tag:blogger.com,1999:blog-18332972515367408242024-03-13T22:44:20.580+07:00papanya afhamjust sharing my life experiencesiwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.comBlogger56125tag:blogger.com,1999:blog-1833297251536740824.post-68035068069476213652020-03-12T10:18:00.001+07:002020-03-12T10:18:18.181+07:005G<div style="background: white;">
<span style="letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Perkembangan dunia yang begitu cepat memaksa koneksi
internet yang lebih cepat. Kecepatan tidak lagi diukur dengan satuan mega per
detik, namun giga. Dengan ini, negara-negara di dunia harus segera menerapkan
teknologi 5G di wilayah mereka.<o:p></o:p></span></div>
<div style="background: white; box-sizing: border-box;">
<span style="letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Beberapa
negara sudah menerapkan 5G, dan pabrikan <i>smartphone</i> pun tidak
mau melewatkan kesempatan ini. Samsung, Oppo, Xiaomi, dan Huawei merespons
dengan mengeluarkan produk-produk yang kompatibel dengan jaringan 5G.
Produk tersebut adalah Oppo Reno 5G, Samsung S10 5G, Xiaomi Mi 9 Pro 5G, Mi Mix
4, dan Huawei Mate 30. Produk tersebut tergolong produk <i>flagship</i>,
yang berarti harga produk tersebut termasuk tinggi.<o:p></o:p></span></div>
<div style="background: white; box-sizing: border-box;">
<span style="letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Bagi
yang belum tahu sebenarnya apa itu jaringan 5G, ini penjelasannya. 5G secara simpelnya adalah
jaringan <i>upgrade</i> dari 4G, namun dengan kecepatan dan gelombang
yang berbeda. 5G menggunakan gelombang milimeter yang kekuatannya 10-100 kali
lebih kuat daripada 4G dan <i>wi-fi</i>.<o:p></o:p></span></div>
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.05pt; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-fareast-font-family: Batang; mso-fareast-language: EN-US;">Kecepatan jaringan 5G diperkirakan bisa mencapai 800
Gbps per detik</span>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-55019264049677538222020-03-12T10:17:00.002+07:002020-03-12T10:17:28.462+07:00Artificial Intelligence<br />
<div class="MsoNormal">
<span style="background: white; font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Kecerdasan
Buatan atau Artificial Intelligence (AI) adalah cabang ilmu komputer yang
menekankan pengembangan intelijen mesin, pola berpikir dan bekerja seperti manusia.
Misalnya, pengenalan suara, pemecahan masalah, pembelajaran, dan perencanaan.</span><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal">
<span style="background: white; font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Dengan
kemajuan teknologi, kita sudah terhubung dengan AI dalam satu atau lain cara —
apakah itu Siri, Watson atau Alexa. Ya, teknologi ini sedang dalam tahap awal
dan semakin banyak perusahaan yang menginvestasikan sumber daya dalam
penelitian mesin, menunjukkan pertumbuhan yang kuat dalam produk dan penerapan
teknologi kecerdasan buatan dalam waktu dekat.<o:p></o:p></span></div>
<div class="MsoNormal">
<span style="background: white; font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.05pt; mso-fareast-font-family: Batang;">Tidak
seperti persepsi umum, <em>contoh penerapan Artificial Intelligence</em> (AI)
tidak terbatas hanya pada industri IT atau teknologi; sebaliknya, banyak
digunakan di bidang lain seperti medis, bisnis, pendidikan, hukum, dan
manufaktur.<o:p></o:p></span></div>
<div class="MsoNormal" style="background: white; margin-top: 24.0pt;">
<span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.05pt; mso-fareast-font-family: Batang;">contoh penerapan kecerdasan buatan yang sudah
gunakan saat ini : <span style="mso-bidi-font-weight: bold;">Siri, Tesla, Cogito,
Netflix, Pandora, Nest Learning Thermostat (Google), Boxever, Flying Drones,
Alexa</span><o:p></o:p></span></div>
<br />iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-87812716062698687052020-03-12T10:16:00.003+07:002020-03-12T10:16:39.952+07:00IoT<br />
<div class="MsoNormal" style="background: white; margin-bottom: 6.25pt; margin-left: 0in; margin-right: 0in; margin-top: 12.5pt; mso-outline-level: 2; text-indent: .5in;">
<u><span style="font-family: "Times New Roman","serif"; font-size: 12.0pt; letter-spacing: -.25pt; mso-bidi-font-weight: bold; mso-fareast-font-family: Batang;">IoT<o:p></o:p></span></u></div>
<br />
<div style="background: white; margin-bottom: 16.3pt; margin-left: 0in; margin-right: 0in; margin-top: 0in;">
Internet of
Things adalah suatu konsep dimana objek tertentu punya kemampuan untuk
mentransfer data lewat jaringan tanpa memerlukan adanya interaksi dari manusia
ke manusia ataupun dari manusia ke perangkat komputer.<o:p></o:p></div>
<div style="background: white; box-sizing: border-box; margin: 0in 0in 16.3pt; overflow-wrap: break-word;">
Internet of Things lebih sering disebut dengan singkatannya yaitu IoT.
IoT ini sudah berkembang pesat mulai dari konvergensi teknologi nirkabel,
micro-electromechanical systems (MEMS), dan juga Internet.<o:p></o:p></div>
<div style="background: white; box-sizing: border-box; margin: 0in 0in 16.3pt; overflow-wrap: break-word;">
IoT ini juga kerap diidentifikasikan dengan RFID sebagai metode
komunikasi. Walaupun begitu, IoT juga bisa mencakup teknologi-teknologi sensor
lainnya, semacam teknologi nirkabel maupun kode QR yang sering kita temukan di
sekitar kita.<o:p></o:p></div>
<div style="background: white; box-sizing: border-box; margin: 0in 0in 16.3pt; overflow-wrap: break-word;">
Apa saja kemampuan dari IoT? Adapun kemampuannya bermacam-macam
contohnya dalam berbagi data, menjadi remote control, dan masih banyak lagi
yang lainnya. Sebenarnya fungsinya termasuk juga diterapkan ke benda yang ada
di dunia nyata, di sekitar kita. Apa saja contohnya? Contohnya adalah untuk
pengolahan bahan pangan, elektronik, dan berbagai mesin atau teknologi lainnya yang
semuanya tersambung ke jaringan lokal maupun global lewat sensor yang tertanam
dan selalu menyala aktif.<o:p></o:p></div>
<div style="background: white; box-sizing: border-box; margin: 0in 0in 16.3pt; overflow-wrap: break-word;">
Jadi, sederhananya istilah Internet of Things ini mengacu pada mesin
atau alat yang bisa diidentifikasikan sebagai representasi virtual dalam strukturnya
yang berbasis Internet<o:p></o:p></div>
<div style="background: white; margin-bottom: 16.3pt; margin-left: 0in; margin-right: 0in; margin-top: 0in;">
IoT bekerja
dengan memanfaatkan suatu argumentasi pemrograman, dimana tiap-tiap perintah
argumen tersebut bisa menghasilkan suatu interaksi antar mesin yang telah
terhubung secara otomatis tanpa campur tangan manusia dan tanpa terbatas jarak
berapapun jauhnya.</div>
iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-50547777231852731672016-12-28T10:37:00.000+07:002016-12-28T10:37:01.020+07:00Sound Clip TELOLET<br />
<br />
Biar dibilang kenikian, nih saya upload berbagai macam klip suara TELOLET dalam format OGG dan MP3<br />
<br />
daripada kudu nguber-uber bus yang lagi ngebut, mending save aja nih sound klip nya di telepon pintar mu, dengerin sampai PUASSS<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-S4NEl4fPKhw/WGMyJ6pbS4I/AAAAAAAACrQ/cZbzErv90PM4_bgI0DlbzekNwId00VtqACLcB/s1600/Fenomena-Unik-Pemburu-Klakson-Telolet-Bus.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="296" src="https://3.bp.blogspot.com/-S4NEl4fPKhw/WGMyJ6pbS4I/AAAAAAAACrQ/cZbzErv90PM4_bgI0DlbzekNwId00VtqACLcB/s400/Fenomena-Unik-Pemburu-Klakson-Telolet-Bus.jpg" width="400" /></a></div>
<br />
<br />
supaya gampang downloadnya, saya upload NIH ke Google Drive GA PAKE IKLAN<br />
langsung aja om sedooot om<br />
<br />
<a href="https://drive.google.com/open?id=0Bw0dQe53AE60bWxiSjdrbHY1ZzQ" target="_blank">Telolet MP3 [4Mb]</a><br />
<br />
<a href="https://drive.google.com/open?id=0Bw0dQe53AE60anlNNktfc2VLU2s" target="_blank">Telolet OGG [3Mb]</a><br />
<br />
jangan lupa bagikan, klik like, dan tekan 1 di kolom komentar supaya masuk sorga :v :viwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com1tag:blogger.com,1999:blog-1833297251536740824.post-73472337799005341262016-08-18T17:25:00.000+07:002016-08-18T17:52:29.842+07:00[Foto] Gunung Gambar - Ngawen, Gunung Kidulsetelah kurang lebih 10 tahun ga berkunjung kesini, akhirnya pada tgl 13 Agustus 2016 kami sekeluarga masih mempunyai kesempatan untuk berkunjung ke tanah kelahiran ibu kami sekaligus tempaat saya dibesarkan sampai kelas 1 SD yaitu Gunung Gambar, Ngawen, Gunung Kidul<br />
untuk sejarah dan lain-lain sudah banyak dibahas di internet. jadi saya tidak menceritakannya disini<br />
biarlah foto2 amatiran hasil jepretan HP jelek saya yang bercerita<br />
<br />
berikut hasil jepretan Xiaomi Redmi 2 ditempat tersebut<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-51qFhSsUvGk/V7Vpz479HPI/AAAAAAAACYU/ONLkjYoD0ZI8Xx31qTQi8nfHvwiAMmISwCLcB/s1600/IMG_20160814_065107.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-51qFhSsUvGk/V7Vpz479HPI/AAAAAAAACYU/ONLkjYoD0ZI8Xx31qTQi8nfHvwiAMmISwCLcB/s640/IMG_20160814_065107.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-3x0JhgpTSMk/V7Vpx1MPs5I/AAAAAAAACYQ/ije-9GYK7WgFm9ed1Ss0ZF0P5qEO7UAfQCLcB/s1600/IMG_20160814_065113.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-3x0JhgpTSMk/V7Vpx1MPs5I/AAAAAAAACYQ/ije-9GYK7WgFm9ed1Ss0ZF0P5qEO7UAfQCLcB/s640/IMG_20160814_065113.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-rugXL-xEI7M/V7VpvUppXXI/AAAAAAAACYM/0El81uVQFpgV1VoJkntkfgvHLOlIYzYdQCLcB/s1600/IMG_20160814_065123.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-rugXL-xEI7M/V7VpvUppXXI/AAAAAAAACYM/0El81uVQFpgV1VoJkntkfgvHLOlIYzYdQCLcB/s640/IMG_20160814_065123.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-RtB0nRLuyI0/V7VqTfcrH7I/AAAAAAAACYc/YBhA9YZ9xew0zH-wAT3-gnvhidtcLE6iwCLcB/s1600/IMG_20160814_065133.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-RtB0nRLuyI0/V7VqTfcrH7I/AAAAAAAACYc/YBhA9YZ9xew0zH-wAT3-gnvhidtcLE6iwCLcB/s640/IMG_20160814_065133.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-Fe7KycCE6cY/V7Vqa-U4DGI/AAAAAAAACYg/CcQ2kE44Tr0KA6XaBsjHLhfDUIUyADzgQCLcB/s1600/IMG_20160814_065140.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-Fe7KycCE6cY/V7Vqa-U4DGI/AAAAAAAACYg/CcQ2kE44Tr0KA6XaBsjHLhfDUIUyADzgQCLcB/s640/IMG_20160814_065140.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-BtYY0XT9WsY/V7VqF9x_oNI/AAAAAAAACYY/IpYJhbcQ0TQovnuhgkCdZ_T1yIXcem6iwCLcB/s1600/IMG_20160814_065548.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-BtYY0XT9WsY/V7VqF9x_oNI/AAAAAAAACYY/IpYJhbcQ0TQovnuhgkCdZ_T1yIXcem6iwCLcB/s640/IMG_20160814_065548.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-Vr4H3bs8qiA/V7VqlMOzthI/AAAAAAAACYo/M4e7fMHzDLohXVO-OPOTGqUJxQ23XOHRACLcB/s1600/IMG_20160814_065609.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-Vr4H3bs8qiA/V7VqlMOzthI/AAAAAAAACYo/M4e7fMHzDLohXVO-OPOTGqUJxQ23XOHRACLcB/s640/IMG_20160814_065609.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/--54spNxPoE4/V7Vq7ZrsjQI/AAAAAAAACYw/_DJUzQe3WT8lGsF0ZPJx3nlEf-nVG3xFwCLcB/s1600/IMG_20160814_065616.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/--54spNxPoE4/V7Vq7ZrsjQI/AAAAAAAACYw/_DJUzQe3WT8lGsF0ZPJx3nlEf-nVG3xFwCLcB/s640/IMG_20160814_065616.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-eYskJlxX3FI/V7Vqv5i2T-I/AAAAAAAACYs/DCRX-IuMk4s1skokvHUbUvqj4wBSqLG4gCLcB/s1600/IMG_20160814_065910.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-eYskJlxX3FI/V7Vqv5i2T-I/AAAAAAAACYs/DCRX-IuMk4s1skokvHUbUvqj4wBSqLG4gCLcB/s640/IMG_20160814_065910.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-IPeAzYVtLK0/V7Vq8wVWcJI/AAAAAAAACY0/GVW3Rw8lT8kyv-OaglIEI56arYvNXA-SgCLcB/s1600/IMG_20160814_065923.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-IPeAzYVtLK0/V7Vq8wVWcJI/AAAAAAAACY0/GVW3Rw8lT8kyv-OaglIEI56arYvNXA-SgCLcB/s640/IMG_20160814_065923.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-wu9NvE7dqN8/V7VrNuxBu8I/AAAAAAAACY4/046ixeZhgscDSq1F_iSbPQNxzbRuVWFKQCLcB/s1600/IMG_20160814_065929.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-wu9NvE7dqN8/V7VrNuxBu8I/AAAAAAAACY4/046ixeZhgscDSq1F_iSbPQNxzbRuVWFKQCLcB/s640/IMG_20160814_065929.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-ebd0fQ2Mh5E/V7VraJMm5YI/AAAAAAAACZA/jdUJlU5rw_o-VUvNOrp9SKop1v8V7dBDACLcB/s1600/IMG_20160814_065945.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-ebd0fQ2Mh5E/V7VraJMm5YI/AAAAAAAACZA/jdUJlU5rw_o-VUvNOrp9SKop1v8V7dBDACLcB/s640/IMG_20160814_065945.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-ppKW10c0sIo/V7VreoF6gyI/AAAAAAAACZE/CHFz9MI4N4I5FVZK1dbCS29jdnXbx2_hwCLcB/s1600/IMG_20160814_065952.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-ppKW10c0sIo/V7VreoF6gyI/AAAAAAAACZE/CHFz9MI4N4I5FVZK1dbCS29jdnXbx2_hwCLcB/s640/IMG_20160814_065952.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-6PVmRC-_uAA/V7VrkRBHHxI/AAAAAAAACZM/EBULZQmz6O46IbtRzZ46G_vbW1e-Vp_fgCLcB/s1600/IMG_20160814_070153.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-6PVmRC-_uAA/V7VrkRBHHxI/AAAAAAAACZM/EBULZQmz6O46IbtRzZ46G_vbW1e-Vp_fgCLcB/s640/IMG_20160814_070153.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-rxEELC8qLTY/V7Vr8XANf2I/AAAAAAAACZQ/CxqBIg2v-EkuIwZVVq7LpKIn2LDxETigACLcB/s1600/IMG_20160814_070155.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-rxEELC8qLTY/V7Vr8XANf2I/AAAAAAAACZQ/CxqBIg2v-EkuIwZVVq7LpKIn2LDxETigACLcB/s640/IMG_20160814_070155.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-d6_88VcT8F0/V7VrjIag4CI/AAAAAAAACZI/DI5RSJTTTM0Ezcy7oRx4_aLlh66K-N9YACLcB/s1600/IMG_20160814_070216.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-d6_88VcT8F0/V7VrjIag4CI/AAAAAAAACZI/DI5RSJTTTM0Ezcy7oRx4_aLlh66K-N9YACLcB/s640/IMG_20160814_070216.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-vMvdThlSeqc/V7VsQVtvQ1I/AAAAAAAACZU/dT1f5p399PYH8OSH3GR5U1iZKUAzFIvSQCLcB/s1600/IMG_20160814_070604.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-vMvdThlSeqc/V7VsQVtvQ1I/AAAAAAAACZU/dT1f5p399PYH8OSH3GR5U1iZKUAzFIvSQCLcB/s640/IMG_20160814_070604.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-jso28awd_Hc/V7VsSjAKJoI/AAAAAAAACZY/GH2g2vIkojkK-Aym5yuSpg9mrWzKQJz8wCLcB/s1600/IMG_20160814_070613.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-jso28awd_Hc/V7VsSjAKJoI/AAAAAAAACZY/GH2g2vIkojkK-Aym5yuSpg9mrWzKQJz8wCLcB/s640/IMG_20160814_070613.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-hHxEDy3EAyI/V7Vsi_z0ExI/AAAAAAAACZc/XrV_rH2cOKoHFWmaeu9i5xNqSDZLJEzwgCLcB/s1600/IMG_20160814_070923.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-hHxEDy3EAyI/V7Vsi_z0ExI/AAAAAAAACZc/XrV_rH2cOKoHFWmaeu9i5xNqSDZLJEzwgCLcB/s640/IMG_20160814_070923.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-kHx8_WRQ9_w/V7VsssQYcVI/AAAAAAAACZo/aMMnt25oXZY5fXutw7w8hES5rba-Fl62gCLcB/s1600/IMG_20160814_070926.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-kHx8_WRQ9_w/V7VsssQYcVI/AAAAAAAACZo/aMMnt25oXZY5fXutw7w8hES5rba-Fl62gCLcB/s640/IMG_20160814_070926.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-OM_blE2AS9o/V7VsvJsfaDI/AAAAAAAACZw/LgbXOTIVjOcLigWv8Uk_QTXGQTR1awcCACLcB/s1600/IMG_20160814_070928.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-OM_blE2AS9o/V7VsvJsfaDI/AAAAAAAACZw/LgbXOTIVjOcLigWv8Uk_QTXGQTR1awcCACLcB/s640/IMG_20160814_070928.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-0EPP4aBWdJc/V7VsnuDVbXI/AAAAAAAACZk/PvIBPl65NfsHbHwmiEQQ6T3CmdviNJZ8wCLcB/s1600/IMG_20160814_070951.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-0EPP4aBWdJc/V7VsnuDVbXI/AAAAAAAACZk/PvIBPl65NfsHbHwmiEQQ6T3CmdviNJZ8wCLcB/s640/IMG_20160814_070951.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-Gb5LWBlCzi8/V7VstnC4LjI/AAAAAAAACZs/J_RADhFW3PQZBO5Zgi-aFB6AhEeqVGzeQCLcB/s1600/IMG_20160814_071014.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-Gb5LWBlCzi8/V7VstnC4LjI/AAAAAAAACZs/J_RADhFW3PQZBO5Zgi-aFB6AhEeqVGzeQCLcB/s640/IMG_20160814_071014.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-c-Fkt4xgjN4/V7VtQmRRERI/AAAAAAAACZ4/PY0QPOxa2YAmCLaU7w0H3rUimDsX5anPACLcB/s1600/IMG_20160814_071327.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-c-Fkt4xgjN4/V7VtQmRRERI/AAAAAAAACZ4/PY0QPOxa2YAmCLaU7w0H3rUimDsX5anPACLcB/s640/IMG_20160814_071327.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-2c_SqEbAL4I/V7VtXqvb6eI/AAAAAAAACZ8/iFI91aOtB1MaL0UlJxm3-Q5k6ftUtJuSACLcB/s1600/IMG_20160814_071336.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-2c_SqEbAL4I/V7VtXqvb6eI/AAAAAAAACZ8/iFI91aOtB1MaL0UlJxm3-Q5k6ftUtJuSACLcB/s640/IMG_20160814_071336.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-aG74DOJUk0U/V7Vtbf9rldI/AAAAAAAACaA/JbFMNOe7a9k-8myh5f7YOGCRiFPSrMAegCLcB/s1600/IMG_20160814_071343.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-aG74DOJUk0U/V7Vtbf9rldI/AAAAAAAACaA/JbFMNOe7a9k-8myh5f7YOGCRiFPSrMAegCLcB/s640/IMG_20160814_071343.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-1mk3yoHjwIU/V7VtxBoOPlI/AAAAAAAACaI/MgIIp1jYZ0AgbzFRjT4lAyTleVcnSK_egCLcB/s1600/IMG_20160814_071936.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-1mk3yoHjwIU/V7VtxBoOPlI/AAAAAAAACaI/MgIIp1jYZ0AgbzFRjT4lAyTleVcnSK_egCLcB/s640/IMG_20160814_071936.