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbmgr.exe
DF075 C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbup.exe
DF076 C:\Users\Administrator\AppData\Roaming\Enumerate_gt_pcinfokeeper_hinst.exe
DF077 C:\Users\Administrator\AppData\Roaming\GuardSupport\Conv.exe
DF078 C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardConvert.exe
DF079 C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardSupport.exe
DF080 C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe
DF081 C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe
DF082 C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\Uninstall\Uninstaller.exe
DF083 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\clickvaccine\클릭백신 삭제.lnk
DF084 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\clickvaccine\클릭백신 실행.lnk
DF085 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\clickvaccine\홈페이지.lnk
DF086 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\speedcleaner\Homepage.url
DF087 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\speedcleaner\speedcleaner 삭제.lnk
DF088 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\speedcleaner\speedcleaner.lnk
DF089 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\팡팡클린\팡팡클린.lnk
DF090 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\addnv11.exe
DF091 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\adInstall_ad031.exe
DF092 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\enumerate_gt_true0911.exe
DF093 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\filesk.exe
DF094 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\ISZoneInstall_70_160.exe
DF095 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\ISZoneSetup_70_hide.exe
DF096 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\Set_gSec_H.exe
DF097 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\speedcleanersetup_gonggu.exe
DF098 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\Translation.exe
DF099 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\WindowNetworkManage_code25.exe
DF100 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\wnm.exe
DF101 C:\Users\Administrator\AppData\Roaming\PangPangClean\ppc.exe
DF102 C:\Users\Administrator\AppData\Roaming\PangPangClean\ppcagent.exe
DF103 C:\Users\Administrator\AppData\Roaming\pcu\pcu.exe
DF104 C:\Users\Administrator\AppData\Roaming\pcu\pcuagent.exe
DF105 C:\Users\Administrator\AppData\Roaming\powersearch\HNa.dll
DF106 C:\Users\Administrator\AppData\Roaming\powersearch\powersearch.exe
DF107 C:\Users\Administrator\AppData\Roaming\powersearch\psearch.dll
DF108 C:\Users\Administrator\AppData\Roaming\powersearch\SetupUtil.dll
DF109 C:\Users\Administrator\AppData\Roaming\RollingPop\inst_neo.exe
DF110 C:\Users\Administrator\AppData\Roaming\RollingPop\RollingPop_E.exe
DF111 C:\Users\Administrator\AppData\Roaming\RollingPop\RollingPop_R.exe
DF112 C:\Users\Administrator\AppData\Roaming\RollingPop\RollingPop_S.exe
DF113 C:\Users\Administrator\AppData\Roaming\RollingPop\RollingPop_U.exe
DF114 C:\Users\Administrator\AppData\Roaming\RollingPop\UpdateTemp\inst_neo.exe
DF115 C:\Users\Administrator\AppData\Roaming\RollingPop\UpdateTemp\RollingPop_E.exe
DF116 C:\Users\Administrator\Desktop\팡팡클린.lnk
DF117 C:\Users\Administrator\Favorites\메타블로그 최신이슈.lnk
DF118 C:\Windows\SysWOW64\alrimad.dll
DF119 C:\Windows\SysWOW64\Base64.dll
DF120 C:\Windows\SysWOW64\cCommon.ocx
DF121 C:\Windows\SysWOW64\MSCMCKO.DLL
DF122 C:\Windows\SysWOW64\MSCOMCTL.OCX
DF123 C:\Windows\SysWOW64\MSINET.OCX
DF124 C:\Windows\SysWOW64\MSWINSCK.OCX
DF125 C:\Windows\SysWOW64\rollingpop.dll
