프로그램분석

[down-korea] Processing time : 317ms / 2011-07-04

프로세스 천국 2011. 7. 5. 01:19

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Microsoft Windows XP Service Pack 3(5.1.2600.196608)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 767.48 MB
x86 Family 6 Model 37 Stepping 5
Date : 2011-07-04
----------------------------------------------------------------------
DF000 C:\Documents and Settings\Administrator\Application Data\MSINET.OCX
DF001 C:\Documents and Settings\Administrator\Application Data\msvbvm60.dll
DF002 C:\Documents and Settings\Administrator\Application Data\scrrun.dll
DF003 C:\Documents and Settings\Administrator\Application Data\utilpung.exe
DF004 C:\Documents and Settings\Administrator\Application Data\VB6KO.DLL
DF005 C:\Documents and Settings\Administrator\바탕 화면\dzone.exe
DF006 C:\Documents and Settings\Administrator\바탕 화면\GuideOn__GO20.exe
DF007 C:\Documents and Settings\Administrator\바탕 화면\PostTip_ziodio.exe
DF008 C:\Documents and Settings\Administrator\바탕 화면\Setup_utilcafe_BoanPack.exe
DF009 C:\Documents and Settings\Administrator\바탕 화면\Setup_utilcafe_VLite.exe
DF010 C:\Documents and Settings\Administrator\바탕 화면\shotcut6.exe
DF011 C:\Documents and Settings\Administrator\바탕 화면\SmartTool__SM19.exe
DF012 C:\Documents and Settings\Administrator\바탕 화면\todaytab_util.exe
DF013 C:\Documents and Settings\Administrator\바탕 화면\utilpungUP.exe
DF014 C:\Documents and Settings\Administrator\바탕 화면\withmoa_hidden_20101223.exe
DF015 C:\Program Files\BoanPack 3.0\baphis.dll
DF016 C:\Program Files\BoanPack 3.0\bapidc.dll
DF017 C:\Program Files\BoanPack 3.0\BoanPack.exe
DF018 C:\Program Files\BoanPack 3.0\BoanPackMT.exe
DF019 C:\Program Files\BoanPack 3.0\BoanPackUI.exe
DF020 C:\Program Files\BoanPack 3.0\BoanPackUp.exe
DF021 C:\Program Files\BoanPack 3.0\Uninstall.exe
DF022 C:\Program Files\GuideOn\GuideOn.dll
DF023 C:\Program Files\GuideOn\GuideOn.exe
DF024 C:\Program Files\GuideOn\uninstall.exe
DF025 C:\Program Files\NewSink\NewSink.exe
DF026 C:\Program Files\NewSink\sinkup.exe
DF027 C:\Program Files\NewSink\UnInstall.exe
DF028 C:\Program Files\PostTip\PostTip.dll
DF029 C:\Program Files\PostTip\PostTip.exe
DF030 C:\Program Files\PostTip\uninstall.exe
DF031 C:\Program Files\SmartTool\SmartTool.dll
DF032 C:\Program Files\SmartTool\SmartTool.exe
DF033 C:\Program Files\SmartTool\Uninstall.exe
DF034 C:\Program Files\VLite 3.0\mfc42.dll
DF035 C:\Program Files\VLite 3.0\msvcirt.dll
DF036 C:\Program Files\VLite 3.0\msvcp60.dll
DF037 C:\Program Files\VLite 3.0\msvcrt.dll
DF038 C:\Program Files\VLite 3.0\Uninstall.exe
DF039 C:\Program Files\VLite 3.0\VLite.exe
DF040 C:\Program Files\VLite 3.0\VLiteUp.exe
DF041 C:\Program Files\VLite 3.0\VLiteUp2.exe
DF042 C:\Program Files\VLite 3.0\vtehis.dll
DF043 C:\Program Files\VLite 3.0\vtehrd.dll
DF044 C:\Program Files\VLite 3.0\vtemrd.dll
DF045 C:\Program Files\VLite 3.0\vtemwnt.dll
DF046 C:\Program Files\VLite 3.0\vtemwt.dll
DF047 C:\Program Files\VLite 3.0\vtereg.dll
DF048 C:\Program Files\VLite 3.0\vtestc.dll
DF049 C:\Program Files\VLite 3.0\vtesvc.exe
DF050 C:\Program Files\VLite 3.0\vtesys.dll
DF051 C:\Program Files\VLite 3.0\vteupk.dll
DF052 C:\Program Files\VLite 3.0\vteupt.dll
DF053 C:\Program Files\WithMoa\uninstall.exe
DF054 C:\Program Files\WithMoa\widlib.dll
DF055 C:\Program Files\WithMoa\widmoa.dll
DF056 C:\Program Files\WithMoa\widservice.exe
DF057 C:\Program Files\WithMoa\withmoa.exe
DF058 C:\Program Files\WithMoa\withmoaun.exe
DF059 C:\WINDOWS\system32\withmoaAX.ocx
----------------------------------------------------------------------
SC060 vtesvc -/- VLite Security Service -/- - -/-  -/- C:\Program Files\VLite 3.0\vtesvc.exe
----------------------------------------------------------------------
UN061 BoanPack 3.0 -/- - -/- BoanPack 3.0 -/- - -/- -
UN062 GuideOn -/- - -/- GuideOn -/- - -/- -
UN063 remove NewSink -/- - -/- NewSink -/- - -/- -
UN064 PostTip -/- - -/- PostTip -/- - -/- -
UN065 SmartTool 제거 -/- - -/- SmartTool -/- - -/- -
UN066 VLite 3.0 -/- - -/- VLite 3.0 -/- - -/- -
UN067 WithMoa Totalpack 32bit -/- - -/- widmoa uninstall -/- - -/- -
