[FileEyeLauncher] Install log : 680ms / 2012-11-11

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz / 1,023.55 MB
Intel64 Family 6 Model 42 Stepping 7
Date : 2012-11-11
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\KeywordTab\opentabup.exe
DF001 C:\Program Files (x86)\RClean\RCleanT.exe
DF002 C:\Program Files (x86)\Window QRCode\QRCode.exe
DF003 C:\Program Files (x86)\Window QRCode\QRCodeUp.exe
DF004 C:\Users\ADMINI~1\AppData\Roaming\KEYWOR~1\ver.exe
DF005 C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet FilesProtectTop_cnc_win.exe.exe
DF006 C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Filesqrmaker_cnc.exe
DF007 C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Filesstorm_cnc_win.exe
DF008 C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet FilesVaccineStar_cnc_win.exe
DF009 C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk
DF010 C:\Windows\cntflav.exe
----------------------------------------------------------------------
SC011 winesrv32 -/- Windows Everlive Service -/- - -/-  -/- C:\Program Files (x86)\Windows Everlive\winesrv.exe
----------------------------------------------------------------------
UN012 HUBGATE Uninstall -/-  -/- HubGate -/-  -/- -
TS013 AnCamCorder 실행
TS014 HubGate
TS015 HubGateUpdate.exe
TS016 MedianVaccine 실행
TS017 PrivacyClear
TS018 PrivacyCut
TS019 ProtectKeep
TS020 ProtectTop
TS021 Window Alarm 실행
TS022 Window Alarm 업데이트 실행
TS023 바닥인코더 실행
TS024 백신스타 실행
TS025 별PDF업데이트 실행
TS026 별메모업데이트 실행
TS027 별씨업데이트 실행
TS028 별집업데이트 실행
TS029 코드클리닉 실행
----------------------------------------------------------------------
US030 PrivacyClear -/- C:\Program Files (x86)\PrivacyClear\PrivacyClear.exe /run1
US031 linkdirectmain -/- C:\Program Files (x86)\LinkDirect\linkdirectT.exe -o
US032 startoolsup -/- C:\Program Files (x86)\STARtools\StarToolsUP\STARUpdate.exe -o
US033 WebtoonRoom -/- C:\Program Files (x86)\WebtoonRoom\WebtoonRoom_Update.exe -r
US034 opentabup -/- C:\Program Files (x86)\KeywordTab\opentabup.exe -o
US035 keywordtabopen -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabopen.exe
US036 keywordtabhper -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabhper.exe
US037 keywordtab -/- c:\users\administrator\appdata\roaming\keywordtab\keywordtabup.exe
US038 PrivacyCut -/- C:\Program Files (x86)\PrivacyCut\PrivacyCut.exe /run1
US039 Disker -/- rundll32.exe C:\Windows\system32\HIMYM.DLL,DW
US040 ProtectKeep -/- C:\Program Files (x86)\ProtectKeep\ProtectKeep.exe /run1
US041 finetopup -/- C:\Program Files (x86)\FineTop\FineTopUp.exe -o
US042 ezenjoy -/- C:\Program Files (x86)\ezenjoy\ezenjoy.exe -o
US043 DBGOLottoT -/- C:\Program Files (x86)\DBGOLotto\DBGOLottoT.exe -o
US044 windowtomgr -/- C:\Program Files (x86)\windowtomgr\oneups.exe
US045 wins promgr -/- C:\Program Files (x86)\wins promgr\vsupsvc.exe
US046 DBGOLottoU -/- C:\Program Files (x86)\DBGOLotto\LottoUpdate.exe /up
US047 ProtectTop -/- C:\Program Files (x86)\ProtectTop\ProtectTop.exe /run1
US048 WinProUp -/- C:\Program Files (x86)\WinPro\WinProUp.exe /start
US049 UtilZoneUp -/- C:\Program Files (x86)\UtilZone\UtilZoneUp /start
LS050 PatchUp_Plus -/- C:\Program Files (x86)\PatchUp_Plus\UpdatePlus.exe -r
LS051 fileeye -/- C:\Program Files (x86)\FileEye\fileeyeupdater.exe -o
LS052 windowwizard -/- C:\Program Files (x86)\WindowWizard\WindowWizardT.exe -o
LS053 RCleanMain -/- C:\Program Files (x86)\RClean\RCleanT.exe -o
LS054 PCClearPlus -/- C:\Program Files (x86)\PCClearPlus\PCClearPlus.exe /shide
LS055 windowwizardup -/- C:\Program Files (x86)\WindowWizard\WinWizardUpdater.exe /wo
LS056 badakcodecpack -/- C:\Program Files (x86)\badak multicodec\badakcodecpack.exe -o