DF126 C:\Windows\SysWOW64\VB6KO.DLL
DF127 C:\Windows\SysWOW64\VB6STKIT.DLL
----------------------------------------------------------------------
SC128 clgsvr32 -/- Windows CloudGet Service -/- C:\Program Files (x86)\Windows CloudGet v1.4\clgsvr.exe
SC129 ismsvc32 -/- INSAFE Client 1.0 -/- C:\Program Files (x86)\insafeclient v1.1\ismsvc.exe -/- INSAFE Client 1.0
SC130 RollingPop_Service -/- RollingPop_Service -/- C:\Users\Administrator\AppData\Roaming\RollingPop\RollingPop_S.exe ROLL01
SC131 speedcleanerService -/- speedcleaner Service -/- C:\Program Files (x86)\speedcleaner\speedcleanerse.exe
SC132 winspsv32 -/- Windows Winerspop Service -/- C:\Program Files (x86)\Windows Winerspop 2.0\winspsv.exe -/- Windows Winerspop Service
----------------------------------------------------------------------
UN133 Addendum-nm -/- aiesb -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\uninst.exe
UN134 clickvaccine -/- (주)에이코리아 -/- clickvaccine -/- C:\Program Files (x86)\clickvaccine\uninst_clickvaccine.exe
UN135 FileDownload service cocofile -/- cocofile -/- C:\Program Files (x86)\cocofile\Rmcocofile.exe
UN136 Enumerate Top Search - gt -/- Enumerate_gt uninstall -/- C:\Program Files (x86)\enumerate\gt\uninstall.exe
UN137 INSAFE Client 1.0 -/- INSAFE Client 1.0 -/- C:\Program Files (x86)\insafeclient v1.1\uninstall.exe
UN138 InsideTool -/- NBIZ -/- InsideTool -/- C:\Program Files (x86)\InsideTool\Uninstall.exe
UN139 팡팡클린업데이트 -/- 팡팡클린 -/- pcu -/- C:\Users\Administrator\AppData\Roaming\pcu\uninst.exe -/- hxxp://ww*.pangpangclean.com -/- hxxp://ww*.pangpangclean.com
UN140 팡팡클린 -/- 팡팡클린 -/- ppc -/- C:\Users\Administrator\AppData\Roaming\PangPangClean\uninst.exe -/- hxxp://ww*.pangpangclean.com -/- hxxp://ww*.pangpangclean.com
UN141 RollingPop 1.0 -/- RollingPop -/- RollingPop -/- C:\Users\Administrator\AppData\Roaming\RollingPop\uninst.exe -/- hxxp://ww*.RollingPop.co.kr/
UN142 speedcleaner -/- AKorea -/- speedcleaner -/- C:\Program Files (x86)\speedcleaner\uninst_speedcleaner.exe -/- hxxp://ww*.speedcleaner.co.kr -/- hxxp://ww*.speedcleaner.co.kr
UN143 Xecure speller Application -/- Speller -/- C:\Program Files (x86)\Speller\SpellerUninst.exe
UN144 Window Network Manager -/- Window Network Manager -/- Window Network Manager Install -/- C:\Program Files (x86)\Window Network Manager\uninst.exe -/- Window Network Manager Group
UN145 Windows CloudGet -/- Windows CloudGet -/- Windows CloudGet -/- C:\Program Files (x86)\Windows CloudGet v1.4\uninstall.exe
UN146 Windows SeStPageSetup (remove only) -/- SKsoftbank -/- Windows SeStPageSetup (remove only) -/- C:\Program Files (x86)\SeStPage\uninst.exe
UN147 Windows Winerspop -/- Windows Winerspop -/- Windows Winerspop -/- C:\Program Files (x86)\Windows Winerspop 2.0\uninstall.exe delete
UN148 Windows Internet Explorer KoreanKeyword V.2.2.1.1 -/- WinKeyword -/- C:\Users\Administrator\AppData\Local\KoreanKeyword\WKK_uninstaller.exe
UN149 InternetSafeZone -/- Gaia Media Group -/- {3ED12C21-18E3-4401-B4DA-4D96F0565CFA}_is1 -/- C:\Program Files (x86)\ISZone\unins000.exe
UN150 powersearch -/- OPN.co.,ltd. -/- {53403CB4-E619-4A64-B28D-A6159FE8F354}_is1 -/- C:\Users\Administrator\AppData\Roaming\powersearch\unins000.exe -/- hxxp://ww*.winapp.kr/ -/- hxxp://ww*.winapp.kr/
UN151 KeyPang version 1.0 -/- ad79 -/- {B9EB0882-79F8-4680-988C-D2317BA669F9}_is1 -/- C:\Program Files (x86)\KeyPang\unins000.exe -/- hxxp://keypang.com -/- hxxp://keypang.com
----------------------------------------------------------------------
TS152 enumerategt -/- C:\Program Files (x86)\enumerate\gt\enumerate_gtu.exe -/- N.A
