아래에 표시된 명령줄을 수정하거나 주석문을 삭제하여 블로그 또는 지식인, 웹사이트에 펌질하는 경우가 발
견되면 IP 차단됩니다. (IP/24 = IP 0~255)
현재페이지 주소를 링크해주시기 바랍니다.
현재페이지 주소 :
http://windowdel.com/nk.php?w=150630-lotterystream_eg-removal-guide
관련태그 : , LotteryStream, Search Assistant BHO, Toolbar BHO
익스플로러 및 작업표시줄이 모두 종료되므로 모든 프로그램을 닫고 시작하세요.
[시작] - [프로그램] - [보조 프로그램] - [명령 프롬프트]를 실행합니다.
* Windows 7, Windows 8, Windows 10, Windows 11 운영체제에서는 [명령프롬프트]를 마우스 우클릭하여 [관리자권한으로 실행]을 선택하세요.
명령 프롬프트를 실행하면 아래와 같은 검은 화면이 나오고 커서가 깜빡깜빡 거립니다.
화면에 나오는 글자나 모양이 약간 다를 수도 있는데 신경쓰지 마세요. 아래와 같이 비슷한 화면만 나오면 됩니다.
* Windows 7, Windows 8, Windows 10, Windows 11 운영체제에서는 [관리자:명령프롬프트] 라는 내용이 표시되어 있어야 합니다.
|
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
|
아래에 적색으로 표시된 명령줄 안에서 마우스를 연속세번 빠르게 클릭(따다닥)하면 자동으로 명령줄이 모두 선택이 됩니다.
선택된 영역에서 마우스우클릭해서 [복사]를 선택합니다.
* 자동으로 선택이 안되면 바로 아래 적색라인부터 하단 적색라인까지 드래그한 다음, 우클릭하여 [복사]하세요.
* 드래그가 뭔소린지 모르거나 드래그를 할 줄 모르는 왕초보인 경우 : 키보드 [ Ctrl ] + [ a ] 를 동시에 누르고, [ Ctrl ] + [ c ] 를 동시에 눌러 모두 복사하세요.
-----------------------------------------------------------------------------------------------------------------------------------
echo Start
echo #
echo ##################### Default System32 directory for x86 x64 #####################
echo #
echo 000 change to the default system directory & cd %WINDIR% & cd system32
echo Kill Process & taskkill /im explorer.exe /f & echo wait
echo Kill Process & tskill explorer & echo wait
echo Kill Process & taskkill /im IEXPLORE.EXE /f & echo wait
echo Kill Process & tskill IEXPLORE & echo wait
echo wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo Created by http://windowdel.com/nk.php?w=150630-lotterystream_eg-removal-guide
echo 명령줄 수정금지(본 컨텐츠를 무단으로 수정하여 배포하면 아이피 통으로 차단됩니다.)
echo 001 Service stop & sc stop "LotteryStream_egService" & echo wait
echo 001 Service delete & sc delete "LotteryStream_egService" & echo wait
echo 002 & taskkill /im "AppIntegrator.exe" /f
echo 002 & tskill "AppIntegrator"
echo 002 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 002 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\AppIntegrator.exe"
echo 002 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\AppIntegrator.exe"
echo 003 & taskkill /im "AppIntegrator64.exe" /f
echo 003 & tskill "AppIntegrator64"
echo 003 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 003 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\AppIntegrator64.exe"
echo 003 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\AppIntegrator64.exe"
echo 004 & taskkill /im "CrExtPeg.exe" /f
echo 004 & tskill "CrExtPeg"
echo 004 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 004 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\CrExtPeg.exe"
echo 004 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\CrExtPeg.exe"
echo 005 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egbar.dll"
echo 005 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egbar.dll"
echo 006 & taskkill /im "egbarsvc.exe" /f
echo 006 & tskill "egbarsvc"
echo 006 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 006 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egbarsvc.exe"
echo 006 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egbarsvc.exe"
echo 007 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egSrcAs.dll"
echo 007 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egSrcAs.dll"
echo Current time 2024-11-23 09:24:55
echo Remove BHO Start
echo 008 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 008 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 008 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 008 & reg.exe delete "HKCR\CLSID\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 009 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 009 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 009 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 009 & reg.exe delete "HKCR\CLSID\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo Remove BHO End
echo Remove Toolbar Start
echo 010 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 010 & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 010 & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 010 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 010 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 010 & reg.exe delete "HKCR\CLSID\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo Remove Toolbar End
echo Remove Startup Start
echo 011 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 011 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 011 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 011 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 011 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream AppIntegrator 32-bit" /f
echo 012 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 012 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 012 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 012 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 012 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream AppIntegrator 64-bit" /f
echo 013 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream EPM Support" /f
echo 013 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream EPM Support" /f
echo 013 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream EPM Support" /f
echo 013 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream EPM Support" /f
echo 013 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream EPM Support" /f
echo Remove Startup End
echo 014 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LotteryStream_eg" /f
echo 014 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\LotteryStream_eg" /f
echo 015 your ip is 3.144.90.108 do not delete this label.
echo 016 Remove All Folder and Subfolder Start
echo 017 & rmdir /s /q "%PROGRAMFILES%\LotteryStream_eg"
echo 017 & rmdir /s /q "%PROGRAMFILES(x86)%\LotteryStream_eg"
echo 017 Remove All Folder and Subfolder End
echo http://windowdel.com/nk.php?w=150630-lotterystream_eg-removal-guide
echo 명령줄 수정금지(본 컨텐츠를 무단으로 수정하여 배포하면 아이피 통으로 차단됩니다.)
echo do not stop here for x86, you have to start explorer process.
echo #
echo Please don't put this batch-script on your blog or website, get this url.
