애드웨어, 허위백신, 팝업광고, 쇼핑몰 바로가기, 악성툴바, 각종 개쓰레기 프로그램 삭제 요청하기
이용약관을 안내하며 컴퓨터에 설치하는 개쓰레기 프로그램들은 백신으로 백날 돌려봐야 검색이 안됩니다.
개쓰레기 프로그램들은 아주 지능적이라서 전문가가 아니고서는 찾아내기가 어렵습니다.


----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Microsoft Windows XP Service Pack 3(5.1.2600.196608)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 767.48 MB
x86 Family 6 Model 37 Stepping 5
Date : 2011-08-26
----------------------------------------------------------------------
DF003 C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll
DF004 C:\Program Files\Leaders\M-Manager\DBUtil.exe
DF005 C:\Program Files\Leaders\M-Manager\FileDn.exe
DF006 C:\Program Files\Leaders\M-Manager\key\CD-SPACE5.exe
DF007 C:\Program Files\Leaders\M-Manager\key\cdkey.exe
DF008 C:\Program Files\Leaders\M-Manager\key\diablo2.exe
DF009 C:\Program Files\Leaders\M-Manager\key\expansion.exe
DF010 C:\Program Files\Leaders\M-Manager\key\FTkey.exe
DF011 C:\Program Files\Leaders\M-Manager\key\starkey.exe
DF012 C:\Program Files\Leaders\M-Manager\Launcher.exe
DF013 C:\Program Files\Leaders\M-Manager\MCGI.exe
DF014 C:\Program Files\Leaders\M-Manager\MMClt.exe
DF015 C:\Program Files\Leaders\M-Manager\MMClt_Ag.exe
DF016 C:\Program Files\Leaders\M-Manager\MMSvr.exe
DF017 C:\Program Files\Leaders\M-Manager\Patch\PATCHMMC.EXE
DF018 C:\Program Files\Leaders\M-Manager\Skin\BF2Key.exe
DF019 C:\Program Files\Leaders\M-Manager\Skin\Dstartfix.exe
DF020 C:\Program Files\Leaders\M-Manager\Skin\htm\Msbiz.dll
DF021 C:\Program Files\Leaders\M-Manager\Skin\MAGI.dll
DF022 C:\Program Files\Leaders\M-Manager\Skin\MAGU.dll
DF023 C:\Program Files\Leaders\M-Manager\Skin\MBTN.exe
DF024 C:\Program Files\Leaders\M-Manager\Skin\msbiz.dll
DF025 C:\Program Files\Leaders\M-Manager\Skin\MSWU\MSWU.dll
DF026 C:\Program Files\Leaders\M-Manager\Skin\MSWU\MSWU.exe
DF027 C:\Program Files\Leaders\M-Manager\Skin\RegDll.exe
DF028 C:\Program Files\Leaders\M-Manager\Skin\spapp.exe
DF029 C:\Program Files\Leaders\M-Manager\uninst.exe
DF030 C:\Program Files\Leaders\M-Manager\vbruntimes.exe
DF031 C:\Program Files\Leaders\M-Manager\vcredist_x86sp1.exe
DF032 C:\Program Files\Leaders\M-Manager\VNCHooks.dll
DF033 C:\Program Files\Leaders\M-Manager\WmRcSvr2.exe
DF034 C:\Program Files\Leaders\M-Manager\WmRcView.exe
DF035 C:\Program Files\Leaders\M-Manager\wRC.exe
DF036 C:\Program Files\SpaceClick\SpaceCkc.dll
DF037 C:\Program Files\SpaceClick\SpaceCkd.dll
DF038 C:\Program Files\SpaceClick\SpaceClick.dll
DF039 C:\Program Files\SpaceClick\SpaceClick.exe
DF040 C:\Program Files\SpaceClick\SpaceClickc.dll
DF041 C:\Program Files\SpaceClick\SpaceClickSv.exe
DF042 C:\Program Files\SpaceClick\spaceclickviewer.exe
DF043 C:\Program Files\SpaceClick\spacern.exe
DF044 C:\Program Files\SpaceClick\tmpSpaceCkc.dll
DF045 C:\WINDOWS\system32\A4One.ocx
DF046 C:\WINDOWS\system32\ccrpftv6.ocx
DF047 C:\WINDOWS\system32\COMCT232.OCX
DF048 C:\WINDOWS\system32\COMCT332.OCX
DF049 C:\WINDOWS\system32\COMCTL32.OCX
DF050 C:\WINDOWS\system32\COMDLG32.OCX
DF051 C:\WINDOWS\system32\cpl.exe
DF052 C:\WINDOWS\system32\DBLIST32.OCX
DF053 C:\WINDOWS\system32\Dstartfix.exe
DF054 C:\WINDOWS\system32\FPSPR70.ocx
DF055 C:\WINDOWS\system32\FreeImage.dll
DF056 C:\WINDOWS\system32\HoonControl.ocx
DF057 C:\WINDOWS\system32\lspwrlib.dll
DF058 C:\WINDOWS\system32\mcCab.dll
DF059 C:\WINDOWS\system32\McEnc.dll
DF060 C:\WINDOWS\system32\McGp.exe
DF061 C:\WINDOWS\system32\MCI32.OCX
DF062 C:\WINDOWS\system32\mcKey.dll