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-lMmiDDx5zs4/V7Vt1G8Yt0I/AAAAAAAACaM/aksNM-rDT98yk1oc71PH3o9LTOXn-_0pwCLcB/s1600/IMG_20160814_071937.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-lMmiDDx5zs4/V7Vt1G8Yt0I/AAAAAAAACaM/aksNM-rDT98yk1oc71PH3o9LTOXn-_0pwCLcB/s640/IMG_20160814_071937.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-QP2bq9EvbFY/V7Vt5CIykGI/AAAAAAAACaQ/OoLzkX5IuRoQCg-Jh8C3HIpB4h6OIXFfACLcB/s1600/IMG_20160814_071941.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-QP2bq9EvbFY/V7Vt5CIykGI/AAAAAAAACaQ/OoLzkX5IuRoQCg-Jh8C3HIpB4h6OIXFfACLcB/s640/IMG_20160814_071941.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-Qjn22nXxU0g/V7VuVyN0VTI/AAAAAAAACaY/wBLCkjRtTpswMRtZekF479Jpwr5KNB3OgCLcB/s1600/IMG_20160814_072017.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-Qjn22nXxU0g/V7VuVyN0VTI/AAAAAAAACaY/wBLCkjRtTpswMRtZekF479Jpwr5KNB3OgCLcB/s640/IMG_20160814_072017.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-aZ092m5L1y0/V7VueQ-tsLI/AAAAAAAACac/drO74ob9LY4WdyPWsGfoPNoVoO09Utb8wCLcB/s1600/IMG_20160814_072024.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-aZ092m5L1y0/V7VueQ-tsLI/AAAAAAAACac/drO74ob9LY4WdyPWsGfoPNoVoO09Utb8wCLcB/s640/IMG_20160814_072024.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-XLgb7t34TCs/V7VulbKpelI/AAAAAAAACak/8BBe8r0RNvAQyFarTuP32gK0X5DrcxYHACLcB/s1600/IMG_20160814_072028.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-XLgb7t34TCs/V7VulbKpelI/AAAAAAAACak/8BBe8r0RNvAQyFarTuP32gK0X5DrcxYHACLcB/s640/IMG_20160814_072028.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-A68zK5HimRk/V7Vu9aQGjaI/AAAAAAAACao/7lLlw33ZMX8ZDiYR1hg0TewYQ0tEm4DswCLcB/s1600/IMG_20160814_072031.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-A68zK5HimRk/V7Vu9aQGjaI/AAAAAAAACao/7lLlw33ZMX8ZDiYR1hg0TewYQ0tEm4DswCLcB/s640/IMG_20160814_072031.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-05Eth8qkBZs/V7VvBQB5U9I/AAAAAAAACas/3VwxduNdGvoi6f6jbausEq92Acn8mobogCLcB/s1600/IMG_20160814_072042.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-05Eth8qkBZs/V7VvBQB5U9I/AAAAAAAACas/3VwxduNdGvoi6f6jbausEq92Acn8mobogCLcB/s640/IMG_20160814_072042.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-DDuiBBFFvOw/V7VvNJ29awI/AAAAAAAACaw/f68Zv98auak9GXUHfs6RgwALU1nJmvAkgCLcB/s1600/IMG_20160814_072050.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-DDuiBBFFvOw/V7VvNJ29awI/AAAAAAAACaw/f68Zv98auak9GXUHfs6RgwALU1nJmvAkgCLcB/s640/IMG_20160814_072050.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-IDpHkBjMWMY/V7VwF70s3AI/AAAAAAAACa4/34Py5U_47SMhXrPj7JbHd9WybsTmeGWswCLcB/s1600/IMG_20160814_072723.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-IDpHkBjMWMY/V7VwF70s3AI/AAAAAAAACa4/34Py5U_47SMhXrPj7JbHd9WybsTmeGWswCLcB/s640/IMG_20160814_072723.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-sZLx512tfK8/V7VwJH90n1I/AAAAAAAACa8/Nufxmkvx14cX-rJKguWo0N1liudqTvQjgCLcB/s1600/IMG_20160814_072726.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-sZLx512tfK8/V7VwJH90n1I/AAAAAAAACa8/Nufxmkvx14cX-rJKguWo0N1liudqTvQjgCLcB/s640/IMG_20160814_072726.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-mYae3FQyRCs/V7VwYWmaQbI/AAAAAAAACbE/RUUAHxhMegsHW4llE05SDkGuPiSkttc9ACLcB/s1600/IMG_20160814_072920.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-mYae3FQyRCs/V7VwYWmaQbI/AAAAAAAACbE/RUUAHxhMegsHW4llE05SDkGuPiSkttc9ACLcB/s640/IMG_20160814_072920.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-fpToTkSuj40/V7VwvAf1eLI/AAAAAAAACbI/h4C6QmttZtAslm9V8DjxulG4KcmeoBbeQCLcB/s1600/IMG_20160814_072931.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-fpToTkSuj40/V7VwvAf1eLI/AAAAAAAACbI/h4C6QmttZtAslm9V8DjxulG4KcmeoBbeQCLcB/s640/IMG_20160814_072931.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-4Zol_ODYYXQ/V7VwxiubNfI/AAAAAAAACbM/aA5wG-WmGqUkR3lf5ZxgQpV6IWvv0kE_ACLcB/s1600/IMG_20160814_072938.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-4Zol_ODYYXQ/V7VwxiubNfI/AAAAAAAACbM/aA5wG-WmGqUkR3lf5ZxgQpV6IWvv0kE_ACLcB/s640/IMG_20160814_072938.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-osSFr_CwbX8/V7Vw-8zxiwI/AAAAAAAACbc/x8NALudwgTE_EAOj2-mMMolqzRueF7hPQCLcB/s1600/IMG_20160814_072946.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-osSFr_CwbX8/V7Vw-8zxiwI/AAAAAAAACbc/x8NALudwgTE_EAOj2-mMMolqzRueF7hPQCLcB/s640/IMG_20160814_072946.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-YDFP352HXlE/V7Vw5anGPdI/AAAAAAAACbQ/qTpv7rGCF8sEu12d_DlAPrV82Nyh846RQCLcB/s1600/IMG_20160814_073005.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-YDFP352HXlE/V7Vw5anGPdI/AAAAAAAACbQ/qTpv7rGCF8sEu12d_DlAPrV82Nyh846RQCLcB/s640/IMG_20160814_073005.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-hwKWxOUF1b8/V7Vw8LdNUVI/AAAAAAAACbU/MkcO2hmpqDY3CyNPRd8ylcESuUabYFnkQCLcB/s1600/IMG_20160814_073018.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-hwKWxOUF1b8/V7Vw8LdNUVI/AAAAAAAACbU/MkcO2hmpqDY3CyNPRd8ylcESuUabYFnkQCLcB/s640/IMG_20160814_073018.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-GmDdw7uEnWg/V7Vx2UnKZbI/AAAAAAAACbs/b8m8MRdeYe4UAcW4HYiCxtsQqTmFi5RmACLcB/s1600/IMG_20160814_073042.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-GmDdw7uEnWg/V7Vx2UnKZbI/AAAAAAAACbs/b8m8MRdeYe4UAcW4HYiCxtsQqTmFi5RmACLcB/s640/IMG_20160814_073042.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-v1Of0J-IuTg/V7VyXq1bTXI/AAAAAAAACb4/0-ZDSd3yuOkG--pLWTHb8woEsQDty0kcACLcB/s1600/IMG_20160814_073053.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-v1Of0J-IuTg/V7VyXq1bTXI/AAAAAAAACb4/0-ZDSd3yuOkG--pLWTHb8woEsQDty0kcACLcB/s640/IMG_20160814_073053.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-KRV9qWrvIfI/V7VyQ-eiZBI/AAAAAAAACb0/j-gUpuLlljsifXxgZEvhGEOFD4Ux4XfwwCLcB/s1600/IMG_20160814_073136.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-KRV9qWrvIfI/V7VyQ-eiZBI/AAAAAAAACb0/j-gUpuLlljsifXxgZEvhGEOFD4Ux4XfwwCLcB/s640/IMG_20160814_073136.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-xf0vvAq_Ckc/V7VzG9yTAtI/AAAAAAAACcE/eG-je3nJZ0YTN9hbPYTT6crKfjq0yfhCgCLcB/s1600/IMG_20160814_073148.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-xf0vvAq_Ckc/V7VzG9yTAtI/AAAAAAAACcE/eG-je3nJZ0YTN9hbPYTT6crKfjq0yfhCgCLcB/s640/IMG_20160814_073148.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-G5W82mmuJCY/V7VzQq-hbwI/AAAAAAAACcQ/2skucvHUzKEM6Qs158jrS1FCJGea4TtNQCLcB/s1600/IMG_20160814_073156.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-G5W82mmuJCY/V7VzQq-hbwI/AAAAAAAACcQ/2skucvHUzKEM6Qs158jrS1FCJGea4TtNQCLcB/s640/IMG_20160814_073156.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-q4V8NMMoga4/V7VzWgzNV2I/AAAAAAAACcU/Y9jfgH5KQXkXNVfLHe0jLPTw54YDK9XdgCLcB/s1600/IMG_20160814_073158.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-q4V8NMMoga4/V7VzWgzNV2I/AAAAAAAACcU/Y9jfgH5KQXkXNVfLHe0jLPTw54YDK9XdgCLcB/s640/IMG_20160814_073158.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-ivwFD17f_Kw/V7VzMygpUBI/AAAAAAAACcM/GRop8QMpnoAhKU99nHTDREoaNGmtsBfDACLcB/s1600/IMG_20160814_073221.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-ivwFD17f_Kw/V7VzMygpUBI/AAAAAAAACcM/GRop8QMpnoAhKU99nHTDREoaNGmtsBfDACLcB/s640/IMG_20160814_073221.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-9Ieq67lyVSM/V7V0eCPkQQI/AAAAAAAACcg/KPdb7FdHEaMtnoBH5uI9fgL24VU6ypAeQCLcB/s1600/IMG_20160814_073608.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-9Ieq67lyVSM/V7V0eCPkQQI/AAAAAAAACcg/KPdb7FdHEaMtnoBH5uI9fgL24VU6ypAeQCLcB/s640/IMG_20160814_073608.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-YuEqgncKof8/V7V0fPAUQ5I/AAAAAAAACck/DAqOFbfpRfgdN0mebsT6U-3GFKT82EzWgCLcB/s1600/IMG_20160814_073610.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-YuEqgncKof8/V7V0fPAUQ5I/AAAAAAAACck/DAqOFbfpRfgdN0mebsT6U-3GFKT82EzWgCLcB/s640/IMG_20160814_073610.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-eC5jMwLEKCE/V7V0frs1CVI/AAAAAAAACco/FjVO-nzOVQQwxffMeyvY51Lst2jGooYvwCLcB/s1600/IMG_20160814_073614.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-eC5jMwLEKCE/V7V0frs1CVI/AAAAAAAACco/FjVO-nzOVQQwxffMeyvY51Lst2jGooYvwCLcB/s640/IMG_20160814_073614.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-7U90GQ4jN50/V7V0_l4WzJI/AAAAAAAACc0/8P-sMGSEoP8WoSmz7uci-ckl8hQM6xwCwCLcB/s1600/IMG_20160814_073638.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-7U90GQ4jN50/V7V0_l4WzJI/AAAAAAAACc0/8P-sMGSEoP8WoSmz7uci-ckl8hQM6xwCwCLcB/s640/IMG_20160814_073638.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-1Z6TbLp9zzs/V7V073Q38YI/AAAAAAAACcw/ZqbafteyHH8lYxrYeCLuqn751Ep3V7tAACLcB/s1600/IMG_20160814_073648.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-1Z6TbLp9zzs/V7V073Q38YI/AAAAAAAACcw/ZqbafteyHH8lYxrYeCLuqn751Ep3V7tAACLcB/s640/IMG_20160814_073648.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-MsCZ3tVnzwk/V7V0_9dq2NI/AAAAAAAACc4/KAtDfclIBi8Qy6dXimrETMdMRNlm5ttQgCLcB/s1600/IMG_20160814_073652.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-MsCZ3tVnzwk/V7V0_9dq2NI/AAAAAAAACc4/KAtDfclIBi8Qy6dXimrETMdMRNlm5ttQgCLcB/s640/IMG_20160814_073652.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-5shmGMyBudc/V7V1r4gPYwI/AAAAAAAACdE/rWTQci3DsKIar3vVhi9-GQpjZiUYUnm0ACLcB/s1600/IMG_20160814_074028.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-5shmGMyBudc/V7V1r4gPYwI/AAAAAAAACdE/rWTQci3DsKIar3vVhi9-GQpjZiUYUnm0ACLcB/s640/IMG_20160814_074028.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-c1G0aYUZVzo/V7V1wbtsudI/AAAAAAAACdI/RDbrPYDJ9ycuUYQdcK6e9nnbxA9VTjHZQCLcB/s1600/IMG_20160814_074030.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-c1G0aYUZVzo/V7V1wbtsudI/AAAAAAAACdI/RDbrPYDJ9ycuUYQdcK6e9nnbxA9VTjHZQCLcB/s640/IMG_20160814_074030.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/--z0BoY9OJEg/V7V1-N-dXWI/AAAAAAAACdM/8wDbioa_kcUltHC8TpNbOYztkUFG_VfrwCLcB/s1600/IMG_20160814_074101.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/--z0BoY9OJEg/V7V1-N-dXWI/AAAAAAAACdM/8wDbioa_kcUltHC8TpNbOYztkUFG_VfrwCLcB/s640/IMG_20160814_074101.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-x3TPmrP0aIw/V7V2aoV--SI/AAAAAAAACdU/rg7hzmNW4rE9LdhgZ9VcNypZ2xVQn8TigCLcB/s1600/IMG_20160814_074109.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-x3TPmrP0aIw/V7V2aoV--SI/AAAAAAAACdU/rg7hzmNW4rE9LdhgZ9VcNypZ2xVQn8TigCLcB/s640/IMG_20160814_074109.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-vNazybMD_e0/V7V2lq6lu3I/AAAAAAAACdc/1i58xpWCGhMqWzXFpHwarJ4j2abjevRDQCLcB/s1600/IMG_20160814_074118.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-vNazybMD_e0/V7V2lq6lu3I/AAAAAAAACdc/1i58xpWCGhMqWzXFpHwarJ4j2abjevRDQCLcB/s640/IMG_20160814_074118.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-aei5EO2wcbU/V7V2lz5J0GI/AAAAAAAACdg/o4qX3z5VRN8lzryw-iZdBDGXnywjmuSDgCLcB/s1600/IMG_20160814_074248.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-aei5EO2wcbU/V7V2lz5J0GI/AAAAAAAACdg/o4qX3z5VRN8lzryw-iZdBDGXnywjmuSDgCLcB/s640/IMG_20160814_074248.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-d5RuDD9bPao/V7V222_j0GI/AAAAAAAACd4/rGH01Vz2lBo_dzuF2yqpVDE9TteQL2vfgCLcB/s1600/IMG_20160814_074253.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-d5RuDD9bPao/V7V222_j0GI/AAAAAAAACd4/rGH01Vz2lBo_dzuF2yqpVDE9TteQL2vfgCLcB/s640/IMG_20160814_074253.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-DWO11QQFmDM/V7V2tfqJ5pI/AAAAAAAACdk/stubdEW0S6wMYq3IvkbzYFdxJv_AYGKpgCLcB/s1600/IMG_20160814_074509.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-DWO11QQFmDM/V7V2tfqJ5pI/AAAAAAAACdk/stubdEW0S6wMYq3IvkbzYFdxJv_AYGKpgCLcB/s640/IMG_20160814_074509.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-YidWiAhV0f4/V7V2tnQZqFI/AAAAAAAACdo/AD7OGH-7Qo4ewaBXnF1Qctbjfl3NcRdjgCLcB/s1600/IMG_20160814_074512.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-YidWiAhV0f4/V7V2tnQZqFI/AAAAAAAACdo/AD7OGH-7Qo4ewaBXnF1Qctbjfl3NcRdjgCLcB/s640/IMG_20160814_074512.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-TJNTt0cix-4/V7V21OgWATI/AAAAAAAACdw/4-Kcs1Ef-5wrTy9mVs9p0aaDzlCiDYSngCLcB/s1600/IMG_20160814_074530.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-TJNTt0cix-4/V7V21OgWATI/AAAAAAAACdw/4-Kcs1Ef-5wrTy9mVs9p0aaDzlCiDYSngCLcB/s640/IMG_20160814_074530.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-KOVpzzsatpk/V7V217fH0lI/AAAAAAAACd0/pD-t_PzJu1kzKSV2mvksdT6K6KxCS6h7QCLcB/s1600/IMG_20160814_074535.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-KOVpzzsatpk/V7V217fH0lI/AAAAAAAACd0/pD-t_PzJu1kzKSV2mvksdT6K6KxCS6h7QCLcB/s640/IMG_20160814_074535.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/--dMWkDtmICQ/V7V3aFBeSjI/AAAAAAAACeA/jtpdNrnyHJo7z-PZgvRQIqc4zYdc1dARACLcB/s1600/IMG_20160814_074554.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/--dMWkDtmICQ/V7V3aFBeSjI/AAAAAAAACeA/jtpdNrnyHJo7z-PZgvRQIqc4zYdc1dARACLcB/s640/IMG_20160814_074554.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-vpdSb9tMafs/V7V3X2WnqvI/AAAAAAAACd8/rl-9pRnRpWQncNjBwqD0Uyj3A0AXnGkUwCLcB/s1600/IMG_20160814_074559.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-vpdSb9tMafs/V7V3X2WnqvI/AAAAAAAACd8/rl-9pRnRpWQncNjBwqD0Uyj3A0AXnGkUwCLcB/s640/IMG_20160814_074559.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-UOnbSqJwqvM/V7V3ex1fjRI/AAAAAAAACeE/O9vjRZR7HdsTHOA9p2VXg786UeHeCytQACLcB/s1600/IMG_20160814_074602.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-UOnbSqJwqvM/V7V3ex1fjRI/AAAAAAAACeE/O9vjRZR7HdsTHOA9p2VXg786UeHeCytQACLcB/s640/IMG_20160814_074602.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-OMGIJYHRFGc/V7V3nGrwDqI/AAAAAAAACeI/KKPoNLz9SvIrktaKJC6GwBx8gP8CWOo3wCLcB/s1600/IMG_20160814_074651.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-OMGIJYHRFGc/V7V3nGrwDqI/AAAAAAAACeI/KKPoNLz9SvIrktaKJC6GwBx8gP8CWOo3wCLcB/s640/IMG_20160814_074651.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-03ng7YPCug0/V7V3oe50xII/AAAAAAAACeM/IA2opH8-qr8dsqlawpmXXiujREZugmAYgCLcB/s1600/IMG_20160814_074700.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-03ng7YPCug0/V7V3oe50xII/AAAAAAAACeM/IA2opH8-qr8dsqlawpmXXiujREZugmAYgCLcB/s640/IMG_20160814_074700.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-cDhLCUV-TNM/V7V4oTjSSfI/AAAAAAAACek/0GiXK8H_iUAUwaWdfTDNShqjRfRETgowACLcB/s1600/IMG_20160814_074722.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-cDhLCUV-TNM/V7V4oTjSSfI/AAAAAAAACek/0GiXK8H_iUAUwaWdfTDNShqjRfRETgowACLcB/s640/IMG_20160814_074722.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-91uWgOM6MNo/V7V4ekCP60I/AAAAAAAACeg/dqNsSxkvEYo__T0o5ywo37ch77B_OpXJwCLcB/s1600/IMG_20160814_074729.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-91uWgOM6MNo/V7V4ekCP60I/AAAAAAAACeg/dqNsSxkvEYo__T0o5ywo37ch77B_OpXJwCLcB/s640/IMG_20160814_074729.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-MMBBu9H5DwQ/V7V4IP29m1I/AAAAAAAACeU/HFg9SWalKXsh36Bf3ERKYeyfgXMiH9F2gCLcB/s1600/IMG_20160814_074759.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-MMBBu9H5DwQ/V7V4IP29m1I/AAAAAAAACeU/HFg9SWalKXsh36Bf3ERKYeyfgXMiH9F2gCLcB/s640/IMG_20160814_074759.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-ckdzsRqs3sU/V7V44W4sp_I/AAAAAAAACeo/aq0DM7-QZAMN6XE2IBR5Ay59Xnm5PZhBACLcB/s1600/IMG_20160814_074807.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-ckdzsRqs3sU/V7V44W4sp_I/AAAAAAAACeo/aq0DM7-QZAMN6XE2IBR5Ay59Xnm5PZhBACLcB/s640/IMG_20160814_074807.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-7UO7gAksnAs/V7V5QpqJEnI/AAAAAAAACew/avDPhwiRbxE-w4mS4kk-RMRqd-_sjyyJgCLcB/s1600/IMG_20160814_074811.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-7UO7gAksnAs/V7V5QpqJEnI/AAAAAAAACew/avDPhwiRbxE-w4mS4kk-RMRqd-_sjyyJgCLcB/s640/IMG_20160814_074811.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-4zejjsxx_TU/V7V5M6vwI9I/AAAAAAAACes/H0-1nlQOqw0-Pt9LVLHlL6GvAraTJJFcgCLcB/s1600/IMG_20160814_074828.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-4zejjsxx_TU/V7V5M6vwI9I/AAAAAAAACes/H0-1nlQOqw0-Pt9LVLHlL6GvAraTJJFcgCLcB/s640/IMG_20160814_074828.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-XrJF4G_psn0/V7V5sas2f5I/AAAAAAAACe4/SBdnoTx95KYWPfVzz-U3XTiUjAi-vu5HACLcB/s1600/IMG_20160814_074831.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-XrJF4G_psn0/V7V5sas2f5I/AAAAAAAACe4/SBdnoTx95KYWPfVzz-U3XTiUjAi-vu5HACLcB/s640/IMG_20160814_074831.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-q6Ov93P9ADk/V7V5zenkNjI/AAAAAAAACe8/2WTURJ7CVSwjY30p9SeBC09-psh9LoNYQCLcB/s1600/IMG_20160814_075118.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-q6Ov93P9ADk/V7V5zenkNjI/AAAAAAAACe8/2WTURJ7CVSwjY30p9SeBC09-psh9LoNYQCLcB/s640/IMG_20160814_075118.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-n7xmHDLOTfc/V7V52JG2q9I/AAAAAAAACfA/I7UHbOoy_bwKOihv3ZHVjIPtBScZJ2nEQCLcB/s1600/IMG_20160814_075121.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-n7xmHDLOTfc/V7V52JG2q9I/AAAAAAAACfA/I7UHbOoy_bwKOihv3ZHVjIPtBScZJ2nEQCLcB/s640/IMG_20160814_075121.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-NmIbl3RCIg4/V7V6DZ1BP2I/AAAAAAAACfU/FZDCDzBrYEU1TNetXhYvdbJN88l7_wAPgCLcB/s1600/IMG_20160814_075125.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-NmIbl3RCIg4/V7V6DZ1BP2I/AAAAAAAACfU/FZDCDzBrYEU1TNetXhYvdbJN88l7_wAPgCLcB/s640/IMG_20160814_075125.