애드웨어, 허위백신, 팝업광고, 쇼핑몰 바로가기, 악성툴바, 각종 개쓰레기 프로그램 삭제 요청하기
이용약관을 안내하며 컴퓨터에 설치하는 개쓰레기 프로그램들은 백신으로 백날 돌려봐야 검색이 안됩니다.
개쓰레기 프로그램들은 아주 지능적이라서 전문가가 아니고서는 찾아내기가 어렵습니다.


----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 1,023.55 MB
Intel64 Family 6 Model 37 Stepping 5
Date : 2013-03-25
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\barocn\barocn.exe
DF001 C:\Program Files (x86)\barocn\barosvc.exe
DF002 C:\Program Files (x86)\barocn\uninst.exe
DF003 C:\Program Files (x86)\FileHam.com\FileHamBrowser\Cleanup.exe
DF004 C:\Program Files (x86)\FileHam.com\FileHamBrowser\파일함탐색기.exe
DF005 C:\Program Files (x86)\FileHam.com\Updater\FileHamUpdater.exe
DF006 C:\Program Files (x86)\FreeListen\bass.dll
DF007 C:\Program Files (x86)\FreeListen\FreeListen.exe
DF008 C:\Program Files (x86)\FreeListen\FreeListenManager.exe
DF009 C:\Program Files (x86)\FreeListen\FreeListenUpdate.exe
DF010 C:\Program Files (x86)\FreeListen\nhopen.dll
DF011 C:\Program Files (x86)\KeywordYac\KeywordYac.exe
DF012 C:\Program Files (x86)\KeywordYac\KeywordYacUpdate.exe
DF013 C:\Program Files (x86)\NetMWin\NetMWin.exe
DF014 C:\Program Files (x86)\NetMWin\NMHelper.dll
DF015 C:\Program Files (x86)\NetMWin\NMUnins.exe
DF016 C:\Program Files (x86)\topopc\showupex.exe
DF017 C:\Program Files (x86)\topopc\topopc.exe
DF018 C:\Program Files (x86)\topopc\uninst.exe
DF019 C:\Program Files (x86)\windviewer\windopt.exe
DF020 C:\Program Files (x86)\windviewer\windviewer.dll
DF021 C:\Program Files (x86)\windviewer\windviewer.exe
DF022 C:\Program Files (x86)\windviewer\windvieweragent.exe
DF023 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\파일함\파일함 탐색기 삭제.lnk
DF024 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\파일함\파일함 탐색기.lnk
DF025 C:\ProgramData\Microsoft\Windows\Templates\5-11912_jre-7u7-windows-x64[1]_.exe
DF026 C:\ProgramData\WindowsTab\uninst.exe
DF027 C:\ProgramData\WindowsTab\windowstab.exe
DF028 C:\ProgramData\WindowsTab\windowstabup.exe
DF029 C:\Users\Administrator\AppData\Local\Temp\FreeListen_Setup_128.exe
DF030 C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewib.dll
DF031 C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewim.dll
DF032 C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewmgr.exe
DF033 C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewup.exe
DF034 C:\Users\Administrator\AppData\Roaming\addendum_sb\uninst.exe
DF035 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\11번가.lnk
DF036 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\G마켓.lnk
DF037 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\옥션.lnk
DF038 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\11번가.lnk
DF039 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\G마켓.lnk
DF040 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\옥션.lnk
DF041 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GROUP\2013 토정비결보기.lnk
DF042 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates\KeywordYacInstall_180.exe
DF043 C:\Users\Administrator\AppData\Roaming\SpeedDownload\fbdchk.exe
DF044 C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDManager.exe
