프로그램분석

Code : pJTNcWmw9Dul25xJ68P7QA==

프로세스 천국 2013. 4. 15. 06:19

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 1,023.55 MB
Intel64 Family 6 Model 37 Stepping 5
Date : 2013-04-15
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\Xvid\autoupdate-windows.exe
DF001 C:\Program Files (x86)\Xvid\AviC.exe
DF002 C:\Program Files (x86)\Xvid\CheckUpdate.exe
DF003 C:\Program Files (x86)\Xvid\MiniCalc.exe
DF004 C:\Program Files (x86)\Xvid\OGMCalc.exe
DF005 C:\Program Files (x86)\Xvid\StatsReader.exe
DF006 C:\Program Files (x86)\Xvid\uninstall.exe
DF007 C:\Program Files (x86)\Xvid\uninstall.exe
DF008 C:\Program Files (x86)\Xvid\vidccleaner.exe
DF009 C:\Users\Administrator\AppData\Local\Temp\xvid_x64\setpriv64.exe
DF010 C:\Users\Administrator\AppData\Local\Temp\xvid_x64\xvidcore.dll
DF011 C:\Users\Administrator\AppData\Local\Temp\xvid_x64\xvidvfw.dll
DF012 C:\Users\Administrator\AppData\Local\Temp\xvid_x86\setpriv32.exe
DF013 C:\Users\Administrator\AppData\Local\Temp\xvid_x86\xvidcore.dll
DF014 C:\Users\Administrator\AppData\Local\Temp\xvid_x86\xvidvfw.dll
DF015 C:\Windows\System32\xvidcore.dll
DF016 C:\Windows\System32\xvidvfw.dll
DF017 C:\Windows\SysWOW64\xvidcore.dll
DF018 C:\Windows\SysWOW64\xvidvfw.dll
----------------------------------------------------------------------
UN021 Xvid Video Codec -/- Xvid Team -/- Xvid Video Codec 1.3.1 -/-  -/-
UN022 RavenBleu -/- Pinball Corporation.  -/- RavenBleuSA -/- hxxp://www.ravenbleu.com -/- hxxp://www.ravenbleu.com/support.html
TS023 RunAsStdUser Task
----------------------------------------------------------------------
US024 RavenBleuSA -/- C:\Users\Administrator\AppData\Local\RavenBleuSA\bin\1.0.17.0\RavenBleuSA.exe
US025 Xvid -/- C:\Program Files (x86)\Xvid\CheckUpdate.exe
----------------------------------------------------------------------
NA001 a.doktorhappy.com/IC/GPLAppBundler95/45823/2/d5a14790-124a-42e7**.***
NA002 b.doktorhappy.com/gi.aspx?chid=2662752&cid=1315332&con=n&v.meth**.***
NA003 cache-download.real.com/free/windows/mrkt/log.txt?action=offerc**.***
NA004 downloads.ravenbleu.com/actionurls/ActionUrlb.799/ActionUrlb.79**.***
NA005 downloads.ravenbleu.com/keywords/9/kyfb.3363/kyfb.3363.0.gz?par**.***
NA006 downloads.ravenbleu.com/keywords/9/kyfb.3363/kyfb.3363.1.gz?par**.***
NA007 downloads.ravenbleu.com/keywords/9/kyfb.3363/kyfb.3363.2.gz?par**.***
NA008 downloads.ravenbleu.com/keywords/9/kyfb.3363/kyfb.3363.3.gz?par**.***
NA009 img.skyactivate.com/uci/software/bg*.***
NA010 img.skyactivate.com/uci/software/bt_cancel*.***
NA011 img.skyactivate.com/uci/software/bt_next*.***
NA012 img.skyactivate.com/uci/software/dialog-system*.***
NA013 img.skyactivate.com/uci/software/dialog-text-are-you-sure*.***
NA014 img.skyactivate.com/uci/software/logo/xvid*.***
NA015 img.skyactivate.com/uci/software/ravenbleu*.***
NA016 install.skyactivate.com/installer/session/software/2662752/1315**.***
NA017 install.skyactivate.com/installer/zcdownload/5eb001a746ced85278**.***
NA018 install.skyactivate.com/logger/software/hit/2662752/1315332/?v.**.***
NA019 js.skyactivate.com/uci/jquer*.***
NA020 js.skyactivate.com/uci/softwar*.***
NA021 opsdev.checkeven.com/download/zinkwink/1_1/pinball/brand.exe?rn**.***
NA022 s.liteflames.com/InstallUI/AppBundlerIndirect_FMF/222/index.htm**.***
NA023 s.liteflames.com/Software/RavenBleu01/1281/RavenBleuInstaller.e**.***
NA024 s.liteflames.com/Software/Xvid01/469/Xvid.exe?rnd=541*.***
NA025 softops.checklevelsquare.com/?vn=0&mqxs1=4159&rea=20&fk35=77&ci**.***
NA026 softops.checklevelsquare.com/download/basicscan/1_14/basicscan-**.***
NA027 softops.checklevelsquare.com/install.aspx?b=basicscan&d=softops**.***
NA028 xvidfen.biz/script/display*.***
----------------------------------------------------------------------
Deleted Files : 19
Remove Uninstall Entry : 4
Remove Startup Entry : 2
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2013-04-15
[01-HKCUREG]**RavenBleuSA
[01-HKCUREG]**Xvid

----------------------------------------------------------------------
Total Processing Time : 48ms
----------------------------------------------------------------------