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-yIV91QmXozI/V7V55Sow4_I/AAAAAAAACfE/o-4fVjd5mYgqkxrEe25wWcnD-vKqgLAZwCLcB/s1600/IMG_20160814_080101.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-yIV91QmXozI/V7V55Sow4_I/AAAAAAAACfE/o-4fVjd5mYgqkxrEe25wWcnD-vKqgLAZwCLcB/s640/IMG_20160814_080101.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-tXx0ugXf1hc/V7V58GzugeI/AAAAAAAACfI/xAgZoKsP_voqDuBPvZy_uGTxwzCO6R_DQCLcB/s1600/IMG_20160814_080104.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-tXx0ugXf1hc/V7V58GzugeI/AAAAAAAACfI/xAgZoKsP_voqDuBPvZy_uGTxwzCO6R_DQCLcB/s640/IMG_20160814_080104.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-6GkUsa3Ex9o/V7V5-xKhLPI/AAAAAAAACfM/zqXF-OUI-mwBh3SAAUIuWFAbF3_XD0QBQCLcB/s1600/IMG_20160814_080129.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-6GkUsa3Ex9o/V7V5-xKhLPI/AAAAAAAACfM/zqXF-OUI-mwBh3SAAUIuWFAbF3_XD0QBQCLcB/s640/IMG_20160814_080129.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-nWpkXMrH72U/V7V6BaCzJdI/AAAAAAAACfQ/_Y5Ns0-QXK87lyL4GnBQqA24ptc50ZNJQCLcB/s1600/IMG_20160814_080134.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-nWpkXMrH72U/V7V6BaCzJdI/AAAAAAAACfQ/_Y5Ns0-QXK87lyL4GnBQqA24ptc50ZNJQCLcB/s640/IMG_20160814_080134.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-QtnHLLF4MWc/V7V6Mbb1AQI/AAAAAAAACfc/E1QKdAGdpNEnlUQZJiuGYJd3gV1x2kmhQCLcB/s1600/IMG_20160814_080213.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-QtnHLLF4MWc/V7V6Mbb1AQI/AAAAAAAACfc/E1QKdAGdpNEnlUQZJiuGYJd3gV1x2kmhQCLcB/s640/IMG_20160814_080213.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-clmZyeJ0EmE/V7V6Q3z3IKI/AAAAAAAACfg/xHFVgY72onszzuKCVl_EjQAyM8QioDqRACLcB/s1600/IMG_20160814_080216.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-clmZyeJ0EmE/V7V6Q3z3IKI/AAAAAAAACfg/xHFVgY72onszzuKCVl_EjQAyM8QioDqRACLcB/s640/IMG_20160814_080216.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-A4O8Nht3BYQ/V7V6YaNQs2I/AAAAAAAACfk/NskBDhqY8E0iyiUFqx9fu7LlcaVsY-CBgCLcB/s1600/IMG_20160814_080218.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-A4O8Nht3BYQ/V7V6YaNQs2I/AAAAAAAACfk/NskBDhqY8E0iyiUFqx9fu7LlcaVsY-CBgCLcB/s640/IMG_20160814_080218.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-9Mpax-AgcrQ/V7V6tYINlXI/AAAAAAAACfo/GlZvKU__3U0CIS8_s49dDyQr18YH4yylACLcB/s1600/IMG_20160814_080221.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-9Mpax-AgcrQ/V7V6tYINlXI/AAAAAAAACfo/GlZvKU__3U0CIS8_s49dDyQr18YH4yylACLcB/s640/IMG_20160814_080221.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-3IHmG-YS2hg/V7V6zvYFYAI/AAAAAAAACfs/YQdxIsJMCbgfWySfcyE3lxDTXAXaNLXOwCLcB/s1600/IMG_20160814_080236.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-3IHmG-YS2hg/V7V6zvYFYAI/AAAAAAAACfs/YQdxIsJMCbgfWySfcyE3lxDTXAXaNLXOwCLcB/s640/IMG_20160814_080236.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-8j73SnitpwI/V7V63S1kmvI/AAAAAAAACfw/ZaT-AxQvAvcOExvDXsSdMmddv1Rq1d_6wCLcB/s1600/IMG_20160814_080237.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-8j73SnitpwI/V7V63S1kmvI/AAAAAAAACfw/ZaT-AxQvAvcOExvDXsSdMmddv1Rq1d_6wCLcB/s640/IMG_20160814_080237.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-yKQ_Lcy-7CE/V7V7I-7KZiI/AAAAAAAACf4/l350lq_P7BUUZWfXkS8KWbMGJLSwLmnbwCLcB/s1600/IMG_20160814_080239.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-yKQ_Lcy-7CE/V7V7I-7KZiI/AAAAAAAACf4/l350lq_P7BUUZWfXkS8KWbMGJLSwLmnbwCLcB/s640/IMG_20160814_080239.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-6kN8lpcyxkQ/V7V7QpY5HzI/AAAAAAAACf8/VKROprOz4Yoa939KjgtqZ4a7FDVV2K-IwCLcB/s1600/IMG_20160814_080244.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-6kN8lpcyxkQ/V7V7QpY5HzI/AAAAAAAACf8/VKROprOz4Yoa939KjgtqZ4a7FDVV2K-IwCLcB/s640/IMG_20160814_080244.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-KMDQL7yAknw/V7V7WwSIeCI/AAAAAAAACgA/lJyrGlpmzGUc2ebkIkaFegmTnxf4QnnzgCLcB/s1600/IMG_20160814_080247.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-KMDQL7yAknw/V7V7WwSIeCI/AAAAAAAACgA/lJyrGlpmzGUc2ebkIkaFegmTnxf4QnnzgCLcB/s640/IMG_20160814_080247.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-Q6dZ_aMmHuM/V7V7oXyKqcI/AAAAAAAACgE/GnL_q8agGFAi_ME7AdL0bA_rsemr67EjQCLcB/s1600/IMG_20160814_080345.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-Q6dZ_aMmHuM/V7V7oXyKqcI/AAAAAAAACgE/GnL_q8agGFAi_ME7AdL0bA_rsemr67EjQCLcB/s640/IMG_20160814_080345.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-yKNnHtoYOLw/V7V7tj6kKTI/AAAAAAAACgM/XWyWWXKABWYuwjN6gQtVBqsI3r8hvlhrwCLcB/s1600/IMG_20160814_080355.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-yKNnHtoYOLw/V7V7tj6kKTI/AAAAAAAACgM/XWyWWXKABWYuwjN6gQtVBqsI3r8hvlhrwCLcB/s640/IMG_20160814_080355.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-vcNu2Y6rsQM/V7V71K00pXI/AAAAAAAACgQ/NhOIlOxYbWYA-mOb_9WVULa1y9rvys-swCLcB/s1600/IMG_20160814_080402.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-vcNu2Y6rsQM/V7V71K00pXI/AAAAAAAACgQ/NhOIlOxYbWYA-mOb_9WVULa1y9rvys-swCLcB/s640/IMG_20160814_080402.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-_PH5ZUpmLQU/V7V8OiaRnFI/AAAAAAAACgU/arj47-9lb1ADpup3HvHNA_lctxc97HyRACLcB/s1600/IMG_20160814_083629.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-_PH5ZUpmLQU/V7V8OiaRnFI/AAAAAAAACgU/arj47-9lb1ADpup3HvHNA_lctxc97HyRACLcB/s640/IMG_20160814_083629.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-k52Lipdu8Oo/V7V8YmM1HYI/AAAAAAAACgc/jaI8XBisCTY__-nJBk9Y7iFE1Z1ynWkhQCLcB/s1600/IMG_20160814_083631.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-k52Lipdu8Oo/V7V8YmM1HYI/AAAAAAAACgc/jaI8XBisCTY__-nJBk9Y7iFE1Z1ynWkhQCLcB/s640/IMG_20160814_083631.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-xP864ABWnEs/V7V8Y8M-r_I/AAAAAAAACgg/L30VbC1u1bAqwyb54yoeX57XUl3PIeU4wCLcB/s1600/IMG_20160814_083651.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-xP864ABWnEs/V7V8Y8M-r_I/AAAAAAAACgg/L30VbC1u1bAqwyb54yoeX57XUl3PIeU4wCLcB/s640/IMG_20160814_083651.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-CX6evhJXi6E/V7V8xCvfk-I/AAAAAAAACgo/ufSGJCM2roEo3zRCkorfUvEAPcYaAVMBwCLcB/s1600/IMG_20160814_083708.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-CX6evhJXi6E/V7V8xCvfk-I/AAAAAAAACgo/ufSGJCM2roEo3zRCkorfUvEAPcYaAVMBwCLcB/s640/IMG_20160814_083708.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-2EGNlSdJXuk/V7V8-giGK-I/AAAAAAAACgs/j5PvFOItPXwvlUnL1fX1oJ-0F5IV2QqFQCLcB/s1600/IMG_20160814_083712.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-2EGNlSdJXuk/V7V8-giGK-I/AAAAAAAACgs/j5PvFOItPXwvlUnL1fX1oJ-0F5IV2QqFQCLcB/s640/IMG_20160814_083712.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-BioK3Q58aRg/V7V9EctvUCI/AAAAAAAACg0/11g8c47s9SUWcoKvhJalI-YGpDZj9D5CwCLcB/s1600/IMG_20160814_084117.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-BioK3Q58aRg/V7V9EctvUCI/AAAAAAAACg0/11g8c47s9SUWcoKvhJalI-YGpDZj9D5CwCLcB/s640/IMG_20160814_084117.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-tgR1lHjxIn0/V7V9cB2HyGI/AAAAAAAACg8/m0eaw2VE4CIe9FnIsf2xS0VfsL5YLVySQCLcB/s1600/IMG_20160814_084123.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-tgR1lHjxIn0/V7V9cB2HyGI/AAAAAAAACg8/m0eaw2VE4CIe9FnIsf2xS0VfsL5YLVySQCLcB/s640/IMG_20160814_084123.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-WVTB4kZxwxI/V7V9wWYzyfI/AAAAAAAAChE/p_smSi8mI7cwk6yO8DkOIIFJi9kHg8GgQCLcB/s1600/IMG_20160814_084128.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-WVTB4kZxwxI/V7V9wWYzyfI/AAAAAAAAChE/p_smSi8mI7cwk6yO8DkOIIFJi9kHg8GgQCLcB/s640/IMG_20160814_084128.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-AJAVawwfIPE/V7V90AIMq9I/AAAAAAAAChI/30PeMSWOOxsYipf_WQ0KPz8urEVXOCWhQCLcB/s1600/IMG_20160814_084135.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-AJAVawwfIPE/V7V90AIMq9I/AAAAAAAAChI/30PeMSWOOxsYipf_WQ0KPz8urEVXOCWhQCLcB/s640/IMG_20160814_084135.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-C-3TCt_75XQ/V7V-CgiK0HI/AAAAAAAAChQ/CAtdV2oFPFkFFK3aN3b72FroDJPbhmaEACLcB/s1600/IMG_20160814_084139.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-C-3TCt_75XQ/V7V-CgiK0HI/AAAAAAAAChQ/CAtdV2oFPFkFFK3aN3b72FroDJPbhmaEACLcB/s640/IMG_20160814_084139.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-zsXK5eKVk_g/V7V-J6b2w8I/AAAAAAAAChU/OyGkh0-BXksexgKMB1445PQDc3okuEBZgCLcB/s1600/IMG_20160814_084143.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-zsXK5eKVk_g/V7V-J6b2w8I/AAAAAAAAChU/OyGkh0-BXksexgKMB1445PQDc3okuEBZgCLcB/s640/IMG_20160814_084143.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-RheFxGbT6EE/V7V-PWDBsFI/AAAAAAAAChY/l0yGq2COdXorfoiPTT-ySwgg8-Qxle4BgCLcB/s1600/IMG_20160814_084148.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-RheFxGbT6EE/V7V-PWDBsFI/AAAAAAAAChY/l0yGq2COdXorfoiPTT-ySwgg8-Qxle4BgCLcB/s640/IMG_20160814_084148.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-Tk5SOtbs_9k/V7V-a3HPGGI/AAAAAAAAChg/xGSbJiSGLPoEnR3PnXzdEZKjSMpojJDPgCLcB/s1600/IMG_20160814_084200.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-Tk5SOtbs_9k/V7V-a3HPGGI/AAAAAAAAChg/xGSbJiSGLPoEnR3PnXzdEZKjSMpojJDPgCLcB/s640/IMG_20160814_084200.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-oBe7b2wlIEI/V7V-rsJtoVI/AAAAAAAAChk/7GOvfFkCzpoXIFgFGNBC2pS9Fe2xL8wSACLcB/s1600/IMG_20160814_084419.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-oBe7b2wlIEI/V7V-rsJtoVI/AAAAAAAAChk/7GOvfFkCzpoXIFgFGNBC2pS9Fe2xL8wSACLcB/s640/IMG_20160814_084419.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-rf20g2PNoxk/V7V-2z6JD9I/AAAAAAAAChs/js_t4tfs0VgnmbcdlZBZnML9_az23n1MQCLcB/s1600/IMG_20160814_084423.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-rf20g2PNoxk/V7V-2z6JD9I/AAAAAAAAChs/js_t4tfs0VgnmbcdlZBZnML9_az23n1MQCLcB/s640/IMG_20160814_084423.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-RF2ZJ1jp-00/V7V_ThAJVSI/AAAAAAAACh4/DyEdt6Y2lVEx5fnn_ObJif6alOizgWt3gCLcB/s1600/IMG_20160814_091109.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-RF2ZJ1jp-00/V7V_ThAJVSI/AAAAAAAACh4/DyEdt6Y2lVEx5fnn_ObJif6alOizgWt3gCLcB/s640/IMG_20160814_091109.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-9CkesTYqXhg/V7V_fqMkkqI/AAAAAAAACh8/GCGjZnLJ7VcJJ87k5wQRl0H8gr12DzMegCLcB/s1600/IMG_20160814_091119.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-9CkesTYqXhg/V7V_fqMkkqI/AAAAAAAACh8/GCGjZnLJ7VcJJ87k5wQRl0H8gr12DzMegCLcB/s640/IMG_20160814_091119.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-kOtLHYum6iQ/V7V_KydwrdI/AAAAAAAACh0/ZeqMHKcDmh04WS2CrPY-QxmLpEM-4-5OwCLcB/s1600/IMG_20160814_091439.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://4.bp.blogspot.com/-kOtLHYum6iQ/V7V_KydwrdI/AAAAAAAACh0/ZeqMHKcDmh04WS2CrPY-QxmLpEM-4-5OwCLcB/s640/IMG_20160814_091439.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-PQrz9z6lWIU/V7V_zKU9fNI/AAAAAAAACiI/sWDsLstrH4MaBCHrrPo4bB4h7JRnRLHnACLcB/s1600/IMG_20160814_091521.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-PQrz9z6lWIU/V7V_zKU9fNI/AAAAAAAACiI/sWDsLstrH4MaBCHrrPo4bB4h7JRnRLHnACLcB/s640/IMG_20160814_091521.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-pD2xUf92uDE/V7V_9j2nOcI/AAAAAAAACic/41FO2cp0Xb0AWEmqFFO8FaLTCzG1tBOswCLcB/s1600/IMG_20160814_092237.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-pD2xUf92uDE/V7V_9j2nOcI/AAAAAAAACic/41FO2cp0Xb0AWEmqFFO8FaLTCzG1tBOswCLcB/s640/IMG_20160814_092237.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-bIgz7o_jU7Q/V7V_qZs84sI/AAAAAAAACiA/ArfzTAb_YlIS6J8gwCv-NNLea_tiw_YgQCLcB/s1600/IMG_20160815_170754.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-bIgz7o_jU7Q/V7V_qZs84sI/AAAAAAAACiA/ArfzTAb_YlIS6J8gwCv-NNLea_tiw_YgQCLcB/s640/IMG_20160815_170754.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-D51XpUvx3aE/V7V_x_NlX6I/AAAAAAAACiE/pvSPuhz0WjE2MAR7lBeWKx8ewpr89q6NgCLcB/s1600/IMG_20160815_200903.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-D51XpUvx3aE/V7V_x_NlX6I/AAAAAAAACiE/pvSPuhz0WjE2MAR7lBeWKx8ewpr89q6NgCLcB/s640/IMG_20160815_200903.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-0rsidddvMik/V7V_2Kq7BhI/AAAAAAAACiM/I4vBGotqttE8UwU5Ci8zTpLKzgzxMeMTgCLcB/s1600/IMG_20160815_200912.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-0rsidddvMik/V7V_2Kq7BhI/AAAAAAAACiM/I4vBGotqttE8UwU5Ci8zTpLKzgzxMeMTgCLcB/s640/IMG_20160815_200912.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-C7-gcqxl3JE/V7V_3Q4T6rI/AAAAAAAACiQ/RHerXXYsa3g16Zb-0P8HWaxGy6Rx7PiUwCLcB/s1600/IMG_20160815_200918.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-C7-gcqxl3JE/V7V_3Q4T6rI/AAAAAAAACiQ/RHerXXYsa3g16Zb-0P8HWaxGy6Rx7PiUwCLcB/s640/IMG_20160815_200918.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-TfKhgl72LhI/V7V_5G6NZGI/AAAAAAAACiU/L8iyaYlrqfsskoG6Chv_tC3hmEm0MbMOgCLcB/s1600/IMG_20160815_200930.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-TfKhgl72LhI/V7V_5G6NZGI/AAAAAAAACiU/L8iyaYlrqfsskoG6Chv_tC3hmEm0MbMOgCLcB/s640/IMG_20160815_200930.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-LD-15lS8N5U/V7V_7V6VJlI/AAAAAAAACiY/-MmJTnKVPzkPY5-A0xzE3ohi-mrKf9OrgCLcB/s1600/IMG_20160815_201532.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-LD-15lS8N5U/V7V_7V6VJlI/AAAAAAAACiY/-MmJTnKVPzkPY5-A0xzE3ohi-mrKf9OrgCLcB/s640/IMG_20160815_201532.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-EcpUBwwZcBI/V7WAFO7Y90I/AAAAAAAACik/0HAHdiq_glwql6RoSsRUYmREjf2UPO11QCLcB/s1600/IMG_20160815_201630.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://2.bp.blogspot.com/-EcpUBwwZcBI/V7WAFO7Y90I/AAAAAAAACik/0HAHdiq_glwql6RoSsRUYmREjf2UPO11QCLcB/s640/IMG_20160815_201630.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-airTmhK8XHg/V7WBt46M8LI/AAAAAAAACjM/6Yy58A1otOI_tr-o4njoenohjpwKGcvhwCLcB/s1600/IMG_20160816_083334.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-airTmhK8XHg/V7WBt46M8LI/AAAAAAAACjM/6Yy58A1otOI_tr-o4njoenohjpwKGcvhwCLcB/s640/IMG_20160816_083334.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-tB7PAncZOew/V7WBuIdEa9I/AAAAAAAACjQ/WLa_vws_c_EydZ8aaMatfn5ztqizBdzawCLcB/s1600/IMG_20160816_083340.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-tB7PAncZOew/V7WBuIdEa9I/AAAAAAAACjQ/WLa_vws_c_EydZ8aaMatfn5ztqizBdzawCLcB/s640/IMG_20160816_083340.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-vXETDoU-pc8/V7WCTuRnhnI/AAAAAAAACjc/LUJ85AIZCdYXG3urrCycf4g0cG1ntJ8iQCLcB/s1600/IMG_20160816_095639.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-vXETDoU-pc8/V7WCTuRnhnI/AAAAAAAACjc/LUJ85AIZCdYXG3urrCycf4g0cG1ntJ8iQCLcB/s640/IMG_20160816_095639.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-uPx4NDD-YUY/V7WCxIQSTbI/AAAAAAAACjk/w1rqYE_QyZIFW1Y_DeJPq9zlCBWK0fo5ACLcB/s1600/IMG_20160816_095643.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-uPx4NDD-YUY/V7WCxIQSTbI/AAAAAAAACjk/w1rqYE_QyZIFW1Y_DeJPq9zlCBWK0fo5ACLcB/s640/IMG_20160816_095643.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-6iQXcxrEf3c/V7WCytq2z2I/AAAAAAAACjs/PwyILm40ywAnfdelqfTGiRfFyhtsrNEewCLcB/s1600/IMG_20160816_095647.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-6iQXcxrEf3c/V7WCytq2z2I/AAAAAAAACjs/PwyILm40ywAnfdelqfTGiRfFyhtsrNEewCLcB/s640/IMG_20160816_095647.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-dS262HAixu4/V7WDTBzsBEI/AAAAAAAACj4/s7OzNt-4_ZEDxtPPrLk-vuuxKvOhm4HdACLcB/s1600/IMG_20160816_095649.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-dS262HAixu4/V7WDTBzsBEI/AAAAAAAACj4/s7OzNt-4_ZEDxtPPrLk-vuuxKvOhm4HdACLcB/s640/IMG_20160816_095649.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-A5nAwR9U2iM/V7WEBgWlc7I/AAAAAAAACkI/78caM0U0aZYidOm0X13mYXluXjSVFPMOQCLcB/s1600/IMG_20160816_095652.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-A5nAwR9U2iM/V7WEBgWlc7I/AAAAAAAACkI/78caM0U0aZYidOm0X13mYXluXjSVFPMOQCLcB/s640/IMG_20160816_095652.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-uqyxpNrf2kk/V7WDvw711fI/AAAAAAAACkA/El3yhPSmduYVmd_4WBP5m6ZKkh6YZNzNwCLcB/s1600/IMG_20160816_095655.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-uqyxpNrf2kk/V7WDvw711fI/AAAAAAAACkA/El3yhPSmduYVmd_4WBP5m6ZKkh6YZNzNwCLcB/s640/IMG_20160816_095655.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-y1JhkxA3ob8/V7WEVlLeTrI/AAAAAAAACkQ/KRBHJN_PVQEj0OJRd-Mt8GWBTA5iW9E3ACLcB/s1600/IMG_20160816_095657.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-y1JhkxA3ob8/V7WEVlLeTrI/AAAAAAAACkQ/KRBHJN_PVQEj0OJRd-Mt8GWBTA5iW9E3ACLcB/s640/IMG_20160816_095657.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-k_w_VEFSnMc/V7WFR6IjkXI/AAAAAAAACkc/q6FDznVO8x0h9X-Nhr13cYdfjs_evTb8wCLcB/s1600/IMG_20160816_095702.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-k_w_VEFSnMc/V7WFR6IjkXI/AAAAAAAACkc/q6FDznVO8x0h9X-Nhr13cYdfjs_evTb8wCLcB/s640/IMG_20160816_095702.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-yWMtarUcZ_4/V7WFwO_gSWI/AAAAAAAACkk/_alePTLIpHkhxwY4b38JMoSHvHwwl3SZACLcB/s1600/IMG_20160816_095706.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-yWMtarUcZ_4/V7WFwO_gSWI/AAAAAAAACkk/_alePTLIpHkhxwY4b38JMoSHvHwwl3SZACLcB/s640/IMG_20160816_095706.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-bRMLrZHtrso/V7WF69jkP1I/AAAAAAAACko/KY6A5dMJjZguLyWhCXgmOdVAm47MUROSQCLcB/s1600/IMG_20160816_095711.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-bRMLrZHtrso/V7WF69jkP1I/AAAAAAAACko/KY6A5dMJjZguLyWhCXgmOdVAm47MUROSQCLcB/s640/IMG_20160816_095711.