TS153 ISZone -/- C:\Program Files (x86)\ISZone\ISZoneUpdate.exe -/-
TS154 PangPangClean -/- C:\Users\Administrator\AppData\Roaming\PangPangClean\ppcagent.exe -/-
TS155 PangPangCleanUpdate -/- C:\Users\Administrator\AppData\Roaming\pcu\pcuagent.exe -/-
TS156 Window_Network_Manager -/- C:\Program Files (x86)\Window Network Manager\WindowNetworkManager.exe -/-
----------------------------------------------------------------------
US157 MicroLabCon -/- %ApplicationDataFolder%\MicroLab\MyEngin\Common\MicroProCon.exe
US158 MicroProCon -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProCon.exe -mGxoBMv
US159 GuardSupport -/- C:\Users\Administrator\AppData\Roaming\GuardSupport\GuardConvert.exe -EOxxkW
US160 metablogagent -/- C:\Users\Administrator\AppData\Local\MetablogNewIssues\metablogagent.exe
US161 Enumerate_gt -/- C:\Program Files (x86)\enumerate\gt\enumerate_gtu.exe subcmd
US162 MetablogNewIssues -/- C:\Users\Administrator\AppData\Local\MetablogNewIssues\MetablogNewIssues.exe /byboot
US163 signkey -/- C:\Users\Administrator\AppData\Local\signkey\signkey.exe
US164 powersearch -/- C:\Users\Administrator\AppData\Roaming\powersearch\powersearch.exe update
US165 WinKeyword_Up -/- C:\Users\Administrator\AppData\Local\KoreanKeyword\WinKeyword_Up.exe
US166 WinKeyword -/- C:\Users\Administrator\AppData\Local\KoreanKeyword\WinKeyword.exe
LS167 cocofile -/- C:\Program Files (x86)\cocofile\MetaUpdate.exe
LS168 MicroLabProc -/- %ApplicationDataFolder%\MicroLab\MyEngin\Common\MicroProCon.exe
LS169 MicroProProc -/- C:\Users\Administrator\AppData\Roaming\MicroLab\MyEngin\Common\MicroProProc.exe -mGxoBMv
LS170 Speller -/- C:\Program Files (x86)\Speller\SpellerSvc.exe
LS171 SeStPage -/- C:\Program Files (x86)\SeStPage\SeStPage.exe
LS172 aiesb -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbup.exe
LS173 Window Network Manager -/- C:\Program Files (x86)\Window Network Manager\WindowNetworkManager.exe
LS174 KeyPang -/- C:\Program Files (x86)\KeyPang\keypang.exe
LS175 InsideTool -/- C:\Program Files (x86)\InsideTool\InsideTool.exe
LS176 clickvaccine -/- C:\Program Files (x86)\clickvaccine\clickvaccinectrl.exe /autostart
LS177 clickvaccineusb -/- C:\Program Files (x86)\clickvaccine\clickvaccineusb.exe
----------------------------------------------------------------------
BH178 InsideTool -/- C:\Program Files (x86)\InsideTool\InsideTool.dll -/- {0B3B9D03-5E08-4E48-BF77-FC88443F3DC2}
BH179 &powersearch Helper Object -/- C:\Users\Administrator\AppData\Roaming\powersearch\psearch.dll -/- {0F9D3470-ACE8-4A8E-8A2F-988576341613}
BH180 IESMon.Mon -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbim.dll -/- {6D567790-D2F2-4EFF-9491-D55D64475ED6}
BH181 Enumerate Top Search - GT -/- C:\Program Files (x86)\enumerate\gt\enumerate_gt.dll -/- {E7CA7DD6-FBC6-416D-8BD5-2070704F666C}
EXADD Shockwave Flash Object -/- C:\Windows\system32\Macromed\Flash\Flash64_11_7_700_224.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD InsideTool -/- C:\Program Files (x86)\InsideTool\InsideTool.dll -/- {0B3B9D03-5E08-4E48-BF77-FC88443F3DC2}
EXADD &powersearch Helper Object -/- C:\Users\Administrator\AppData\Roaming\powersearch\psearch.dll -/- {0F9D3470-ACE8-4A8E-8A2F-988576341613}
EXADD 스펠러 -/- C:\Program Files (x86)\Speller\SpellerCtrl.dll -/- {41ED1FD7-8C37-4806-AF9E-D5238A30E56F}
EXADD IESMon.Mon -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\aiesbim.dll -/- {6D567790-D2F2-4EFF-9491-D55D64475ED6}