LS057 windowtomgr -/- C:\Program Files (x86)\windowtomgr\oneups.exe
LS058 wins promgr -/- C:\Program Files (x86)\wins promgr\vsupsvc.exe
LS059 RCleanUp -/- C:\Program Files (x86)\RClean\RCleanUpdate.exe /up
LS060 WinPro -/- C:\Program Files (x86)\WinPro\WinPro.exe
LS061 UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.exe
----------------------------------------------------------------------
BH062 UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.dll -/- {1C5099DD-7923-45e8-9680-5F285DC61213}
BH063 WinPro -/- C:\Program Files (x86)\WinPro\WinPro.dll -/- {339E5541-DA75-412A-9F9B-3C014BE1050B}
BH064 keywordtab -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordTab.dll -/- {98D68C3C-CF16-4CA8-BBDB-11E0EDB62E36}
BH065 AdWeb Class -/- C:\Users\Administrator\AppData\Roaming\HubGate\HubGate.dll -/- {E7A20F9D-BA43-43D8-A2E0-CE28D763EF72}
EXADD Shockwave Flash Object -/- C:\Windows\system32\Macromed\Flash\Flash64_11_1_102.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.dll -/- {1C5099DD-7923-45E8-9680-5F285DC61213}
EXADD WinPro -/- C:\Program Files (x86)\WinPro\WinPro.dll -/- {339E5541-DA75-412A-9F9B-3C014BE1050B}
EXADD FileEyeLauncher Control -/- C:\Windows\SysWow64\FILEEY~1.OCX -/- {478D4DE0-2D32-42D7-850F-E2BE768523EE}
EXADD keywordtab -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordTab.dll -/- {98D68C3C-CF16-4CA8-BBDB-11E0EDB62E36}
EXADD PCclear_Kor_Ax Control -/- C:\Windows\DOWNLO~1\PCCLEA~1.OCX -/- {A9D7DC93-1E50-4948-A522-EAB7E0BC23F4}
EXADD Shockwave Flash Object -/- C:\Windows\SysWOW64\Macromed\Flash\Flash11g.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD AdWeb Class -/- C:\Users\Administrator\AppData\Roaming\HubGate\HubGate.dll -/- {E7A20F9D-BA43-43D8-A2E0-CE28D763EF72}
----------------------------------------------------------------------
X066 {478D4DE0-2D32-42D7-850F-E2BE768523EE} - FileEyeLauncher Control - hxxp://www.fileeye.co.kr/app/FileEyeLauncher.cab
----------------------------------------------------------------------
NA001 app.ancamera.co.kr/updatechk/ncamcoder201108*.***
NA002 app.ezenjoy.com/2010_update/ezenjoy_2010_v5*.***
NA003 app.ezenjoy.com/2010_update/logcount.phprclean&kind=notdate&sid**.***
NA004 app.ezoneclick.com/storm/storm_instchk*.***
NA005 app.ieguide.co.kr/2010_update/hubgate_instchk*.***
NA006 app.ieguide.co.kr/2010_update/opentab_up*.***
NA007 app.ieguide.co.kr/2010_update/utilzone_up*.***
NA008 app.ieguide.co.kr/2010_update/winever_instchk*.***
NA009 app.ieguide.co.kr/2010_update/winpro_up*.***
NA010 app.linkdirect.co.kr/2010_update/linkdirect_2010*.***
NA011 app.patchup.co.kr/updatechk/updatechkPlus3.php?pid=fil*.***
NA012 app.voneclick.com/installinfo/rclean/rclean_2010_v2*.***
NA013 app.voneclick.com/installinfo/windowwizard/windowwizard_2010_v2**.***
NA014 app.webtoonroom.com/webtoon/2010_update/webtoonroom_2010_v5.php**.***
NA015 blog.sina.com.cn/s/blog_b05fc39e01016ubi.*.***
NA016 dagame.co.kr/app/inst.php?kind=install&pid=b*.***
NA017 data.hubgate.co.kr/app/config.php?url=http%3a%2f%2fpay.privacyc**.***
NA018 dn.keywordtab.co.kr/_counter/_proc/ins_proc.asp?kind=0&ist_yn=0**.***
NA019 dn.keywordtab.co.kr/_counter/_proc/ins_proc.asp?kind=0&ist_yn=1**.***
NA020 dn.keywordtab.co.kr/KeywordTab/program/categor*.***
NA021 dn.keywordtab.co.kr/KeywordTab/program/hka*.***
NA022 dn.keywordtab.co.kr/KeywordTab/program/ver*.***
NA023 dn.keywordtab.co.kr/KeywordTab/program/version*.***
NA024 dn.Keywordtab.co.kr/Keywordtab/program/version2*.***
NA025 down.pcclear.co.kr/regivbs/clsid*.***
NA026 down.pcclear.co.kr/update_plus/VerChk.php?*.***
NA027 down.voneclick.com/windowwizard/deWinWizardUPckp*.***
NA028 down.voneclick.com/windowwizard/deWinWizardUPckp*.***
