프로그램분석

Code : /888lkdmB65sQkbhdZTj7A==

프로세스 천국 2013. 2. 8. 12:12

System Analyzer Report 2013, 02, 08

NA001 ======================================================================
NA002 echo Created by Windowexe.com / do not delete this label.
NA003 ======================================================================
NA004 echo Start
NA005 echo windowexe.com & tskill "GuardConvert" & echo windowdel.com
NA006 echo windowexe.com & tskill "MicroProCon" & echo windowdel.com
NA007 echo windowexe.com & tskill "MicroProProc" & echo windowdel.com
NA008 echo windowexe.com & tskill "AdvTCApp" & echo windowdel.com
NA009 echo windowexe.com & tskill "TCCheckAgent" & echo windowdel.com
NA010 echo windowexe.com & tskill "TCSearch" & echo windowdel.com
NA011 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA012 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "DaumCleaner" /f
NA013 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA014 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Adv_TopC" /f
NA015 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "HMService" /f
NA016 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "HMService" /f
NA017 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA018 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "GuardSupport" /f
NA019 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA020 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProCon" /f
NA021 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA022 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabCon" /f
NA023 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA024 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroProProc" /f
NA025 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA026 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "MicroLabProc" /f
NA027 echo HKCU Startup Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "73A40308" /f
NA028 echo HKLM Startup Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "73A40308" /f
NA029 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA030 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA031 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA032 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}" /f
NA033 echo Created by Windowexe.com
NA034 echo HKEY_LOCAL_MACHINE BHO Delete & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA035 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA036 echo HKEY_CURRENT_USER.BHO.Stats Delete & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA037 echo HKEY_CLASSES_ROOT.CLSID Delete & reg.exe delete "HKCR\CLSID\{BDDB5A00-D1EB-49D5-B197-72A06DF78AA1}" /f
NA038 echo Created by Windowexe.com
NA039 sc stop "TCCheckAgent"
NA040 echo Service Disable & sc config "TCCheckAgent" start= disabled & echo Windowexe.com
NA041 echo End
NA042 ======================================================================
NA043 echo Created by Windowexe.com / do not delete this label.
NA044 ======================================================================

 

NA001 67.198.147.138 BaNKIng.nonghyup.com
NA002 67.198.147.138 NONGhyup.com
NA003 67.198.147.138 ww*.NONGHYUp.com
NA004 67.198.147.138 wooriBaNK.com
NA005 67.198.147.138 ww*.wooriBaNK.com
NA006 67.198.147.138 pib.wooriBaNK.com
NA007 67.198.147.138 spd.wooriBaNK.com
NA008 67.198.147.138 u.wooriBaNK.com
NA009 67.198.147.138 hanaBaNK.com
NA010 67.198.147.138 ww*.hanaBaNK.com
NA011 67.198.147.138 hanaBaNK.chzero.com
NA012 67.198.147.138 open.hanaBaNK.com
NA013 67.198.147.138 oBaNK.KBSTAR.com
NA014 67.198.147.138 ww*.KBSTAR.com
NA015 67.198.147.138 KBSTAR.com
NA016 67.198.147.138 ww*.SHINHAN.com
NA017 67.198.147.138 BaNKIng.SHINHAN.com
NA018 67.198.147.138 bizBaNK.SHINHAN.com
NA019 67.198.147.138 open.SHINHAN.com
NA020 67.198.147.138 ww*.IBK.co.kr
NA021 67.198.147.138 myBaNK.IBK.co.kr
NA022 67.198.147.138 kiup.IBK.co.kr
NA023 67.198.147.138 open.IBK.co.kr
NA024 67.198.147.138 ww*.KEB.co.kr
NA025 67.198.147.138 BaNK.keb.co.kr