웹 사이트 광고 배너 또는 제휴 프로그램 방식으로 인터넷 다운로드 속도 체크 기능을 제공하는 것으로 홍보하는 해외에서 제작된 "Internet Speed Tracker Internet Explorer Toolbar" 광고 툴바(Toolbar) 프로그램에 대해 살펴보도록 하겠습니다.
배포 파일<SHA-1 : 0f1ae7cb25d9197c2de5a073b856d5e2666bfbe7 - avast! : Win32:Mindspark-A [PUP] (VT : 11/56)>을 통해 설치되는 과정에서 기본값에서는 홈(새 탭) 페이지를 Ask.com으로 변경하며 부가적으로 검색 공급자도 변경하여 설치가 진행됩니다.
프로그램 설치 과정에서는 특정 서버에서 설치 파일을 다운로드하여 "C:\Users\(사용자 계정)\AppData\Local\Temp\nss9859.tmp\InternetSpeedTrackerSetup.exe" 파일<SHA-1 : 14a7b7d9e5071c7f9264d1434a8681fa742e5ea9 - Kaspersky : not-a-virus:WebToolbar.Win32.MyWebSearch.to (VT : 18/56)>로 생성하여 설치 후 자가 삭제 처리됩니다.
C:\Program Files\InternetSpeedTracker_9t
C:\Program Files\InternetSpeedTracker_9t\bar
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll :: 도구 모음(Internet Speed Tracker) 및 브라우저 도우미 개체(Toolbar BHO) 등록 파일
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe :: 서비스(InternetSpeedTracker_9tService) 등록 파일, 메모리 상주 프로세스
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbprtct.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdatact.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdlghk.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdlghk64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tfeedmg.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thighin.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thtmlmu.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thttpct.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tidle.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tmedint.exe :: 시작 프로그램(Internet Speed Tracker EPM Support) 등록 파일
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tmlbtn.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tPlugin.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tregiet.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tscript.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tskin.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tskplay.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tSrcAs.dll :: 브라우저 도우미 개체(Search Assistant BHO) 등록 파일
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9ttpinst.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator.exe :: 메모리 상주 프로세스
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator64.exe :: 메모리 상주 프로세스(64비트 환경)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AssistMonitor.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AssistMonitor64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\arbiter.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\arbiter64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Bar
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Bar\assist.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Dialog
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Dialog\assist.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\arbiter.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\arbiter64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\assist.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_enable
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_enable\arbiter.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_enable\arbiter64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\CrExt.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\CrExtP9t.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\DpnMngr.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\FF-NativeMessagingDispatcher.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HiddenToolbarReminder.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HkFxMgr.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HkFxMgr64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\InstallEnabler.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\t8EPMSup.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8EXTEX.DLL
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8EXTPEX.DLL
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8HTML.DLL
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\t8Res.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8TICKER.DLL
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\ToolbarGuard.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\ToolbarGuard64.dll
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\TPIManagerConsole.exe
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\Verify.dll
C:\Program Files\InternetSpeedTracker_9t\bar\assists
C:\Program Files\InternetSpeedTracker_9t\bar\gen1
C:\Program Files\InternetSpeedTracker_9t\bar\Message
