인터넷 검색도우미같은 애드웨어를 삭제하려면 HijackThis란 프로그램이 절대적으로 필요하다.
시작프로그램을 삭제하여도 브라우저확장모듈은 그대로 남아있기 때문이다.
인터넷 검색도우미라 함은 검색사이트에서 검색을 했을때 검색키워드와 관련된 스폰서링크, 익스플로러의 좌측, 하단, 상단에 툴바형식의 광고를 표시하는것을 검색도우미라 한다.
HijackThis 사용법 및 다운로드는 아래링크를 참고하기 바란다.
http://jinmoda.tistory.com/666
서치팟, 인포탭, 스마트키워드는 특정 프로그램에 의하여 설치된다. 제작사에서도 배포하지만 제작사홈페이지는 방문할일 없으니 주로 블로그에서 배포되는 첨부파일에 의하여 설치된다.
익스플로러 - 도구 - 추가기능 관리에 등록된 BHO 모듈이다.
사용을 중지하려면 항목을 선택하고 사용안함으로 설정한다. 그러나 그렇게 할 필요는 없다. 완전히 삭제할 것이므로..
HijackThis의 화면이다. 아래항목을 모두 체크하여 Fix checked를 누르면 한번에 삭제할 수 있다.
일부항목은 재부팅하면 그대로 있다. 시작프로그램 레지스트리값을 모니터한다. (악질이다.ㅋ)
작업관리자에서 프로세스를 완전히 종료해야 없어진다.
O2 - BHO: (no name) - {3BEEAA16-3FF5-4E5D-9D59-6A185FBFA266} - C:\PROGRA~1\FileLand\Bho\FILELA~1.DLL
O2 - BHO: SPHelperCtl Class - {401E5CE3-2E10-46DA-9073-7DB0CA9797B3} - C:\Program Files\SearchPot\SPHelper.dll
O2 - BHO: InfoTab - {66D6D3C9-B007-421F-89EE-778CCAAD1F45} - C:\Program Files\InfoTab\InfoTab.dll
O2 - BHO: SmartKeywordBHO - {BC92C53E-A5C1-4D33-995C-AB7BB869E0E6} - C:\Program Files\SmartKeyword\SmartKeyword.dll
O4 - HKLM\..\Run: [SearchPot] C:\Program Files\SearchPot\SearchPot.exe
O4 - HKLM\..\Run: [InfoTab] C:\Program Files\InfoTab\InfoTab.exe
O4 - HKLM\..\Run: [privacylockS] C:\Program Files\privacylock\privacylockU.exe
O4 - HKLM\..\Run: [totalvaccine] C:\Program Files\totalvaccine\totalvaccineu.exe /8L
O4 - HKCU\..\Run: [BatangIN] "C:\Program Files\BatangIN\BatangIN.exe" "/start"
O4 - HKCU\..\Run: [SkeyAgent] C:\Program Files\SmartKeyword\SkeyAgent.exe
O4 - HKCU\..\Run: [happylotto] "C:\Program Files\HappyLotto\HappyLotto.exe" "/start"
O4 - HKCU\..\Run: [SmartSupporter-privacylock] C:\WINDOWS\system32\smartsupporter_privacylock.exe sgi
O4 - HKCU\..\Run: [Extend-Supporter-totalvaccine] C:\WINDOWS\system32\smartsupporter_totalvaccineEx.exe sgi
O9 - Extra button: 최신영화 다운받기 - {C1F0024B-8278-4999-B7E6-2718426D9FE6} - C:\WINDOWS\system32\barcon.dll (HKCU)
제어판 - 프로그램 추가/제거에 등록된 목록이다. 모두 제거를 권장한다.
적색의 항목은 모두 하나(?)의 프로그램에 의해 설치된것이다.
프로그램 추가/제거에서 삭제가 안되는 경우 아래 나온 목록에서 Uninstall String 값을 모두 실행하면된다.
