Limeshop은 저급한 p2p 프로그램인 Limewire 에 가끔 번들로 들어있는 스파이웨어이다.

http://www.hani.co.kr/section-010000000/2002/10/010000000200210012241100.html
http://ca.com/kr/securityadvisor/pest/pest.aspx?id=453088059

아래 사항을 모두 제거한다.

자동실행 레퍼런스

HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run limeshop

DLL 파일

%program_files%\limewire\2.8.6\limewire20.dll
%program_files%\limewire\genericwindowsutils.dll
%program_files%\limewire\2.8.6\browserpage.dll
limeshop.dll

레지스트리 항목

HKEY_CURRENT_USER\software\microsoft\internet explorer\menuext\limeshop preferences
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\limewire
HKEY_LOCAL_MACHINE\software\limewire
HKEY_LOCAL_MACHINE\software\magnet\handlers\limewire
HKEY_LOCAL_MACHINE\software\magnet\handlers\limewire\type
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata\s-1-5-18\components\9e11dbbf317d89b4f92af7d63ab22d26
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata\s-1-5-18\components\a8cebe6cec02c7d40a450c6455a6ad2e
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\installer\userdata\s-1-5-18\components\c0da82cffcfbb79419d1189c955ee262
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run limeshop
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\bet.url
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\bonzi.url
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\browserpage.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\limeshop.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\limeshop.html
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\limeshop.url
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\limewire.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\limewire.jar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\money.url
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls c:\program files\limewire\2.9.8\root\magnet10\options.js
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\limeshop.xml
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\limewire
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run limeshop

%profile%\.limewire
%profile%\.limewire\.networkshare
%profile%\.limewire\.networkshare\incomplete
%profile%\.limewire\themes
%profile%\.limewire\themes\black_theme
%profile%\.limewire\themes\limewire_theme
%profile%\.limewire\themes\other_theme
%profile%\.limewire\themes\windows_theme
%profile%\.limewire\xml
%profile%\.limewire\xml\misc
%profile%\.limewire\xml\schemas
%program_files%\limeshop
%program_files%\limewire
%program_files%\limewire\.networkshare
%program_files%\limewire\.networkshare\limewirepackedjars4.12.11.7z
%program_files%\limewire\2.8.6
%program_files%\limewire\root
%program_files%\limewire\root\magnet10
%programs%\limewire

---