C:\Program Files\InternetSpeedTracker_9t\bar\Settings
C:\Users\(사용자 계정)\AppData\Local\InternetSpeedTracker_9t
C:\Users\(사용자 계정)\AppData\LocalLow\InternetSpeedTracker_9t
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll
- SHA-1 : 19f2d45d5e265562bdf05bca0596488544414cb4
- ESET : a variant of Win32/Toolbar.MyWebSearch.AS potentially unwanted (VT : 16/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe
- SHA-1 : ae1a1cdcf739bb7322dcd653beeea04a8102bc3e
- AVG : Toolbar.MyWebSearch.AO (VT : 17/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbprtct.dll
- SHA-1 : 1ad6181e3cf3670ca257bedcbccac304df6e8406
- avast! : Win32:Mindspark-A [PUP] (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdatact.dll
- SHA-1 : 3a443c441ce26968d43b68133b3cf233978101fc
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 14/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdlghk.dll
- SHA-1 : e16d83928833f651b02a4c8a1643b327d6099265
- ESET : a variant of Win32/Toolbar.MyWebSearch.AS potentially unwanted (VT : 14/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tdlghk64.dll
- SHA-1 : ba64629c1f328dd7bc8540e35510ad25e83b5d5e
- avast! : Win32:Mindspark-A [PUP] (VT : 11/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tfeedmg.dll
- SHA-1 : 6efb016a4a943223c674b15c56f7b7163deff917
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thighin.exe
- SHA-1 : c68e4d446dcfc572ce427c0047de6971721e0356
- ESET : a variant of Win32/Toolbar.MyWebSearch.AJ potentially unwanted (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thtmlmu.dll
- SHA-1 : 04f59a52fac86ab47a8fdf3ee6e8521fe06acb66
- ESET : a variant of Win32/Toolbar.MyWebSearch.AT potentially unwanted (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9thttpct.dll
- SHA-1 : 4f0fc6c5fc525630c18b9652c53003b2a63370c3
- avast! : Win32:Mindspark-A [PUP] (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tidle.dll
- SHA-1 : 4bd6399111f82b4350438ec6cbe3b2de77e1b975
- ESET : a variant of Win32/Toolbar.MyWebSearch.AE potentially unwanted (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tmedint.exe
- SHA-1 : ec597c73f49c8e283d4b0916014cfaa449d41658
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 11/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tmlbtn.dll
- SHA-1 : 6a146b8be29fb679475db568acdd8fd0a97d9664
- avast! : Win32:Mindspark-A [PUP] (VT : 12/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tPlugin.dll
- SHA-1 : 55cac5a57cc85a6fce2a11105dd6de7124eb3c0b
- ESET : a variant of Win32/Toolbar.MyWebSearch.AJ potentially unwanted (VT : 14/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tregiet.dll
- SHA-1 : 247ccbcef0a6bcd560592689f7ea0e1be272a22a
- AVG : Toolbar.MyWebSearch.BD (VT : 15/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tscript.dll
- SHA-1 : 9a7f7026dc72de7d56612791a8626c2434468a98
- AVG : Toolbar.MyWebSearch.BB (VT : 17/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tskin.dll
- SHA-1 : c3af97426035ad878538e718e68629e109be0ccf
- ESET : a variant of Win32/Toolbar.MyWebSearch.P potentially unwanted (VT : 13/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tskplay.exe
- SHA-1 : c5c1723357ceab2a263f9c8882164d84f092a0e6
- AhnLab V3 : Trojan/Win32.Buzus.C107752 (VT : 15/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tSrcAs.dll
- SHA-1 : 1e0f26ae98ca326e0936165d040d3b2d44699de7
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9ttpinst.dll
- SHA-1 : d66e9fbef492d450f33c139ec8f1b0d9b1ca51f4
- avast! : Win32:Mindspark-A [PUP] (VT : 11/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator.exe
- SHA-1 : 692f1d75986fcd2ff67170eaec5692e0f2f82199
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator64.exe
- SHA-1 : ee74d6c0e8ef42977cdb3c6f82f8c35d99def7bf
- ESET : Win64/Toolbar.MyWebSearch.F potentially unwanted (VT : 10/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub.dll
- SHA-1 : 295561e494f1ae925162567da5fedcd2e05ea76d
- ESET : a variant of Win32/Toolbar.MyWebSearch.AU potentially unwanted (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub64.dll
- SHA-1 : a241a9f6d80739d6d5f20d615ab35f17b8a38d4d
- avast! : Win32:Mindspark-A [PUP] (VT : 10/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AssistMonitor.dll
- SHA-1 : 836cfc90a36d675fc4a0ec841026ec54b655a9f3
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\AssistMonitor64.dll
- SHA-1 : 2229f271a73fd2832c56cc989a3abbf3eee1fcff
- ESET : a variant of Win64/Toolbar.MyWebSearch.F potentially unwanted (VT : 9/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\arbiter.dll
