프로그램분석

[CineRakWeb Control] Install log : 47ms / 2012-11-10

프로세스 천국 2012. 11. 10. 22:10

[CineRakWeb Control] Install log : 47ms / 2012-11-10


----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz / 1,023.55 MB
Intel64 Family 6 Model 42 Stepping 7
Date : 2012-11-10
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\BitClean\FixTraxgD.exe
DF001 C:\Program Files (x86)\BitClean\temp\FixTraxgD.exe
DF004 C:\Program Files (x86)\PrivacyManager\filter.dll
DF005 C:\Program Files (x86)\PrivacyManager\PrivacyManager.exe
DF006 C:\Program Files (x86)\PrivacyManager\PrivacyManagerMtr.exe
DF007 C:\Program Files (x86)\PrivacyManager\PrivacyManageruck.exe
DF008 C:\Program Files (x86)\PrivacyManager\RCEngine.dll
DF009 C:\Program Files (x86)\PrivacyManager\RepairCode.exe
DF010 C:\Program Files (x86)\ProtectOn\_ProtectOnuck.exe
DF011 C:\Program Files (x86)\ProtectOn\filter.dll
DF012 C:\Program Files (x86)\ProtectOn\ProtectOn.exe
DF013 C:\Program Files (x86)\ProtectOn\ProtectOnMtr.exe
DF014 C:\Program Files (x86)\ProtectOn\ProtectOnState2.exe
DF015 C:\Program Files (x86)\ProtectOn\ProtectOnuck.exe
DF016 C:\Program Files (x86)\ProtectOn\RCEngine.dll
DF017 C:\Program Files (x86)\ProtectOn\RepairCode.exe
DF018 C:\Program Files (x86)\RClean\RCleanT.exe
DF019 C:\Program Files (x86)\STARtools\StarPDF\plugins\npStarPDFReaderPlug.dll
DF020 C:\Program Files (x86)\STARtools\StarPDF\plugins\StarPDFReaderX.ocx
DF021 C:\Program Files (x86)\STARtools\StarPDF\StarPDF.exe
DF022 C:\Program Files (x86)\STARtools\StarPDF\starpdfup.exe
DF023 C:\Program Files (x86)\STARtools\StarPDF\startools_addpdf.exe
DF024 C:\Program Files (x86)\STARtools\StarSee\dcrawlib.dll
DF025 C:\Program Files (x86)\STARtools\StarSee\fpdfview.dll
DF026 C:\Program Files (x86)\STARtools\StarSee\imagemagick.dll
DF027 C:\Program Files (x86)\STARtools\StarSee\jbiglib.dll
DF028 C:\Program Files (x86)\STARtools\StarSee\StarSee.exe
DF029 C:\Program Files (x86)\STARtools\StarSee\starseeextchg.exe
DF030 C:\Program Files (x86)\STARtools\StarSee\StarSeeLauncher.exe
DF031 C:\Program Files (x86)\STARtools\StarSee\starseeup.exe
DF032 C:\Program Files (x86)\STARtools\StarSee\startools_addsee.exe
DF033 C:\Program Files (x86)\STARtools\StarSee\svIcons.dll
DF034 C:\Program Files (x86)\STARtools\StarSee\svImgFind.exe
DF035 C:\Program Files (x86)\STARtools\StarSee\svMenu.dll
DF036 C:\Program Files (x86)\WindowSafe\db\filter.dll
DF037 C:\Program Files (x86)\WindowSafe\db\inter.dll
DF038 C:\Program Files (x86)\WindowSafe\WindowSafe.exe
DF039 C:\Program Files (x86)\WindowSafe\WSAssist.dll
DF040 C:\Program Files (x86)\WindowSafe\WSAutoUpdate.exe
DF041 C:\Program Files (x86)\WindowSafe\WSEn.dll
DF042 C:\Program Files (x86)\WindowSafe\WSFD.SYS
DF043 C:\Program Files (x86)\WindowWizard\WinWizardUpdater.exe
DF044 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\별툴즈\별PDF 리더\별PDF 리더.lnk
DF045 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\별툴즈\별씨\별씨.lnk
DF046 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\윈도우세이프\윈도우세이프 제거.lnk
DF047 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\윈도우세이프\윈도우세이프.lnk
DF048 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\프라이버시매니져\프라이버시매니져 제거.lnk
DF049 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\프라이버시매니져\프라이버시매니져.lnk
DF050 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\프로텍트온\프로텍트온 제거.lnk
DF051 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\프로텍트온\프로텍트온.lnk
DF052 C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\윈도우세이프.lnk
DF053 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\윈도우세이프.lnk
DF054 C:\Users\Administrator\Desktop\ieAdvMgr.exe
DF055 C:\Users\Administrator\Desktop\갤럭시노트 파격특가.lnk
DF056 C:\Users\Administrator\Desktop\반값할인 위메프.lnk
DF057 C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk
DF058 C:\Users\Administrator\Favorites\반값할인 위메프.url
DF059 C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
DF060 C:\Windows\BitLockerDiscoveryVolumeContents\Read Me.url
----------------------------------------------------------------------
SC061 DaumCleanerService -/- DaumCleanerService -/- - -/-  -/- "C:\Program Files\Daum\Cleaner\DaumCleanerService.exe"

SC065 winesrv32 -/- Windows Everlive Service -/- - -/-  -/- C:\Program Files (x86)\Windows Everlive\winesrv.exe
