프로그램분석

Code : UCjwEEGvJV/zVYRpQrwhif/MnbEXZ70I21+6bgAacLoH78Rwcpzw6g==

프로세스 천국 2013. 7. 3. 17:35

[00-PROCESS]**1211684436 -/- C:\Users\Administrator\AppData\Local\Temp\1211684436.exe
[00-PROCESS]**125583645 -/- C:\Users\Administrator\AppData\Local\Temp\125583645.exe
[00-PROCESS]**179013703 -/- C:\Users\Administrator\AppData\Local\Temp\179013703.exe
[00-PROCESS]**1794974046 -/- C:\Users\Administrator\AppData\Local\Temp\1794974046.exe
[00-PROCESS]**1847180744 -/- C:\Users\Administrator\AppData\Local\Temp\1847180744.exe
[00-PROCESS]**A8J4L3A -/- C:\Users\Administrator\AppData\Local\1e2V6O8l3B\A8J4L3A.exe
[00-PROCESS]**AdobeARM -/- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[00-PROCESS]**conhosts -/- C:\Users\Administrator\AppData\conhosts.exe
[00-PROCESS]**dxeuefof -/- c:\ProgramData\dxeuefof.exe
[00-PROCESS]**FlashPlayerUpdateService -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[00-PROCESS]**GbpSv -/- C:\Program Files\GbPlugin\GbpSv.exe
[00-PROCESS]**GrooveAuditService -/- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
[00-PROCESS]**GrooveMonitor -/- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
[00-PROCESS]**iexplore -/- C:\Program Files\Internet Explorer\iexplore.exe
[00-PROCESS]**jucheck -/- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
[00-PROCESS]**jusched -/- C:\Program Files\Common Files\Java\Java Update\jusched.exe
[00-PROCESS]**lsass -/- C:\Win\lsass.exe
[00-PROCESS]**mdm -/- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
[00-PROCESS]**ODSERV -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[00-PROCESS]**ONENOTEM -/- C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
[00-PROCESS]**orbitdm -/- C:\Program Files\Orbitdownloader\orbitdm.exe
[00-PROCESS]**orbitnet -/- C:\Program Files\Orbitdownloader\orbitnet.exe
[00-PROCESS]**OSE -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[00-PROCESS]**Reader_sl -/- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[00-PROCESS]**scpVista -/- C:\Program Files\Scpad\scpVista.exe
[00-PROCESS]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe
[00-PROCESS]**SMSvcHost -/- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
[00-PROCESS]**Updater -/- C:\Program Files\Skype\Updater\Updater.exe
[00-PROCESS]**vbc -/- C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
[00-PROCESS]**vrhost -/- C:\Users\Administrator\AppData\Roaming\vhost\vrhost.exe
[00-PROCESS]**vvrhost -/- C:\Users\Administrator\AppData\Roaming\vhost\vvrhost.exe
[00-PROCESS]**widgets -/- C:\Users\Administrator\AppData\Local\widgets.exe
[00-PROCESS]**WLIDSVC -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
[00-PROCESS]**WLIDSvcM -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
[00-PROCESS]**wmpnetwk -/- C:\Program Files\Windows Media Player\wmpnetwk.exe
[01-HKCUREG]**52106 -/- c:\progra~2\dxeuefof.exe
[01-HKCUREG]**A8J4L3A -/- C:\Users\Administrator\AppData\Local\1e2V6O8l3B\A8J4L3A.exe
[01-HKCUREG]**Adobe ARM -/- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[01-HKCUREG]**Adobe Reader Speed Launcher -/- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[01-HKCUREG]**dmn -/- regsvr32 /s C:\Users\Administrator\AppData\Roaming\USUARIO-PC.jpg
[01-HKCUREG]**GrooveMonitor -/- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
[01-HKCUREG]**inicializar -/- C:\Users\Administrator\AppData\Local\\widgets.exe
[01-HKCUREG]**PSafeTray -/- C:\Program Files\PSafe\PSafeSysTray.exe
[01-HKCUREG]**PSafeWDS -/- C:\Program Files\PSafe\PSafeWDS.exe
[01-HKCUREG]**run32 -/- C:\Win\lsass.exe
[01-HKCUREG]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun
[01-HKCUREG]**SunJavaUpdateSched -/- C:\Program Files\Common Files\Java\Java Update\jusched.exe
[01-HKCUREG]**Tim -/-
[01-HKCUREG]**TrayHabil -/- C:\Program Files\Koinonia Software\Habil for Windows\TrayHabil.exe
[01-HKCUREG]**vhostroute -/- C:\Users\Administrator\AppData\Roaming\vhost\vvrhost.exe
[01-HKCUREG]**win32 -/- C:\Windows\System32\win32\rsysm.exe
[02-HKLMREG]**52106 -/- c:\progra~2\dxeuefof.exe
[02-HKLMREG]**A8J4L3A -/- C:\Users\Administrator\AppData\Local\1e2V6O8l3B\A8J4L3A.exe
