프로그램분석

Code : hM31O00qqoqYmCA5GrktktuAC6zwUU8Yeo9USslhwDw=

프로세스 천국 2013. 3. 18. 01:45

NA000 ======================================================================
NA001 echo Created by Windowexe.com / do not delete this label.
NA002 ======================================================================
NA003 echo Start
NA004 echo windowexe.com & tskill "infoconditionalreset" & echo windowdel.com
NA005 echo windowexe.com & tskill "WizSearch" & echo windowdel.com
NA006 echo windowexe.com & tskill "WinPro" & echo windowdel.com
NA007 echo windowexe.com & tskill "winspsv" & echo windowdel.com
NA008 echo windowexe.com & tskill "winspop" & echo windowdel.com
NA009 echo windowexe.com & tskill "nassvc" & echo windowdel.com
NA010 echo windowexe.com & tskill "nasclt" & echo windowdel.com
NA011 echo windowexe.com & tskill "WindInSe" & echo windowdel.com
NA012 echo windowexe.com & tskill "WindInD" & echo windowdel.com
NA013 echo windowexe.com & tskill "WindInC" & echo windowdel.com
NA014 echo windowexe.com & tskill "wepop" & echo windowdel.com
NA015 echo windowexe.com & tskill "UtilZone" & echo windowdel.com
NA016 echo windowexe.com & tskill "updatime" & echo windowdel.com
NA017 echo windowexe.com & tskill "SpellerSvc" & echo windowdel.com
NA018 echo windowexe.com & tskill "sup" & echo windowdel.com
NA019 echo windowexe.com & tskill "SNUpdate" & echo windowdel.com
NA020 echo windowexe.com & tskill "RaclSvc" & echo windowdel.com
NA021 echo windowexe.com & tskill "PanProcess" & echo windowdel.com
NA022 echo windowexe.com & tskill "PandoraService" & echo windowdel.com
NA023 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA024 echo windowexe.com & tskill "lpupdate" & echo windowdel.com
NA025 echo windowexe.com & tskill "liveplus" & echo windowdel.com
NA026 echo windowexe.com & tskill "linkdoumiagent" & echo windowdel.com
NA027 echo windowexe.com & tskill "linkdoumi" & echo windowdel.com
NA028 echo windowexe.com & tskill "kpupdate" & echo windowdel.com
NA029 echo windowexe.com & tskill "WinKeyword_Up" & echo windowdel.com
NA030 echo windowexe.com & tskill "WinKeyword" & echo windowdel.com
NA031 echo windowexe.com & tskill "keywordpop" & echo windowdel.com
NA032 echo windowexe.com & tskill "keypang" & echo windowdel.com
NA033 echo windowexe.com & tskill "IETab" & echo windowdel.com
NA034 echo windowexe.com & tskill "IESide" & echo windowdel.com
NA035 echo windowexe.com & tskill "cobache" & echo windowdel.com
NA036 echo windowexe.com & tskill "barosvc" & echo windowdel.com
NA037 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA038 echo windowexe.com & tskill "adsup" & echo windowdel.com
NA039 echo windowexe.com & tskill "adhelp" & echo windowdel.com
NA040 echo windowexe.com & tskill "windowviewconup" & echo windowdel.com
NA041 echo windowexe.com & tskill "windowviewcon" & echo windowdel.com
NA042 echo windowexe.com & tskill "windowsphup" & echo windowdel.com
NA043 echo windowexe.com & tskill "windowsph" & echo windowdel.com
NA044 echo windowexe.com & tskill "update" & echo windowdel.com
NA045 echo windowexe.com & tskill "toastpop" & echo windowdel.com
NA046 echo windowexe.com & tskill "FBDSvcMan" & echo windowdel.com
NA047 echo windowexe.com & tskill "FBDManager" & echo windowdel.com
NA048 echo windowexe.com & tskill "MicroProProc" & echo windowdel.com
NA049 echo windowexe.com & tskill "MicroProCon" & echo windowdel.com
NA050 echo windowexe.com & tskill "HubGate" & echo windowdel.com
NA051 echo windowexe.com & tskill "GuardConvert" & echo windowdel.com
NA052 echo windowexe.com & tskill "filedoumiuphp" & echo windowdel.com
NA053 echo windowexe.com & tskill "FileDoumiUpgrade" & echo windowdel.com
NA054 echo windowexe.com & tskill "FileDoumiiconms" & echo windowdel.com
NA055 echo windowexe.com & tskill "update" & echo windowdel.com
NA056 echo windowexe.com & tskill "HubGateUpdate" & echo windowdel.com
NA057 echo windowexe.com & tskill "HubGate" & echo windowdel.com
NA058 echo windowexe.com & tskill "winspst" & echo windowdel.com
NA059 echo windowexe.com & tskill "WebConfig" & echo windowdel.com
NA060 echo windowexe.com & tskill "pinkoceans" & echo windowdel.com
NA061 echo windowexe.com & tskill "pinkocean" & echo windowdel.com
NA062 echo windowexe.com & tskill "gmktshortcut" & echo windowdel.com
NA063 echo windowexe.com & tskill "appis" & echo windowdel.com
NA064 echo windowexe.com & tskill "appis" & echo windowdel.com
NA065 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA066 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA067 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA068 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA069 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA070 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA071 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA072 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA073 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA074 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA075 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA076 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA077 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AhnLab V3Lite Update Process" /f
NA078 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AhnLab V3Lite Update Process" /f
NA079 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wepop" /f
NA080 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wepop" /f
NA081 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Kp" /f
NA082 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Kp" /f
NA083 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "adhelp.exe" /f
NA084 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "adhelp.exe" /f
NA085 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA086 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "appis.exe" /f
NA087 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA088 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "update.exe" /f
NA089 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA090 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SearchN" /f
NA091 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "keywordpop.exe" /f
NA092 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "keywordpop.exe" /f
NA093 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "liveplus" /f
NA094 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "liveplus" /f