- SHA-1 : 84822faac021c032e294892a5b582b60bc0194a8
- ESET : a variant of Win32/Toolbar.MyWebSearch.AU potentially unwanted (VT : 11/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\arbiter64.dll
- SHA-1 : 58dd3f05b137988ca7c706782cb34bdde066206f
- avast! : Win32:Mindspark-A [PUP] (VT : 10/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Bar\assist.exe
- SHA-1 : fa7337d15b3cbc584e94f711d8b41def55aa083d
- avast! : Win32:Mindspark-A [PUP] (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\Apa\Dialog\assist.exe
- SHA-1 : cafe1725018cb58a5550a1f52cd7dc7ef62941aa
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\arbiter.dll
- SHA-1 : 7dab004d5214f21ea0c271892b8e7a8e178cf2c6
- AhnLab V3 365 Clinic : PUP/Win32.MyWebSearch.R120263 (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\arbiter64.dll
- SHA-1 : c64f626ca8a2ab2bcd7dbdb594bde0782e742979
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 9/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\assist.exe
- SHA-1 : 9aba97c3e8e4b2d092854afff1c840534f2489bf
- avast! : Win32:Mindspark-A [PUP] (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_enable\arbiter.dll
- SHA-1 : e57e25536991323f5440b63665d90cbe2b491ca8
- avast! : Win32:Mindspark-A [PUP] (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\assists\ie_enable\arbiter64.dll
- SHA-1 : 19c1c86fb5358732c3d2fe2c1b424572eb41e9ca
- ESET : a variant of Win32/Toolbar.MyWebSearch.AR potentially unwanted (VT : 10/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\CrExt.dll
- SHA-1 : 848d607be256d7ff182611f1464284efd312b3d7
- ESET : a variant of Win32/Toolbar.MyWebSearch.Z potentially unwanted (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\CrExtP9t.exe
- SHA-1 : b6ff4e7e4eaf04ba5450ef7750bf2f36c9bb1bf3
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 15/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\DpnMngr.dll
- SHA-1 : 7778a1cf6b4e05e485d88e06480f759e5e5e7484
- avast! : Win32:Mindspark-A [PUP] (VT : 14/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\FF-NativeMessagingDispatcher.dll
- SHA-1 : f01e5e281e111da55e00418125d0188743b6b0a8
- ESET : a variant of Win32/Toolbar.MyWebSearch.AO potentially unwanted (VT : 12/55)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HiddenToolbarReminder.dll
- SHA-1 : cf87558d2fc11bd4ba900a0c44a85eb18188abc0
- avast! : Win32:Mindspark-A [PUP] (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HkFxMgr.dll
- SHA-1 : 3003c1ced1fbe93555a596ade8af3dc8572439df
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\HkFxMgr64.dll
- SHA-1 : 61898e9e0a8e9872c36732873b1dd3cbd6c084d4
- ESET : a variant of Win64/Toolbar.MyWebSearch.E potentially unwanted (VT : 9/54)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\InstallEnabler.dll
- SHA-1 : 9aad630012b1fdd6cc68503929c0952ea68e14eb
- avast! : Win32:Mindspark-A [PUP] (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\t8EPMSup.dll
- SHA-1 : fd13eb375124b2ecae8266304e9339222853cc0c
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8EXTEX.DLL
- SHA-1 : 53fad6f004913ffcb4e2ff2299b684475a5e7060
- ESET : Win32/Toolbar.MyWebSearch.AU potentially unwanted (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8EXTPEX.DLL
- SHA-1 : a720ad9bdf12f894bfde090193380fe66cee21ac
- avast! : Win32:Mindspark-A [PUP] (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8HTML.DLL
- SHA-1 : 40814966ac521b4c89a7f0cfef0f2afc54d2186b
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\t8Res.dll
- SHA-1 : 2b7957c4392f15b736b31c9fcd6d7a28807b05fe
- avast! : Win32:Mindspark-A [PUP] (VT : 7/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\T8TICKER.DLL
- SHA-1 : 9532a3faf3e2b208208143684b4cb2248b8a234d
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\ToolbarGuard.dll
- SHA-1 : 75277f16c17128a229a814f3436fbfd3002085f8
- avast! : Win32:Mindspark-A [PUP] (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\ToolbarGuard64.dll
- SHA-1 : 9c026fe44b81226b618f0afea605c804a2eaee08
- ESET : a variant of Win64/Toolbar.MyWebSearch.F potentially unwanted (VT : 13/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\TPIManagerConsole.exe
- SHA-1 : 09916a871e96ed0508042d199dafbdd3447c930e
- AVG : Toolbar.MyWebSearch.AW (VT : 12/56)
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\Verify.dll
- SHA-1 : a4f27b431dc312b4be986737f7d4961b89ec54c8
- Malwarebytes : PUP.Optional.MindSpark.A (VT : 12/56)
"Mindspark Interactive Network" 디지털 서명이 포함된 "Internet Speed Tracker Internet Explorer Toolbar" 프로그램은 "C:\Program Files\InternetSpeedTracker_9t" 폴더에 주요 파일을 생성합니다.