----------------------------------------------------------------------
LS068 NewSink -/- C:\Program Files\NewSink\NewSink.exe
LS069 SinkUp -/- C:\Program Files\NewSink\sinkup.exe
LS070 BoanPack 3.0 -/- C:\Program Files\BoanPack 3.0\BoanPack.exe -h -boot
LS071 VLite 3.0 -/- C:\Program Files\VLite 3.0\VLite.exe -h -boot
LS072 GuideOn -/- C:\Program Files\GuideOn\GuideOn.exe
LS073 PostTip -/- C:\Program Files\PostTip\PostTip.exe
LS074 SmartTool -/- C:\Program Files\SmartTool\SmartTool.exe
LS075 utilpung -/- C:\Documents and Settings\Administrator\Application Data\utilpung.exe
LS076 widmoa -/- C:\Program Files\WithMoa\withmoa.exe
----------------------------------------------------------------------
BH077 SmartToolCtl Class -/- C:\Program Files\SmartTool\SmartTool.dll -/- {2D891923-34B7-4186-9B47-752624535DC1}
BH078 widhmoa Object -/- C:\Program Files\WithMoa\widmoa.dll -/- {46ABCABA-C7AF-49DF-92D8-A24EA2C9E9B4}
BH079 GuideHelper Class -/- C:\Program Files\GuideOn\GuideOn.dll -/- {6704E2EA-6213-4d17-BB3D-4AE9E3609536}
BH080 PostTip -/- C:\Program Files\PostTip\PostTip.dll -/- {C4BF6897-41A2-454b-AC3B-437F30BEA671}
----------------------------------------------------------------------
NA000 down.down-korea.com/spon/withmoa_hidden_20101223*.***
NA001 down.down-korea.com/spons/dzone*.***
NA002 down.down-korea.com/spons/GuideOn__GO20*.***
NA003 down.down-korea.com/spons/PostTip_ziodio*.***
NA004 down.down-korea.com/spons/Setup_utilcafe_BoanPack*.***
NA005 down.down-korea.com/spons/Setup_utilcafe_VLite*.***
NA006 down.down-korea.com/spons/shotcut6*.***
NA007 down.down-korea.com/spons/SmartTool__SM19*.***
NA008 down.down-korea.com/spons/todaytab_util*.***
NA009 down.down-korea.com/spons/utilpungUP*.***
NA010 endnew.com/nzell_app/reward*.***
NA011 file.plustab.co.kr/dst/SmartTool_SM19*.***
NA012 file.sidegreen.com/dst/GuideOn_GO20*.***
NA013 file.sidetab.co.kr/dst/PostTip_IP99*.***
NA014 guideon.sidegreen.com/install.asp?version=1.0.0.1&id=GO20&mac=0**.***
NA015 guideon.sidegreen.com/update/GO20/GuideOn*.***
NA016 link.linkmoa.kr/utilpung_d.php?AKEY=*.***
NA017 new.playbgm.com/res/11*.***
NA018 new.playbgm.com/res/au*.***
NA019 new.playbgm.com/res/gm*.***
NA020 pay.boanpack.com/pay_hk_new2/cash.asp?mc=000000000000&pid=utilc**.***
NA021 pay.boanpack.com/pay_hk_new2/cash_redirect.asp?mc=000000000000&**.***
NA022 pay.boanpack.com/pay_hk_new2/cash_size.asp?size=410*.***
NA023 pay.boanpack.com/pay_hk_new2/css/style01*.***
NA024 pay.boanpack.com/pay_hk_new2/skins/script/over_im*.***
NA025 postip.sidetab.co.kr/install.asp?version=1.0.0.1&id=IP99&mac=00**.***
NA026 postip.sidetab.co.kr/update/IP99/IPU1002*.***
NA027 postip.sidetab.co.kr/update/IP99/PostTip*.***
NA028 sm.plustab.co.kr/install.asp?version=1.0.0.1&id=SM19&mac=000000**.***
NA029 sm.plustab.co.kr/update/SM19/SmartTool*.***
NA030 update.boanpack.com/update/bapupt_XP*.***
NA031 withmoa.com/count/insert.php?pid=withmoa&ki*.***
NA032 withmoa.com/reward/withmoa01/update*.***
NA033 ww*.todaytab.co.kr/log/install.php?mac=00-00-00-00-00-00&code=0**.***
NA034 ww*.todaytab.co.kr/ver/ver*.***
NA035 ww*.utilcafe.com/data/file/tb12/file_yamaha_player*.***
NA036 ww*.utilcafe.com/log/play.php?host=utilcafe&mac=00-00-00-00-00-**.***
NA037 ww*.withmoa.com/count/insert.php?pid=withmoa&ki*.***
----------------------------------------------------------------------
Deleted Files : 60
Remove Service : 1
Remove Uninstall Entry : 7
Remove Startup Entry : 9
Remove Browser Helper Object : 4
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
[02-HKLMREG]**NewSink
[02-HKLMREG]**SinkUp
[02-HKLMREG]**BoanPack 3.0
[02-HKLMREG]**VLite 3.0
[02-HKLMREG]**GuideOn
[02-HKLMREG]**PostTip
[02-HKLMREG]**SmartTool
[02-HKLMREG]**utilpung
[02-HKLMREG]**widmoa
[03-BHOCLSD]**{2D891923-34B7-4186-9B47-752624535DC1}
[03-BHOCLSD]**{46ABCABA-C7AF-49DF-92D8-A24EA2C9E9B4}
[03-BHOCLSD]**{6704E2EA-6213-4d17-BB3D-4AE9E3609536}
[03-BHOCLSD]**{C4BF6897-41A2-454b-AC3B-437F30BEA671}
[05-SERVICE]**vtesvc
----------------------------------------------------------------------
Total Processing Time : 317ms
----------------------------------------------------------------------