NA029 down.walarm.co.kr/download/protecttop/ProtectTop_cnc_win*.***
NA030 down.walarm.co.kr/download/qrcode/qrmaker_cnc*.***
NA031 down.walarm.co.kr/download/storm/storm_cnc_win*.***
NA032 down.walarm.co.kr/download/vaccinestar/VaccineStar_cnc_win*.***
NA033 downfile.pcclear.co.kr/bdupdate/bdupdate*.***
NA034 everlive.co.kr/s.php?p=e*.***
NA035 everlive.co.kr/s.php?p=e*.***
NA036 everlive.co.kr/s.php?p=e*.***
NA037 everlive.co.kr/tostbar*.***
NA038 everlive.co.kr/tostbar*.***
NA039 log.adsence.co.kr/logexp.php?aid=dbgolotto&pid=rclean&kind=live**.***
NA040 log.adsence.co.kr/logexp.php?aid=dbgolotto&pid=rclean&kind=notd**.***
NA041 log.adsence.co.kr/logexp.php?aid=ezenjoy&pid=rclean&kind=notdat**.***
NA042 log.adsence.co.kr/logexp.php?aid=qrcode&pid=cnc&kind=*.***
NA043 log.adsence.co.kr/logexp.php?aid=storm&pid=cnc_win_091&kind=ins**.***
NA044 log.adsence.co.kr/logexp.php?aid=utilzone&pid=windowwizard&kind**.***
NA045 log.adsence.co.kr/logexp.php?aid=utilzone&pid=windowwizard&kind**.***
NA046 log.adsence.co.kr/logexp.php?aid=winpro&pid=windowwizard&kind=f**.***
NA047 log.adsence.co.kr/logexp.php?aid=winpro&pid=windowwizard&kind=l**.***
NA048 log.onmuz.com/logonmuz/adexp.php?bpid=patchup&bnum=patchup_run&**.***
NA049 lottochk.dbgo.com/installinfo/dbgolotto/dbgolotto_2010_v3*.***
NA050 lottochk.dbgo.com/installinfo/dbgolotto/logcount.phprclean&kind**.***
NA051 lottochk.dbgo.com/installinfo/dbgolotto/logcount.phprclean&kind**.***
NA052 naver.*.***
NA053 navvy.mediachannel.co.kr/navvy/SiteInfo2?navvy_serial={400A4FC3**.***
NA054 open.keywordtab.co.kr/appcom/Mop*.***
NA055 open.keywordtab.co.kr/appcom/Mop*.***
NA056 open.keywordtab.co.kr/appcom/Mop*.***
NA057 open.keywordtab.co.kr/appcom/Mop*.***
NA058 open.keywordtab.co.kr/appcom/Mop*.***
NA059 open.keywordtab.co.kr/appcom/Mop*.***
NA060 open.keywordtab.co.kr/appcom/Mop*.***
NA061 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA062 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA063 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA064 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA065 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA066 openbn.keywordtab.co.kr/apptag/tag.asppart=fil*.***
NA067 patchup.co.kr/app/mainlog.*.***
NA068 pay.codeclinic.co.kr/cash_size.php?size=390*.***
NA069 pay.codeclinic.co.kr/cash_size.php?size=412*.***
NA070 pay.codeclinic.co.kr/npay/dcash/hp/js/Commo*.***
NA071 pay.codeclinic.co.kr/npay/dcash/hp/js/Star*.***
NA072 pay.codeclinic.co.kr/npay/dcash/hp/Start.php3?pid=rclean&mc=000**.***
NA073 pay.codeclinic.co.kr/payment.php?pid=rclean&mc=000C293E*.***
NA074 pay.codeclinic.co.kr/year/dcash/ars/js/Commo*.***
NA075 pay.codeclinic.co.kr/year/dcash/ars/js/Star*.***
NA076 pay.codeclinic.co.kr/year/dcash/ars/year_start.php?pid=rclean&m**.***
NA077 pay.privacyclear.co.kr/npay/dcash/hp/js/Commo*.***
NA078 pay.privacyclear.co.kr/npay/dcash/hp/js/Star*.***
NA079 pay.privacyclear.co.kr/npay/dcash/hp/Start.php3?pid=fileeye&mc=**.***
NA080 pay.privacyclear.co.kr/npay/dcash/hp/Start.php3?pid=fileeye&mc=**.***
NA081 pay.privacyclear.co.kr/payment.php?sncode=MDAwYzI5M2VjZDdm&pid=**.***
NA082 pay.privacycut.com/cash_size.php?size=400*.***
NA083 pay.privacycut.com/cash_size.php?size=400*.***
NA084 pay.privacycut.com/npay2/dcash/hp/css/style_m*.***
NA085 pay.privacycut.com/npay2/dcash/hp/images/btn_next*.***
NA086 pay.privacycut.com/npay2/dcash/hp/images/btn_view*.***
NA087 pay.privacycut.com/npay2/dcash/hp/images/logo_m*.***
NA088 pay.privacycut.com/npay2/dcash/hp/js/Commo*.***
NA089 pay.privacycut.com/npay2/dcash/hp/js/Star*.***
NA090 pay.privacycut.com/npay2/dcash/hp/Notice/Agreement/agreement02.**.***