DF045 C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDMgr.dll
DF046 C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDSvcMan.exe
DF047 C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDUnist.exe
DF048 C:\Users\Administrator\AppData\Roaming\SpeedDownload\SpeedGet.exe
DF049 C:\Users\Administrator\AppData\Roaming\WingGo\winggo.dll
DF050 C:\Users\Administrator\AppData\Roaming\WingGo\winggom.exe
DF051 C:\Users\Administrator\AppData\Roaming\WingGo\winggou.exe
DF052 C:\Users\Administrator\Desktop\10원경매 럭키타임.url
DF053 C:\Users\Administrator\Desktop\11번가.lnk
DF054 C:\Users\Administrator\Desktop\2013 토정비결보기.lnk
DF055 C:\Users\Administrator\Desktop\G마켓.lnk
DF056 C:\Users\Administrator\Desktop\옥션.lnk
DF057 C:\Users\Administrator\Favorites\10원경매 럭키타임.url
DF058 C:\Users\Administrator\Favorites\11번가.url
DF059 C:\Users\Administrator\Favorites\G마켓.url
DF060 C:\Users\Administrator\Favorites\Links\11번가.url
DF061 C:\Users\Administrator\Favorites\Links\G마켓.url
DF062 C:\Users\Administrator\Favorites\Links\옥션.url
DF063 C:\Users\Administrator\Favorites\Links\지마켓.url
DF064 C:\Users\Administrator\Favorites\옥션.url
DF065 C:\Windows\Downloaded Program Files\FreeListenActiveX.ocx
DF066 C:\Windows\FreeListenDownLoader.exe
DF067 C:\Windows\SysWOW64\WindowsDriver.dll
----------------------------------------------------------------------
SC068 FBDSvcman -/- FBDSvcman -/- - -/-  -/- C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDSvcMan.exe
SC069 WindowsDriver -/- WindowsDriver -/- - -/- C:\Windows\system32\WindowsDriver.dll -/- C:\Windows\system32\svchost.exe -k WindowsDriver
SC070 barocn -/- barocn svc -/- - -/-  -/- C:\Program Files (x86)\barocn\barosvc.exe
----------------------------------------------------------------------
UN071 ctdata  -/- ctdata. -/- ctdata -/- - -/- -
UN072 FreeListen -/- (주)애니밍 -/- FreeListen -/- hxxp://www.FreeListen.co.kr -/- hxxp://www.FreeListen.co.kr
UN073 Addendum-nm -/- - -/- nmnew -/- - -/- -
UN074 network manager win -/- NMWin -/- nmwin -/- - -/- hxxp://www.topclick.kr
UN075 Windows SpeedDownload -/- - -/- SpeedDownload -/- - -/- -
UN076 Window Viewer -/- - -/- Window Viewer -/- - -/- -
UN077 Windows barocon  -/- Baro, Inc. -/- Windows barocon -/- - -/- -
UN078 windows ctpop (remove only)  -/- system co -/- windows ctpop (remove only) -/- - -/- -
UN079 KeywordYac -/- 애드월커뮤니케이션즈 -/- {5273F545-7D19-4ABA-8208-E9BF1AE38C30}_is1 -/- - -/- -
UN080 파일함탐색기 -/- - -/- 파일함탐색기 -/- - -/- -
UN081 WindowsTab Uninstall -/- www.about-tab.com -/- WindowsTab -/- hxxp://www.about-tab.com -/- -
UN082 WingGo -/- - -/- WingGo -/- - -/- -
TS083 FreeListen
TS084 KeywordYac
----------------------------------------------------------------------
US085 WindowsTab -/- C:\ProgramData\WindowsTab\windowstabup.exe
US086 windviewer -/- C:\Program Files (x86)\windviewer\windviewer.exe
US087 windvieweragent -/- C:\Program Files (x86)\windviewer\windvieweragent.exe
US088 windvieweropt -/- C:\Program Files (x86)\windviewer\windopt.exe
US089 WingGo -/- C:\Users\Administrator\AppData\Roaming\WingGo\winggou.exe UPDATE
LS090 topopc -/- C:\Program Files (x86)\topopc\topopc.exe