"InternetSpeedTracker_9tService (표시 이름 : Internet Speed TrackerService)" 서비스 항목을 등록하여 시스템 시작시 "C:\PROGRA~1\INTERN~2\bar\1.bin\9tbarsvc.exe" 파일을 자동 실행하여 메모리에 상주하도록 구성되어 있습니다.
또한 ["C:\PROGRA~1\INTERN~2\bar\1.bin\9tmedint.exe" t8EPMSup.dll,S] 파일을 시작 프로그램(Internet Speed Tracker EPM Support)으로 등록하여 자동 실행 후 자동 종료 처리됩니다.
프로그램이 설치된 환경에서 Internet Explorer 웹 브라우저를 최초 실행시 기본 검색 공급자에서 "Ask Web Search (int.search.tb.ask.com)" 검색 공급자로 변경을 유도합니다.
또한 홈 페이지를 "Ask Home Page (home.tb.ask.com)"으로 자동 변경하며, 인터넷 검색, 인터넷 속도 측정, 인터넷 라디오, 날씨 정보를 제공하는 "Internet Speed Tracker" 툴바(Toolbar)를 도구 모음에 표시합니다.
참고로 Internet Explorer 웹 브라우저 실행시 AppIntegrator.exe 프로세스(32/64비트) 및 AppIntegrator64.exe 프로세스(64비트)를 추가적으로 로딩하여 메모리에 상주합니다.
|
이름 |
Internet Speed Tracker |
|
게시자 |
Mindspark Interactive Network |
|
유형 |
도구 모음 |
|
CLSID |
{665CB5B7-4C3B-4995-8CEC-1F4D5860EDC9} |
|
폴더 / 파일 |
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll |
|
이름 |
Toolbar BHO |
|
게시자 |
Mindspark Interactive Network |
|
유형 |
브라우저 도우미 개체 |
|
CLSID |
{9E28B297-11D4-4293-AA6F-558658EE66AE} |
|
폴더 / 파일 |
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll |
|
이름 |
Search Assistant BHO |
|
게시자 |
Mindspark Interactive Network |
|
유형 |
브라우저 도우미 개체 |
|
CLSID |
{CC28794A-99D4-4B1B-BCCF-B065CE5F9FEB} |
|
폴더 / 파일 |
C:\Program Files\InternetSpeedTracker_9t\bar\1.bin\9tSrcAs.dll |
Internet Explorer 웹 브라우저의 확장 프로그램 등록값을 확인해보면 "Internet Speed Tracker" 툴바(Toolbar)를 도구 모음에 등록하며 인터넷 검색시 다음과 같은 행위를 위한 브라우저 도우미 개체(BHO)를 등록합니다.
사용자가 인터넷 검색시 입력한 검색 키워드 값을 후킹하여 "Internet Speed Tracker" 툴바(Toolbar)에 포함된 검색 영역에 자동 추가하여 툴바를 통한 검색시 Ask.com 검색 결과를 표시할 수 있습니다.
■ "Internet Speed Tracker Internet Explorer Toolbar" 광고 툴바 삭제 방법
(a) "보조프로그램 → 명령 프롬프트" 메뉴를 "관리자 권한으로 실행"하여 생성된 명령 프롬프트 창에 [sc stop "InternetSpeedTracker_9tService"] 명령어를 입력 및 실행하여 메모리에 상주하는 서비스 프로세스(9tbarsvc.exe)를 자동 종료하시기 바랍니다.
그 후 Windows 작업 관리자를 실행하여 AppIntegrator.exe 프로세스를 찾아 종료하시기 바라며, 64비트 환경에서는 AppIntegrator64.exe 프로세스를 추가적으로 종료하시기 바랍니다.
(b) Internet Explorer 웹 브라우저를 종료한 상태에서 제어판에 등록된 "Internet Speed Tracker Internet Explorer Toolbar" 삭제 항목을 이용하여 프로그램 제거를 진행하시기 바라며, 삭제시 생성된 "Uninstall Internet Speed Tracker Internet Explorer Toolbar" 창에서 "예(Y)" 버튼을 클릭하시기 바랍니다.