EXADD Shockwave Flash Object -/- C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_7_700_224.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD Enumerate Top Search - GT -/- C:\Program Files (x86)\enumerate\gt\enumerate_gt.dll -/- {E7CA7DD6-FBC6-416D-8BD5-2070704F666C}
----------------------------------------------------------------------
----------------------------------------------------------------------
TB182 스펠러 -/- C:\Program Files (x86)\Speller\SpellerCtrl.dll -/- {41ED1FD7-8C37-4806-AF9E-D5238A30E56F}
----------------------------------------------------------------------
NA00001 220.73.162.2/Download/GuardSupport*.***
NA00002 220.73.162.24/Config/AdNw/FcPimSLab*.***
NA00003 220.73.162.24/Config/AdNw/UCg_LPrMLab.asp?user_no=*.***
NA00004 220.73.162.24/Config/FormLocation*.***
NA00005 220.73.162.24/config/keyword_platinum.asp?user_no=2966&SubName=**.***
NA00006 220.73.162.24/Config/TransSiteString.asp?nation=K*.***
NA00007 220.73.162.27/Config/AdNw/FcPimSLab*.***
NA00008 220.73.162.27/Config/AdNw/UCg_LPrMLab.asp?user_no=*.***
NA00009 220.73.162.27/Config/FormLocation*.***
NA00010 220.73.162.27/config/keyword_platinum.asp?user_no=2966&SubName=**.***
NA00011 220.73.162.27/Config/TransSiteString.asp?nation=K*.***
NA00012 220.73.162.36/Config/AdNw/FcTimeLab*.***
NA00013 220.73.162.36/Config/AdNw/UCg_LMLab.asp?user_no=*.***
NA00014 220.73.162.36/Config/ProgramUpdateLab.asp?version=*.***
NA00015 220.73.162.38/Config/FormChecktimemicroLab*.***
NA00016 220.73.162.43/Config/FormChecktimemicroLab*.***
NA00017 220.73.162.49/Config/AdNw/FcPimSLab*.***
NA00018 220.73.162.49/Config/AdNw/FcTimeLab*.***
NA00019 220.73.162.49/Config/AdNw/UCg_LMLab.asp?user_no=*.***
NA00020 220.73.162.49/Config/AdNw/UCg_LPrMLab.asp?user_no=*.***
NA00021 220.73.162.49/Config/FormLocation*.***
NA00022 220.73.162.49/config/keyword_platinum.asp?user_no=2966&SubName=**.***
NA00023 220.73.162.49/Config/ProgramUpdateLab.asp?version=*.***
NA00024 220.73.162.49/Config/TransSiteString.asp?nation=K*.***
NA00025 220.73.162.54/Config/FormChecktimemicroLab*.***
NA00026 220.73.162.60/Config/AdNw/FcTimeLab*.***
NA00027 220.73.162.60/Config/AdNw/UCg_LMLab.asp?user_no=*.***
NA00028 220.73.162.60/Config/ProgramUpdateLab.asp?version=*.***
NA00029 a.cloudget.co.kr/ap.php?m=i&mac=000C2961CEE7&p=cg*.***
NA00030 a.rollingpop.com/cron/url_list*.***
NA00031 a.rollingpop.com/updateinst_neo*.***
NA00032 a.rollingpop.com/updateRollingPop_E*.***
NA00033 a.rollingpop.com/v1/get_potal*.***
NA00034 a.rollingpop.com/v1/get_url*.***
NA00035 a.rollingpop.com/v1/ip*.***
NA00036 a.rollingpop.com/v1/setting*.***
NA00037 a.rollingpop.com/v2/s_installer.php?m=000C2961CEE7&a=RO*.***
NA00038 ad.syndiapi.com/AppTag/OptionCnt*.***
NA00039 ad.topclick.kr/ad/dblinkpr_xml*.***
NA00040 ad2.wisesearch.co.kr/keypang/elt3/skeypang3*.***
NA00041 ad79.co.kr/keypang/nstatchk.php?set=ZWx0MzswMC0wQy0yOS02MS1DRS1**.***
NA00042 admin.keywordinfo.co.kr/app/index3.php?domain=topsearch.enumera**.***
NA00043 ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.mi*.***
NA00044 api.admatching.co.kr/admatching/closequerymatchlist*.***
NA00045 api.admatching.co.kr/admatching/info.php?pid=ad031&cid=000c2961**.***
NA00046 api.admatching.co.kr/admatching/matchsitelist.php?pid=ad031&cid**.***
NA00047 api.admatching.co.kr/admatching/ovt_log.php?pid=ad031&cid=000c2**.***
NA00048 api.admatching.co.kr/admatching/titlematchlist*.***
NA00049 api.admatching.co.kr/admatching/update_mb.php?pid=ad031&cid=000**.***
NA00050 api.admatching.co.kr/admatching/urlmatchlist.php?pid=ad031&cid=**.***
NA00051 api.admatching.co.kr/admatching/urlmatchlist_coworker.php?pid=a**.***