NA091 pay.privacycut.com/npay2/dcash/hp/Start.php3?pid=priu29&mc=000c**.***
NA092 pay.privacycut.com/payment.php?sncode=000c293ecd7f&pid=pr*.***
NA093 pay.protectkeep.com/images/bg_02*.***
NA094 pay.protectkeep.com/images/bg_02*.***
NA095 pay.protectkeep.com/images/bg_03*.***
NA096 pay.protectkeep.com/images/bg_03*.***
NA097 pay.protectkeep.com/images/btn_bill*.***
NA098 pay.protectkeep.com/images/btn_bill*.***
NA099 pay.protectkeep.com/images/btn_sm1*.***
NA100 pay.protectkeep.com/images/btn_sm1*.***
NA101 pay.protectkeep.com/images/btn_sm2*.***
NA102 pay.protectkeep.com/images/btn_sm2*.***
NA103 pay.protectkeep.com/images/ico_a*.***
NA104 pay.protectkeep.com/images/ico_a*.***
NA105 pay.protectkeep.com/images/pay_01*.***
NA106 pay.protectkeep.com/images/pay_04_01*.***
NA107 pay.protectkeep.com/images/pay_04_05*.***
NA108 pay.protectkeep.com/npay/dcash/ars/js/Commo*.***
NA109 pay.protectkeep.com/npay/dcash/ars/js/Star*.***
NA110 pay.protectkeep.com/npay/dcash/hp/js/Commo*.***
NA111 pay.protectkeep.com/npay/dcash/hp/js/Star*.***
NA112 pay.protectkeep.com/npay/dcash/hp/Start.php3?pid=ptkp84&mc=000c**.***
NA113 pay.protectkeep.com/npay/dcash/hp/style*.***
NA114 pay.protectkeep.com/payment.php?sncode=000c293ecd7f&pid=pt*.***
NA115 pay.protectkeep.com/year/dcash/ars/style*.***
NA116 pay.protectkeep.com/year/dcash/ars/year_start.php?mc=000c293ecd**.***
NA117 pay.protectkeep.com/year/dcash/hp/year_start.php?pid=ptkp84&mc=**.***
NA118 pay.protectkeep.com/year_payment.php?sncode=000c293ecd7f&pid=pt**.***
NA119 pay.protect-top.co.kr/images/bg_02*.***
NA120 pay.protect-top.co.kr/images/bg_03*.***
NA121 pay.protect-top.co.kr/images/btn_bill*.***
NA122 pay.protect-top.co.kr/images/ico_a*.***
NA123 pay.protect-top.co.kr/images/pay_01*.***
NA124 pay.protect-top.co.kr/npay/dcash/hp/js/Commo*.***
NA125 pay.protect-top.co.kr/npay/dcash/hp/js/Star*.***
NA126 pay.protect-top.co.kr/npay/dcash/hp/Start.php3?pid=windowwizard**.***
NA127 pay.protect-top.co.kr/npay/dcash/hp/Start.php3?pid=windowwizard**.***
NA128 pay.protect-top.co.kr/npay/dcash/hp/style*.***
NA129 pay.protect-top.co.kr/payment.php?sncode=MDAwYzI5M2VjZDdm&pid=w**.***
NA130 pay.yacson.co.kr/npay/dcash/images/img_bill_10*.***
NA131 privacyclear.co.kr/apps/applog.php?kind=run&pid=fil*.***
NA132 privacyclear.co.kr/favicon*.***
NA133 privacyclear.co.krprivacyclear.co.kr/apps/appset.php?pid**.***
NA134 privacyclear.co.krprivacyclear.co.kr/apps/appset.php?pid**.***
NA135 privacyclear.co.krprivacyclear.co.kr/apps/licensechk.php**.***
NA136 privacyclear.co.krprivacyclear.co.kr/apps/licensechk.php**.***
NA137 privacycut.com/app/applog.php?kind=run&pid=pr*.***
NA138 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA139 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA140 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA141 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA142 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA143 privacycut.comprivacycut.com/app/appset.php?pid=pr*.***
NA144 privacycut.comprivacycut.com/app/licensechk.php?sncode=0**.***
NA145 privacycut.comprivacycut.com/app/licensechk.php?sncode=0**.***
NA146 protectkeep.com/app/count.php?kind=run&pid=pt*.***
NA147 protectkeep.com/favicon*.***
NA148 protectkeep.comprotectkeep.com/app/app_set.php?pid=ptkp8**.***
NA149 protectkeep.comprotectkeep.com/app/licensechk.php?sncode**.***
NA150 protectkeep.comprotectkeep.com/app/licensechk.php?sncode**.***
NA151 protect-top.co.kr/apps/applog.php?kind=run&pid=windowwi*.***
NA152 protect-top.co.kr/favicon*.***
NA153 protect-top.co.krprotect-top.co.kr/apps/appset.php?pid=w**.***
NA154 protect-top.co.krprotect-top.co.kr/apps/appset.php?pid=w**.***