LS091 nmnew -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewup.exe
LS092 ctdata -/- C:\Users\ADMINI~1\AppData\Local\Temp\data.exe
LS093 FileHamBrowser -/- C:\Program Files (x86)\Fileham.com\FileHamBrowser\파일함탐색기.exe menu
LS094 SpeedDownload -/- C:\Users\Administrator\AppData\Roaming\SpeedDownload\FBDManager.exe
LS095 rpga -/- C:\Users\Administrator\AppData\Roaming\SpeedDownload\rpgchk.exe
----------------------------------------------------------------------
BH096 WingGo -/- C:\Users\Administrator\AppData\Roaming\WingGo\winggo.dll -/- {002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
BH097 IESMon.Mon4 -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewim.dll -/- {2F40ECDC-6F7B-4CF3-B1D0-ED8845084912}
BH098 NetMCtrl Class -/- C:\Program Files (x86)\NetMWin\NMHelper.dll -/- {7760E6D4-CC93-4495-981B-5E23919D602A}
BH099 windviewer Class -/- C:\Program Files (x86)\windviewer\windviewer.dll -/- {CC34B3C3-3904-4D0E-8035-536715B28BBA}
EXADD WingGo -/- C:\Users\Administrator\AppData\Roaming\WingGo\winggo.dll -/- {002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
EXADD WingGo -/- C:\Users\Administrator\AppData\Roaming\WingGo\winggo.dll -/- {003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
EXADD IESMon.Mon4 -/- C:\Users\Administrator\AppData\Roaming\addendum_sb\nmnewim.dll -/- {2F40ECDC-6F7B-4CF3-B1D0-ED8845084912}
EXADD FreeListen_ActiveX Control -/- C:\Windows\DOWNLO~1\FREELI~1.OCX -/- {6630CE25-5CD8-47EC-932C-C334E5CEF3D3}
EXADD NetMCtrl Class -/- C:\Program Files (x86)\NetMWin\NMHelper.dll -/- {7760E6D4-CC93-4495-981B-5E23919D602A}
EXADD windviewer Class -/- C:\Program Files (x86)\windviewer\windviewer.dll -/- {CC34B3C3-3904-4D0E-8035-536715B28BBA}
----------------------------------------------------------------------
----------------------------------------------------------------------
TB100 WingGo -/- C:\Users\Administrator\AppData\Roaming\WingGo\winggo.dll -/- {003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
----------------------------------------------------------------------
NA001 adm.adgod.co.kr/app/config.php?app*.***
NA002 adm.adgod.co.kr/app/search_url*.***
NA003 adm.adgod.co.kr/app/setup.php?app=128&mode=exe*.***
NA004 adm.adgod.co.kr/app/setup.php?app=128&mode=ins*.***
NA005 api.windviewer.combacon*.***
NA006 api.windviewer.com/11st*.***
NA007 api.windviewer.com/auction*.***
NA008 api.windviewer.com/gmarket*.***
NA009 api.windviewer.com/version*.***
NA010 api.windviewer.comapi.windviewer.com/engine_list.php?idt**.***
NA011 app2.tsmon.co.kr/app/upgprg7.asp?UID=VA0113031518392474954&OSV=**.***
NA012 app2.tsmon.co.kr/app/v2/inst_ok.asp?uid=VA0113031518392474954&v**.***
NA013 app2.tsmon.co.kr/app/v2/ipcheck*.***
NA014 app2.tsmon.co.kr/app/v2/neolinfo2.asp?mid=VA0113031518392474954**.***
NA015 app2.tsmon.co.kr/app/v2/urlcheck.asp?icd=*.***
NA016 app2.tsmon.co.kr/file/v2/addnva1*.***
NA017 app2.tsmon.co.kr/filenmnew/v2/nmnewib*.***
NA018 app2.tsmon.co.kr/filenmnew/v2/nmnewim*.***
NA019 app2.tsmon.co.kr/filenmnew/v2/nmnewmgr*.***
NA020 app2.tsmon.co.kr/filenmnew/v2/nmnewup*.***