----------------------------------------------------------------------
UN066 Daum 클리너 -/- Daum Communications Corp. -/- DaumCleaner -/- hxxp://cleaner.daum.net/ -/- hxxp://cleaner.daum.net/
TS067 BitClean 실행
TS068 PrivacyManager
TS069 ProtectOn
TS070 WindowSafe 실행
TS071 별PDF업데이트 실행
TS072 별씨업데이트 실행
TS073 별집업데이트 실행
----------------------------------------------------------------------
US074 DaumCleaner -/- C:\Program Files\Daum\Cleaner\DaumCleaner.exe /T
US075 startoolsup -/- C:\Program Files (x86)\STARtools\StarToolsUP\STARUpdate.exe -o
US076 DBGOLottoT -/- C:\Program Files (x86)\DBGOLotto\DBGOLottoT.exe -o
US077 ProtectOn -/- C:\Program Files (x86)\ProtectOn\ProtectOn.exe /run1
US078 linkdirectmain -/- C:\Program Files (x86)\LinkDirect\linkdirectT.exe -o
US079 WinProUp -/- C:\Program Files (x86)\WinPro\WinProUp.exe /start
US080 UtilZoneUp -/- C:\Program Files (x86)\UtilZone\UtilZoneUp /start
US081 DBGOLottoU -/- C:\Program Files (x86)\DBGOLotto\LottoUpdate.exe /up
US082 PrivacyManager -/- C:\Program Files (x86)\PrivacyManager\PrivacyManager.exe /run1
US083 FixTraxgD -/- C:\Program Files (x86)\BitClean\FixTraxgD.exe
LS084 CineRakCoupon -/- C:\Program Files (x86)\CineRak\CineRakCoupon\CineRakCouponUpdater.exe /start
LS085 DBGOCodec -/- C:\Program Files (x86)\DBGO Codec\DBGOCodecT.exe -o
LS086 RCleanMain -/- C:\Program Files (x86)\RClean\RCleanT.exe -o
LS087 windowwizard -/- C:\Program Files (x86)\WindowWizard\WindowWizardT.exe -o
LS088 PatchUp_Plus -/- C:\Program Files (x86)\PatchUp_Plus\UpdatePlus.exe -r
LS089 WinPro -/- C:\Program Files (x86)\WinPro\WinPro.exe
LS090 UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.exe
LS091 RCleanUp -/- C:\Program Files (x86)\RClean\RCleanUpdate.exe /up
LS092 windowwizardup -/- C:\Program Files (x86)\WindowWizard\WinWizardUpdater.exe /wo
----------------------------------------------------------------------
BH093 UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.dll -/- {1C5099DD-7923-45e8-9680-5F285DC61213}
BH094 WinPro -/- C:\Program Files (x86)\WinPro\WinPro.dll -/- {339E5541-DA75-412A-9F9B-3C014BE1050B}
BH095 Daum 클리너 -/- C:\Program Files\Daum\Cleaner\DaumStart.1.5.0.118.dll -/- {BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}
EXADD Shockwave Flash Object -/- C:\Windows\system32\Macromed\Flash\Flash64_11_1_102.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
EXADD UtilZone -/- C:\Program Files (x86)\UtilZone\UtilZone.dll -/- {1C5099DD-7923-45E8-9680-5F285DC61213}
EXADD WinPro -/- C:\Program Files (x86)\WinPro\WinPro.dll -/- {339E5541-DA75-412A-9F9B-3C014BE1050B}
EXADD CineRakWeb Control -/- C:\Windows\DOWNLO~1\CINERA~1.OCX -/- {90AD4330-C001-4EB4-8EEB-C224ABECDF22}
EXADD Daum 클리너 -/- C:\Program Files\Daum\Cleaner\DaumStart.1.5.0.118.dll -/- {BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}
EXADD Shockwave Flash Object -/- C:\Windows\SysWOW64\Macromed\Flash\Flash11g.ocx -/- {D27CDB6E-AE6D-11CF-96B8-444553540000}
----------------------------------------------------------------------
X096 {90AD4330-C001-4EB4-8EEB-C224ABECDF22} - CineRakWeb Control - hxxp://www.cinerak.com/CineRakActivex/CineRakWebCtrl.cab
----------------------------------------------------------------------
Deleted Files : 61
Remove Service : 5
Remove Uninstall Entry : 1
Remove Startup Entry : 19
Remove Browser Helper Object : 3
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2012-11-10
[01-HKCUREG]**DaumCleaner
[01-HKCUREG]**startoolsup
[01-HKCUREG]**DBGOLottoT
[01-HKCUREG]**ProtectOn
[01-HKCUREG]**linkdirectmain
[01-HKCUREG]**WinProUp
[01-HKCUREG]**UtilZoneUp
[01-HKCUREG]**DBGOLottoU
[01-HKCUREG]**PrivacyManager
[01-HKCUREG]**FixTraxgD
[02-HKLMREG]**CineRakCoupon
[02-HKLMREG]**DBGOCodec
[02-HKLMREG]**RCleanMain
[02-HKLMREG]**windowwizard
[02-HKLMREG]**PatchUp_Plus
[02-HKLMREG]**WinPro
[02-HKLMREG]**UtilZone
[02-HKLMREG]**RCleanUp
[02-HKLMREG]**windowwizardup
[03-BHOCLSD]**{1C5099DD-7923-45e8-9680-5F285DC61213}
[03-BHOCLSD]**{339E5541-DA75-412A-9F9B-3C014BE1050B}
[03-BHOCLSD]**{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}
[05-SERVICE]**DaumCleanerService
[05-SERVICE]**winesrv32
----------------------------------------------------------------------
Total Processing Time : 47ms
----------------------------------------------------------------------


NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "FixTraxgD" & echo windowdel.com
NA006 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA007 echo windowexe.com & tskill "ProtectOn" & echo windowdel.com
NA008 echo windowexe.com & tskill "ProtectOnMtr" & echo windowdel.com
NA009 echo windowexe.com & tskill "ProtectOnuck" & echo windowdel.com
NA010 echo windowexe.com & tskill "RCleanT" & echo windowdel.com
NA011 echo windowexe.com & tskill "StarPDF" & echo windowdel.com
NA012 echo windowexe.com & tskill "starpdfup" & echo windowdel.com
NA013 echo windowexe.com & tskill "StarSee" & echo windowdel.com
NA014 echo windowexe.com & tskill "starseeextchg" & echo windowdel.com
NA015 echo windowexe.com & tskill "StarSeeLauncher" & echo windowdel.com
NA016 echo windowexe.com & tskill "starseeup" & echo windowdel.com
NA017 echo windowexe.com & tskill "WinWizardUpdater" & echo windowdel.com
NA018 echo windowexe.com & tskill "BitClean" & echo windowdel.com
NA019 echo windowexe.com & tskill "ProtectOnuck" & echo windowdel.com
NA020 echo windowexe.com & tskill "starpdfup" & echo windowdel.com
NA021 echo windowexe.com & tskill "starseeup" & echo windowdel.com
NA022 echo windowexe.com & tskill "starzipup" & echo windowdel.com
NA023 echo windowexe.com & tskill "FixTraxgD" & echo windowdel.com
NA024 echo windowexe.com & tskill "CineRakCouponUpdater" & echo windowdel.com
NA025 echo windowexe.com & tskill "DBGOCodecT" & echo windowdel.com
NA026 echo windowexe.com & tskill "DBGOLottoT" & echo windowdel.com
NA027 echo windowexe.com & tskill "LottoUpdate" & echo windowdel.com
NA028 echo windowexe.com & tskill "linkdirectT" & echo windowdel.com
NA029 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA030 echo windowexe.com & tskill "UpdatePlus" & echo windowdel.com
NA031 echo windowexe.com & tskill "ProtectOn" & echo windowdel.com
NA032 echo windowexe.com & tskill "RCleanT" & echo windowdel.com
NA033 echo windowexe.com & tskill "RCleanUpdate" & echo windowdel.com
NA034 echo windowexe.com & tskill "STARUpdate" & echo windowdel.com
NA035 echo windowexe.com & tskill "UtilZone" & echo windowdel.com
NA036 echo windowexe.com & tskill "winesrv" & echo windowdel.com
NA037 echo windowexe.com & tskill "WindowWizardT" & echo windowdel.com
NA038 echo windowexe.com & tskill "WinWizardUpdater" & echo windowdel.com
NA039 echo windowexe.com & tskill "WinPro" & echo windowdel.com
NA040 echo windowexe.com & tskill "WinProUp" & echo windowdel.com
NA041 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA042 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA043 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA044 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA045 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
NA046 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
NA047 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoT" /f
NA048 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoT" /f
NA049 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ProtectOn" /f
NA050 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ProtectOn" /f
NA051 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
NA052 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
NA053 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinProUp" /f
NA054 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinProUp" /f
NA055 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
NA056 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
NA057 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoU" /f
NA058 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoU" /f
NA059 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyManager" /f
NA060 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyManager" /f
NA061 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FixTraxgD" /f
NA062 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FixTraxgD" /f
NA063 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "CineRakCoupon" /f
NA064 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "CineRakCoupon" /f
NA065 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOCodec" /f
NA066 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOCodec" /f