NA00052 api.admatching.co.kr/admatching/urlmatchlist_merchant.php?pid=a**.***
NA00053 api.provide.kr/AppTag/KeywordCnt_V2.php?keywords=iniupdateradmi**.***
NA00054 api.provide.kr/AppTag/KeywordCnt_V2.php?keywords=베네수엘라미녀&cddtc=**.***
NA00055 api.provide.kr/AppTag/TagCnt.php?cddtc=g*.***
NA00056 app.koreankeyword.com/alive.php?client=*.***
NA00057 app.koreankeyword.com/config.php?client=*.***
NA00058 app.koreankeyword.com/down/c_exe*.***
NA00059 app.koreankeyword.com/down/c_updater*.***
NA00060 app.koreankeyword.com/dtf.php?client=*.***
NA00061 app.koreankeyword.com/files.php?client=*.***
NA00062 app2.tsmon.co.kr/app/ipcheck*.***
NA00063 app2.tsmon.co.kr/app/upgprg21.asp?UID=V10113092407031396119&OSV**.***
NA00064 app2.tsmon.co.kr/app/urlcheck.asp?icd=*.***
NA00065 app2.tsmon.co.kr/app/v2/neolinfo2.asp?mid=V10113092407031396119**.***
NA00066 app2.tsmon.co.kr/app/v2/qryinfonew.asp?mid=V1011309240703139611**.***
NA00067 app2.tsmon.co.kr/qmo/qmlfile.asp?mid=V10113092407031396119&ver=**.***
NA00068 c.web.n2s.co.kr/_n2s_c_u.php?u=topsearch.enumerate.c*.***
NA00069 clickvaccine.co.kr/APP/stat*.***
NA00070 clickvaccine.co.kr/etc/yak*.***
NA00071 clients1.google.com/ocsp/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBTy4Gr5hY**.***
NA00072 data.withpop.com/db/IT145_withpop*.***
NA00073 data.withpop.com/dc/bl*.***
NA00074 dn.binsetup.com/130701/cloudget_cg0001*.***
NA00075 dn.binsetup.com/130701/enumerate_gt_it06122*.***
NA00076 dn.binsetup.com/130701/IETab__IE105*.***
NA00077 dn.binsetup.com/130701/RollingPop_H_ROLL01*.***
NA00078 dn.binsetup.com/130701/setup_tang*.***
NA00079 dn.binsetup.com/130701/signkey*.***
NA00080 dn.binsetup.com/130701/winspop_runpart*.***
NA00081 dn.binsetup.com/130801/kkdsbm_id07*.***
NA00082 dn.binsetup.com/130801/Vaccine365_white*.***
NA00083 dn.binsetup.com/130902/ikeypang*.***
NA00084 dn.binsetup.com/130902/ins.i3*.***
NA00085 dn.binsetup.com/130902/intelligent*.***
NA00086 dn.binsetup.com/130902/ppc_agent*.***
NA00087 dn.binsetup.com/130902/ppc_install*.***
NA00088 down.signkey.co.kr/_file/dn*.***
NA00089 down.signkey.co.kr/_file/e_signkey*.***
NA00090 down.signkey.co.kr/_file/signkey*.***
NA00091 down.signkey.co.kr/_file/skun*.***
NA00092 duzip.com/Config/AdNw/gSkePsist.asp?uno=*.***
NA00093 duzip.com/Config/AdNw/StakePsList.asp?uno=*.***
NA00094 duzip.com/Config/ProgramGuard.asp?uno=2966&ver=&wv*.***
NA00095 enumstate.co.kr/new_system/cnt/index.php?pid=lt06122&ty*.***
NA00096 enumstate.co.kr/new_system/cnt/index.php?pid=true0911&ty*.***
NA00097 enumstates.co.kr/check/enums/update/gt*.***
NA00098 enumstates.co.kr/check/enumstate*.***
NA00099 enumstates.co.kr/check/pcinfokeeper/setcheck/set*.***
NA00100 enumstates.co.kr/check/pcinfokeeper/update/enum*.***
NA00101 enumstates.co.kr/check/pcinfokeeper/update/enum_sub*.***
NA00102 enumstates.co.kr/check/smsplus/check*.***
NA00103 enumstates.co.kr/cnt/index.php?pid=pcinfokeeper&typ*.***
NA00104 enumstates.co.kr/cnt/index.php?pid=smsplus&ty*.***
NA00105 enumstates.co.kr/cnt/index.php?pid=smsplus&typ*.***
NA00106 file.ietab.co.kr/dst/InsideTool_IT145*.***
NA00107 filter.winapp.kr/appdownload/appvup/powersearch009*.***
NA00108 filter.winapp.kr/appdownload/appvup/Powersearchlicense*.***
NA00109 filter.winapp.kr/appdownload/appvup/ver2/HNa*.***
NA00110 filter.winapp.kr/appdownload/appvup/ver2/powersearch*.***
NA00111 filter.winapp.kr/appdownload/appvup/ver2/psearch*.***
NA00112 filter.winapp.kr/dbdownload/sit*.***
NA00113 filter.winapp.kr/ndbdownload/nsit*.***
NA00114 filter.winapp.kr/static_toast*.***
NA00115 hostserver.kr/Config/AdNw/StakePsList.asp?uno=*.***
