프로그램분석

분석파일 hino****@*****.com

프로세스 천국 2012. 11. 30. 04:19

 

======================================================================
echo Created by Windowexe.com / do not delete this label.
======================================================================

echo Start
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "PandoraService" & echo windowdel.com
echo windowexe.com & tskill "barosearchs" & echo windowdel.com
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "BaroSearch" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "BaroSearch" /f
sc stop "PanService"
echo Service Disable & sc config "PanService" start= disabled & echo Windowexe.com
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\옥션.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\옥션.url"
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\G마켓.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\G마켓.url"
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\11번가.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\11번가.url"
echo change dir for x64
cd %windir%
cd syswow64
echo windowexe.com & tskill "UtilZone" & echo windowdel.com
echo windowexe.com & tskill "PandoraService" & echo windowdel.com
echo windowexe.com & tskill "barosearchs" & echo windowdel.com
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "UtilZone" /f
echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "BaroSearch" /f
echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "BaroSearch" /f
sc stop "PanService"
echo Service Disable & sc config "PanService" start= disabled & echo Windowexe.com
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\옥션.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\옥션.url"
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\G마켓.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\G마켓.url"
echo file Delete & attrib -r "C:\Users\XNOTE\Desktop\11번가.url"
echo file Delete & del /q "C:\Users\XNOTE\Desktop\11번가.url"
echo End

======================================================================
echo Created by Windowexe.com / do not delete this label.
======================================================================

 

다운로드

 

temp.bat