==================================================
Entry Name : BatangIN
Product Name :
Version : 1.1
Company :
Description : Setup/Uninstall
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\BatangIN\
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:25
Uninstall String : "C:\Program Files\BatangIN\unins000.exe"
Installation Change String:
Quiet Uninstall : Yes
Registry Key : 바탕인_is1
Installer : Inno Setup
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : FileLand
Product Name :
Version : 1.2
Company :
Description : Setup/Uninstall
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\FileLand\
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:06:32
Uninstall String : "C:\Program Files\FileLand\unins000.exe"
Installation Change String:
Quiet Uninstall : Yes
Registry Key : FileLand_is1
Installer : Inno Setup
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : FileLand (윈도우 다운로드 가속기)
Product Name :
Version : 1.1
Company :
Description : Setup/Uninstall
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\FileLand\Bho\
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:41
Uninstall String : "C:\Program Files\FileLand\Bho\unins000.exe"
Installation Change String:
Quiet Uninstall : Yes
Registry Key : FileLand 확장모듈_is1
Installer : Inno Setup
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : InfoTab
Product Name :
Version :
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\InfoTab
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:26
Uninstall String : C:\Program Files\InfoTab\uninstall.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : InfoTab
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : privacylock
Product Name : updater
Version : 1.2
Company : IMNetwork
Description : privacylock Updater
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\privacylock
Install Source :
Web Site : hxxp://xxx.privacylock.co.kr
Installation Date : 2010-05-29 오전 7:07:34
Uninstall String : C:\WINDOWS\system32\uninst_privacylock.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : privacylock
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : SearchPot
Product Name :
Version :
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\SearchPot
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:23
Uninstall String : C:\Program Files\SearchPot\uninstall.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : SearchPot
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : SmartSupporter
Product Name :
Version : 1.2
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder :
Install Source :
Web Site : hxxp://xxx.privacylock.co.kr
Installation Date : 2010-05-29 오전 7:07:33
Uninstall String : C:\WINDOWS\system32\smartsupporter_privacylock.exe /delete
Installation Change String:
Quiet Uninstall : No
Registry Key : MC-PRIVACYLOCK
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : SmartSupporterExtended
Product Name :
Version : 1.2
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder :
Install Source :
Web Site : hxxp://totalvaccine.co.kr
Installation Date : 2010-05-29 오전 7:07:34
Uninstall String : C:\WINDOWS\system32\smartsupporter_totalvaccineEx.exe /delete
Installation Change String:
Quiet Uninstall : No
Registry Key : EX-TOTALVACCINE-SM
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : totalvaccine
Product Name : totalvaccine updater
Version : 1.2
Company : SJ Dream
Description : totalvaccine Updater
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\totalvaccine
Install Source :
Web Site : hxxp://xxx.totalvaccine.co.kr
Installation Date : 2010-05-29 오전 7:07:35
Uninstall String : C:\WINDOWS\system32\uninst_totalvaccine.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : totalvaccine
Installer : Unknown
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : 스마트키워드 1.0.0.8
Product Name : SmartKeyword
Version : 1.0.0.8
Company : xxx.dreamad.co.kr
Description :
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\SmartKeyword
Install Source :
Web Site : hxxp://xxx.dreamad.co.kr
Installation Date : 2010-05-29 오전 7:07:28
Uninstall String : C:\Program Files\SmartKeyword\uninstall.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : 스마트키워드 1.0.0.8
Installer : Nullsoft Install System
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : 최신영화 다운받기
Product Name :
Version : 1.0
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder :
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:37
Uninstall String : C:\WINDOWS\system32\Uninstallbarcon.exe
Installation Change String:
Quiet Uninstall : No
Registry Key : barcon
Installer : Nullsoft Install System
Root Key : HKEY_LOCAL_MACHINE
==================================================
==================================================
Entry Name : 해피로또
Product Name :
Version : 0.9
Company :
Description :
Obsolete : No
Uninstall : Yes
Installation Folder : C:\Program Files\HappyLotto\
Install Source :
Web Site :
Installation Date : 2010-05-29 오전 7:07:31
Uninstall String : "C:\Program Files\HappyLotto\unins000.exe"
Installation Change String:
Quiet Uninstall : Yes
Registry Key : 해피로또_is1
Installer : Inno Setup
Root Key : HKEY_LOCAL_MACHINE
==================================================
관련글 보기
2010/05/29 - [바이러스] - WinLNM, winlnm.dat, tqb2.dll, ysa 스파이웨어 삭제하기
2010/05/28 - [시스템관리] - 인터넷 검색도우미 스마트키워드 SmartKeyword.dll 삭제하기
2010/05/27 - [시스템관리] - 인터넷 검색도우미 오픈샤퍼 OpenShopper 삭제하기
2010/05/27 - [바이러스] - 검색도우미 인포탭 infotab, 바탕인 batangin 삭제하기
2010/05/26 - [윈도우즈/컴퓨터] - Live keys, psngrro, 브레인미니 검색도우미 삭제하기
2010/05/25 - [시스템관리] - 애드웨어 스파이웨어 삭제 및 시스템관리도구 Hijackthis