NA067 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RCleanMain" /f
NA068 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RCleanMain" /f
NA069 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowwizard" /f
NA070 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowwizard" /f
NA071 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
NA072 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
NA073 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA074 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA075 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA076 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA077 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RCleanUp" /f
NA078 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RCleanUp" /f
NA079 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowwizardup" /f
NA080 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowwizardup" /f
NA081 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA082 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA083 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA084 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA085 echo Created by Windowexe.com
NA086 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA087 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA088 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA089 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA090 echo Created by Windowexe.com
NA091 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA092 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA093 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA094 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA095 echo Created by Windowexe.com
NA096 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA097 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA098 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA099 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA100 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA101 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA102 echo Created by Windowexe.com
NA103 sc stop "DaumCleanerService"

NA107 sc stop "winesrv32"
NA108 echo Service Disable & sc config "winesrv32" start= disabled & echo Windowexe.com
NA109 echo schtasks Delete & schtasks /delete /tn "BitClean 실행" /f
NA110 echo Created by Windowexe.com
NA111 echo schtasks Delete & schtasks /delete /tn "PrivacyManager" /f
NA112 echo Created by Windowexe.com
NA113 echo schtasks Delete & schtasks /delete /tn "ProtectOn" /f
NA114 echo Created by Windowexe.com
NA115 echo schtasks Delete & schtasks /delete /tn "WindowSafe 실행" /f
NA116 echo Created by Windowexe.com
NA117 echo schtasks Delete & schtasks /delete /tn "별PDF업데이트 실행" /f
NA118 echo Created by Windowexe.com
NA119 echo schtasks Delete & schtasks /delete /tn "별씨업데이트 실행" /f
NA120 echo Created by Windowexe.com
NA121 echo schtasks Delete & schtasks /delete /tn "별집업데이트 실행" /f
NA122 echo Created by Windowexe.com
NA123 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\갤럭시노트 파격특가.lnk"
NA124 echo file Delete & del /q "C:\Users\Administrator\Desktop\갤럭시노트 파격특가.lnk"
NA125 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
NA126 echo file Delete & del /q "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
NA127 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
NA128 echo file Delete & del /q "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
NA129 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
NA130 echo file Delete & del /q "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
NA131 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 할인쿠폰.url"
NA132 echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 할인쿠폰.url"
NA133 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
NA134 echo file Delete & del /q "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
NA135 echo change dir for x64
NA136 cd %windir%
NA137 cd syswow64
NA138 echo windowexe.com & tskill "FixTraxgD" & echo windowdel.com
NA139 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA140 echo windowexe.com & tskill "ProtectOn" & echo windowdel.com
NA141 echo windowexe.com & tskill "ProtectOnMtr" & echo windowdel.com
NA142 echo windowexe.com & tskill "ProtectOnuck" & echo windowdel.com
NA143 echo windowexe.com & tskill "RCleanT" & echo windowdel.com
NA144 echo windowexe.com & tskill "StarPDF" & echo windowdel.com
NA145 echo windowexe.com & tskill "starpdfup" & echo windowdel.com
NA146 echo windowexe.com & tskill "StarSee" & echo windowdel.com
NA147 echo windowexe.com & tskill "starseeextchg" & echo windowdel.com
NA148 echo windowexe.com & tskill "StarSeeLauncher" & echo windowdel.com
NA149 echo windowexe.com & tskill "starseeup" & echo windowdel.com
NA150 echo windowexe.com & tskill "WinWizardUpdater" & echo windowdel.com
NA151 echo windowexe.com & tskill "BitClean" & echo windowdel.com
NA152 echo windowexe.com & tskill "ProtectOnuck" & echo windowdel.com
NA153 echo windowexe.com & tskill "starpdfup" & echo windowdel.com
NA154 echo windowexe.com & tskill "starseeup" & echo windowdel.com
NA155 echo windowexe.com & tskill "starzipup" & echo windowdel.com
NA156 echo windowexe.com & tskill "FixTraxgD" & echo windowdel.com
NA157 echo windowexe.com & tskill "CineRakCouponUpdater" & echo windowdel.com
NA158 echo windowexe.com & tskill "DBGOCodecT" & echo windowdel.com
NA159 echo windowexe.com & tskill "DBGOLottoT" & echo windowdel.com
NA160 echo windowexe.com & tskill "LottoUpdate" & echo windowdel.com
NA161 echo windowexe.com & tskill "linkdirectT" & echo windowdel.com
NA162 echo windowexe.com & tskill "natsvc" & echo windowdel.com
NA163 echo windowexe.com & tskill "UpdatePlus" & echo windowdel.com
NA164 echo windowexe.com & tskill "ProtectOn" & echo windowdel.com
NA165 echo windowexe.com & tskill "RCleanT" & echo windowdel.com
NA166 echo windowexe.com & tskill "RCleanUpdate" & echo windowdel.com
NA167 echo windowexe.com & tskill "STARUpdate" & echo windowdel.com
NA168 echo windowexe.com & tskill "UtilZone" & echo windowdel.com
NA169 echo windowexe.com & tskill "winesrv" & echo windowdel.com
NA170 echo windowexe.com & tskill "WindowWizardT" & echo windowdel.com
NA171 echo windowexe.com & tskill "WinWizardUpdater" & echo windowdel.com
NA172 echo windowexe.com & tskill "WinPro" & echo windowdel.com
NA173 echo windowexe.com & tskill "WinProUp" & echo windowdel.com
NA174 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA175 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro\"" /f
NA176 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA177 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA178 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
NA179 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "startoolsup" /f
NA180 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoT" /f
NA181 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoT" /f
NA182 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "ProtectOn" /f
NA183 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ProtectOn" /f
NA184 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
NA185 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "linkdirectmain" /f
NA186 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinProUp" /f
NA187 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinProUp" /f
NA188 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
NA189 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZoneUp" /f
NA190 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoU" /f
NA191 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOLottoU" /f
NA192 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyManager" /f
NA193 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PrivacyManager" /f
NA194 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "FixTraxgD" /f
NA195 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "FixTraxgD" /f
NA196 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "CineRakCoupon" /f
NA197 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "CineRakCoupon" /f
NA198 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DBGOCodec" /f
NA199 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DBGOCodec" /f
NA200 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RCleanMain" /f
NA201 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RCleanMain" /f
NA202 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowwizard" /f
NA203 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowwizard" /f
NA204 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
NA205 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "PatchUp_Plus" /f
NA206 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA207 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "WinPro" /f
NA208 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA209 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
NA210 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RCleanUp" /f
NA211 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "RCleanUp" /f
NA212 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "windowwizardup" /f
NA213 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "windowwizardup" /f
NA214 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA215 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA216 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA217 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{1C5099DD-7923-45e8-9680-5F285DC61213}" /f
NA218 echo Created by Windowexe.com
NA219 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA220 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA221 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA222 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{339E5541-DA75-412A-9F9B-3C014BE1050B}" /f
NA223 echo Created by Windowexe.com
NA224 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA225 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA226 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA227 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA228 echo Created by Windowexe.com
NA229 echo HKEY_LOCAL_MACHINE Toolbar Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA230 echo HKEY_CURRENT_USER Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA231 echo HKCU Search Hook Delete & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA232 echo HKEY_LOCAL_MACHINE Ext PreApproved Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA233 echo HKEY_CURRENT_USER Ext Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA234 echo HKEY_CLASSES_ROOT CLSID Delete & reg.exe delete "HKCR\CLSID\{9CA634EF-ECF0-4DD1-B7E2-B9CCFF40BCAF}" /f
NA235 echo Created by Windowexe.com
NA236 sc stop "DaumCleanerService"
NA237 echo Service Disable & sc config "DaumCleanerService" start= disabled & echo Windowexe.com
NA240 sc stop "winesrv32"
NA241 echo Service Disable & sc config "winesrv32" start= disabled & echo Windowexe.com
NA242 echo schtasks Delete & schtasks /delete /tn "BitClean 실행" /f
NA243 echo Created by Windowexe.com
NA244 echo schtasks Delete & schtasks /delete /tn "PrivacyManager" /f
NA245 echo Created by Windowexe.com
NA246 echo schtasks Delete & schtasks /delete /tn "ProtectOn" /f
NA247 echo Created by Windowexe.com
NA248 echo schtasks Delete & schtasks /delete /tn "WindowSafe 실행" /f
NA249 echo Created by Windowexe.com
NA250 echo schtasks Delete & schtasks /delete /tn "별PDF업데이트 실행" /f
NA251 echo Created by Windowexe.com
NA252 echo schtasks Delete & schtasks /delete /tn "별씨업데이트 실행" /f
NA253 echo Created by Windowexe.com
NA254 echo schtasks Delete & schtasks /delete /tn "별집업데이트 실행" /f
NA255 echo Created by Windowexe.com
NA256 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\갤럭시노트 파격특가.lnk"
NA257 echo file Delete & del /q "C:\Users\Administrator\Desktop\갤럭시노트 파격특가.lnk"
NA258 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
NA259 echo file Delete & del /q "C:\Users\Administrator\Desktop\반값할인 위메프.lnk"
NA260 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
NA261 echo file Delete & del /q "C:\Users\Administrator\Desktop\비즈폼 무료서식 100선.lnk"
NA262 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
NA263 echo file Delete & del /q "C:\Users\Administrator\Desktop\폭풍성장 무료체험.lnk"
NA264 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\씨네락 할인쿠폰.url"
NA265 echo file Delete & del /q "C:\Users\Administrator\Desktop\씨네락 할인쿠폰.url"
NA266 echo file Delete & attrib -r "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
NA267 echo file Delete & del /q "C:\Users\Administrator\Desktop\옥션에서 싸게 사자.url"
NA268 echo End
NA269 ======================================================================
NA270 echo Created by Windowexe.com / do not delete this label.
NA271 ======================================================================