NA00116 image.daum-img.net/hanmail/s_img/bizshop/spacer*.***
NA00117 img.secondpage.co.kr/images/11st*.***
NA00118 img.secondpage.co.kr/images/auction*.***
NA00119 img.secondpage.co.kr/images/daum*.***
NA00120 img.secondpage.co.kr/images/emart*.***
NA00121 img.secondpage.co.kr/images/gmarket*.***
NA00122 img.secondpage.co.kr/images/google*.***
NA00123 img.secondpage.co.kr/images/halfclub*.***
NA00124 img.secondpage.co.kr/images/nate*.***
NA00125 img.secondpage.co.kr/images/naver*.***
NA00126 img.secondpage.co.kr/images/zum*.***
NA00127 insidetool.ietab.co.kr/install.asp?version=1.0.0.8&id=IT145&mac**.***
NA00128 insidetool.ietab.co.kr/update/IT145/InsideTool*.***
NA00129 k.winggo.co.kr/log/crossinst.php?midx=214&method=3&url=topsearc**.***
NA00130 korserver.com/Config/AdNw/gSkePsist.asp?uno=*.***
NA00131 korserver.com/Config/ProgramGuard.asp?uno=2966&ver=&wv*.***
NA00132 korserver.com/Config/sTakeList.asp?n=*.***
NA00133 mainserver.kr/Config/AdNw/gSkePsist.asp?uno=*.***
NA00134 mainserver.kr/Config/AdNw/StakePsList.asp?uno=*.***
NA00135 mainserver.kr/Config/ProgramGuard.asp?uno=2966&ver=&wv*.***
NA00136 mainserver.kr/Config/sTakeList.asp?n=*.***
NA00137 maketop.kr/Config/AdNw/StakePsList.asp?uno=*.***
NA00138 makevalue.com/Config/sTakeList.asp?n=*.***
NA00139 mng.koreankeyword.com/log_progress.php?client=id07&action=insta**.***
NA00140 mng.koreankeyword.com/log_progress.php?client=id07&action=load&**.***
NA00141 mng.koreankeyword.com/log_progress.php?client=id07&action=updat**.***
NA00142 openkeyword.co.kr/mmsv/Access3.php?MyMode=i&MyPartner=pangpang&**.***
NA00143 qcounter.co.kr/LogReceiver/LR.log?kind=0&ist_yn=0&ptn_name=Free**.***
NA00144 qcounter.co.kr/LogReceiver/LR.log?kind=0&ist_yn=0&ptn_name=roll**.***
NA00145 search.n2s.co.kr/_n2s_mg_load.php?id=it145&cd=&uts=137997*.***
NA00146 search.n2s.co.kr/_n2s_normal_ad_view.php?p=Z2JuPVImcm5kX3R5cGU9**.***
NA00147 search.n2s.co.kr/_n2s_toast_adinfo_201308_new.php?id=it145&cd=&**.***
NA00148 search.n2s.co.kr/_n2s_toast_shared_info_js.php?id=I*.***
NA00149 secondpage.co.kr/favicon*.***
NA00150 secondpage.co.kr/images/bg*.***
NA00151 secondpage.co.kr/site.*.***
NA00152 sidesearch.addendum.co.kr/?cddtc=filefactory_sidebar&keyword=%C**.***
NA00153 speedcleaner.co.kr/dbk*.***
NA00154 speedcleaner.co.kr/etc/yak_app*.***
NA00155 speedcleaner.co.kr/mbk.php?v1=gonggu&v2=00:0C:29:61:C*.***
NA00156 speedcleaner.co.kr/settle.php?strID=gonggu&strPC=00:0C:29:61:CE**.***
NA00157 topsearch.enumerate.co.kr/?cddtc=pcinfokeeper_topbar&keyword=%B**.***
NA00158 topsearch.enumerate.co.kr/?cddtc=pcinfokeeper_topbar&keyword=%C**.***
NA00159 topsearch.enumerate.co.kr/?cddtc=smsplus_topbar&keyword=iniupda**.***
NA00160 topsearch.enumerate.co.kr/?cddtc=smsplus_topbar&keyword=wedding**.***
NA00161 topsearch.enumerate.co.kr/?cddtc=test_topbar_xml&keyword=%BA%A3**.***
NA00162 topsearch.enumerate.co.kr/?cddtc=test_topbar_xml&keyword=%C1%A4**.***
NA00163 topsearch.enumerate.co.kr/?cddtc=test_topbar_xml&keyword=iniupd**.***
NA00164 topsearch.enumerate.co.kr/?cddtc=test_topbar_xml&keyword=weddin**.***
NA00165 topsearch.enumerate.co.kr/favicon*.***
NA00166 topsearch.enumerate.co.kr/image/btn_default_background_img*.***
NA00167 topsearch.enumerate.co.kr/image/help_icon3*.***
NA00168 topsearch.enumerate.co.kr/image/Search_17*.***
NA00169 update.clickvaccine.co.kr/srerl/clickvaccinesetup_tok*.***
NA00170 update.clickvaccine.co.kr/vriowq/bdslkr/clickvaccine*.***
NA00171 update.clickvaccine.co.kr/vriowq/bdslkr/clickvaccinectrl*.***