[02-HKLMREG]**Adobe ARM -/- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[02-HKLMREG]**Adobe Reader Speed Launcher -/- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[02-HKLMREG]**dmn -/- regsvr32 /s C:\Users\Administrator\AppData\Roaming\USUARIO-PC.jpg
[02-HKLMREG]**GrooveMonitor -/- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
[02-HKLMREG]**inicializar -/- C:\Users\Administrator\AppData\Local\\widgets.exe
[02-HKLMREG]**PSafeTray -/- C:\Program Files\PSafe\PSafeSysTray.exe
[02-HKLMREG]**PSafeWDS -/- C:\Program Files\PSafe\PSafeWDS.exe
[02-HKLMREG]**run32 -/- C:\Win\lsass.exe
[02-HKLMREG]**Skype -/- C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun
[02-HKLMREG]**SunJavaUpdateSched -/- C:\Program Files\Common Files\Java\Java Update\jusched.exe
[02-HKLMREG]**Tim -/-
[02-HKLMREG]**TrayHabil -/- C:\Program Files\Koinonia Software\Habil for Windows\TrayHabil.exe
[02-HKLMREG]**vhostroute -/- C:\Users\Administrator\AppData\Roaming\vhost\vvrhost.exe
[02-HKLMREG]**win32 -/- C:\Windows\System32\win32\rsysm.exe
[03-BHOCLSD]**Adobe PDF Link Helper -/- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll -/- {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
[03-BHOCLSD]**Barowse2sAvvee -/- C:\ProgramData\Barowse2sAvvee\516cb321cb235.dll -/- {F3DDB8BE-8C1D-49D6-9FBA-C2704AC429A1}
[03-BHOCLSD]**EbookBrowse -/- C:\ProgramData\EbookBrowse\516cb37134129.dll -/- {3F4B8FA3-917D-45CA-7B49-8FC19DF5AE2D}
[03-BHOCLSD]**GbIehObj Class -/- C:\PROGRA~1\GbPlugin\gbiehabn.dll -/- {C41A1C0E-EA6C-11D4-B1B8-444553540007}
[03-BHOCLSD]**GbIehObj Class -/- C:\PROGRA~1\GbPlugin\gbiehuni.dll -/- {C41A1C0E-EA6C-11D4-B1B8-444553540008}
[03-BHOCLSD]**GbIehObj Class -/- C:\PROGRAM FILES\GBPLUGIN\gbieh.dll -/- {C41A1C0E-EA6C-11D4-B1B8-444553540000}
[03-BHOCLSD]**GbIehObj Class -/- C:\Program Files\GbPlugin\gbiehcef.dll -/- {C41A1C0E-EA6C-11D4-B1B8-444553540003}
[03-BHOCLSD]**Groove GFS Browser Helper -/- C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll -/- {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
[03-BHOCLSD]**Java(tm) Plug-In 2 SSV Helper -/- C:\Program Files\Java\jre6\bin\jp2ssv.dll -/- {DBC80044-A445-435b-BC74-9C25C1C588A9}
[03-BHOCLSD]**Java(tm) Plug-In SSV Helper -/- C:\Program Files\Java\jre6\bin\ssv.dll -/- {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
[03-BHOCLSD]**Octh Class -/- C:\Program Files\Orbitdownloader\orbitcth.dll -/- {000123B4-9B42-4900-B3F7-F4B073EFC214}
[03-BHOCLSD]**ssh2 Class -/- C:\Program Files\Scpad\scpsssh2.dll -/- {2E3C3651-B19C-4DD9-A979-901EC3E930AF}
[03-BHOCLSD]**Windows Live ID Sign-in Helper -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll -/- {9030D464-4C02-4ABF-8ECC-5164760863C6}
[04-TOOLBAR]**Grab Pro -/- C:\Program Files\Orbitdownloader\GrabPro.dll -/- {C55BBCD6-41AD-48AD-9953-3609C48EACC7}
[04-TOOLBAR]**N.A -/- N.A -/- {98889811-442D-49dd-99D7-DC866BE87DBC}
[05-SERVICE]**AdobeFlashPlayerUpdateSvc -/- Adobe Flash Player Update Service -/- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[05-SERVICE]**FontCache -/- Serviço de Cache de Fontes do Windows -/- C:\Windows\system32\svchost.exe -/- C:\Windows\system32\FntCache.dll
[05-SERVICE]**GbpSv -/- Gbp Service -/- C:\PROGRA~1\GbPlugin\GbpSv.exe
[05-SERVICE]**iprip -/- RIP de Escuta -/- C:\Windows\System32\svchost.exe -/- C:\Windows\System32\iprip.dll
[05-SERVICE]**MDM -/- Machine Debug Manager -/- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
[05-SERVICE]**Microsoft Office Groove Audit Service -/- Microsoft Office Groove Audit Service -/- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
[05-SERVICE]**odserv -/- Microsoft Office Diagnostics Service -/- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
[05-SERVICE]**ose -/- Office Source Engine -/- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
[05-SERVICE]**scpVista -/- scpVista -/- C:\Program Files\Scpad\scpVista.exe
[05-SERVICE]**SkypeUpdate -/- Skype Updater -/- C:\Program Files\Skype\Updater\Updater.exe
[05-SERVICE]**SNMP -/- Serviço SNMP -/- C:\Windows\System32\snmp.exe
[05-SERVICE]**wlidsvc -/- Windows Live ID Sign-in Assistant -/- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE