프로그램분석

[Mini***** hack Win32/Trojandownloader] 설치 및 삭제로그 / 2011-06-30

프로세스 천국 2011. 7. 1. 11:10

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Microsoft Windows XP Service Pack 3(5.1.2600.196608)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 767.48 MB
x86 Family 6 Model 37 Stepping 5
Date : 2011-06-30
----------------------------------------------------------------------
DF000 C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\setup.exe
DF001 C:\Program Files\GAESORI\ffmpeg.exe
DF002 C:\Program Files\GAESORI\gaesori.exe
DF003 C:\Program Files\GAESORI\gaesori_module.dll
DF004 C:\Program Files\GAESORI\gaesoriplayer.exe
DF005 C:\Program Files\GAESORI\pthreadGC2.dll
DF006 C:\Program Files\GAESORI\unins000.exe
DF007 C:\Program Files\mcmst\mcmst_md.exe
DF008 C:\Program Files\MicroLab\SearchEngin\LanguageConvert\MicroLabCon.exe
DF009 C:\Program Files\MicroLab\SearchEngin\LanguageConvert\MicroLabProc.exe
DF010 C:\Program Files\MicroLab\SearchEngin\LanguageConvert\Uninstall.exe
DF011 C:\Program Files\SearchLite\SearchLite.dll
DF012 C:\Program Files\SearchLite\SearchLite.exe
DF013 C:\Program Files\SearchLite\SLHelper.dll
DF014 C:\Program Files\SearchLite\uninstall.exe
DF015 C:\Program Files\SmartTool\SmartTool.dll
DF016 C:\Program Files\SmartTool\SmartTool.exe
DF017 C:\Program Files\SmartTool\Uninstall.exe
DF018 C:\Program Files\WinSeek\sqlite3.dll
DF019 C:\Program Files\WinSeek\uninst1.exe
DF020 C:\Program Files\WinSeek\winseekb15.dll
DF021 C:\Program Files\WinSeek\winseeks15.dll
DF022 C:\Program Files\WinSeek\winseeku.exe
DF023 C:\Program Files\wLauncher_Setup.exe
DF024 C:\Program Files\wLauncher\uninstall.exe
DF025 C:\Program Files\wLauncher\wDup.exe
DF026 C:\WINDOWS\system32\mcmst_md.exe
DF027 C:\WINDOWS\system32\moon.exe
DF028 C:\WINDOWS\system32\SearchLite__SL25.exe
DF029 C:\WINDOWS\system32\setup_c3i010.exe
DF030 C:\WINDOWS\system32\SmartTool_SM06.exe
DF031 C:\WINDOWS\system32\Translation.exe
----------------------------------------------------------------------
SC033 Windows WinSeek Update Service -/- Windows WinSeek Update Service -/- - -/-  -/- C:\Program Files\WinSeek\winseeku.exe
----------------------------------------------------------------------
UN034 Micronames Multi Language Convert Service -/- - -/- Micronames Multi Language Convert Service -/- - -/- -
UN035 SearchLite -/- - -/- SearchLite -/- - -/- -
UN036 SmartTool 제거 -/- - -/- SmartTool -/- - -/- -
UN037 WinSeek -/- WinSeek -/- WinSeek -/- - -/-
UN038 wLauncher -/- wLauncher -/- wLauncher -/-
UN039 개소리넷 -/- - -/- 개소리넷 v 4.1_is1 -/- - -/- -
----------------------------------------------------------------------
US040 MicroLabCon -/- C:\Program Files\MicroLab\SearchEngin\LanguageConvert\MicroLabCon.exe
US041 GaesoriPlayer -/- C:\Program Files\GAESORI\gaesoriplayer.exe /start
US042 Starcraft-wLauncher -/- C:\Program Files\wLauncher\wDup.exe -s
LS043 SearchLite -/- C:\Program Files\SearchLite\SearchLite.exe
LS044 SmartTool -/- C:\Program Files\SmartTool\SmartTool.exe
LS045 mcmst_md.exe -/- C:\Program Files\mcmst\mcmst_md.exe
----------------------------------------------------------------------
BH046 SmartToolCtl Class -/- C:\Program Files\SmartTool\SmartTool.dll -/- {2D891923-34B7-4186-9B47-752624535DC1}
BH047 WinSeek -/- C:\Program Files\WinSeek\winseekb15.dll - {3EF359D7-0482-406a-8AB0-C3010ACFD0C8}
BH048 SLHelperCtl Class -/- C:\Program Files\SearchLite\SLHelper.dll -/- {ACB8FE57-01FF-4E61-A2E2-4FB54C77A0E7}
----------------------------------------------------------------------
Deleted Files : 33
Remove Service : 1
Remove Uninstall Entry : 6
Remove Startup Entry : 6
Remove Browser Helper Object : 3
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
[01-HKCUREG]**MicroLabCon
[01-HKCUREG]**GaesoriPlayer
[01-HKCUREG]**Starcraft-wLauncher
[02-HKLMREG]**SearchLite
[02-HKLMREG]**SmartTool
[02-HKLMREG]**mcmst_md.exe
[03-BHOCLSD]**{2D891923-34B7-4186-9B47-752624535DC1}
[03-BHOCLSD]**{3EF359D7-0482-406a-8AB0-C3010ACFD0C8}
[03-BHOCLSD]**{ACB8FE57-01FF-4E61-A2E2-4FB54C77A0E7}
[05-SERVICE]**Windows WinSeek Update Service
----------------------------------------------------------------------
Total Processing Time : 251ms
----------------------------------------------------------------------