NA155 protect-top.co.krprotect-top.co.kr/apps/licensechk.php?s**.***
NA156 protect-top.co.krprotect-top.co.kr/apps/licensechk.php?s**.***
NA157 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA158 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA159 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA160 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA161 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA162 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA163 stats.hubgate.co.kr/app/config.php?kind=update&pid=dbgo&ver=&ad**.***
NA164 update.badakencoder.com/updatechk/badakcodecpack_2010_v3*.***
NA165 update.badakencoder.com/updatechk/badakencoder_201012_v4*.***
NA166 update.codeclinic.co.kr/Update_ini/CodeClinic/autoupdate*.***
NA167 update.desktopnote.co.kr/qrcode/qrcode_instchk*.***
NA168 update.privacyclear.co.kr/partner/partner_info*.***
NA169 update.privacyclear.co.kr/update_data*.***
NA170 update.privacyclear.co.kr/version*.***
NA171 update.privacycut.com/partner/partner_info*.***
NA172 update.privacycut.com/update_data*.***
NA173 update.privacycut.com/version*.***
NA174 update.protectkeep.com/partner/partner_info*.***
NA175 update.protectkeep.com/update_data*.***
NA176 update.protectkeep.com/version*.***
NA177 update.protect-top.co.kr/instchk/instchk_self*.***
NA178 update.protect-top.co.kr/partner/partner_info*.***
NA179 update.protect-top.co.kr/update_data*.***
NA180 update.protect-top.co.kr/version*.***
NA181 update.startools.co.kr/update_2011/startools/startools_2011.php**.***
NA182 update.vaccinestar.co.kr/installchk/vaccinestar_instchk_self.ph**.***
NA183 update.walarm.co.kr/walarm/svr*.***
NA184 utilzone.topguide.co.kr/except2*.***
NA185 utilzone.topguide.co.kr/priority*.***
NA186 utilzone.topguide.co.kr/update/UZ68/UtilZone*.***
NA187 winpro.sideon.co.kr/ex*.***
NA188 winpro.sideon.co.kr/except*.***
NA189 winpro.sideon.co.kr/update/WP35/WinPro*.***
NA190 ww*.fileeye.co.kr/updater/fileeye2010_update*.***
NA191 ww*.msftncsi.com/ncsi*.***
NA192 ww*.naver.*.***
NA193 ww*.pcclear.co.kr/app/tip/plus_oneclickscan_02.*.***
NA194 ww*.pcclear.co.kr/app/tip/plus_spywarescan_02.*.***
NA195 ww*.totallog.co.kr/log/?modeAct=norun&imac=000c293ecd7f&icode=n**.***
NA196 ww*.totallog.co.kr/log/?modeAct=run&imac=000c293ecd7f&icode=neb**.***
NA197 xml.totallog.co.kr/xml.php?xcode=X00*.***
NA198 xml.totallog.co.kr/xml.php?xcode=X00*.***
----------------------------------------------------------------------
[00-PROCESS]**ancamcorderupdate -/- C:\Program Files\AHNSOFT\AnCamCorder\ancamcorderupdate.exe
[00-PROCESS]**badakcodecpack -/- C:\Program Files\badak multicodec\badakcodecpack.exe
[00-PROCESS]**Badakencoder_update -/- C:\Program Files\BadakEncoder\Badakencoder_update.exe
[00-PROCESS]**BasicSafe -/- C:\Program Files\BasicSafe\BasicSafe.exe
[00-PROCESS]**cntflav -/- C:\Windows\cntflav.exe
[00-PROCESS]**CodeClinic -/- C:\Program Files\CodeClinic\CodeClinic.exe
[00-PROCESS]**DBGOLottoT -/- C:\Program Files\DBGOLotto\DBGOLottoT.exe
[00-PROCESS]**ezenjoy -/- C:\Program Files\ezenjoy\ezenjoy.exe
[00-PROCESS]**fileeyeupdater -/- C:\Program Files\FileEye\fileeyeupdater.exe
[00-PROCESS]**HubGateUpdate -/- C:\Users\Administrator\AppData\Roaming\HubGate\HubGateUpdate.exe
[00-PROCESS]**infocard -/- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
[00-PROCESS]**keywordtabhper -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabhper.exe
[00-PROCESS]**KeywordTabopen -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\KeywordTabopen.exe
[00-PROCESS]**keywordtabopen -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabopen.exe