DF063 C:\WINDOWS\system32\McRcvrp.dll
DF064 C:\WINDOWS\system32\msado15.dll
DF065 C:\WINDOWS\system32\MSCOMCT2.OCX
DF066 C:\WINDOWS\system32\MSCOMCTL.ocx
DF067 C:\WINDOWS\system32\MSCOMCTL.OCX
DF068 C:\WINDOWS\system32\MSCOMM32.OCX
DF069 C:\WINDOWS\system32\MSDATGRD.OCX
DF070 C:\WINDOWS\system32\MSDATLST.OCX
DF071 C:\WINDOWS\system32\MSFLXGRD.OCX
DF072 C:\WINDOWS\system32\MSINET.OCX
DF073 C:\WINDOWS\system32\msjro.dll
DF074 C:\WINDOWS\system32\MSMASK32.OCX
DF075 C:\WINDOWS\system32\msstdfmt.dll
DF076 C:\WINDOWS\system32\MSWINSCK.OCX
DF077 C:\WINDOWS\system32\PICCLP32.OCX
DF078 C:\WINDOWS\system32\REGTLIB.EXE
DF079 C:\WINDOWS\system32\RICHTX32.OCX
DF080 C:\WINDOWS\system32\SMSCALL.dll
DF081 C:\WINDOWS\system32\SSubTmr6.dll
DF082 C:\WINDOWS\system32\SYSINFO.OCX
DF083 C:\WINDOWS\system32\TABCTL32.OCX
DF084 C:\WINDOWS\system32\TeenA4one.ocx
DF085 C:\WINDOWS\system32\unins000.exe
DF086 C:\WINDOWS\system32\vbalIml6.ocx
DF087 C:\WINDOWS\system32\vbaListView6.ocx
DF088 C:\WINDOWS\system32\vbMHWB.dll
DF089 C:\WINDOWS\system32\W95INF16.DLL
DF090 C:\WINDOWS\system32\W95INF32.DLL
DF091 C:\WINDOWS\system32\XCheckButton.ocx
DF092 C:\WINDOWS\system32\xlabel103.ocx
DF093 C:\WINDOWS\system32\xprogress100.ocx
DF094 C:\WINDOWS\system32\ZlibTool.ocx
DF095 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
----------------------------------------------------------------------
UN096 M-Manager -/- (주)리더스소프트 -/- M-Manager -/- -/- -
UN097 M-Manager -Svr -/- (주)리더스소프트 -/- M-Manager -Svr -/--/- -
----------------------------------------------------------------------
LS100 M-Manager -/- C:\Program Files\Leaders\M-Manager\MMClt_Ag.exe
----------------------------------------------------------------------
BH101 SpaceCkObj Class -/- C:\Program Files\SpaceClick\SpaceCkc.dll -/- {C76ED0DD-59CD-4C77-B7D0-8CDFDAB8B81F}
BH102 SpaceClickObj Class -/- C:\Program Files\SpaceClick\SpaceClickc.dll -/- {ED4256A9-72DC-4788-8354-0F74FEDBDE9B}
----------------------------------------------------------------------
NA013 download.spaceclick.co.kr/app/banner/v1005/comm/SpaceCkc*.***
NA014 ww*.motelcafe.co.kr/css/mmanager*.***
NA015 ww*.motelcafe.co.kr/download/download.html?filename=SetupMMClt.**.***
NA016 ww*.motelcafe.co.kr/download/download.html?filename=SetupMMSvr.**.***
NA017 ww*.motelcafe.co.kr/favicon*.***
NA018 ww*.motelcafe.co.kr/js/activeXPatc*.***
NA019 ww*.motelcafe.co.kr/js/jquery-1.3.*.***
NA020 ww*.motelcafe.co.kr/js/jquery.dragndro*.***
NA021 ww*.motelcafe.co.kr/js/mmanage*.***
NA022 ww*.motelcafe.co.kr/swf/main*.***
NA023 ww*.motelcafe.co.kr/topmenu*.***
NA024 ww*.multiclick.co.kr/application_notice/Clt_Content/mmg_ad.html**.***
NA025 ww*.multiclick.co.kr/application_notice/Clt_Content/mmg_banner.**.***
NA026 ww*.multiclick.co.kr/AutoUpgrade/MBTN*.***
NA027 ww*.multiclick.co.kr/AutoUpgrade/McGp*.***
NA028 ww*.multiclick.co.kr/AutoUpgrade/total*.***
NA029 ww*.multiclick.co.kr/AutoUpgrade/Total*.***
----------------------------------------------------------------------
Deleted Files : 96
Remove Uninstall Entry : 4
Remove Startup Entry : 1
Remove Browser Helper Object : 2
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
[02-HKLMREG]**M-Manager
[03-BHOCLSD]**{C76ED0DD-59CD-4C77-B7D0-8CDFDAB8B81F}
[03-BHOCLSD]**{ED4256A9-72DC-4788-8354-0F74FEDBDE9B}
----------------------------------------------------------------------
Total Processing Time : 159ms
----------------------------------------------------------------------




요즘 휴대폰 소액결제(월정액 자동결제)를 이용한 사기사이트 및 사기프로그램이 판을 치고 있습니다.
무료백신 프로그램, 무료개인정보삭제 프로그램, 무료 유해사이트차단 프로그램, 무료파일다운, 무료문자, 무료운세, 무료로또, 무료게임, 무료MP3등의 사이트에서 휴대폰 및 일반전화로 절대 인증 하지마세요.

인증하는 즉시 결제되며, 서비스를 해지하지 않는 이상 매월 자동결제됩니다. (인증번호 = 결제번호)
업체마다 결제되는 기간은 다르지만 짧게는 2년, 길게는 20년, 최대 50년짜리도 있습니다.
서비스 업체의 이용약관 및 결제내용에 대해 확실히 알고 인증/사용하시기 바랍니다.
안드로이드계열 스마트폰에서 출처가 없는 설치파일도 다운받지말고 실행하지도 마세요.
해당 통신사에 전화해서 소액결제 안되게끔 차단시키세요. (스마트폰에 무지한 아이들/노인분들 주의)

*악덕업체의 요청으로 인하여 블로그의 게시글이 이유없이 삭제되는 경우 구글 블로그에 재게시 합니다.
[ 2011. 8. 26. 23:16 ] Posted by 프로세스 천국 , 프로그램분석

댓글을 달아 주세요

  1. 프로세스 천국 - 2012.02.17 12:20 신고 댓글주소 수정/삭제 댓글쓰기

    ======================================================================
    ======================================================================

    echo Start
    echo windowexe.com & tskill "InfoScan" & echo windowdel.com
    echo windowexe.com & tskill "InfoScanMgr" & echo windowdel.com
    echo windowexe.com & tskill "InfoSvc" & echo windowdel.com
    echo windowexe.com & tskill "InfoUpdate" & echo windowdel.com
    echo windowexe.com & tskill "InfoWrk" & echo windowdel.com
    echo windowexe.com & tskill "OpenPot" & echo windowdel.com
    echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "NinjaPang" /f
    echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "NinjaPang" /f
    echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "NinjaPangSpu" /f
    echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "NinjaPangSpu" /f
    echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PangUpdate" /f
    echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PangUpdate" /f
    echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "CodecPang" /f
    echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "CodecPang" /f
    echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "InfoScan Worker" /f
    echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "InfoScan Worker" /f
    echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0000940A-F4A5-4773-9978-C4FF15AC168A}" /f
    echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0000940A-F4A5-4773-9978-C4FF15AC168A}" /f
    echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0000940A-F4A5-4773-9978-C4FF15AC168A}" /f
    echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{0000940A-F4A5-4773-9978-C4FF15AC168A}" /f
    echo Created by Windowexe.com
    echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67421A26-71F2-4E57-89B2-E49C6FD90DA1}" /f
    echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{67421A26-71F2-4E57-89B2-E49C6FD90DA1}" /f
    echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{67421A26-71F2-4E57-89B2-E49C6FD90DA1}" /f
    echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{67421A26-71F2-4E57-89B2-E49C6FD90DA1}" /f
    echo Created by Windowexe.com
    sc stop "InfoSvc"
    echo Service Disable & sc config "InfoSvc" start= disabled & echo Windowexe.com
    echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{95E2E4BA-E131-4aab-85C5-2071F68ED3C3}" /f
    echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{95E2E4BA-E131-4aab-85C5-2071F68ED3C3}" /f
    echo Created by Windowexe.com
    echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\WebCompassUpdate.job"
    echo Created by Windowexe.com
    echo End

    ======================================================================
    ======================================================================