프로그램분석

Code : cKsvDyJ582BVsEA3gVbzfQviXfAeWVVd

프로세스 천국 2013. 3. 23. 16:04

NA000 ======================================================================
NA001 echo Created by Windowexe.com / do not delete this label.
NA002 ======================================================================
NA003 echo Start
NA004 echo windowexe.com & tskill "entering-se" & echo windowdel.com
NA005 echo windowexe.com & tskill "WinxpendUP_itrs5" & echo windowdel.com
NA006 echo windowexe.com & tskill "ToolOnUpdateKF" & echo windowdel.com
NA007 echo windowexe.com & tskill "taskupsb" & echo windowdel.com
NA008 echo windowexe.com & tskill "UrlUpdate" & echo windowdel.com
NA009 echo windowexe.com & tskill "nnlogon" & echo windowdel.com
NA010 echo windowexe.com & tskill "microservice-se" & echo windowdel.com
NA011 echo windowexe.com & tskill "keywordfindagent" & echo windowdel.com
NA012 echo windowexe.com & tskill "findkey" & echo windowdel.com
NA013 echo windowexe.com & tskill "addmsidebarAgent" & echo windowdel.com
NA014 echo windowexe.com & tskill "addenoptagent" & echo windowdel.com
NA015 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "toolonupdateKF" /f
NA016 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "toolonupdateKF" /f
NA017 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinxpendUP_itrs5" /f
NA018 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinxpendUP_itrs5" /f
NA019 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "findkey.exe" /f
NA020 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "findkey.exe" /f
NA021 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "wcmgr.exe" /f
NA022 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "wcmgr.exe" /f
NA023 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "xMarkTrans" /f
NA024 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "xMarkTrans" /f
NA025 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "NNavigator" /f
NA026 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "NNavigator" /f
NA027 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "addenagent" /f
NA028 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "addenagent" /f
NA029 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "AddmsidebarAgent" /f
NA030 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "AddmsidebarAgent" /f
NA031 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "keywordfindagent" /f
NA032 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "keywordfindagent" /f
NA033 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "KeywordSearchUpdater" /f
NA034 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "KeywordSearchUpdater" /f
NA035 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA036 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA037 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA038 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{AB705622-B25B-491B-A6BF-4A46FDDBC88E}" /f
NA039 echo Created by Windowexe.com
NA040 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA041 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA042 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA043 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA044 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA045 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{C7928CF3-9532-44C0-B8CC-98E2C11ECC9F}" /f
NA046 echo Created by Windowexe.com
NA047 sc stop "xMarkTransSvcman"
NA048 echo Service Disable & sc config "xMarkTransSvcman" start= disabled & echo Windowexe.com
NA049 sc stop "wisepcService"
NA050 echo Service Disable & sc config "wisepcService" start= disabled & echo Windowexe.com
NA051 sc stop "WindowSystem Update Service"
NA052 echo Service Disable & sc config "WindowSystem Update Service" start= disabled & echo Windowexe.com
NA053 sc stop "systemviewservice"
NA054 echo Service Disable & sc config "systemviewservice" start= disabled & echo Windowexe.com
NA055 sc stop "speedclearService"
NA056 echo Service Disable & sc config "speedclearService" start= disabled & echo Windowexe.com
NA057 sc stop "santosjaemi"
NA058 echo Service Disable & sc config "santosjaemi" start= disabled & echo Windowexe.com
NA059 sc stop "rekkard"
NA060 echo Service Disable & sc config "rekkard" start= disabled & echo Windowexe.com
NA061 sc stop "rallea16"
NA062 echo Service Disable & sc config "rallea16" start= disabled & echo Windowexe.com
NA063 sc stop "pilotvob"
NA064 echo Service Disable & sc config "pilotvob" start= disabled & echo Windowexe.com
NA065 sc stop "pcuguww"
NA066 echo Service Disable & sc config "pcuguww" start= disabled & echo Windowexe.com
NA067 sc stop "MPopService"
NA068 echo Service Disable & sc config "MPopService" start= disabled & echo Windowexe.com
NA069 sc stop "microserviceservice"
NA070 echo Service Disable & sc config "microserviceservice" start= disabled & echo Windowexe.com
NA071 sc stop "MicroOn Update Service"
NA072 echo Service Disable & sc config "MicroOn Update Service" start= disabled & echo Windowexe.com
NA073 sc stop "liveupdaterservice"
NA074 echo Service Disable & sc config "liveupdaterservice" start= disabled & echo Windowexe.com
NA075 sc stop "LGuide"
NA076 echo Service Disable & sc config "LGuide" start= disabled & echo Windowexe.com
NA077 sc stop "internetsystem Update Service"
NA078 echo Service Disable & sc config "internetsystem Update Service" start= disabled & echo Windowexe.com
NA079 sc stop "enteringservice"
NA080 echo Service Disable & sc config "enteringservice" start= disabled & echo Windowexe.com
NA081 sc stop "efinderservice"
NA082 echo Service Disable & sc config "efinderservice" start= disabled & echo Windowexe.com
NA083 sc stop "diskscanService"
NA084 echo Service Disable & sc config "diskscanService" start= disabled & echo Windowexe.com
NA085 sc stop "365boan-Service"
NA086 echo Service Disable & sc config "365boan-Service" start= disabled & echo Windowexe.com
NA087 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FF5CBC30-F3C4-4f82-B398-F01FC9A4830C}" /f
NA088 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{FF5CBC30-F3C4-4f82-B398-F01FC9A4830C}" /f
NA089 echo Created by Windowexe.com
NA090 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13862}" /f
NA091 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13862}" /f
NA092 echo Created by Windowexe.com
NA093 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13861}" /f
NA094 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13861}" /f
NA095 echo Created by Windowexe.com
NA096 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13860}" /f
NA097 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{EEEEEEEE-CF2A-4B17-94A8-3DCA71E13860}" /f
NA098 echo Created by Windowexe.com
NA099 echo HKEY_LOCAL_MACHINE EB Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{013BCEA5-8309-448b-8604-85F23D7861A5}" /f
NA100 echo HKCU EB Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Extensions\{013BCEA5-8309-448b-8604-85F23D7861A5}" /f
NA101 echo Created by Windowexe.com
NA102 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\WebCompassUpdate.job"
NA103 echo Created by Windowexe.com
NA104 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\ToolOnKF.job"
NA105 echo Created by Windowexe.com
NA106 echo Tasklist Delete & del /q "C:\WINDOWS\Tasks\IPopUpdate.job"
NA107 echo Created by Windowexe.com
NA108 echo End
NA109 ======================================================================
NA110 echo Created by Windowexe.com / do not delete this label.
NA111 ======================================================================