[00-PROCESS]**keywordtabup -/- c:\Users\Administrator\appdata\roaming\keywordtab\keywordtabup.exe
[00-PROCESS]**linkdirectT -/- C:\Program Files\LinkDirect\linkdirectT.exe
[00-PROCESS]**LottoUpdate -/- C:\Program Files\DBGOLotto\LottoUpdate.exe
[00-PROCESS]**oneups -/- C:\Program Files\windowtomgr\oneups.exe
[00-PROCESS]**opentabup -/- C:\Program Files\KeywordTab\opentabup.exe
[00-PROCESS]**PatchUpPlus -/- C:\Program Files\PatchUp_Plus\PatchUpPlus.exe
[00-PROCESS]**PCClearPlus -/- C:\Program Files\PCClearPlus\PCClearPlus.exe
[00-PROCESS]**PresentationFontCache -/- C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
[00-PROCESS]**PrivacyClear -/- C:\Program Files\PrivacyClear\PrivacyClear.exe
[00-PROCESS]**PrivacyClearMtr -/- C:\Program Files\PrivacyClear\PrivacyClearMtr.exe
[00-PROCESS]**PrivacyClearuck -/- C:\Program Files\PrivacyClear\PrivacyClearuck.exe
[00-PROCESS]**PrivacyCut -/- C:\Program Files\PrivacyCut\PrivacyCut.exe
[00-PROCESS]**PrivacyCutMtr -/- C:\Program Files\PrivacyCut\PrivacyCutMtr.exe
[00-PROCESS]**PrivacyCutuck -/- C:\Program Files\PrivacyCut\PrivacyCutuck.exe
[00-PROCESS]**ProtectKeep -/- C:\Program Files\ProtectKeep\ProtectKeep.exe
[00-PROCESS]**ProtectKeepMtr -/- C:\Program Files\ProtectKeep\ProtectKeepMtr.exe
[00-PROCESS]**ProtectKeepuck -/- C:\Program Files\ProtectKeep\ProtectKeepuck.exe
[00-PROCESS]**ProtectTop -/- C:\Program Files\ProtectTop\ProtectTop.exe
[00-PROCESS]**ProtectTopMtr -/- C:\Program Files\ProtectTop\ProtectTopMtr.exe
[00-PROCESS]**ProtectTopuck -/- C:\Program Files\ProtectTop\ProtectTopuck.exe
[00-PROCESS]**QRCode -/- C:\Program Files\Window QRCode\QRCode.exe
[00-PROCESS]**QRCodeUp -/- C:\Program Files\Window QRCode\QRCodeUp.exe
[00-PROCESS]**RCleanT -/- C:\Program Files\RClean\RCleanT.exe
[00-PROCESS]**RCleanUpdate -/- C:\Program Files\RClean\RCleanUpdate.exe
[00-PROCESS]**rundll32 -/- \rundll32.exe
[00-PROCESS]**starpdfup -/- C:\Program Files\STARtools\StarPDF\starpdfup.exe
[00-PROCESS]**starseeup -/- C:\Program Files\STARtools\StarSee\starseeup.exe
[00-PROCESS]**STARUpdate -/- C:\Program Files\STARtools\StarToolsUP\STARUpdate.exe
[00-PROCESS]**starzipup -/- C:\Program Files\STARtools\StarZip\starzipup.exe
[00-PROCESS]**TPAutoConnSvc -/- C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe
[00-PROCESS]**update -/- C:\Program Files\Window Alarm\update.exe
[00-PROCESS]**UpdatePlus -/- C:\Program Files\PatchUp_Plus\UpdatePlus.exe
[00-PROCESS]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[00-PROCESS]**VaccineStar -/- C:\Program Files\VaccineStar\VaccineStar.exe
[00-PROCESS]**VMwareService -/- C:\Program Files\VMware\VMware Tools\VMwareService.exe
[00-PROCESS]**VMwareTray -/- C:\Program Files\VMware\VMware Tools\VMwareTray.exe
[00-PROCESS]**VMwareUser -/- C:\Program Files\VMware\VMware Tools\VMwareUser.exe
[00-PROCESS]**vsupsvc -/- C:\Program Files\wins promgr\vsupsvc.exe
[00-PROCESS]**WebtoonRoom_Update -/- C:\Program Files\WebtoonRoom\WebtoonRoom_Update.exe
[00-PROCESS]**WinAlarmUp -/- C:\Program Files\Window Alarm\WinAlarmUp.exe
[00-PROCESS]**WindowWizardT -/- C:\Program Files\WindowWizard\WindowWizardT.exe
[00-PROCESS]**winesrv -/- C:\Program Files\Windows Everlive\winesrv.exe
[00-PROCESS]**winever -/- C:\Program Files\Windows Everlive\winever.exe
[00-PROCESS]**WinPro -/- C:\Program Files\WinPro\WinPro.exe
[00-PROCESS]**WinProUp -/- C:\Program Files\WinPro\WinProUp.exe
[00-PROCESS]**WinWizardUpdater -/- C:\Program Files\WindowWizard\WinWizardUpdater.exe
[00-PROCESS]**wmpnetwk -/- C:\Program Files\Windows Media Player\wmpnetwk.exe
[01-HKCUREG]**badakcodecpack -/- C:\Program Files\badak multicodec\badakcodecpack.exe -o