NA00172 update.clickvaccine.co.kr/vriowq/bdslkr/clickvaccineu*.***
NA00173 update.clickvaccine.co.kr/vriowq/bdslkr/clickvaccineusb*.***
NA00174 update.clickvaccine.co.kr/vriowq/bdslkr/Skin*.***
NA00175 update.clickvaccine.co.kr/vriowq/bdslkr/traking*.***
NA00176 update.clickvaccine.co.kr/vriowq/bdslkr/uninst_clickvaccine.exe**.***
NA00177 update.clickvaccine.co.kr/vriowq/bdslkr/ware*.***
NA00178 update.clickvaccine.co.kr/vriowq/ver*.***
NA00179 update.keywordinfo.co.kr/UpdateCheck.php?Par*.***
NA00180 update.speedcleaner.co.kr*.***
NA00181 update.ucfdb.co.kr/version/except/excp*.***
NA00182 upstat.clickvaccine.co.kr/APP/ck_setup.php?m=00:0C:29:61:CE:E7&**.***
NA00183 wcs.naver.com/m?u=http%3A%2F%2Fsecondpage.co.kr%2Fsite.html&e=&**.***
NA00184 wcs.naver.net/wcslo*.***
NA00185 web.n2s.co.kr/ad_img/upload/n2s2013/n2s2013_300x300*.***
NA00186 web.n2s.co.kr/banner_js/_n2s_banner_common_toas*.***
NA00187 web.n2s.co.kr/banner_js/banner_Image_type_toast.js?uts=13799738**.***
NA00188 web.n2s.co.kr/images/btn_logo_off*.***
NA00189 web.n2s.co.kr/n2s_text_toast_type02.html?id=IT145&ts=1379973842**.***
NA00190 web1.n2s.co.kr/images/n2s_toast_btn_close01a*.***
NA00191 werpingad.com/_app/open_v1.php?gu=000C2961CEE7&pi=codenemo06&kw**.***
NA00192 werpingad.com/_app/open_v1_pr.php?gu=000C2961CEE7&pi=codenemo06**.***
NA00193 werpingad.com/partner/a*.***
NA00194 werpingad.com/partner/c.php?m=b&mac=000C2961CEE7&p=codene*.***
NA00195 werpingad.com/partner/c.php?m=i&mac=000C2961CEE7&f=WindowNetwor**.***
NA00196 werpingad.com/partner/dl*.***
NA00197 werpingad.com/partner/s*.***
NA00198 werpingad.com/partner/s.php?p=codene*.***
NA00199 werpingad.com/partner/x*.***
NA00200 whois.kisa.or.kr/openapi/whois.jsp?key=2011100613382837406762&q**.***
NA00201 ww*.ad79.co.kr/keypang/rnlivechk.php?set=ZWx0MzswMC0wQy0yOS02MS**.***
NA00202 ww*.ad79.co.kr/keypang/toschk.php?pid=*.***
NA00203 ww*.ad79.co.kr/keypang/version_elt37*.***
NA00204 ww*.clickvaccine.co.kr/APP/pf_ck.php?alks1*.***
NA00205 ww*.clickvaccine.co.kr/APP/stat.php?alks1=1&iew2=tok&rl3=W21bfF**.***
NA00206 ww*.clickvaccine.co.kr/dsdsl*.***
NA00207 ww*.clickvaccine.co.kr/maqa.php?alks1=tok&iew2=00:0C:29:61:CE:E**.***
NA00208 ww*.clickvaccine.co.kr/vqer.php?dsfID=tok&lkrPC=00:0C:29:61:CE:**.***
NA00209 ww*.cocofile.kr/files/%B1%C2%B4%DA%C5%CD.E13.130916.HDTV.H264.7**.***
NA00210 ww*.cocofile.kr/update_xml.php?gu=292E1C0843E14BBAA6FFB9587FBD5**.***
NA00211 ww*.dualboan.com/license*.***
NA00212 ww*.dualbooster.com/license*.***
NA00213 ww*.findlock.co.kr/app_new/install_new.php?u=Silver&a=7464DF6F_**.***
NA00214 ww*.funad.co.kr/snqup/patch*.***
NA00215 ww*.funad.co.kr/snqup/update*.***
NA00216 ww*.gomdisk.net/favicon*.***
NA00217 ww*.gomdisk.net/IMG/arrow_next*.***
NA00218 ww*.gomdisk.net/IMG/arrow_prev*.***
NA00219 ww*.gomdisk.net/IMG/banner_left_1*.***
NA00220 ww*.gomdisk.net/IMG/banner_left_2*.***
NA00221 ww*.gomdisk.net/IMG/banner_left_3*.***
NA00222 ww*.gomdisk.net/IMG/banner_left_5*.***
NA00223 ww*.gomdisk.net/IMG/banner_left_6*.***
NA00224 ww*.gomdisk.net/IMG/banner_main*.***
NA00225 ww*.gomdisk.net/IMG/banner_right_1*.***
NA00226 ww*.gomdisk.net/IMG/banner_right_2*.***
NA00227 ww*.gomdisk.net/IMG/banner_right_3*.***
NA00228 ww*.gomdisk.net/IMG/bg_search2*.***
NA00229 ww*.gomdisk.net/IMG/bg_table*.***
NA00230 ww*.gomdisk.net/IMG/bg_top*.***
NA00231 ww*.gomdisk.net/IMG/icon_1*.***
NA00232 ww*.gomdisk.net/IMG/icon_19*.***
NA00233 ww*.gomdisk.net/IMG/icon_2*.***
NA00234 ww*.gomdisk.net/IMG/icon_dot*.***
NA00235 ww*.gomdisk.net/IMG/icon_new*.***
NA00236 ww*.gomdisk.net/IMG/menu_1*.***