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-u2AyOoQ4u5U/V7WGr0ZmLbI/AAAAAAAAClA/e_K7ZnvWwd083yg5dee42O62q7x5bZkJgCLcB/s1600/IMG_20160816_100114.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-u2AyOoQ4u5U/V7WGr0ZmLbI/AAAAAAAAClA/e_K7ZnvWwd083yg5dee42O62q7x5bZkJgCLcB/s640/IMG_20160816_100114.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-LzDAmIXz-ao/V7WGl4Mn_2I/AAAAAAAACk8/k2fN44D8U1c81SX3D_FeR3r6Cn8fxFljACLcB/s1600/IMG_20160816_100125.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-LzDAmIXz-ao/V7WGl4Mn_2I/AAAAAAAACk8/k2fN44D8U1c81SX3D_FeR3r6Cn8fxFljACLcB/s640/IMG_20160816_100125.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-442yfFSDQa0/V7WG0uiwiII/AAAAAAAAClQ/T5qUYvpY_E8PFW0Kj33p2-RQ-CAC71tRACLcB/s1600/IMG_20160816_100139.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-442yfFSDQa0/V7WG0uiwiII/AAAAAAAAClQ/T5qUYvpY_E8PFW0Kj33p2-RQ-CAC71tRACLcB/s640/IMG_20160816_100139.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-2gUyCyvgFfE/V7WIBkL3OjI/AAAAAAAAClw/pXr54kaB1qYI7SMOz9ZIDLYQ3OkPVWq3QCLcB/s1600/IMG_20160816_100159.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-2gUyCyvgFfE/V7WIBkL3OjI/AAAAAAAAClw/pXr54kaB1qYI7SMOz9ZIDLYQ3OkPVWq3QCLcB/s640/IMG_20160816_100159.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-bm16MaHH-4g/V7WH7w9w8mI/AAAAAAAAClo/SGgQ4fOa6x8CVoafLofLNOjYCsH4zGPbwCLcB/s1600/IMG_20160816_100224.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-bm16MaHH-4g/V7WH7w9w8mI/AAAAAAAAClo/SGgQ4fOa6x8CVoafLofLNOjYCsH4zGPbwCLcB/s640/IMG_20160816_100224.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-8C9Kj5wwTNk/V7WIjkAbDrI/AAAAAAAACl4/iuqGoc7C-BMgyLEKfBJikD6-PotMFNz0ACLcB/s1600/IMG_20160816_100427.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-8C9Kj5wwTNk/V7WIjkAbDrI/AAAAAAAACl4/iuqGoc7C-BMgyLEKfBJikD6-PotMFNz0ACLcB/s640/IMG_20160816_100427.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-emm5pNtESyU/V7WJV7aeh3I/AAAAAAAACmQ/gbyaDERGJe0SSJGwl6SsGdmg8nGorHY-gCLcB/s1600/IMG_20160816_100457.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-emm5pNtESyU/V7WJV7aeh3I/AAAAAAAACmQ/gbyaDERGJe0SSJGwl6SsGdmg8nGorHY-gCLcB/s640/IMG_20160816_100457.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-HLCNq9zph7Y/V7WJXBm5q7I/AAAAAAAACmU/VKMGzMK5QOoV2ZvEAukMdy8sC7kZwzaQwCLcB/s1600/IMG_20160816_100458.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-HLCNq9zph7Y/V7WJXBm5q7I/AAAAAAAACmU/VKMGzMK5QOoV2ZvEAukMdy8sC7kZwzaQwCLcB/s640/IMG_20160816_100458.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-u6uMgZPzG8g/V7WJ0JuHtFI/AAAAAAAACmc/zJEHdl7baMcxZ1R3HwkZMwUbxkct6QQXACLcB/s1600/IMG_20160816_100506.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://4.bp.blogspot.com/-u6uMgZPzG8g/V7WJ0JuHtFI/AAAAAAAACmc/zJEHdl7baMcxZ1R3HwkZMwUbxkct6QQXACLcB/s640/IMG_20160816_100506.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-xPGRxnbzxnU/V7WJ1PWcBgI/AAAAAAAACmg/Axq0Y2pkBEcemDop3OyCZM8jwbsPO4siACLcB/s1600/IMG_20160816_110442.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://2.bp.blogspot.com/-xPGRxnbzxnU/V7WJ1PWcBgI/AAAAAAAACmg/Axq0Y2pkBEcemDop3OyCZM8jwbsPO4siACLcB/s640/IMG_20160816_110442.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-qSZsdAAOaRQ/V7WJ964seVI/AAAAAAAACmo/B7FWw1VjsusZ-Bl7oTHOIQgvr2a_lCBTwCLcB/s1600/IMG_20160816_110453.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://1.bp.blogspot.com/-qSZsdAAOaRQ/V7WJ964seVI/AAAAAAAACmo/B7FWw1VjsusZ-Bl7oTHOIQgvr2a_lCBTwCLcB/s640/IMG_20160816_110453.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-nCWziT8uC34/V7WKUfWrorI/AAAAAAAACmw/BmAln1VxmIYhHAVtNbz26zKe0-ERb6rawCLcB/s1600/IMG_20160816_110512.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://3.bp.blogspot.com/-nCWziT8uC34/V7WKUfWrorI/AAAAAAAACmw/BmAln1VxmIYhHAVtNbz26zKe0-ERb6rawCLcB/s640/IMG_20160816_110512.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-XW2mrA9OMIc/V7WKf_MCwPI/AAAAAAAACm4/agsdH_QGRJ0t3obcH-PduRQtLwAEakQvACLcB/s1600/IMG_20160816_110527.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://1.bp.blogspot.com/-XW2mrA9OMIc/V7WKf_MCwPI/AAAAAAAACm4/agsdH_QGRJ0t3obcH-PduRQtLwAEakQvACLcB/s640/IMG_20160816_110527.jpg" width="360" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-24ypsHKIg_E/V7WKwU718yI/AAAAAAAACnE/GXrWAlvmi5QWPV6QFCzxhOZmp0Oob7_VwCLcB/s1600/IMG_20160816_110640.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="360" src="https://3.bp.blogspot.com/-24ypsHKIg_E/V7WKwU718yI/AAAAAAAACnE/GXrWAlvmi5QWPV6QFCzxhOZmp0Oob7_VwCLcB/s640/IMG_20160816_110640.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-IIJbqWXQgQg/V7WKfD4pNVI/AAAAAAAACm0/7o2ZEZsyH14w1bPQ1dDqmnClSV-KPebmQCLcB/s1600/PANO_20160814_072107.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="89" src="https://1.bp.blogspot.com/-IIJbqWXQgQg/V7WKfD4pNVI/AAAAAAAACm0/7o2ZEZsyH14w1bPQ1dDqmnClSV-KPebmQCLcB/s640/PANO_20160814_072107.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-mglTkD-nGD4/V7WKoieKOHI/AAAAAAAACnA/K2L_wJhGt7IrhqdGGN9j-VdX4BK_9Wp3gCLcB/s1600/PANO_20160814_072214.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="92" src="https://2.bp.blogspot.com/-mglTkD-nGD4/V7WKoieKOHI/AAAAAAAACnA/K2L_wJhGt7IrhqdGGN9j-VdX4BK_9Wp3gCLcB/s640/PANO_20160814_072214.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-idrwYN5Reb0/V7WKoLGuLuI/AAAAAAAACm8/iy7iFMhbAacIRx098zn7WBDrda10FS_WQCLcB/s1600/PANO_20160814_072825.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="91" src="https://4.bp.blogspot.com/-idrwYN5Reb0/V7WKoLGuLuI/AAAAAAAACm8/iy7iFMhbAacIRx098zn7WBDrda10FS_WQCLcB/s640/PANO_20160814_072825.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-_fVZJhHuy90/V7WK1IxDgUI/AAAAAAAACnM/XrnM-pt2ZsQ3uI29dG3y5Py3wP4FjLu0ACLcB/s1600/PANO_20160814_075158.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="92" src="https://4.bp.blogspot.com/-_fVZJhHuy90/V7WK1IxDgUI/AAAAAAAACnM/XrnM-pt2ZsQ3uI29dG3y5Py3wP4FjLu0ACLcB/s640/PANO_20160814_075158.jpg" width="640" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-3wUc7xtmIaI/V7WK2cid-3I/AAAAAAAACnQ/wdx9VT_YwBccxoSFxawihkP7z6S7UX06wCLcB/s1600/PANO_20160814_075237.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="92" src="https://4.bp.blogspot.com/-3wUc7xtmIaI/V7WK2cid-3I/AAAAAAAACnQ/wdx9VT_YwBccxoSFxawihkP7z6S7UX06wCLcB/s640/PANO_20160814_075237.jpg" width="640" /></a></div>
<br />iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0Kampung, Ngawen, Gunung Kidul Regency, Special Region of Yogyakarta, Indonesia-7.8218456858393823 110.67081928253174-7.8257781858393827 110.66577678253174 -7.817913185839382 110.67586178253174tag:blogger.com,1999:blog-1833297251536740824.post-49862790672373636962015-05-18T10:14:00.001+07:002015-05-18T10:21:43.208+07:00MSI X58 Pro-E Hackintosh<div style="background-color: white; color: #141823; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-bottom: 6px;">
Part :</div>
<div style="background-color: white; color: #141823; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-bottom: 6px;">
- MSI X58 Pro-E<br />
- Xeon X5650<br />
- Leadtek 9400GT<br />
- Seagate 1TB SATA3 (isi 10.8.5 & Windows)<br />
- V-GeN DDR3 8GB PC10600 x3<br />
- Corsair VS Series 650W<br />
- LG DVDRW 24X SATA<br />
- Sandisk X110 128Gb SSD (isi 10.6.8)<br />
- TP - Link Wireless PCI Express WDN4800<br />
- Deepcool Ice Blade 200M</div>
<div style="background-color: white; color: #141823; display: inline; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-top: 6px;">
</div>
<div>
<div style="background-color: white; color: #141823; display: inline; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-top: 6px;">
<br /></div>
</div>
clue : Advanced BIOS Features -> CPU Feature -> Execute Bit Support. Set it to ENABLED<br />
<div>
<span style="color: #141823; font-family: helvetica, arial, lucida grande, sans-serif;"><span style="font-size: 14px; line-height: 19.3199996948242px;"><br /></span></span></div>
<div>
<span style="color: #141823; font-family: helvetica, arial, lucida grande, sans-serif;"><span style="font-size: 14px; line-height: 19.3199996948242px;">10.6.8 use Retail + MyHack Installer + Multibeast Snow Leopard + AppleACPIPlatform.kext & IOPCIFamily.kext 10.6.7 RollBack </span></span><a href="http://www.4shared.com/zip/kn0SbhICba/1067_rollback.html" style="font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px;" target="_blank">10.6.7 Rollback</a></div>
<div>
<span style="color: #141823; font-family: helvetica, arial, lucida grande, sans-serif;"><span style="font-size: 14px; line-height: 19.3199996948242px;"><br /></span></span></div>
<div>
<span style="color: #141823; font-family: helvetica, arial, lucida grande, sans-serif;"><span style="font-size: 14px; line-height: 19.3199996948242px;">10.8.5 </span></span><span style="color: #141823; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px;">use Retail </span><span style="color: #141823; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px;">+ MyHack Installer </span><span style="color: #141823; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px;">+ Multibeast Mountain Lion Edition</span><span style="color: #141823; font-family: helvetica, arial, lucida grande, sans-serif;"><span style="font-size: 14px; line-height: 19.3199996948242px;"><br /></span></span><br />
<div>
<div style="background-color: white; color: #141823; display: inline; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-top: 6px;">
<br /></div>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-umFmcwCCqoA/VVlX684UUtI/AAAAAAAABmU/gw13PHfDnAI/s1600/Screen%2Bshot%2B2015-05-15%2Bat%2B11.59.23%2BAM.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="256" src="http://4.bp.blogspot.com/-umFmcwCCqoA/VVlX684UUtI/AAAAAAAABmU/gw13PHfDnAI/s320/Screen%2Bshot%2B2015-05-15%2Bat%2B11.59.23%2BAM.png" width="320" /></a></div>
<div>
<div style="background-color: white; color: #141823; display: inline; font-family: helvetica, arial, 'lucida grande', sans-serif; font-size: 14px; line-height: 19.3199996948242px; margin-top: 6px;">
<br /></div>
</div>
</div>
iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-78855590124574546772014-11-14T12:40:00.000+07:002014-11-14T12:40:33.358+07:00membuat installer OSX ke USB<div class="p1">
<br /></div>
<div class="p1">
1. show hidden files, open terminal : <span style="background-color: #e5e5e5; color: #222222; font-family: monospace, serif; font-size: 12px; line-height: 23.2000007629395px;">defaults write com.apple.finder AppleShowAllFiles 1 && killall Finder</span></div>
<div class="p1">
<br /></div>
<div class="p1">
2. right click on Install OS X xxx, choose "Show Package Contents". </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-m30TxHSj-60/VGWQv0zC7pI/AAAAAAAABOY/ctQ92Lk--v0/s1600/yosemite-show-package.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="//1.bp.blogspot.com/-m30TxHSj-60/VGWQv0zC7pI/AAAAAAAABOY/ctQ92Lk--v0/s1600/yosemite-show-package.png" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
3. Open Contents / Shared Support</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://1.bp.blogspot.com/-yuTM3VO3IuM/VGWRYkE7RNI/AAAAAAAABOg/QKhf_D4DApk/s1600/contents%3Esharedsupport.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="135" src="https://1.bp.blogspot.com/-yuTM3VO3IuM/VGWRYkE7RNI/AAAAAAAABOg/QKhf_D4DApk/s320/contents%3Esharedsupport.png" width="320" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
3. You'll see a Packages folder. Open terminal, enter: open "/Volumes/OS X Install ESD/BaseSystem.dmg or use finder open/mount InstallESD.dmg (double click it) and BaseSystem.dmg</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-0lAx2jbqGv4/VGWSpaXEKkI/AAAAAAAABOs/RvENtCXPzBA/s1600/basesystem.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="176" src="https://3.bp.blogspot.com/-0lAx2jbqGv4/VGWSpaXEKkI/AAAAAAAABOs/RvENtCXPzBA/s320/basesystem.png" width="320" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
<br /></div>
<div class="p1">
4. Using Disk Utility, restore OS X Base System to your USB Stick.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://3.bp.blogspot.com/-y7GhmKo68tU/VGWTJ9jsiQI/AAAAAAAABO0/GUZTV57peBY/s1600/disk-utility-restore.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="278" src="https://3.bp.blogspot.com/-y7GhmKo68tU/VGWTJ9jsiQI/AAAAAAAABO0/GUZTV57peBY/s320/disk-utility-restore.png" width="320" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
5. On the USB Stick, in System/Installation delete the link named Packages</div>
<div class="p1">
<br /></div>
<div class="p1">
6. Copy Packages from OS X Install ESD to the System/Installation folder on the USB Stick</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://4.bp.blogspot.com/-OXtGP4jkub0/VGWUeVXKahI/AAAAAAAABPA/0R_q-2E4i8M/s1600/installation%3Epackage.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://4.bp.blogspot.com/-OXtGP4jkub0/VGWUeVXKahI/AAAAAAAABPA/0R_q-2E4i8M/s320/installation%3Epackage.png" width="294" /></a></div>
<div class="p1">
<br /></div>
<div class="p1">
7. Unhide files from the OS X Install ESD dmg to copy BaseSystem.dmg and Basesystem.chunklist (they are both hidden) and copy them onto the USB stick </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-SDGiyyQoToI/VGWVfptjCSI/AAAAAAAABPI/E6x_GHWjFpk/s1600/basesystem.chunklist.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://2.bp.blogspot.com/-SDGiyyQoToI/VGWVfptjCSI/AAAAAAAABPI/E6x_GHWjFpk/s320/basesystem.chunklist.png" width="278" /></a></div>
<div class="p1">
<br /></div>
<br />
<div class="p1">
8. Unmount USB stick. You now have a full bootable USB stick with the OS.</div>
iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-26442849134544033542013-10-22T12:18:00.002+07:002013-10-24T13:08:53.829+07:00Tips install BBM di Android incompatible<div style="text-align: justify;">
Pengguna android yang ingin mengunduh BBM tetapi terdapat keterangan "Not Compatible" padahal OSnya ICS. bisa diakali dengan download dari komputer</div>
<div style="text-align: justify;">
berikut langkah-langkahnya</div>
<div style="text-align: justify;">
1. copy link download BBM dari Google Play</div>
<blockquote class="tr_bq">
<a href="https://play.google.com/store/apps/details?id=com.bbm">https://play.google.com/store/apps/details?id=com.bbm</a></blockquote>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://4.bp.blogspot.com/-_tT-5PzF-hU/UmYGTNzcDPI/AAAAAAAAAks/0Q7lig7kwoI/s1600/BBM1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="224" src="http://4.bp.blogspot.com/-_tT-5PzF-hU/UmYGTNzcDPI/AAAAAAAAAks/0Q7lig7kwoI/s320/BBM1.jpg" width="320" /></a></div>
<br />
2. buka link APK downloader berikut<br />
<blockquote class="tr_bq">
<a href="http://apps.evozi.com/apk-downloader/">http://apps.evozi.com/apk-downloader/</a></blockquote>
3. masukkan/paste link/URL yg di copy tadi, supaya bisa download dan save di komputer<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-M6hZNmMDItI/UmYG0XmRCVI/AAAAAAAAAk0/vCpSlD5J5us/s1600/BBM2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="102" src="http://2.bp.blogspot.com/-M6hZNmMDItI/UmYG0XmRCVI/AAAAAAAAAk0/vCpSlD5J5us/s320/BBM2.jpg" width="320" /></a></div>
<br />
3. klik "Generate Download Link" dan tunggu hingga keluar tombol "click here"<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-Lzjjz_6uVkE/UmYHrlazyVI/AAAAAAAAAk8/-Xt6KZagHMA/s1600/BBM3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="197" src="http://2.bp.blogspot.com/-Lzjjz_6uVkE/UmYHrlazyVI/AAAAAAAAAk8/-Xt6KZagHMA/s320/BBM3.jpg" width="320" /></a></div>
4. klik "Click here to download..." dan tunggu hingga download selesai<br />
5. Copy ke device android yang ingin di install<br />
6. install dengan opsi "unknown sources" tercentang<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-hEZH1BdDNk0/UmYI-rK0xsI/AAAAAAAAAlE/orxcLMPR1bg/s1600/Screenshot_2013-10-22-12-10-48%5B1%5D.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://1.bp.blogspot.com/-hEZH1BdDNk0/UmYI-rK0xsI/AAAAAAAAAlE/orxcLMPR1bg/s320/Screenshot_2013-10-22-12-10-48%5B1%5D.png" width="213" /></a></div>
<br />
7. daftar dst dsb dll setelah proses install selesai<br />
8. selesai, kini BBM bisa dipakai di Android "incompatible"<br />
<br />
jangan lupa invite PIN BBM saya ya :D<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://2.bp.blogspot.com/-ViRtpaiwwgY/UmYKaBWYnNI/AAAAAAAAAlM/h21vhjl2jOM/s1600/Screenshot_2013-10-22-12-14-07%5B1%5D.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://2.bp.blogspot.com/-ViRtpaiwwgY/UmYKaBWYnNI/AAAAAAAAAlM/h21vhjl2jOM/s320/Screenshot_2013-10-22-12-14-07%5B1%5D.png" width="213" /></a></div>
<br />
selamat mencoba<br />
<br />
tambahan :<br />
<span style="background-color: whitesmoke; font-family: 'Trebuchet MS', verdana, sans-serif; font-size: 13px; text-align: justify;">bagi yang susah mendaftar, barusan jalan2 sore</span><br />
<span style="background-color: whitesmoke; font-family: 'Trebuchet MS', verdana, sans-serif; font-size: 13px; text-align: justify;">dapat dari blog tetangga, siapa tau berguna</span><br />