[01-HKCUREG]**DBGOLottoT -/- C:\Program Files\DBGOLotto\DBGOLottoT.exe -o
[01-HKCUREG]**DBGOLottoU -/- C:\Program Files\DBGOLotto\LottoUpdate.exe /up
[01-HKCUREG]**Disker -/- rundll32.exe C:\Windows\system32\HIMYM.DLLDW
[01-HKCUREG]**ezenjoy -/- C:\Program Files\ezenjoy\ezenjoy.exe -o
[01-HKCUREG]**fileeye -/- C:\Program Files\FileEye\fileeyeupdater.exe -o
[01-HKCUREG]**finetopup -/- C:\Program Files\FineTop\FineTopUp.exe -o
[01-HKCUREG]**keywordtab -/- c:\Users\Administrator\appdata\roaming\keywordtab\keywordtabup.exe
[01-HKCUREG]**keywordtabhper -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabhper.exe
[01-HKCUREG]**keywordtabopen -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabopen.exe
[01-HKCUREG]**linkdirectmain -/- C:\Program Files\LinkDirect\linkdirectT.exe -o
[01-HKCUREG]**opentabup -/- C:\Program Files\KeywordTab\opentabup.exe -o
[01-HKCUREG]**PatchUp_Plus -/- C:\Program Files\PatchUp_Plus\UpdatePlus.exe -r
[01-HKCUREG]**PCClearPlus -/- C:\Program Files\PCClearPlus\PCClearPlus.exe /shide
[01-HKCUREG]**PrivacyClear -/- C:\Program Files\PrivacyClear\PrivacyClear.exe /run1
[01-HKCUREG]**PrivacyCut -/- C:\Program Files\PrivacyCut\PrivacyCut.exe /run1
[01-HKCUREG]**ProtectKeep -/- C:\Program Files\ProtectKeep\ProtectKeep.exe /run1
[01-HKCUREG]**ProtectTop -/- C:\Program Files\ProtectTop\ProtectTop.exe /run1
[01-HKCUREG]**RCleanMain -/- C:\Program Files\RClean\RCleanT.exe -o
[01-HKCUREG]**RCleanUp -/- C:\Program Files\RClean\RCleanUpdate.exe /up
[01-HKCUREG]**startoolsup -/- C:\Program Files\STARtools\StarToolsUP\STARUpdate.exe -o
[01-HKCUREG]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[01-HKCUREG]**UtilZoneUp -/- C:\Program Files\UtilZone\UtilZoneUp /start
[01-HKCUREG]**VMware Tools -/- C:\Program Files\VMware\VMware Tools\VMwareTray.exe
[01-HKCUREG]**VMware User Process -/- C:\Program Files\VMware\VMware Tools\VMwareUser.exe
[01-HKCUREG]**WebtoonRoom -/- C:\Program Files\WebtoonRoom\WebtoonRoom_Update.exe -r
[01-HKCUREG]**windowtomgr -/- C:\Program Files\windowtomgr\oneups.exe
[01-HKCUREG]**windowwizard -/- C:\Program Files\WindowWizard\WindowWizardT.exe -o
[01-HKCUREG]**windowwizardup -/- C:\Program Files\WindowWizard\WinWizardUpdater.exe /wo
[01-HKCUREG]**WinPro -/- C:\Program Files\WinPro\WinPro.exe
[01-HKCUREG]**WinProUp -/- C:\Program Files\WinPro\WinProUp.exe /start
[01-HKCUREG]**wins promgr -/- C:\Program Files\wins promgr\vsupsvc.exe
[02-HKLMREG]**badakcodecpack -/- C:\Program Files\badak multicodec\badakcodecpack.exe -o
[02-HKLMREG]**DBGOLottoT -/- C:\Program Files\DBGOLotto\DBGOLottoT.exe -o
[02-HKLMREG]**DBGOLottoU -/- C:\Program Files\DBGOLotto\LottoUpdate.exe /up
[02-HKLMREG]**Disker -/- rundll32.exe C:\Windows\system32\HIMYM.DLLDW
[02-HKLMREG]**ezenjoy -/- C:\Program Files\ezenjoy\ezenjoy.exe -o
[02-HKLMREG]**fileeye -/- C:\Program Files\FileEye\fileeyeupdater.exe -o
[02-HKLMREG]**finetopup -/- C:\Program Files\FineTop\FineTopUp.exe -o
[02-HKLMREG]**keywordtab -/- c:\Users\Administrator\appdata\roaming\keywordtab\keywordtabup.exe
[02-HKLMREG]**keywordtabhper -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabhper.exe
[02-HKLMREG]**keywordtabopen -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordtabopen.exe
[02-HKLMREG]**linkdirectmain -/- C:\Program Files\LinkDirect\linkdirectT.exe -o
[02-HKLMREG]**opentabup -/- C:\Program Files\KeywordTab\opentabup.exe -o
[02-HKLMREG]**PatchUp_Plus -/- C:\Program Files\PatchUp_Plus\UpdatePlus.exe -r
[02-HKLMREG]**PCClearPlus -/- C:\Program Files\PCClearPlus\PCClearPlus.exe /shide
[02-HKLMREG]**PrivacyClear -/- C:\Program Files\PrivacyClear\PrivacyClear.exe /run1
[02-HKLMREG]**PrivacyCut -/- C:\Program Files\PrivacyCut\PrivacyCut.exe /run1