NA00237 ww*.gomdisk.net/IMG/menu_10*.***
NA00238 ww*.gomdisk.net/IMG/menu_11*.***
NA00239 ww*.gomdisk.net/IMG/menu_12*.***
NA00240 ww*.gomdisk.net/IMG/menu_13*.***
NA00241 ww*.gomdisk.net/IMG/menu_2*.***
NA00242 ww*.gomdisk.net/IMG/menu_3*.***
NA00243 ww*.gomdisk.net/IMG/menu_4*.***
NA00244 ww*.gomdisk.net/IMG/menu_5*.***
NA00245 ww*.gomdisk.net/IMG/menu_6*.***
NA00246 ww*.gomdisk.net/IMG/menu_7*.***
NA00247 ww*.gomdisk.net/IMG/menu_8*.***
NA00248 ww*.gomdisk.net/IMG/menu_9*.***
NA00249 ww*.gomdisk.net/IMG/menu_bar*.***
NA00250 ww*.gomdisk.net/IMG/top_logo*.***
NA00251 ww*.google.*.***
NA00252 ww*.google.co.kr/?gws_rd=cr&ei=27pAUvbpHYSViQehrY*.***
NA00253 ww*.google.co.kr/?gws_rd=cr&ei=6LpAUpiHK4WyiQeRoI*.***
NA00254 ww*.google.co.kr/?gws_rd=cr&ei=ArtAUq-NHayziQeWq4*.***
NA00255 ww*.ietab.co.kr/setting*.***
NA00256 ww*.intelligentclient.net/ic/config.php?q=^/irWA.bSAG0Gk?paUJ6G**.***
NA00257 ww*.intelligentclient.net/ic/config.php?q=^/irWA.bSAG0VROA`C5(L**.***
NA00258 ww*.intelligentclient.net/ic/config.php?q=^/irWA.TIwVrU/qM^T?nR**.***
NA00259 ww*.intelligentclient.net/ic/download/intelligent_inst*.***
NA00260 ww*.microsoft.*.***
NA00261 ww*.msftncsi.com/ncsi*.***
NA00262 ww*.naver.*.***
NA00263 ww*.pangpangclean.com/app/pcu/analytics/request/count.php?mode=**.***
NA00264 ww*.pangpangclean.com/app/pcu/download/pcu_agent*.***
NA00265 ww*.pangpangclean.com/app/pcu/update/update*.***
NA00266 ww*.pangpangclean.com/app/ppc/analytics/request/count.php?mode=**.***
NA00267 ww*.pangpangclean.com/app/ppc/config/advert*.***
NA00268 ww*.pangpangclean.com/app/ppc/update/update*.***
NA00269 ww*.secondpage.co.kr/xml.php?xcode=gsec&m=000c2961*.***
NA00270 ww*.speedcleaner.co.kr/APP/pf_ck.php?v1=go*.***
NA00271 ww*.speedcleaner.co.kr/APP/stat.php?v1=1&v2=gonggu&v3=ucq84s3VN**.***
NA00272 ww*.speller.co.kr/update_xml.php?gu=91C4AF58195FF8C903EC6DBB2F2**.***
NA00273 ww*.winapp.kr/appcontrol/ZTopappConfig.php?controlid=wincon&sit**.***
NA00274 ww*.winapp.kr/logData/Zinstall.php?mode=i&sitecode=B009&ver=1.0**.***
----------------------------------------------------------------------
Deleted Files : 128
Remove Service : 5
Remove Uninstall Entry : 19
Remove Startup Entry : 21
Remove Browser Helper Object : 4
Remove Toolbar : 1
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2013-09-24
[01-HKCUREG]**Enumerate_gt
[01-HKCUREG]**GuardSupport
[01-HKCUREG]**metablogagent
[01-HKCUREG]**MetablogNewIssues
[01-HKCUREG]**MicroLabCon
[01-HKCUREG]**MicroProCon
[01-HKCUREG]**powersearch
[01-HKCUREG]**signkey
[01-HKCUREG]**WinKeyword
[01-HKCUREG]**WinKeyword_Up
[02-HKLMREG]**aiesb
[02-HKLMREG]**clickvaccine
[02-HKLMREG]**clickvaccineusb
[02-HKLMREG]**cocofile
[02-HKLMREG]**InsideTool
[02-HKLMREG]**KeyPang
[02-HKLMREG]**MicroLabProc
[02-HKLMREG]**MicroProProc
[02-HKLMREG]**SeStPage
[02-HKLMREG]**Speller
[02-HKLMREG]**Window Network Manager
[03-BHOCLSD]**{0B3B9D03-5E08-4E48-BF77-FC88443F3DC2}
[03-BHOCLSD]**{0F9D3470-ACE8-4A8E-8A2F-988576341613}
[03-BHOCLSD]**{6D567790-D2F2-4EFF-9491-D55D64475ED6}
[03-BHOCLSD]**{E7CA7DD6-FBC6-416D-8BD5-2070704F666C}
[04-TOOLBAR]**{41ED1FD7-8C37-4806-AF9E-D5238A30E56F}
[05-SERVICE]**clgsvr32
[05-SERVICE]**ismsvc32
[05-SERVICE]**RollingPop_Service
[05-SERVICE]**speedcleanerService
[05-SERVICE]**winspsv32
[06-TASKLST]**enumerategt
[06-TASKLST]**ISZone
[06-TASKLST]**PangPangClean
[06-TASKLST]**PangPangCleanUpdate
[06-TASKLST]**Window_Network_Manager
----------------------------------------------------------------------
Total Processing Time : 906ms
----------------------------------------------------------------------