또한 추가적으로 생성되는 "Internet Speed Tracker" 창에서는 제거 후 Windows 재부팅을 요구하고 있으며, Internet Explorer 웹 브라우저의 홈 페이지 및 기본 검색 공급자는 사용자가 변경하도록 안내하고 있습니다.
그러므로 "OK" 버튼을 클릭한 후에는 반드시 Windows 재부팅을 진행한 후 다음의 파일을 추가적으로 삭제하시기 바랍니다.
- C:\Program Files\9tres.dll
- C:\Program Files\9tUninstall Internet Speed Tracker.dll
(c) Windows 재부팅 후 인터넷 옵션의 홈 페이지에 등록된 홈 페이지 주소를 사용자가 원하는 URL 주소로 변경하시기 바랍니다.
(d) Internet Explorer 웹 브라우저의 "추가 기능 관리 → 검색 공급자" 메뉴를 실행하여 Bing (기본값) 또는 사용자가 원하는 검색 공급자를 선택하여 "기본값으로 설정" 버튼을 클릭한 후, "Ask Web Search" 항목을 선택하여 "제거" 버튼을 클릭하시기 바랍니다.
(e) "Internet Speed Tracker Internet Explorer Toolbar" 프로그램 삭제 후 제거되지 않은 서비스 등록값을 삭제하기 위해서는 "보조프로그램 → 명령 프롬프트" 메뉴를 "관리자 권한으로 실행"하여 생성된 명령 프롬프트 창에 [sc delete "InternetSpeedTracker_9tService"] 명령어를 입력 및 실행하여 등록된 서비스 레지스트리 값을 자동 삭제하시기 바랍니다.
HKEY_CURRENT_USER\Software\AppDataLow\Software\InternetSpeedTracker_9t
HKEY_CURRENT_USER\Software\Classes\CLSID\{b287e6b2-868b-4ac1-acce-c69eb5fd29d1}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions
- {665CB5B7-4C3B-4995-8CEC-1F4D5860EDC9}
- {9E28B297-11D4-4293-AA6F-558658EE66AE}
- {CC28794A-99D4-4B1B-BCCF-B065CE5F9FEB}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- Start Page = (사용자 지정 홈 페이지 URL 주소) :: 변경 전
- Start Page = h**p://home.tb.ask.com/index.jhtml?n=781BB9A2&p2=^BBQ^xdm007^YYA^kr&ptb=603A02DE-1339-476F-8EBC-
973167E32C75&si=CNy43vO1y8cCFYQHvAod6swBeg :: 변경 후
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes
- DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} :: 변경 전
- DefaultScope = {a0892e19-6051-4ae6-9a5f-91542a166b2b} :: 변경 후
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{a0892e19-6051-4ae6-9a5f-91542a166b2b}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
- {665CB5B7-4C3B-4995-8CEC-1F4D5860EDC9}
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks
- {b287e6b2-868b-4ac1-acce-c69eb5fd29d1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00d567a7-288b-452a-86d9-4fa0f9b016c7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07A3B0CA-D7F7-4B0B-923D-CE2443924B9A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2d8d602c-3f3a-4e10-8de0-649e53fbd8b3}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3bb92c80-a0a8-4fe7-a687-84f0eab37857}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{481dd1d9-2619-4136-bead-8766ae46542d}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4e32a64d-a039-4be1-a529-736c30c4dff2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5e694d07-1b76-414b-a9bc-e9e587d9ea37}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63e0b5d3-81e0-4fcf-a195-71c7c73e16db}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{665cb5b7-4c3b-4995-8cec-1f4d5860edc9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{936cbb2c-016a-4ed4-ab0d-4959192cfd02}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9e28b297-11d4-4293-aa6f-558658ee66ae}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b62fecee-b019-42aa-aefb-9f8d07b22de1}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{be096679-462a-4ffc-aa06-744a9f2f9982}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{cc28794a-99d4-4b1b-bccf-b065ce5f9feb}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eba23a0b-4d36-4a6d-b165-82c666042145}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f296aa45-8bb3-4ad4-a29e-95d1fd51aec2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{02051E18-6856-435E-8A6F-F8AFB1A81F3A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0E7638FB-3364-44E1-9FFA-2CA0705A3455}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0EFBF9B5-932C-4FEE-9464-27EA7527C156}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FCCBFB5-9368-4C7C-9AA6-E2002C13A9E4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{17F47F3D-247B-4F47-8C2C-E1DA9CBE11C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2982B64E-93D2-4E5C-81AB-A913C55E5367}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3FD38CC0-2E60-457E-96FC-99DEA1393818}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55816D16-29AA-47B3-B936-359853F93CD8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5C4C878F-F47E-4C23-92EF-C323D6201DC4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62FEDFC2-9688-41F4-8DDB-25303AEE12E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{63AD0951-229A-4F3B-9E96-B4891811A156}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64C4BD7C-A0A5-4753-A507-6ED10DB57A44}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{67866A4D-618A-4E57-BE3E-44E98042F87C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7D521939-86AD-44AD-902F-22DEBF459A1A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7F646864-EFD2-4DFB-8BBA-A94D73846934}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