프로그램분석

[winvaccine] Install log : 13ms / 2013-01-12

프로세스 천국 2013. 1. 12. 18:14

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Windows 7 Ultimate Service Pack 1(6.1.7601.65536)
Intel(R) Core(TM) i3 CPU       M 380  @ 2.53GHz / 1,023.55 MB
Intel64 Family 6 Model 37 Stepping 5
Date : 2013-01-12
----------------------------------------------------------------------
DF000 C:\Program Files (x86)\winvaccine\EGutil.dll
DF001 C:\Program Files (x86)\winvaccine\uninst_winvaccine.exe
DF002 C:\Program Files (x86)\winvaccine\vcncmndb.dll
DF003 C:\Program Files (x86)\winvaccine\winvaccine.exe
DF004 C:\Program Files (x86)\winvaccine\winvaccinestart.exe
DF005 C:\Program Files (x86)\winvaccine\winvaccineu.exe
DF006 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\winvaccine\winvaccine 삭제.lnk
DF007 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\winvaccine\winvaccine.lnk
DF008 C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\winvaccine\홈페이지.url
----------------------------------------------------------------------
UN009 winvaccine -/- UCF -/- winvaccine -/- hxxp://www.winvaccine.co.kr -/- hxxp://www.winvaccine.co.kr
----------------------------------------------------------------------
LS010 winvaccinestart.exe -/- C:\Program Files (x86)\winvaccine\winvaccinestart.exe
----------------------------------------------------------------------
Deleted Files : 9
Remove Uninstall Entry : 1
Remove Startup Entry : 1
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
WindowexeAllkiller Remove Database 2013-01-12
[02-HKLMREG]**winvaccinestart.exe

----------------------------------------------------------------------
Total Processing Time : 13ms
----------------------------------------------------------------------
NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "winvaccineu" & echo windowdel.com
NA006 echo windowexe.com & tskill "winvaccinestart" & echo windowdel.com
NA007 echo windowexe.com & tskill "winvaccinestart" & echo windowdel.com
NA008 echo windowexe.com & tskill "winvaccine" & echo windowdel.com
NA009 echo windowexe.com & tskill "winvaccine" & echo windowdel.com
NA010 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "winvaccinestart.exe" /f
NA011 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winvaccinestart.exe" /f
NA012 echo change dir for x64
NA013 cd %windir%
NA014 cd syswow64
NA015 echo windowexe.com & tskill "winvaccineu" & echo windowdel.com
NA016 echo windowexe.com & tskill "winvaccinestart" & echo windowdel.com
NA017 echo windowexe.com & tskill "winvaccinestart" & echo windowdel.com
NA018 echo windowexe.com & tskill "winvaccine" & echo windowdel.com
NA019 echo windowexe.com & tskill "winvaccine" & echo windowdel.com
NA020 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "winvaccinestart.exe" /f
NA021 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "winvaccinestart.exe" /f
NA022 echo End
NA023 ======================================================================
NA024 echo Created by Windowexe.com / do not delete this label.
NA025 ======================================================================