<span style="background-color: whitesmoke; font-family: 'Trebuchet MS', verdana, sans-serif; font-size: 13px; text-align: justify;">silakan ditengok : <a href="http://maschuzonline.blogspot.com/2013/10/trik-sederhana-akali-antrian-registrasi.html">http://maschuzonline.blogspot.com/2013/10/trik-sederhana-akali-antrian-registrasi.html</a></span>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com10tag:blogger.com,1999:blog-1833297251536740824.post-80860126751879389072013-09-19T09:49:00.001+07:002013-09-19T09:49:59.933+07:00Creating Windows 7 install media on flash drive using diskpart<span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">If you want a flash drive to be bootable, you have to use a utility like diskpart to do that. Then copying an install DVD to it will make it act as bootable install media for Windows.</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">A. Make a bootable flash drive by opening a Command Prompt, 'Run as Administrator', to run these commands:</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">diskpart</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">select disk 2 ('list disk' to determine number)</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">clean</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">create partition primary</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">select partition 1</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">active</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">format fs=fat32</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">assign</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">exit</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">B. Copy DVD to the Flash Drive</span><br style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;" /><span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">xcopy d:\*.* /s/e/f e:\</span><br />
<span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">d:\ <--- DVD Drive</span><br />
<span style="background-color: white; color: #333333; font-family: 'Segoe UI', Arial, sans-serif; font-size: 13px;">e:\ <--- USB Drive</span>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-24621991442606331832013-07-01T14:14:00.003+07:002013-07-01T14:14:46.320+07:00OEM Logo di Windows 7membuat OEM logo di windows 7<br />
<br />
1. buatlah registry dari notepad<br />
<br />
ketik / copy kode dibawah ini di notepad :<br />
<blockquote class="tr_bq">
<blockquote class="tr_bq">
Windows Registry Editor Version 5.00</blockquote>
<blockquote class="tr_bq">
<br /></blockquote>
<blockquote class="tr_bq">
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation]</blockquote>
<blockquote class="tr_bq">
"Logo"="<span style="color: red;">C:\\Users\\Public\\gambar.bmp</span>"</blockquote>
<blockquote class="tr_bq">
"SupportURL"="<span style="color: red;">http://papanyaafham.blogspot.com</span>"</blockquote>
<blockquote class="tr_bq">
"Model"="<span style="color: red;">G475</span>"</blockquote>
<blockquote class="tr_bq">
"Manufacturer"="<span style="color: red;">Lenovo</span>"</blockquote>
<blockquote class="tr_bq">
"SupportHours"="<span style="color: red;">24 Hours</span>"</blockquote>
<blockquote class="tr_bq">
"SupportPhone"="<span style="color: red;">021-26 26 1444</span>"</blockquote>
</blockquote>
save dengan nama <span style="color: red;">terserah.reg</span> [ekstensi .reg bukan txt]<br />
<br />
2. taruh gambar berekstensi .bmp disatu folder dengan file registry diatas [.reg]<br />
pastikan posisi folder sama dengan yg ada di registry, dalam contoh ini :<br />
"Logo"="<span style="color: red;">C:\\Users\\Public\\gambar.bmp</span>"<br />
maka file gambar.bmp ada di folder <span style="color: red;">C:\\Users\\Public\\</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://1.bp.blogspot.com/-dT_ArJOhns8/UdEsRpV_m2I/AAAAAAAAAOc/Vu819Z2VzCs/s910/upload.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-dT_ArJOhns8/UdEsRpV_m2I/AAAAAAAAAOc/Vu819Z2VzCs/s1600/upload.png" /></a></div>
<br />
setelah semua siap, running file <span style="color: red;">terserah.reg</span> tadi dengan cara klik kanan pilih merge<br />
apabila tidak ada kesalahan, seharusnya OEM logo tsb sudah ada di properties nya Computer<br />
[klik kanan Computer pilih properties]iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-71245275933313336892012-04-27T13:24:00.000+07:002012-04-27T13:24:04.722+07:00Lion Retail 10.7.3 di Acer Aspire 4736G<span class="postbody">spesifikasi :
<br />
- CPU Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz
<br />
- VGA NVIDIA GeForce G 105M
<br />
- Wireless Intel Wifi link 1000 BGN
<br />
- LAN Atheros AR8131/AR8132
<br />
- Sound realtek ALC888
<br />
<br />
pakai USB metode MyHack Installer dan Multibeast Lion Edition dari Tonymac</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://image.oprekpc.com/images/524about.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="181" src="http://image.oprekpc.com/images/524about.gif" width="320" /></a></div>
<br />
<span class="postbody">VGA work QE/CI pakai bootflags : GraphichsEnabler=Yes</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://image.oprekpc.com/images/648VGA_tn.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="221" src="http://image.oprekpc.com/images/648VGA_tn.jpg" width="320" /></a></div>
<span class="postbody">- kext LAN work, dapat dari kexts.com</span><br />
<span class="postbody">- Sound pakai voodooHDA 2.7.3 dari multibeast Lion</span><br />
<span class="postbody">- Bluetooth Work OOB</span><br />
<span class="postbody">- tombol Fn work setelah pakai dsdt.aml buat sendiri dari windows</span><br />
<span class="postbody">- Wireless LAN no Hope :(</span><br />
<span class="postbody"><br /></span><br />
<span class="postbody">photobooth langsung jalan ga dipakein macem2</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://image.oprekpc.com/images/483photobooth_tn.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="297" src="http://image.oprekpc.com/images/483photobooth_tn.jpg" width="320" /></a></div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-1326289234876541592012-04-02T11:06:00.001+07:002012-04-02T11:06:56.737+07:00MacOSX Lion Retail di HP Compaq CQ3521L<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
Spesifikasi Hardware dari Hewlett-Packard Compaq CQ3521L<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.digi.co.id/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/C/o/Compaq_Presario__CQ3321l.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="217" src="http://www.digi.co.id/media/catalog/product/cache/1/image/9df78eab33525d08d6e5fb8d27136e95/C/o/Compaq_Presario__CQ3321l.jpg" width="320" /></a></div>
Prosesor : Intel Core i3 550, 3166 MHz<br />VGA onboard : Intel(R) HD Graphics (HD2000)<br />Sound : Realtek ALC662<br />LAN : Realtek RTL8139/810x Fast Ethernet Adapter<br />Hardisk : Seagate 500 GB, 7200 RPM, SATA-II<br />DVD-RW : hp CDDVDW<br />Monitor : Compaq S2021 Wide LCD Monitor<br />
<br />
cara install via USB 8GB menggunakan MyHack<br />
khusus VGA onboard (HD2000) karena tidak didukung oleh macOSX Lion (no QE/CI)<br />
hanya beberapa trik agar mau masuk ke post installasi, yaitu delete dua kext : AppleIntelHDGraphicsFB.kext dan AppleIntelHDGraphics.kext yang ada di folder USB installer letaknya di : System/Library/Extensions<br />
kalau tidak di delete akan berhenti di "waiting for root device"<br />
<br />
setelah proses pembuatan installer selesai, booting pertama dari USB installer<br />
press F8 lalu ketik -v dan enter<br />
tunggu sampai masuk ke post installasi<br />
prosesnya sama seperti langkah2 di <a href="http://papanyaafham.blogspot.com/2012/02/lion-retail-di-biostar-g41-m7.html" target="_blank">proses installasi Biostar G41-M7 </a><br />
<br />
setelah sukses install, jangan masuk ke system dulu<br />
sebelumnya harus delete dua kext AppleIntelHDGraphicsFB.kext dan AppleIntelHDGraphics.kext yang ada di HDD,
folder letaknya di : System/Library/Extensions lalu restart<br />
booting lagi dari USB installer sampai masuk ke post installasi lagi<br />
kali ini buka disk utility dan jalankan repair disk permissions hingga selesai lalu restart<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://img17.imageshack.us/img17/1153/81265614.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="227" src="http://img17.imageshack.us/img17/1153/81265614.jpg" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.tekserve.com/service/mac-faq/faq-images/FAQRepairDiskPermissions3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="http://www.tekserve.com/service/mac-faq/faq-images/FAQRepairDiskPermissions3.png" width="320" /></a></div>
<br />
bila tidak ada masalah, setelah booting dr USB biasanya langsung masuk ke desktop<br />
setelah masuk desktop, jalankan multibeast versi Lion. yang dipilih :<br />
<br />
Driver & bootloaders :<br />
1. Audio : tidak saya pilih, saya memakai ALC662 by KemalAlkin yg ada di kexts.com<br />
suara lebih jernih dan bebas dari noise (dibanding menggunakan voodooHDA)<br />2. miscellaneous : ElliotforcelagaciRTC, evoreboot, fakeSMC,
nullCPUpowermanagement<br />
3. Bootloader : Chimera<br />
4. costumization (opsional, boleh dipilih atau ga)<br />
5. System Definition & Themes : chameleon RC5 default (opsional)<br />
6. OSX 86 software : pilih semua<br />
7. untuk LAN card saya gunakan driver langsung dari Realtek.com<br />
<br />
restart dan reboot kali ini melalui HDD langsung<br />
<br />
akhirnya Lion Retail berhasil dikandangkan di HP Compaq CQ3521L<br />
kekurangannya lagi-lagi sama seperti sebelumnya : VGA internal intelHD 2000 tidak support QE/CI<br />
solusinya pakai VGA addons yg compatible dengan mesin macOSX iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-76546016430373642152012-02-26T14:13:00.001+07:002012-08-08T21:09:43.172+07:00Lion Retail di Biostar G41-M7<div style="text-align: center;">
<b>Lion Retail di Biostar G41-M7</b></div>
melanjutkan oprekan Hackintosh di Motherboard Biostar G41-M7, setelah sukses menanam Distro iAtkos L2 di mobo ini pada postingan <a href="http://papanyaafham.blogspot.com/2012/02/iatkos-l2-di-biostar-g41-m7.html" target="_blank">sebelumnya</a>. saya berniat menanam Lion Retail di Biostar G41-M7<br />
untuk settingan BIOS, sama seperti postingan <a href="http://papanyaafham.blogspot.com/2012/02/iatkos-l2-di-biostar-g41-m7.html" target="_blank">sebelumnya</a>, tidak ada yg berubah kecuali :<br />
- HPET di set enable. kalau di disable ga mau masuk post install.<br />
- USB EHCI enable. kali ini menggunakan bootflag : USBBusFix=Yes<br />
<br />
bahan yg disiapkan :<br />
- DVD Lion Retail Final, disini saya pakai masih dlm bentuk format dmg yg saya mounting<br />
- Flashdisk 8 Gb atau lebih. format memakai disk utility : jadikan GUID (GPT) dan mac OS extended (journaled)<br />
- MyHack versi terakhir : untuk mentransfer installer Lion ke USB<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://img.informer.com/screenshots_mac/117/117004_2.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="162" src="http://img.informer.com/screenshots_mac/117/117004_2.jpg" width="200" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
- show hidden files for OSX<br />
- Multibeast for Lion. jangan gunakan versi dibawahnya<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.phacks.net/wp-content/uploads/xps_snow04_multibeast3_userdsdt.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="141" src="http://www.phacks.net/wp-content/uploads/xps_snow04_multibeast3_userdsdt.png" width="200" /></a></div>
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
- Mouse dan Keyboard USB. PS/2 ga akan terdeteksi, sebelum menjalankan multibeast<br />
- satu lagi yg paling penting : Operating System OSX, untuk menjalankan MyHack dan mounting installer Lion.dmg<br />
<br />
langkah-langkah :<br />
<br />
1. transfer installer ke USB<br />
- mounting MyHack.dmg hasil download dan copy MyHack.app ke desktop atau application <br />
- mounting file Lion installer.dmg atau DVD Lion installer<br />
- pakai aplikasi show hidden file, untuk menampilkan file yg disembunyikan<br />
- di root Lion installer yg td sudah dimounting, buka file Basesystem.dmg dan mounting (double klik)<br />
- jalankan MyHack. pilih destination : USB. source : pilih Basesystem yg tadi sudah di mounting<br />
- tunggu hingga selesai +/- 15-20 menit, tergantung kecepatan Hardware yg dipakai<br />
<br />
2. Installasi<br />
- reboot system dan booting dari USB hasil restore tadi<br />
- tekan F8 dan ketik -v USBBusFix=Yes lalu enter<br />
- setelah masuk ke post installation, cukup next-next hingga ke pilihan partisi<br />
- pilih partisi dan jalankan disk utility untuk memformat partisi menjadi mac OS (journaled)<br />
*MyHack installer sudah mengenali partisi MBR, karena sudah ada patch untuk MBR didalamnya. partisi MBR ini sangat berguna bagi yang ingin menggunakan dualboot dgn OS lain (Windows dan Linux)<br />
- setelah di format, keluar dari disk utility tekan next sampai ke proses instalasi<br />
- tunggu sampai selesai +/- 20-30 menit, tergantung kecepatan hardware<br />
- bila sudah selesai klik restart<br />
- booting dari USB, tekan F8 tetapi kali ini pilih partisi HDD hasil install. ketik -v USBBusFix=Yes dan enter<br />
tunggu hingga masuk desktop<br />
<br />
3. Finishing<br />
bila tidak ada masalah, setelah booting dr USB biasanya langsung masuk ke desktop<br />
setelah masuk desktop, jalankan multibeast versi Lion. yang dipilih :<br />
<br />
Driver & bootloaders :<br />
1. Audio : universal voodooHDA 2.7.3<br />
2. miscellaneous : ElliotforcelagaciRTC, evoreboot, fakeSMC, nullCPUpowermanagement, PS/2 keyboard mouse (bagi yg menggunakan keyboard / mouse PS/2)<br />
3. Bootloader : Chimera<br />
4. costumization (opsional, boleh dipilih atau ga)<br />
5. System Definition & Themes : chameleon RC5 default (opsional)<br />
6. OSX 86 software : pilih semua<br />
<br />
restart dan reboot kali ini melalui HDD langsung<br />
<br />
akhirnya Lion Retail berhasil dikandangkan di Biostar G41-M7<br />
kekurangannya sama seperti sebelumnya : VGA internal GMA x4500 tidak support QE/CI<br />
solusinya pakai VGA addons yg compatible dengan mesin macOSXiwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-81174341972764886662012-02-07T14:03:00.001+07:002012-02-07T14:24:22.373+07:00iAtkos L2 di Biostar G41-M7<div style="text-align: center;">iAtkos L2 di Biostar G41-M7</div><br />
sebenarnya udah 2 tahun kira2 saya bergelut dengan dunia per-Hackintosh-an tapi baru kali ini saya mau share pengalaman menanam apel di mesin intel<br />
<br />
spesifikasi komputer yang saya pakai :<br />
- Motherboard Biostar G41-M7<br />
- Prosesor Intel Core 2 Duo E7500 @2,93 GHz<br />
- Memory V-Gen 2x 2Gb PC6400<br />
- VGA (onboard) intel GMA X4500<br />
- Soundcard (onboard) Realtek ALC662<br />
- LAN (onboard) Realtek RTL8102EL - 10/100 Controller<br />
- Hardisk Sata Hitachi 250 Gb, dibagi 3 partisi : Seven, Data, FAT32 untuk install mac<br />
(set as primary dan active partition)<br />
- DVD-RW Sata Lite-On<br />
<br />
installer yang saya pakai menggunakan iAtkos L2 OSX Lion 10.7.2 dan Multibeast installer untuk menginstall kext (driver) sound<br />
<br />
step-step penginstallan :<br />
- masuk ke BIOS (tekan Delete di keyboard pas nyalain CPU)<br />
- set default setting<br />
- Hardisk set ke Enhanced<br />
- USB EHCI di disable (kalau enable ga mau masuk ke proses penginstallan)<br />
- HPET (katanya) enable, tapi saya biarkan disable (default)<br />
kurang tau ini buat apaan, tp di disable pun saya berhasil install<br />
- Save dan Exit<br />
<br />
tekan F9 untuk booting pertama dari DVD iAtkos L2, setelah keluar tulisan press F8 to ..... langsung tekan F8 kemudian ketik : -v tunggu hingga masuk installer mac<br />
setelah masuk klik next - next sampai pemilihan mau di install di partisi mana<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://img17.imageshack.us/img17/1153/81265614.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="227" src="http://img17.imageshack.us/img17/1153/81265614.jpg" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
klik partisi FAT32 yang ingin diinstall mac tadi. pilih erase di tab atas,<br />
format : mac OS extended (journaled)<br />
name : terserah. klik erase di tombol bawah<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-db7VybtVlFs/TwRR6nR9I-I/AAAAAAAAAIA/e8l_mxxGSBU/Mac%252520OS%252520X%252520Lion-2012-01-04-18-30-12%25255B4%25255D.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="240" src="http://3.bp.blogspot.com/-db7VybtVlFs/TwRR6nR9I-I/AAAAAAAAAIA/e8l_mxxGSBU/Mac%252520OS%252520X%252520Lion-2012-01-04-18-30-12%25255B4%25255D.jpg" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
kalau sudah selesai klik tanda silang untuk keluar dari disk utility<br />
kembali ke pemilihan partisi mana yg akan ditanam, klik partisi yang tadi di format<br />