NA095 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "cobache" /f
NA096 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "cobache" /f
NA097 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA098 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA099 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "IETab" /f
NA100 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "IETab" /f
NA101 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA102 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA103 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "updatime" /f
NA104 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "updatime" /f
NA105 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "adsup.exe" /f
NA106 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "adsup.exe" /f
NA107 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
NA108 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Racl" /f
NA109 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "searchup" /f
NA110 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "searchup" /f
NA111 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA112 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SpeedDownload" /f
NA113 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Speller" /f
NA114 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Speller" /f
NA115 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinKeyword" /f
NA116 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinKeyword" /f
NA117 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinKeyword_Up" /f
NA118 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinKeyword_Up" /f
NA119 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WebConfig" /f
NA120 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WebConfig" /f
NA121 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "gmktshortcut" /f
NA122 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "gmktshortcut" /f
NA123 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windin" /f
NA124 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windin" /f
NA125 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "IESide" /f
NA126 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "IESide" /f
NA127 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WizSearch" /f
NA128 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WizSearch" /f
NA129 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA130 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowviewcon" /f
NA131 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WindowsPurchaseHelper" /f
NA132 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WindowsPurchaseHelper" /f
NA133 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA134 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA135 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FDoumiup2Start" /f
NA136 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FDoumiup2Start" /f
NA137 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FDoumiStart" /f
NA138 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FDoumiStart" /f
NA139 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdoumiagent" /f
NA140 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdoumiagent" /f
NA141 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdoumi" /f
NA142 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdoumi" /f
NA143 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA144 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toastpop" /f
NA145 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA146 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA147 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA148 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA149 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA150 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA151 echo Created by Windowexe.com
NA152 sc stop "winspsv32"
NA153 echo Service Disable & sc config "winspsv32" start= disabled & echo Windowexe.com
NA154 sc stop "vaccinedoctor Update Service"
NA155 echo Service Disable & sc config "vaccinedoctor Update Service" start= disabled & echo Windowexe.com
NA156 sc stop "pinkocean"
NA157 echo Service Disable & sc config "pinkocean" start= disabled & echo Windowexe.com
NA158 sc stop "pcsystem Update Service"
NA159 echo Service Disable & sc config "pcsystem Update Service" start= disabled & echo Windowexe.com
NA160 sc stop "PanService"
NA161 echo Service Disable & sc config "PanService" start= disabled & echo Windowexe.com
NA162 sc stop "NATService"
NA163 echo Service Disable & sc config "NATService" start= disabled & echo Windowexe.com
NA164 sc stop "nassvc"
NA165 echo Service Disable & sc config "nassvc" start= disabled & echo Windowexe.com
NA166 sc stop "FBDSvcman"
NA167 echo Service Disable & sc config "FBDSvcman" start= disabled & echo Windowexe.com
NA168 sc stop "barocn"
NA169 echo Service Disable & sc config "barocn" start= disabled & echo Windowexe.com
NA170 echo schtasks Delete & schtasks /delete /tn "HubGateUpdate" /f
NA171 echo Created by Windowexe.com
NA172 echo schtasks Delete & schtasks /delete /tn "HubGate" /f
NA173 echo Created by Windowexe.com
NA174 echo schtasks Delete & schtasks /delete /tn "AppIsUpdate" /f
NA175 echo Created by Windowexe.com
NA176 echo schtasks Delete & schtasks /delete /tn "AppIs" /f
NA177 echo Created by Windowexe.com
NA178 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\HubGateUpdate.job"
NA179 echo Created by Windowexe.com
NA180 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\HubGate.job"
NA181 echo Created by Windowexe.com
NA182 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\AppIsUpdate.job"
NA183 echo Created by Windowexe.com
NA184 echo 000 & reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /d "" /f & echo windowdel.com
NA185 echo Created by Windowexe.com
NA186 echo 000 & reg.exe delete "HKCR\CLSID\{5121BCAB-14D5-40AD-A469-4437CC51F7AA}" /f & echo windowdel.com
NA187 echo Created by Windowexe.com
NA188 echo 000 & reg.exe delete "HKCR\CLSID\{A832F633-668F-4F8A-9EA1-A6375D1C1418}" /f & echo windowdel.com
NA189 echo Created by Windowexe.com
NA190 echo End
NA191 ======================================================================
NA192 echo Created by Windowexe.com / do not delete this label.
NA193 ======================================================================