{81FDA3B2-1023-4131-8055-29CE1560C12A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8C38D727-8E46-469E-B8D7-13A819E4D638}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9D57500D-EBAB-4785-9351-A6CFDF03D6A0}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB763D91-A5E5-42B7-B2B1-A4B8E4B86F05}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CC30F14D-75B4-4653-AF4B-19EC1A365E8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D3C2FEF8-CD7D-4D0C-970B-779119CC1488}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DA8ED6ED-916A-4BA7-B0E6-44D17A29256B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F450BE0A-6077-4C17-827C-2918DBCEF9A4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F9AAEFCA-1E44-4173-81ED-F2C5FE58160D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FE050041-3E4D-4FE1-9CC3-A0D48EC98B60}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.FeedManager
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.FeedManager.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.HTMLMenu
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.HTMLMenu.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.HTMLPanel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.HTMLPanel.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.MultipleButton
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.MultipleButton.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.PseudoTransparentPlugin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.PseudoTransparentPlugin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.ScriptButton
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.ScriptButton.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.SettingsPlugin
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.SettingsPlugin.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.ToolbarProtector
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetSpeedTracker_9t.ToolbarProtector.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0B6C9E5C-4E2D-4874-BC84-4A6178E8E179}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{66691CF9-BE04-4664-9958-774EA58A8039}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EF3ED22-5CE4-40EB-97A3-B8A60CED84E9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7268E224-5711-4D24-9373-C54C5E39F833}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7854DF3B-5246-40EB-B52E-3EE3BFD1149E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{88595127-B268-427C-B7A3-E67801771A36}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A3614301-8936-4D32-ABAE-CA34B3FA4B50}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A96EB167-03B0-4EA8-A67F-D6A86458F47A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DD9E9D8C-8FDE-47A9-88A5-142AF39C6256}
HKEY_LOCAL_MACHINE\SOFTWARE\InternetSpeedTracker_9t
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01907012-88bd-4a1e-9e60-9f4d3e5ffc28}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{481dd1d9-2619-4136-bead-8766ae46542d}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63ad0951-229a-4f3b-9e96-b4891811a156}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81fda3b2-1023-4131-8055-29ce1560c12a}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{968e8731-8549-4289-ad46-b9a9eac1d302}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{a0892e19-6051-4ae6-9a5f-91542a166b2b}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
- {665cb5b7-4c3b-4995-8cec-1f4d5860edc9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\{9e28b297-11d4-4293-aa6f-558658ee66ae}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Browser Helper Objects\{cc28794a-99d4-4b1b-bccf-b065ce5f9feb}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\
PreApproved\{07A3B0CA-D7F7-4B0B-923D-CE2443924B9A}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\
PreApproved\{4e32a64d-a039-4be1-a529-736c30c4dff2}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\
PreApproved\{63e0b5d3-81e0-4fcf-a195-71c7c73e16db}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\
PreApproved\{be096679-462a-4ffc-aa06-744a9f2f9982}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- Internet Speed Tracker EPM Support = "C:\PROGRA~1\INTERN~2\bar\1.bin\9tmedint.exe" t8EPMSup.dll,S
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
InternetSpeedTracker_9tbar Uninstall Internet Explorer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\InternetSpeedTracker_9tService
"Internet Speed Tracker Internet Explorer Toolbar" 프로그램에서 제공하는 인터넷 속도 측정 기능은 국내에서는 도움이 되지 않을 것으로 보이며, 홈 페이지 및 검색 공급자 변경과 인터넷 검색을 Ask.com으로 변경이 핵심적인 목표이므로 프로그램 설치로 인하여 웹 브라우저 속도에 영향을 주는 일이 없도록 주의하시기 바랍니다.