klik costumize (harus)<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-XV8tHjE0Qwc/TzDHwRrhZqI/AAAAAAAAAHM/BXC7UFcOtfk/s1600/iatkos+L2+costumize.gif" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="http://3.bp.blogspot.com/-XV8tHjE0Qwc/TzDHwRrhZqI/AAAAAAAAAHM/BXC7UFcOtfk/s320/iatkos+L2+costumize.gif" width="237" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
costumize yang saya pilih agar pas di mesin yang saya gunakan :<br />
- default dari iAtkos jangan diubah-ubah, biarin aja<br />
- bootloader option saya tambah :<br />
Grapichs enabler<br />
Built-in Ethernet<br />
32-bit (karena saya hanya ingin menggunakan mode 32bit)<br />
original apel boot logo<br />
- patch yang saya tambahin : IOPCIFamily. kalau tidak dipilih, suka kernel panic ga jelas<br />
- Driver<br />
Sata/IDE : Non-AHCI Sata<br />
Sound : VoodooHDA v.2.7.3 (tapi tidak saya pilih, saya lebih memilih pakai voodooHDA punya Multibeast. saya install nanti kalau sudah masuk desktop)<br />
PS/2 : karena saya pakai keyboard PS/2<br />
- done<br />
klik next untuk melanjutkan installasi, tunggu hingga 15-20 menit tergantung performance Hardware yang digunakan.<br />
sambil nunggu bisa ngopi, ngerokok, makan, atau ditinggal tidur. hehe<br />
setelah selesai klik restart, atau restart otomatis 20 detik<br />
<br />
tahap selanjutnya setelah restart, booting pertama dari Hardisk. keluar tulisan press any key to .... pencet sembarang tombol di keyboard kemudian ketik -v.<br />
tunggu hingga masuk ke proses pemberian nama komputer, user, dll<br />
<br />
sudah masuk desktop, saya install sound dari multibeast Lion version. kemudian restart<br />
<br />
DONE<br />
<br />
akhirnya OSX Lion berhasil masuk ke kandang butut yang saya buat<br />
kekurangan dari spesifikasi CPU yang saya pakai hanya pada VGA dan LAN<br />
karena sampai saat ini belum ada kext (driver) yang pas buat kedua item tsb<br />
alternatif agar VGA work QE/CI adalah menambahkan VGA add-on yang kompatibel dengan OSX Lion (sayang ga punya modal) hehe<br />
untuk LAN, karena saya ga pakai jadi saya biarkan mati<br />
saya memakai modem E1550 untuk koneksi internet<br />
driver dan Mobile Partnernya bisa didownload langsung dari web nyaiwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com4tag:blogger.com,1999:blog-1833297251536740824.post-80074984393495361342011-12-22T15:26:00.000+07:002011-12-22T15:26:53.538+07:00enable AHCI in Windows 7 after installation<div style="text-align: justify;"> <span style="font-size: small;"> </span> </div><h1 class="entry-title" style="text-align: justify;"><span style="font-size: small;">How to enable AHCI in Windows 7 RC after installation</span></h1><div style="text-align: justify;"><span style="font-size: small;"> </span> </div><div style="text-align: justify;"> </div><div style="text-align: justify;"><span style="font-size: small;"><a href="http://en.wikipedia.org/wiki/Ahci">AHCI</a> (Advanced Host Controller Interface) enables native command queuing and hot-plugging through SATA host controllers (Serial-ATA) for your hard drives. In many scenarios it enables more efficient multi-tasking. Vista was the first Windows OS to support AHCI out of the box, where as Windows 7 does the same. But an issue with AHCI is that if you install the OS without enabling AHCI in the BIOS, enabling it after installation will render your OS unusable. This is because Windows disable the AHCI driver since it is not needed during the installation.</span></div><div style="text-align: justify;"><span style="font-size: small;">There is one way to fix this, although you need to have knowledge of registry editing. The <a href="http://support.microsoft.com/kb/922976">detailed steps</a> from Microsoft are as follows:</span></div><div style="text-align: justify;"><span style="font-size: small;">To resolve this issue, enable the AHCI driver in the registry before you change the SATA mode of the boot drive. To do this, follow these steps: </span></div><ol style="text-align: justify;"><li><span style="font-size: small;">Exit all Windows-based programs. </span></li>
<li><span style="font-size: small;">Click <strong>Start</strong>, type regedit in the <strong>Start Search</strong> box, and then press ENTER. </span></li>
<li><span style="font-size: small;">If you receive the <strong>User Account Control</strong> dialog box, click <strong>Continue</strong>. </span></li>
<li><span style="font-size: small;">Locate and then click the following registry subkey: </span><span style="font-size: small;">HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Msahci</span><br />
</li>
<li><span style="font-size: small;">In the right pane, right-click <strong>Start</strong> in the <strong>Name</strong> column, and then click <strong>Modify</strong>. </span></li>
<li><span style="font-size: small;">In the <strong>Value data</strong> box, type 0, and then click <strong>OK</strong>. </span></li>
<li><span style="font-size: small;">On the <strong>File</strong> menu, click <strong>Exit</strong> to close Registry Editor.</span></li>
</ol><div style="text-align: justify;"><span style="font-size: small;">After this you’ll have to restart your computer, go to BIOS and enable AHCI. When you log in to Windows again, you’ll notice the installation of drivers for AHCI. Another restart will be required to finish the driver installation.<a href="http://cdn.ithinkdiff.com/wp-content/uploads/2009/05/ahci.reg"><img align="right" alt="enable ahci in Windows 7" border="0" height="89" src="http://cdn.ithinkdiff.com/wp-content/uploads/2009/05/enableahciinwindows7.jpg" style="border-color: -moz-use-text-color; border-style: none; border-width: 0px; display: inline; margin-left: 0px; margin-right: 0px;" title="enable ahci in Windows 7" width="71" /></a></span></div><div style="text-align: justify;"><span style="font-size: small;">I’ve simplified the steps by Microsoft by exporting the registry key. Just download the following file and run it. You’ll still need to go through the steps of restarting your computer and enabling AHCI in the BIOS.</span></div><div style="text-align: justify;"><span style="font-size: small;">Hopefully, you’ll find a somewhat noticeable improvement in multitasking, specially if you’re a notebook user. Of course with the variety of PC hardware, experience many vary.</span></div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;"><span style="font-size: small;"><strong>Disclaimer:</strong></span></div><h6 style="text-align: justify;"><span style="font-size: small;">Beware though, you’re responsible on your own for messing around with the registry. This guide comes with no warranties if your computer blows up, gets angry at you, stops working or just shows a <a href="http://en.wikipedia.org/wiki/Bsod">Blue Screen of Death.</a></span></h6>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-64975256810605305442011-11-23T23:21:00.003+07:002011-11-23T23:26:27.485+07:00PDF converter<div style="text-align: center;"><span style="font-size: small;"><b>PDF converter </b></span></div><div style="text-align: center;"><br />
</div><div style="text-align: justify;"><span style="font-size: small;">Beberapa software freeware PDF converter yang mungkin berguna bagi anda yang membutuhkan</span></div><div style="text-align: justify;"><span style="font-size: small;">sumber : <a href="http://www.officeconvert.com/index.htm" target="_blank">http://www.officeconvert.com/</a></span></div><div style="text-align: center;"><span style="font-size: small;"><br />
</span></div><table bgcolor="#DFDFDF" border="0" cellpadding="1" cellspacing="1" style="margin-left: auto; margin-right: auto; text-align: left;"><tbody>
<tr><td align="center" bgcolor="#FFFFFF" height="20"><span style="font-size: small;"><b class="font1">Product Name</b></span></td> <td align="center"></td> <td align="center" bgcolor="#FFFFFF" width="106"><span style="font-size: small;"><b class="font1">Size</b></span></td> <td align="center"></td> <td align="center" bgcolor="#FFFFFF" width="146"><span style="font-size: small;"><b class="font1">Download</b></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"><span class="STYLE1"> </span><span class="font1"><b>Pdf to All File</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a href="http://www.officeconvert.com/products/advanced-pdf-to-word-converter-free.htm" target="_blank">Advanced Pdf to Word Converter Free</a> ( 18252-11 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-pdf-to-word-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a href="http://www.officeconvert.com/products/ez-pdf-to-word-converter-for-doc-free.htm">EZ Pdf to Word Converter for Doc Free</a> ( 18252-12 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/ez-pdf-to-word-converter-for-doc-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a href="http://www.officeconvert.com/products/123-pdf-to-word-converter-for-doc-free.htm">123 Pdf to Word Converter for Doc Free</a> ( 18252-13 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/123-pdf-to-word-converter-for-doc-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-word-for-doc-free.htm">office Convert Pdf to Word for Doc Free</a> ( 18252-14 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com.com/download/office-convert-pdf-to-word-for-doc-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-excel-for-xls-free.htm">office Convert Pdf to Excel for xls Free</a> ( 18252-15 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com.com/download/office-convert-pdf-to-excel-for-xls-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-image-free.htm">office Convert Pdf to Image Free</a> ( 18252-17 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com.com/download/office-convert-pdf-to-image-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-jpg-jpeg-tiff-free.htm">office Convert Pdf to Jpg Jpeg Tiff Free</a> ( 18252-18 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-pdf-to-jpg-jpeg-tiff-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-doc-text-rtf-free.htm">office Convert Pdf to Doc Text Rtf Free</a> ( 18252-19)</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-pdf-to-doc-text-rtf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-document-free.htm">office Convert Pdf to Document Free</a> ( 18252-20 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-pdf-to-document-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-pdf-to-website-for-htm-html-free.htm">office Convert Pdf to Website for Htm Html Free</a> ( 18252-21)</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com.com/download/office-convert-pdf-to-website-for-htm-html-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"><span class="STYLE1"> </span><span class="font1"><b>All File to Pdf</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/advanced-word-to-pdf-converter-free.htm" target="_blank">Advanced Word to Pdf Converter Free</a> ( 18252-30 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-word-to-pdf-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/ez-word-to-pdf-converter-free.htm">EZ Word to Pdf Converter Free</a> ( 18252-31 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/ez-word-to-pdf-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/123-word-to-pdf-converter-free.htm">123 Word to Pdf Converter Free</a> ( 18252-32 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/123-word-to-pdf-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-word-to-pdf-free.htm">office Convert Word to Pdf Free</a> ( 18252-33 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-word-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-excel-to-pdf-free.htm">office Convert Excel to Pdf Free</a> ( 18252-34 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-excel-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-powerpoint-to-pdf-free.htm">office Convert PowerPoint to Pdf Free</a> ( 18252-35 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-powerpoint-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-word-excel-powerpoint-to-pdf-free.htm">office Convert Word Excel PowerPoint to Pdf Free</a> ( 18252-36 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-word-excel-powerpoint-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-doc-xls-txt-to-pdf-free.htm">office Convert Doc Xls Txt To Pdf Free</a> ( 18252-37 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-doc-xls-txt-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-image-tiff-jpeg-to-pdf-free.htm">office Convert Image TIFF Jpeg to Pdf Free</a> ( 18252-38 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-image-tiff-jpeg-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F9F9F9" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-text-rtf-to-pdf-free.htm">office Convert Text Rtf to Pdf Free</a> ( 18252-39 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-text-rtf-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-document-to-pdf-free.htm">office Convert Document To Pdf Free</a> ( 18252-40)</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-document-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-tiff-to-pdf-free.htm">office Convert Tiff To Pdf Free</a> ( 18252-41)</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-tiff-to-pdf-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"> <span class="font1"><b>All File to Image</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-all-to-image-jpg-jpeg-free.htm" target="_blank">office Convert All to Image Jpg Jpeg Free</a> ( 18252-50 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-all-to-image-jpg-jpeg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-word-txt-to-image-jpg-jpeg-free.htm">office Convert Word Txt to Image Jpg/Jpeg Free</a> ( 18252-51 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-word-txt-to-image-jpg-jpeg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-excel-to-image-jpg-jpeg-free.htm">office Convert Excel to Image Jpg/Jpeg Free</a> ( 18252-52 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-excel-to-image-jpg-jpeg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-powerpoint-to-image-jpg-jpeg-free.htm">office Convert PowerPoint to Image Jpg/Jpeg Free</a> ( 18252-53 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-powerpoint-to-image-jpg-jpeg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-htm-html-to-image-jpg-jpeg-free.htm">office Convert Htm/Html to Image Jpg/Jpeg Free</a> ( 18252-54 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-htm-html-to-image-jpg-jpeg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-document-to-image-free.htm">office Convert Document To Image Free</a> ( 18252-55 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-document-to-image-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"> <span class="font1"><b>Website to Image</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/advanced-website-to-image-jpg-bmp-converter-free.htm" target="_blank">Advanced Website to image jpg bmp Converter Free</a> ( 18252-70 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-website-to-image-jpg-bmp-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/advanced-web2jpg-free.htm">Advanced Web2Jpg Free</a> ( 18252-71 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-web2jpg-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/advanced-web2pic-free.htm">Advanced Web2Pic Free</a> ( 18252-72 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-web2pic-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/advanced-webcam-free.htm">Advanced WebCam Free</a> ( 18252-73 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/advanced-webcam-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/easy-website-snapshot-free.htm">Easy Website Snapshot Free</a> ( 18252-74 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/easy-website-snapshot-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/easy-html-snapshot-free.htm">Easy HTML Snapshot Free</a> ( 18252-75 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/easy-html-snapshot-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"> <span class="font1"><b>All File to Text</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-word-excel-powerpoint-to-text-converter-free.htm" target="_blank">office Convert Word Excel PowerPoint To Text Converter Free</a> ( 18252-90 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-word-excel-powerpoint-to-text-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/office-convert-word-excel-to-htm-html-converter-free.htm">office Convert Word Excel to Htm Html Converter Free</a> ( 18252-91 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-word-excel-to-htm-html-converter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#F2F2F2" height="20"><span style="font-size: small;"> <span class="font1"><b>Tool</b></span></span></td> <td></td> <td bgcolor="#F2F2F2"></td> <td></td> <td align="center" bgcolor="#F2F2F2"></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-advanced-pdf-tool-free.htm" target="_blank">Advanced Pdf Tool Free</a> ( 18252-120 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-advanced-pdf-tool-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/products/image-convert-jpg-jpeg-bmp-tiff-gif-png-free.htm" target="_blank">Image Convert Jpg Jpeg Bmp Tiff Gif Png Free</a> ( 18252-110 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/image-convert-jpg-jpeg-bmp-tiff-gif-png-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-excel-password-recovery-free.htm" target="_blank">Easy Excel Password Recovery Free</a> ( 18252-121 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-excel-password-recovery-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-pdf-password-recovery-free.htm" target="_blank">Easy Pdf Password Recovery Free</a> ( 18252-122 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-pdf-password-recovery-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-pdf-split-merge-free.htm" target="_blank">Easy Pdf Split & Merge Free</a> ( 18252-123 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-pdf-split-merge-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-advanced-pdf-split-merge-free.htm" target="_blank">Advanced Pdf Split & Merge Free</a> ( 18252-124 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-advanced-pdf-split-merge-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-pdf-splitter-free.htm" target="_blank">Easy Pdf Splitter Free</a> ( 18252-125 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-pdf-splitter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-advanced-pdf-splitter-free.htm" target="_blank">Advanced Pdf Splitter Free</a> ( 18252-126 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-advanced-pdf-splitter-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-pdf-merger-free.htm" target="_blank">Easy Pdf Merger Free</a> ( 18252-127 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-pdf-merger-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-advanced-pdf-merger-free.htm" target="_blank">Advanced Pdf Merger Free</a> ( 18252-128 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-advanced-pdf-merger-free.exe">Download</a></span></span></td> </tr>