NA021 app2.tsmon.co.kr/filenmnew/v2/uninst*.***
NA022 cnt.baroicon.com/log/?modeAct=install&iMAC=000c293ecd7f&iPID=br**.***
NA023 cnt.baroicon.com/log/?modeAct=run&iMAC=000c293ecd7f&iPID=*.***
NA024 cnt.baroicon.com/xml.php?xcode=brca&iMAC=000c293e*.***
NA025 config.lnimarketing.co.kr/?app*.***
NA026 count.lnimarketing.co.kr/?mode=execute&app*.***
NA027 dau.*.***
NA028 down.baroicon.com/Setup_brca_h*.***
NA029 down.blogdanawa.com/down/adInstall_ad038*.***
NA030 down.speeddownload.co.kr/down/SpeedDownload_son001*.***
NA031 down.windviewer.com/setup_pid009_silent*.***
NA032 download.lnimarketing.co.kr/licensefile/KeywordYac_License*.***
NA033 download.lnimarketing.co.kr/setupfile/keywordyac/KeywordYacInst**.***
NA034 file.muuk.co.kr/app/windowstab/WindowsTabSetup_utilbada*.***
NA035 k.winggo.co.kr/log/ad-ClicksTab.php?midx=166&method=1&iCode=01&**.***
NA036 k.winggo.co.kr/log/liveCheck*.***
NA037 kanmay.cafe24.com/data*.***
NA038 kanmay.cafe24.com/part09*.***
NA039 kanmay.cafe24.com/xxx*.***
NA040 moviz.co.kr/images/us4j*.***
NA041 rank.search.naver.net/nexearch_utf8_v2.js?sm=tab_lve&callcntdum**.***
NA042 report.windviewer.com/report_install.php?pid=pid009&mac=000C293**.***
NA043 report.windviewer.comreport.windviewer.com/report_dll.ph**.***
NA044 report.windviewer.comreport.windviewer.com/report_exe.ph**.***
NA045 report.windviewer.comreport.windviewer.com/report_exe_ag**.***
NA046 s.winggo.co.kr/SM3/vipdiskSetup*.***
NA047 setup.freelisten.co.kr/Setup/128/FreeListenSetup*.***
NA048 setup.freelisten.co.kr/Setup/DistributeInfo*.***
NA049 setup.freelisten.co.kr/Setup/FreeListen_Setup_128*.***
NA050 setup.lnimarketing.co.kr/KeywordYacSetup_180_Hide*.***
NA051 setup.lnimarketing.co.kr/setup.php?app*.***
NA052 shop.soonwe.com/iconview/windowstab/info_007.asp?pt=util*.***
NA053 speeddownload.co.kr/check_counter.php?pi=son001&gu=979639B9C56B**.***
NA054 stylegroup.kr/SM3/sm12038*.***
NA055 stylegroup.kr/SM3/smlist*.***
NA056 stylegroup.kr/SM3/winggo*.***
NA057 stylegroup.kr/SM3/winggom*.***
NA058 stylegroup.kr/SM3/winggou*.***
NA059 svc.winsmanager.com/apps/act.php?_pi=bacde0aa060b233b484f6f758e**.***
NA060 u.winsmanager.com/luncher/inst_launcher_wmg011*.***
NA061 u.winsmanager.com/setup/check_wsm*.***
NA062 up.winerset.com/130116/barocn/IETab__IE105*.***
NA063 up.winerset.com/130116/barocn/UtilZone__UZ82*.***
NA064 up.winerset.com/130116/barocn/WinPro__WP82*.***
NA065 up.winerset.com/130116/barocn/winspop_baro*.***
NA066 up.winerset.com/130313/ashop/baba/deskvaccine*.***
NA067 up.winerset.com/130313/ashop/baba/Setup-baB*.***
NA068 up.winerset.com/130313/ashop/baba/Setwepop*.***
NA069 update.lnimarketing.co.kr/update.php?app*.***
NA070 update.windowfaster.co.kr/set/windowfastersetup_raon*.***
NA071 utilbada.com/down2/luckytmbacon_sweety0800*.***
NA072 utilbada.com/down2/unse*.***
NA073 werpingad.com/_app/tc_action4.php?pi=code32&gu=00-0C-29-3E-CD-7**.***
NA074 whois.kisa.or.kr/openapi/whois.jsp?key=2011100613382837406762&q**.***
NA075 windowfaster.co.kr/dbk*.***
NA076 windowfaster.co.kr/etc/yak_app*.***
NA077 windowfaster.co.kr/mbk.php?v1=raon&v2=00:0C:29:3E:C*.***