[02-HKLMREG]**ProtectKeep -/- C:\Program Files\ProtectKeep\ProtectKeep.exe /run1
[02-HKLMREG]**ProtectTop -/- C:\Program Files\ProtectTop\ProtectTop.exe /run1
[02-HKLMREG]**RCleanMain -/- C:\Program Files\RClean\RCleanT.exe -o
[02-HKLMREG]**RCleanUp -/- C:\Program Files\RClean\RCleanUpdate.exe /up
[02-HKLMREG]**startoolsup -/- C:\Program Files\STARtools\StarToolsUP\STARUpdate.exe -o
[02-HKLMREG]**UtilZone -/- C:\Program Files\UtilZone\UtilZone.exe
[02-HKLMREG]**UtilZoneUp -/- C:\Program Files\UtilZone\UtilZoneUp /start
[02-HKLMREG]**VMware Tools -/- C:\Program Files\VMware\VMware Tools\VMwareTray.exe
[02-HKLMREG]**VMware User Process -/- C:\Program Files\VMware\VMware Tools\VMwareUser.exe
[02-HKLMREG]**WebtoonRoom -/- C:\Program Files\WebtoonRoom\WebtoonRoom_Update.exe -r
[02-HKLMREG]**windowtomgr -/- C:\Program Files\windowtomgr\oneups.exe
[02-HKLMREG]**windowwizard -/- C:\Program Files\WindowWizard\WindowWizardT.exe -o
[02-HKLMREG]**windowwizardup -/- C:\Program Files\WindowWizard\WinWizardUpdater.exe /wo
[02-HKLMREG]**WinPro -/- C:\Program Files\WinPro\WinPro.exe
[02-HKLMREG]**WinProUp -/- C:\Program Files\WinPro\WinProUp.exe /start
[02-HKLMREG]**wins promgr -/- C:\Program Files\wins promgr\vsupsvc.exe
[03-BHOCLSD]**{1C5099DD-7923-45e8-9680-5F285DC61213} -/- C:\Program Files\UtilZone\UtilZone.dll
[03-BHOCLSD]**{339E5541-DA75-412A-9F9B-3C014BE1050B} -/- C:\Program Files\WinPro\WinPro.dll
[03-BHOCLSD]**{98D68C3C-CF16-4CA8-BBDB-11E0EDB62E36} -/- C:\Users\Administrator\AppData\Roaming\KeywordTab\keywordTab.dll
[03-BHOCLSD]**{E7A20F9D-BA43-43D8-A2E0-CE28D763EF72} -/- C:\Users\Administrator\AppData\Roaming\HubGate\HubGate.dll
[04-TOOLBAR]**{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF} -/- N.A
[05-SERVICE]**NetTcpPortSharing -/- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
[05-SERVICE]**PerfHost -/- C:\Windows\system32\perfhost.exe
[05-SERVICE]**TPAutoConnSvc -/- C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe
[05-SERVICE]**VMTools -/- C:\Program Files\VMware\VMware Tools\VMwareService.exe
[05-SERVICE]**vmvss -/- C:\Windows\system32\dllhost.exe
[05-SERVICE]**winesrv32 -/- C:\Program Files\Windows Everlive\winesrv.exe

----------------------------------------------------------------------
Deleted Files : 11
Remove Service : 1
Remove Uninstall Entry : 1
Remove Startup Entry : 32
Remove Browser Helper Object : 4
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2012-11-11
[01-HKCUREG]**PrivacyClear
[01-HKCUREG]**linkdirectmain
[01-HKCUREG]**startoolsup
[01-HKCUREG]**WebtoonRoom
[01-HKCUREG]**opentabup
[01-HKCUREG]**keywordtabopen
[01-HKCUREG]**keywordtabhper
[01-HKCUREG]**keywordtab
[01-HKCUREG]**PrivacyCut
[01-HKCUREG]**Disker
[01-HKCUREG]**ProtectKeep
[01-HKCUREG]**finetopup
[01-HKCUREG]**ezenjoy
[01-HKCUREG]**DBGOLottoT
[01-HKCUREG]**windowtomgr
[01-HKCUREG]**wins promgr
[01-HKCUREG]**DBGOLottoU
[01-HKCUREG]**ProtectTop
[01-HKCUREG]**WinProUp
[01-HKCUREG]**UtilZoneUp
[02-HKLMREG]**PatchUp_Plus
[02-HKLMREG]**fileeye
[02-HKLMREG]**windowwizard
[02-HKLMREG]**RCleanMain
[02-HKLMREG]**PCClearPlus
[02-HKLMREG]**windowwizardup
[02-HKLMREG]**badakcodecpack
[02-HKLMREG]**windowtomgr
[02-HKLMREG]**wins promgr
[02-HKLMREG]**RCleanUp
[02-HKLMREG]**WinPro
[02-HKLMREG]**UtilZone
[03-BHOCLSD]**{1C5099DD-7923-45e8-9680-5F285DC61213}
[03-BHOCLSD]**{339E5541-DA75-412A-9F9B-3C014BE1050B}
[03-BHOCLSD]**{98D68C3C-CF16-4CA8-BBDB-11E0EDB62E36}
[03-BHOCLSD]**{E7A20F9D-BA43-43D8-A2E0-CE28D763EF72}
[05-SERVICE]**winesrv32
----------------------------------------------------------------------
Total Processing Time : 680ms
----------------------------------------------------------------------