echo http://windowdel.com/nk.php?w=150630-lotterystream_eg-removal-guide
echo #
echo ##################### Change directory SysWOW64 for x64 OS #####################
echo #
echo Remove x86 Application's registry for x64 OS & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo change to the syswow64 directory & cd %WINDIR% & cd syswow64
echo 018 Service stop & sc stop "LotteryStream_egService" & echo wait
echo 018 Service delete & sc delete "LotteryStream_egService" & echo wait
echo 019 & taskkill /im "AppIntegrator.exe" /f
echo 019 & tskill "AppIntegrator"
echo 019 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 019 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\AppIntegrator.exe"
echo 019 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\AppIntegrator.exe"
echo 020 & taskkill /im "AppIntegrator64.exe" /f
echo 020 & tskill "AppIntegrator64"
echo 020 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 020 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\AppIntegrator64.exe"
echo 020 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\AppIntegrator64.exe"
echo 021 & taskkill /im "CrExtPeg.exe" /f
echo 021 & tskill "CrExtPeg"
echo 021 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 021 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\CrExtPeg.exe"
echo 021 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\CrExtPeg.exe"
echo 022 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egbar.dll"
echo 022 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egbar.dll"
echo 023 & taskkill /im "egbarsvc.exe" /f
echo 023 & tskill "egbarsvc"
echo 023 taskkill wait & ping 127.0.0.1 -n 1 > %WINDIR%\ping_wait.txt
echo 023 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egbarsvc.exe"
echo 023 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egbarsvc.exe"
echo 024 & del /q "%PROGRAMFILES%\LotteryStream_eg\bar\1.bin\egSrcAs.dll"
echo 024 & del /q "%PROGRAMFILES(x86)%\LotteryStream_eg\bar\1.bin\egSrcAs.dll"
echo Current time 2024-11-23 09:24:55
echo Remove BHO Start
echo 025 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 025 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 025 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 025 & reg.exe delete "HKCR\CLSID\{d482e5a7-1826-4427-800c-a35f8c1db0bf}" /f
echo 026 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 026 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 026 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo 026 & reg.exe delete "HKCR\CLSID\{79c092df-1b5c-4f22-b73d-75f30e8857b9}" /f
echo Remove BHO End
echo Remove Toolbar Start
echo 027 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 027 & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 027 & reg.exe delete "HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks" /v "{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 027 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 027 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo 027 & reg.exe delete "HKCR\CLSID\{4fe13476-4fea-4190-8841-e89e55803ede}" /f
echo Remove Toolbar End
echo Remove Startup Start
echo 028 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 028 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 028 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 028 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 32-bit" /f
echo 028 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream AppIntegrator 32-bit" /f
echo 029 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 029 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 029 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 029 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream AppIntegrator 64-bit" /f
echo 029 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream AppIntegrator 64-bit" /f
echo 030 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream EPM Support" /f
echo 030 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "LotteryStream EPM Support" /f
echo 030 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream EPM Support" /f
echo 030 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" /v "LotteryStream EPM Support" /f
echo 030 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LotteryStream EPM Support" /f
echo Remove Startup End
echo 031 & reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LotteryStream_eg" /f
echo 031 & reg.exe delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\LotteryStream_eg" /f
echo 032 your ip is 3.144.90.108 do not delete this label.
echo 033 Remove All Folder and Subfolder Start
echo 034 & rmdir /s /q "%PROGRAMFILES%\LotteryStream_eg"
echo 034 & rmdir /s /q "%PROGRAMFILES(x86)%\LotteryStream_eg"
echo 034 Remove All Folder and Subfolder End
echo http://windowdel.com/nk.php?w=150630-lotterystream_eg-removal-guide
echo 035 rechange dir to system32 & cd %WINDIR% & cd system32
echo del ping_wait.txt & del /q %WINDIR%\ping_wait.txt
echo 036 & explorer.exe & echo explorer start
echo End
-----------------------------------------------------------------------------------------------------------------------------------
[복사]를 했으면 명령프롬프트 화면의 중간에서 마우스를 우클릭하여 [붙여넣기]를 선택하면 프로그램이 모두 삭제됩니다.
* 명령프롬프트에서는 운영체제 버전에 따라 단축키(Ctrl + v)가 먹히지 않는 경우도 있습니다. 마우스 우클릭으로 붙여넣기 하세요.
|
|
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corpation. All right reserved.
C:\Users\Administrator>
|
프로세스를 종료하면서 다음명령줄(삭제)이 너무빠르게 시작되어 파일이 삭제가 안되는 경우가 있으므로
모든 명령줄이 실행된 후 프롬프트창에서 한번 더 붙여넣기하세요.
명령줄이 모두 실행되면 명령프롬프트창은 닫으면 됩니다.
유사한 다른 프로그램 삭제하기
00360 - boanq v2015.05.12
00377 - Browshot - PROGRAMFILES v2015.07.16
00369 - DownSpeedTest_dq v2015.06.30
00362 - Edu App v2015.06.02
00370 - FL Player v2015.06.30
00373 - LemonWebtoon - PROGRAMFILES v2015.07.09
00367 - LogOnNet Grato v2015.06.24
00365 - mousesolution v2015.06.15
00375 - oldfred - APPDATA v2015.07.14
00372 - OneSystemCare
00361 - Reason Security
00371 - SendFilesFree_e4 v2015.06.30
00364 - Shopsafer Komodia v2015.06.04
00374 - tripp - APPDATA v2015.07.14
00366 - viewcon v2015.06.15
00363 - WeatherTool 1.2.0.9912
00376 - WinExpand_v2dnl v2015.07.16
00359 - Wooden Seal v2015.05.08
|