NA078 winggo.co.kr/MIN/log/LogProc.php?pCode=166&mode=EL2&mac=212f6a7**.***
NA079 winggo.co.kr/MIN/log/LogProc.php?pCode=166&mode=IL2&mac=212f6a7**.***
NA080 winggo.co.kr/MIN/log/LogProc.php?pCode=166&mode=UL2&mac=212f6a7**.***
NA081 winggo.co.kr/MIN/log/LogProc3.php?pCode=166&mode=ELG2&mac=212f6**.***
NA082 ww*.clearboan.com/clearboan*.***
NA083 ww*.fileham.com/ad/setup/exad006*.***
NA084 ww*.fileham.com/main/app/setup_count.php?mac=00-0c-29-3e-cd-7f&**.***
NA085 ww*.luckytime.co.kr/cpinstall.php?p=sweety0800&m=00-0C-29-3E-CD**.***
NA086 ww*.luckytime.co.kr/pindex*.***
NA087 ww*.muuk.co.kr/app/auction21/info/infow.php?pt=util*.***
NA088 ww*.muuk.co.kr/count/auction21/boot.php?pt=utilbada&mc=00-0C-29**.***
NA089 ww*.muuk.co.kr/count/auction21/install.php?pt=utilbada&mc=00-0C**.***
NA090 ww*.needfile.co.kr/app_linkage/app_download.php?p=5&u=1*.***
NA091 ww*.optimaspeed.com/optimaspeed*.***
NA092 ww*.speeddownload.co.kr/update_xml2.php?gu=979639B9C56BCA794068**.***
NA093 ww*.topclick.kr/down/NM_code32*.***
NA094 ww*.werpingad.com/_app/tc_appctrl4.php?gu=00-0C-29-3E-CD-7F&pi=**.***
NA095 ww*.werpingad.com/_app/tc_iectrl4.php?gu=00-0C-29-3E-CD-7F&pi=c**.***
NA096 ww*.werpingad.com/_app/tcsvrctl4.php?gu=00-0C-29-3E-CD-7F&pi=co**.***
NA097 ww*.windowfaster.co.kr/APP/pf_ck.php?v1=*.***
NA098 ww*.windowfaster.co.kr/APP/stat.php?v1=1&v2=raon&v3=PTU5OUE5Omd**.***
NA099 youn1104.cafe24.com/log/?modeAct=INSTALL&iMAC=000c293ecd7f&iPID**.***
NA100 youn1104.cafe24.com/log/ctpep*.***
----------------------------------------------------------------------
Deleted Files : 68
Remove Service : 3
Remove Uninstall Entry : 12
Remove Startup Entry : 11
Remove Browser Helper Object : 4
Remove Toolbar : 1
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2013-03-25
[01-HKCUREG]**WindowsTab
[01-HKCUREG]**windviewer
[01-HKCUREG]**windvieweragent
[01-HKCUREG]**windvieweropt
[01-HKCUREG]**WingGo
[02-HKLMREG]**topopc
[02-HKLMREG]**nmnew
[02-HKLMREG]**ctdata
[02-HKLMREG]**FileHamBrowser
[02-HKLMREG]**SpeedDownload
[02-HKLMREG]**rpga
[03-BHOCLSD]**{002B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
[03-BHOCLSD]**{2F40ECDC-6F7B-4CF3-B1D0-ED8845084912}
[03-BHOCLSD]**{7760E6D4-CC93-4495-981B-5E23919D602A}
[03-BHOCLSD]**{CC34B3C3-3904-4D0E-8035-536715B28BBA}
[04-TOOLBAR]**{003B9765-AB24-47E6-8DB6-6A1A0CE11BC9}
[05-SERVICE]**FBDSvcman
[05-SERVICE]**WindowsDriver
[05-SERVICE]**barocn
----------------------------------------------------------------------
Total Processing Time : 77ms
----------------------------------------------------------------------




요즘 휴대폰 소액결제(월정액 자동결제)를 이용한 사기사이트 및 사기프로그램이 판을 치고 있습니다.
무료백신 프로그램, 무료개인정보삭제 프로그램, 무료 유해사이트차단 프로그램, 무료파일다운, 무료문자, 무료운세, 무료로또, 무료게임, 무료MP3등의 사이트에서 휴대폰 및 일반전화로 절대 인증 하지마세요.

인증하는 즉시 결제되며, 서비스를 해지하지 않는 이상 매월 자동결제됩니다. (인증번호 = 결제번호)
업체마다 결제되는 기간은 다르지만 짧게는 2년, 길게는 20년, 최대 50년짜리도 있습니다.
서비스 업체의 이용약관 및 결제내용에 대해 확실히 알고 인증/사용하시기 바랍니다.
안드로이드계열 스마트폰에서 출처가 없는 설치파일도 다운받지말고 실행하지도 마세요.
해당 통신사에 전화해서 소액결제 안되게끔 차단시키세요. (스마트폰에 무지한 아이들/노인분들 주의)

*악덕업체의 요청으로 인하여 블로그의 게시글이 이유없이 삭제되는 경우 구글 블로그에 재게시 합니다.
[ 2013. 3. 25. 06:35 ] Posted by 프로세스 천국 , 프로그램분석
,