<tr> <td bgcolor="#FCFCFC" height="20"><span style="font-size: small;"> <span class="font9"><a class="aa" href="http://www.officeconvert.com/office-convert-easy-pdf-password-remover-free.htm" target="_blank">Easy Pdf Password Remover Free</a> ( 18252-129 )</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font9">8131KB</span></span></td> <td></td> <td align="center" bgcolor="#FCFCFC"><span style="font-size: small;"><span class="font2"><a href="http://www.officeconvert.com/download/office-convert-easy-pdf-password-remover-free.exe">Download</a></span></span></td></tr>
</tbody></table><div style="text-align: center;"><span style="font-size: small;"><br />
</span></div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-44260160591850737182011-11-23T22:47:00.001+07:002011-11-23T22:52:59.079+07:00Free PDF to Word Doc Converter<div style="text-align: justify;"><span style="font-size: small;"><b>Free PDF ke Word </b></span><span style="font-size: small;"><b>Doc </b></span><span style="font-size: small;"><b>Converter</b> versi 1.1 </span> </div><div style="text-align: justify;"><span style="font-size: small;"><br />
</span></div><div style="text-align: justify;"><span style="font-size: small;">Mengedit file PDF tanpa membeli editor PDF yang mahal? mengekstrak teks / gambar dari file PDF? Yang Anda butuhkan adalah Converter PDF ke Word.</span></div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;"><span style="font-size: small;">Free PDF ke Word Doc Converter adalah suatu alat konversi dokumen desktop untuk mengkonversi file PDF ke file Microsoft Doc Word - dan ini benar-benar <a href="http://translate.googleusercontent.com/translate_c?act=url&hl=id&ie=UTF8&prev=_t&rurl=translate.google.co.id&sl=en&tl=id&twu=1&u=http://www.hellopdf.com/register.php&usg=ALkJrhjsLiqHDYF0vsgMNU_yEhTdY6AHhw" style="color: black;">GRATIS</a> !</span> </div><div style="text-align: justify;"></div><div style="text-align: justify;"><span style="font-size: small;">Program ini dapat mengekstrak teks, gambar, bentuk dari file PDF ke file Word Doc dan mempertahankan tata letak. Dapat mengkonversi semua halaman, atau halaman tertentu dari file PDF.</span> </div><div style="text-align: justify;"></div><div style="text-align: justify;"><span style="font-size: small;">Dan ini adalah program tersendiri - Anda dapat mengkonversi PDF ke Word Doc tanpa menginstall Adobe Acrobat Reader atau Microsoft Word !</span> </div><div style="text-align: justify;"><span style="font-size: small;"> <b> </b></span></div><div style="text-align: justify;"><span style="font-size: small;"><b>Fitur Utama:</b></span> </div><ul style="text-align: justify;"><li> <span style="font-size: small;"> Konversi PDF ke Word dan mempertahankan tata letak asli dari PDF Anda dalam Word Document.</span> </li>
<li> <span style="font-size: small;"> Ekstrak label teks, grafis, bentuk dari file PDF ke file Word Doc.</span> </li>
<li> <span style="font-size: small;"> Mengkonversi semua halaman, atau sebagian halaman file PDF ke file Word.</span> </li>
<li> <span style="font-size: small;"> Dukungan format Adobe PDF 1,0-1,6.</span> </li>
<li> <span style="font-size: small;"> Dapat secara otomatis membuka file Doc output ketika selesai konversi.</span> </li>
<li><span style="font-size: small;"> Tersedia beberapa pilihan konversi PDF ke Word untuk hasil yang lebih baik.</span> </li>
<li> <span style="font-size: small;"> Mengkonversi dalam kecepatan tinggi.</span> </li>
<li> <span style="font-size: small;"> Mudah untuk menggunakan perangkat lunak.</span> </li>
<li><span style="font-size: small;"> Benar-benar <a href="http://translate.googleusercontent.com/translate_c?act=url&hl=id&ie=UTF8&prev=_t&rurl=translate.google.co.id&sl=en&tl=id&twu=1&u=http://www.hellopdf.com/register.php&usg=ALkJrhjsLiqHDYF0vsgMNU_yEhTdY6AHhw" style="color: black;">gratis</a> ! </span> </li>
</ul><div style="text-align: justify;"><span style="font-size: small;"> <b>Catatan:</b> Free PDF ke Word Doc Converter tidak dapat mengkonversi file PDF dengan proteksi password. Anda mungkin perlu software <a href="http://www.hellopdf.com/pdf-password-recovery.php" style="color: blue;" target="_blank">PDF Password Recovery</a> untuk menghapus password file PDF sebelum mengubahnya menjadi file Word. </span></div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;"><span style="font-size: small;"><a href="http://www.hellopdf.com/download.php" target="_blank">Download Link</a></span></div><div style="text-align: justify;"><br />
</div><div style="text-align: justify;"><span style="font-size: small;">Situs Penyedia :</span></div><div style="text-align: justify;"><span style="font-size: small;"><a href="http://www.hellopdf.com/index.php" target="_blank">http://www.hellopdf.com/index.php </a> </span></div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-39477317571406039052011-09-26T21:08:00.000+07:002011-09-26T21:08:17.124+07:00Resistor Calculator 1.0<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.ab-tools.com/en/software/resistorcalculator/screen.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://www.ab-tools.com/en/software/resistorcalculator/screen.gif" width="275" /></a></div>
<br />
<div style="text-align: center;">
<a href="http://www.ab-tools.com/download/Widerstandsrechner/Widerstandsrechner.exe">DOWNLOAD</a> </div>
<br />
<div style="text-align: justify;">
<div style="text-align: justify;">
<span class="" id="result_box" lang="id"><span class="hps">Program untuk menentukan</span> <span class="hps">kode warna</span> <span class="hps">dari resistor</span> <span class="hps">dan menghitung</span> <span class="hps">resistor</span> <span class="hps">untuk sirkuit</span> <span class="hps">LED</span><span class="">.</span></span><br /><span class="" id="result_box" lang="id"></span><br /><span class="" id="result_box" lang="id"> <span class="hps">Dengan menggunakan</span> </span><span class="" id="result_box" lang="id"><span class="hps">resistor</span> <span class="hps"></span></span><span class="" id="result_box" lang="id"><span class="hps">kalkulator,</span> <span class="hps">sangat</span> simpel <span class="hps">untuk</span> <span class="hps">menentukan</span> <span class="hps">kode warna</span> <span class="hps">resistor</span> <span class="hps">berdasarkan nilai</span> <span class="hps">resistor</span><span class="">.</span> <span class="hps">Tentu saja,</span> <span class="hps">Anda juga</span> <span class="hps">dapat memberikan</span> <span class="hps">kode</span> <span class="hps">warna dan</span> <span class="hps">program akan</span> <span class="hps">menunjukkan</span> <span class="hps">nilai resistor</span> <span class="hps">yang dihasilkan.</span></span><br /><span class="" id="result_box" lang="id"></span><br /><span class="" id="result_box" lang="id"> <span class="hps">Atas dasar</span> <span class="hps">nilai resistor</span> <span class="hps">dimasukkan atau</span> <span class="hps">dihitung</span> <span class="hps">tambahan</span> <span class="hps">resistor</span> <span class="hps">terdekat</span> <span class="hps">dalam seri</span> <span class="hps">E serta</span> <span class="hps">dalam</span> <span class="hps">nomor</span> <span class="hps">Renard</span> <span class="hps">ditampilkan</span> <span class="hps">secara otomatis.</span></span><br /><span class="" id="result_box" lang="id"></span><br /><span class="" id="result_box" lang="id"> <span class="hps">Sebagai fitur</span> tambahan <span class="hps">program </span><span class="hps">dapat menghitung</span> <span class="hps">nilai resistor</span> <span class="hps">yang dibutuhkan untuk</span> <span class="hps">sirkuit</span> <span class="hps">LED</span> <span class="hps atn">(</span><span class="">LED tunggal</span><span class="">, seri</span> <span class="hps">koneksi dan</span> <span class="hps">koneksi paralel</span><span class="">)</span> <span class="hps">mempertimbangkan</span> <span class="hps">tegangan suplai</span><span class="">,</span> <span class="hps">drop</span> <span class="hps">tegangan</span> <span class="hps">LED</span> <span class="hps atn">(</span><span class="">s</span><span class="">) serta</span> <span class="hps">arus</span> <span class="hps">dari LED</span> <span class="hps atn">(</span><span class="">s</span><span class="">)</span><span class="">.</span></span></div>
<span class="" id="result_box" lang="id"></span></div>
<span class="" id="result_box" lang="id"> <span class="hps"> </span></span><br />
<span class="" id="result_box" lang="id"><span class="hps">Fitur</span> <span class="hps">Resistor</span> </span><span class="" id="result_box" lang="id"><span class="hps">Kalkulator</span> <span class="hps"></span></span><span class="" id="result_box" lang="id"> <span class="hps">:</span></span><br />
<ul>
<li><span class="" id="result_box" lang="id"><span class="hps">Menghitung</span> <span class="hps">kode</span> <span class="hps">warna dari</span> <span class="hps">nilai resistor</span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Menghitung</span> <span class="hps">nilai</span> <span class="hps">resistor</span> <span class="hps">kode</span> <span class="hps">warna.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Menampilkan</span> <span class="hps">resistor</span> <span class="hps">terdekat</span> <span class="hps">dari seri</span> <span class="hps">E dan</span> <span class="hps">nomor</span> <span class="hps">Renard</span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Menghitung Resistor</span> <span class="hps">untuk</span> <span class="hps">sirkuit</span> <span class="hps">LED</span> <span class="hps atn">(</span><span class="">tunggal,</span> <span class="hps">di seri</span><span class="">,</span> <span class="hps">paralel)</span><span class="">.</span></span><span class="" id="result_box" lang="id"><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Sistem </span></span><span class="" id="result_box" lang="id"><span class="hps">Terpadu</span> <span class="hps">membantu </span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Otomatis</span> <span class="hps">update program</span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Multilingual</span> <span class="hps atn">(</span><span class="">pada saat</span> <span class="hps">ini hanya bahasa Inggris dan Jerman</span><span class="">)</span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Program antarmuka</span> <span class="hps">intuitif</span><span class="">.</span></span><span class="" id="result_box" lang="id"><span class=""> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="">Dukungan</span> <span class="hps"></span></span><span class="" id="result_box" lang="id"><span class="hps">Free e</span><span class="atn">-</span><span class="">mail </span><span class="hps">dalam kasus</span> <span class="hps">masalah</span> <span class="hps">atau pertanyaan</span><span class="">.</span><span class="hps"> </span></span></li>
<li><span class="" id="result_box" lang="id"><span class="hps">Semua update</span> <span class="hps">gratis.</span></span></li>
</ul>
iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-13810645795591123812011-09-15T21:58:00.000+07:002011-09-15T21:58:20.656+07:00Menampilkan atau menyembunyikan Recycle Bin<div class="para" style="text-align: justify;">
<span> <span style="font-size: small;"><span style="font-family: inherit;">Recycle Bin biasanya muncul pada desktop.</span></span></span><span style="font-size: small;"><span style="font-family: inherit;"> Jika Anda tidak melihat Recycle Bin, jangan panik mungkin saja disembunyikan.</span></span></div>
<div class="para" style="text-align: justify;">
<br /></div>
<div class="para" style="text-align: justify;">
<span style="font-size: small;"><span style="font-family: inherit;">berikut trik sangat sederhana untuk menampilkan atau menyembunyikan Recycle Bin di Windows Seven</span></span></div>
<div class="para" style="text-align: justify;">
<span style="font-size: small;"><span style="font-family: inherit;"> </span></span></div>
<div class="para" style="text-align: justify;">
<span style="font-size: small;"><span style="font-family: inherit;"></span></span><span style="font-size: small;"><span>Untuk menampilkan atau menyembunyikan Recycle Bin pada desktop</span></span> </div>
<div class="procedure" style="font-family: inherit; text-align: justify;">
<ol class="ordered_dec">
<li class="step"><div class="para">
<span style="font-size: small;"><span> Klik tombol <span class="ui">Start</span></span> <img alt="Picture of the Start button" class="embedObject" data-id="pageContainer0_ID0EPD" height="15" src="http://res2.windows.microsoft.com/resbox/en/Windows%207/main/4f6cbd09-148c-4dd8-b1f2-48f232a2fd33_818.jpg" title="Gambar tombol Start" width="15" /> <span> , <span class="userInput"></span>ketik "<b>Desktop Icons</b>" ke dalam "<b>Search Box</b>", dan kemudian klik <span class="ui"></span></span><span class="ui">"<b>Show or hide common icons on the desktop</b>"</span></span></div>
<div class="para">
<span style="font-size: small;"><span class="ui"> </span></span> </div>
</li>
<li class="step"><div class="para">
<span style="font-size: small;"><span> Pada kotak dialog <span class="ui"><b>Desktop Icon Settings</b>,</span> lakukan salah satu berikut:</span></span> </div>
<ul class="unordered">
<li class="listItem"><div class="para">
<span style="font-size: small;"><span> Untuk menyembunyikan Recycle Bin, kosongkan kotak centang <span class="ui">Recycle Bin.</span></span></span> </div>
</li>
<li class="listItem"><div class="para">
<span style="font-size: small;"><span> Untuk menampilkan Recycle Bin, pilih kotak centang <span class="ui">Recycle Bin.</span></span></span></div>
<div class="para">
<span style="font-size: small;"><span><span class="ui"> </span></span></span> </div>
</li>
</ul>
</li>
<li class="step"><div class="para">
<span style="font-size: small;"><span> Klik <span class="ui">OK.</span></span></span> </div>
<div class="para">
<br /></div>
<div class="para">
Bahkan ketika Recycle Bin tersembunyi, file yang dihapus masih tersimpan di sana sementara sampai Anda memilih untuk secara permanen menghapusnya atau mengembalikan file tersebut.<span style="font-size: small;"><span></span></span></div>
</li>
</ol>
</div>
<div class="alertSet_outer lastElement" style="font-family: inherit; text-align: justify;">
<div class="alertSet_note">
<div class="alertSet_icon">
</div>
<div class="alertSet_text">
<div class="para lastElement">
</div>
</div>
</div>
</div>
iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-16058378684090788242011-07-11T15:04:00.000+07:002011-07-11T15:04:57.205+07:00Computer Hardware Poster<div class="separator" style="clear: both; text-align: center;"><a href="http://fc09.deviantart.net/fs47/i/2009/203/f/4/Computer_hardware_poster_1_7_by_Sonic840.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://fc09.deviantart.net/fs47/i/2009/203/f/4/Computer_hardware_poster_1_7_by_Sonic840.png" /></a></div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-41186959569256833082011-07-07T15:58:00.000+07:002011-07-07T15:58:11.240+07:00BSOD<!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if gte mso 9]><xml> <w:LatentStyles DefLockedState="false" LatentStyleCount="156"> </w:LatentStyles> </xml><![endif]--><!--[if gte mso 10]> <style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style> <![endif]--> <br />
<div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l0 level1 lfo1; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><b style="mso-bidi-font-weight: normal;"><span style="mso-list: Ignore;">1.<span style="font: 7.0pt "Times New Roman";"> </span></span></b><b>IRQL_NOT_LESS_OR_EQUAL (0X0000000A)</b></div><div class="MsoNormal" style="text-align: justify;">Pesan ini biasanya lebih sering muncul dibanding pesan yang lainnya (kata orang sih gitu). Mengindikasikan bahwa proses kernel-mode atau driver mencoba mengakses lokasi di memori namun tidak mempunyai permission (ijin), atau pada kernel IRQL (interrupt request level) yang terlalu tinggi. Proses kernel-mode hanya bisa mengakses proses-proses lain yang mempunyai IRQL kurang dari atau sama dengan miliknya sendiri. Pesan kesalahan ini disebabkan umumnya kerena ada ketidakcocokan driver yang terinstall di komputer. Daftar penyebabnya adalah :</div><div class="MsoNormal" style="text-align: justify;">- masalah driver yang bentrok atau tidak cocok</div><div class="MsoNormal" style="text-align: justify;">- masalah video card yang mencakup video card yang di overclock melebihi batas atau anda baru berganti video card dan anda belum menguninstall driver Video card lama dari chipset berbeda</div><div class="MsoNormal" style="text-align: justify;">- masalah audio card yang meliputi kesalahan konfigurasi atau bug dalam driver sound card</div><div class="MsoNormal" style="text-align: justify;">- setting BIOS yang kurang tepat</div><div class="MsoNormal" style="text-align: justify;">Solusinya mungkin bisa dengan cara..</div><div class="MsoNormal" style="text-align: justify;">- kemungkinan muncul setelah menginstall driver, system service, ataupun firmware yang salah. Jika pesan Stop memberikan daftar nama driver, disable, hapus, atau roll back (mengembalikan driver ke versi yang bekerja dengan baik) driver yang salah tersebut. Jika men-disable atau menghapus driver menyelesaikan masalah, hubungi manufaktur device (hardware) yang bermasalah untuk kemungkinan update driver yang tersedia.</div><div class="MsoNormal" style="text-align: justify;">- Pesan Stop ini juga mungkin terjadi karena hardware yang rusak atau bermasalah. Jika pesan Stop menunjukkan sebuah kategori device tertentu (video atau disk adapter, contohnya), coba lepas atau ganti hardware tersebut untuk menentukan apakah benar hardware tersebut sumber masalahnya.</div><div class="MsoNormal" style="text-align: justify;">- Jika anda mengalami pesan Stop ini ketika meng-update Windows XP menjadi sp1, 2, ataupun 3, kemungkinan permasalahan terjadi akibat driver yang tidak kompatibel, system service, scanner virus, atau backup. Untuk mencegah hal ini, sebelum melakukan update Windows, konfigurasi hardware Anda menjadi seminim mungkin fiturnya, dan hapus semua driver third-party (tambahan) dan sistem servis (termasuk antivirus). Setelah update Windows selesai, hubungi manufaktur hardware Anda untuk mendapatkan update yang kompatibel dengan versi service pack (sp) Windows XP Anda.</div><div class="MsoNormal" style="text-align: justify;">- Cara terakhir cobalah mereset setting-an BIOS Anda menjadi seperti semula.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>2. NTFS_FILE_SYSTEM atau FAT_FILE_SYSTEM (0X00000024) atau (0X00000023)</b></div><div class="MsoNormal" style="text-align: justify;">Masalah berada di partisi atau filesystemnya tetapi bukan di harddisknya, ada masalah didalam Ntfs.sys. </div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Bisa melakukan pengecekan dengan memeriksa kabel SATA atau PATA atau bisa mengecek partisi dengan tool chkdsk. SCSI yang malfungsi dan hardware ATA (Advanced Technology Attachment) atau driver dapat juga mempengaruhi kemampuan sistem untuk membaca dan menulis ke dalam disk dan menyebabkan error. Jika menggunakan harddisk SCSI, cek kabel dan masalah perhentian (termination problem) antara kontroler SCSI dan disk. Cek secara berkala Event Viewer untuk pesan error yang berhubungan dengan SCSI atau FASTFAT di dalam System Log atau Autochk di Application Log (Klik kanan pada My Computer, pilih Manage, pada bagian Computer Management – System Tools pilih Event Viewer).</div><div class="MsoNormal" style="text-align: justify;">- Cek tool yang biasa Anda gunakan untuk memonitor sistem Anda secara terus menerus (seperti antivirus, program backup, atau program disk defragmenter) apakah sudah kompatibel dengan Windows XP Anda. Beberapa disk atau adapter ada yang dipaketkan dengan software diagnosa yang bisa Anda gunakan untuk melakukan test hardware. Cara untuk melakukan test harddisk atau integritas volume :</div><div class="MsoNormal" style="text-align: justify;">Metode 1:</div><div class="MsoNormal" style="text-align: justify;">1. Buka command prompt (Start – Run – ketikkan cmd) </div><div class="MsoNormal" style="text-align: justify;">2. Jalankan tool Chkdsk, yang akan mendeteksi dan mencoba untuk me-resolve struktur sistem file yang corrupt, dengan mengetikkan pada command prompt : chkdsk drive: /f </div><div class="MsoNormal" style="text-align: justify;">Metode 2: </div><div class="MsoNormal" style="text-align: justify;">1. Klik ganda My Computer dan pilih harddisk yang ingin dicek. </div><div class="MsoNormal" style="text-align: justify;">2. Pada menu File, pilih Properties. </div><div class="MsoNormal" style="text-align: justify;">3. Pilih tab Tools. </div><div class="MsoNormal" style="text-align: justify;">4. Pada bagian box Error-checking, klik Check Now. </div><div class="MsoNormal" style="text-align: justify;">5. Pada Check disk options, centang Scan for and attempt recovery of bad sectors. Opsi Automatically fix file system errors dapat juga dicentang. Jika volume yang Anda pilih sedang digunakan, sebuah pesan akan muncul dan menanyakan apakah akan menunda disk error checking sampai Anda me-restart komputer. Setelah restart, disk error checking akan berjalan dan volume yang sedang dicek tidak akan dapat digunakan selama proses berlangsung. Jika Anda tidak bisa me-restart komputer karena error, gunakan safe mode atau Recovery Console. Jika Anda tidak menggunakan sistem file NTFS, dan partisi sistem diformat dengan sistem file FAT16 ataupun FAT32 (File Allocation Table), informasi LFN (Long File Name) dapat hilang jika tool harddisk dijalankan melalui command prompt MS-DOS. Command prompt yang muncul ketika menggunakan startup floppy disk atau ketika menggunakan pilihan command prompt dalam sistem multiple boot yang menggunakan partisi FAT16 atau FAT32 dengan Microsoft Windows 95 OEM Service Release 2 (OSR2), Microsoft Windows 98, atau Microsoft Windows Millenium Edition (Me) yang terinstall. Jangan gunakan tool sistem operasi lain untuk partisi Windows XP.</div><div class="MsoNormal" style="text-align: justify;">- Memori nonpaged pool mungkin terkuras yang dapat menyebabkan sistem untuk berhenti. Anda bisa menyelesaikan masalah ini dengan menambah RAM, yang akan meningkatkan kuantitas dari memori nonpaged pool yang tersedia untuk kernel.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>3. UNEXPECTED_KERNEL_MODE_TRAP (0X0000007F)</b></div><div class="MsoNormal" style="text-align: justify;">Bila anda mendapatkan pesan seperti ini, dapat disebabkan karena overclock hardware yang berlebihan, komponen komputer yang kepanasan, BIOS yang korup, dan memory dan CPU yang cacat.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
4. DATA_BUS_ERROR</b></div><div class="MsoNormal" style="text-align: justify;">Pesan ini disebabkan karena adanya kemungkinan bahwa memory atau slot memory di motherboard rusak, bisa juga karena kerusakan motherboard, harddisk.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Ganti hardware yang rusak </div><div class="MsoNormal" style="text-align: justify;"><br />
<b><br />
5. PAGE_FAULT_IN_NONPAGED_AREA (0×00000050)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan karena adanya kerusakan hardware, termasuk memory utama, memory video card, atau memory di processor (L2 Cache), serta software yang tidak kompatibel.</div><div class="MsoNormal" style="text-align: justify;">Solusinya:<br />
- Jika Anda memasang hardware baru sebelum terjadi error, lepas dan gantilah dengan hardware baru untuk menentukan apakah hardware tersebut yang menyebabkan kerusakan ini. Anda juga dapat menjalankan software diagnosa yang disuplai oleh manufaktur hardware Anda untuk mengecek apakah hardware Anda rusak atau tidak.</div><div class="MsoNormal" style="text-align: justify;">- Pesan Stop 0×00000050 dapat terjadi setelah menginstall driver yang salah atau system services. Jika sebuah nama file disebutkan, cobalah men-disable, menghapus, atau roll back drivernya. Disable servis atau aplikasi dan pastikan hal ini menyelesaikan masalah. Jangan lupa untuk menghubungi manufaktur hardware tentang update driver yang tersedia. Jika driver baru tidak tersedia, coba gunakan driver dari alat yang mirip. Misalnya, printer model 1100C menyebabkan pesan Stop 0×00000050, gunakan driver printer untuk model 1100A atau model 1000.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>6. INACCESSIBLE_BOOT_DEVICE (0X0000007B)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan karena adanya kesalahan dalam konfigurasi jumper harddisk yang salah, virus boot sector, driver IDE controller yang salah, atau kesalahan driver chipset. Biasanya masalah ini timbul pada saat startup Windows apabila Windows tidak dapat membaca data mengenai system boot partition. Bisa juga disebabkan karena harddisk yang error, file boot.ini yang cacat (corrupted). Bila tidak ada masalah pada disk drive, partisi dan file boot.ini (ketika dua Operating System terinstall) coba cek settingan booting pada BIOS. Apabila masalah ini munculketika sedang melakukan upgrade Windows, itu dapat disebabkan adanya hardware yang tidak kompatibel dengan Windows.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Coba lepas hardware yang bermasalah atau cari driver yang sesuai untuk Windows-nya.<br />
<br />
<b>7. VIDEO_DRIVER_INIT_FAILURE (x000000B4)</b></div><div class="MsoNormal" style="text-align: justify;">Kesalahan terjadi pada instalasi driver video card yang kurang sempurna, restart pada saat instalasi atau juga dapat terjadi karena kesalahan dalam instalasi driver dan ada konflik dengan hardware grafis (parallel or serial port).</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Masuk ke Safe Mode lihat apakah masalah teratasi, jika teratasi, silahkan meng-upgrade driver graphi card terbaru, jika masih gagal, kemungkinan disebabkan oleh kartu grafis dan port paralel, buka “System Properties” di hardware -> Device Manager, double-klik LPT1 port untuk menghubungkan untuk print item tersebut, dalam “resource tab” hilangkan/unselect “use automatic configuration”, kemudian “input I / O range “of” 03BC “to” 0378″</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>8. BAD_POOL_CALLER (0X000000C2)</b></div><div class="MsoNormal" style="text-align: justify;">Kesalahan ini dapat terjadi karena kesalahan atau driver yang tidak kompatibel. Sering terjadi saat melakukan instalasi XP dari upgrade, atau bukan dari instalasi baru.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Coba lepas hardware yang bermasalah / cari driver yang sesuai untuk Windwos-nya.</div><div class="MsoNormal" style="text-align: justify;">- Cabut RAM, tukarkan/pindah-pindahkan slot-nya.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>9. PEN_LIST_CORRUPT</b></div><div class="MsoNormal" style="text-align: justify;">Pesan ini disebabkan karena adanya kerusakan RAM</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>10. MACHINE_CHECK_EXCEPTION (x0000009C)</b></div><div class="MsoNormal" style="text-align: justify;"><br />
Disebabkan oleh cacatnya hardware(memori, CPU, bus, power supply), atau yang di overclock secara agresif, serta power supply yang kekurangan daya atau rusak.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Jika overclocking, frekuensi CPU asli ?? (Qing Xiang) akan memeriksa hardware.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>11. KMODE_EXCEPTION_NOT_HANDLED (0×0000001E)</b></div><div class="MsoNormal" style="text-align: justify;">Pesan Stop 0×0000001E mengindikasikan bahwa kernel Windows XP mendeteksi sebuah instruksi prosesor ilegal atau yang tidak diketahui. Penyebab pesan Stop ini 0×0000001E mirip dengan penyebab pesan Stop 0×0000000A, yaitu karena pelanggaran akses dan memori yang tidak valid. Biasanya error-handler (pengendali error) default dari Windows XP akan mengatasi masalah ini jika tidak terdapat error-handling routines didalam kode instruksi yang dijalankan.</div><div class="MsoNormal" style="text-align: justify;">Solusinya mungkin bisa dengan cara..</div><div class="MsoNormal" style="text-align: justify;"><br />
- Pesan Stop 0×0000001E umumnya terjadi setelah meng-install driver yang rusak atau system service, atau mungkin juga ada masalah pada hardware (seperti memori dan konflik IRQ). Jika pesan Stop memberikan daftar nama driver, disable, hapus, atau roll back (mengembalikan driver ke versi yang bekerja dengan baik) driver yang salah tersebut. Jika men-disable atau menghapus driver menyelesaikan masalah, hubungi manufaktur device (hardware) yang bermasalah untuk kemungkinan update driver yang tersedia.</div><div class="MsoNormal" style="text-align: justify;">- Jika pesan Stop mencantumkan file Win32k.sys, sumber kerusakan kemungkinan adalah program “remote-control” third-party. Jika program sejenis itu terinstall, Anda mungkin bisa me-disable-nya melalui safe mode. Jika tidak, gunakan Recovery Console untuk secara manual menghapus file system service yang menyebabkan masalahnya.<br />
- Permasalahan juga dapat disebabkan karena firmware yang tidak kompatibel. Kebanyakan masalah ACPI (Advanced Configuration and Power Interface) dapat diperbaiki dengan mengupdate firmware dengan yang terbaru.</div><div class="MsoNormal" style="text-align: justify;">- Kemungkinan lain karena ruang disk yang tidak mencukupi ketika menginstall aplikasi atau menjalankan fungsi tertentu yang membutuhkan memori lebih. Anda bisa menghapus file-file yang tidak dibutuhkan untuk mendapatkan ruang disk. Gunakan Disk Cleanup untuk menambah ruang disk. Melalui Recovery Console, hapus file temporari (file dengan ekstensi .tmp), file-file cache Internet, file backup aplikasi, dan file .tmp yang dihasilkan oleh Chkdsk.exe atau Autochk.exe. Anda juga bisa memilih untuk menginstall aplikasi di harddisk yang lain yang memiliki ruang lebih atau bisa juga memindahkan data dari harddisk yang penuh ke harddisk yang memiliki ruang lebih.</div><div class="MsoNormal" style="text-align: justify;">- Pesan Stop ini juga mungkin disebabkan oleh kebocoran memori (memory leak) dari aplikasi atau servis yang tidak me-release memori dengan benar. Poolmon (Poolmon.exe) membantu Anda mengisolasi komponen yang menyebabkan kebocoran memori kernel. Untuk informasi lebih lanjut mengenai penanganan kebocoran memori lihat Microsoft Knowledgebase artikel Q177415 (<a href="http://support.microsoft.com/kb/177415" target="_blank">http://support.microsoft.com/kb/177415</a>) : “How to Use Poolmon to Troubleshoot Kernel Memory Leaks” dan Q298102 (<a href="http://support.microsoft.com/kb/298102" target="_blank">http://support.microsoft.com/kb/298102</a>) : “Finding Pool Tags Used by Third Party Files Without Using the Debugger”.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>12. MISMATCHED_HAL (0×00000079)</b></div><div class="MsoNormal" style="text-align: justify;">Menunjukkan bahwa HAL (Hardware Abstraction Layer) dan tipe kernel komputer tidak cocok. Error ini sering terjadi ketika setting firmware ACPI dirubah. Contohnya, Anda mungkin meng-install Windows XP di komputer X86-based dengan opsi enable pada ACPI firmware di-enable-kan dan kemudian Anda disable-kan. Error ini dapat juga terjadi ketika file konfigurasi yang tidak cocok antara single dan multi-processor di-copy-kan ke sistem.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Muncul ketika sistem menggunakan file Ntoskrnl.exe atau Hal.dll yang sudah out-of-date (kadaluarsa). Hal ini dapat terjadi setelah perbaikan manual dengan meng-copy-kan file yang tidak tepat ke sistem. Error ini dapat juga terjadi ketika menggunakan file yang tidak cocok, seperti meng-copy multi-processor HAL ke dalam sistem yang menggunakan kernel single-processor (atau sebaliknya). Kernel dan file HAL untuk sistem single-processor dan multi-processor disimpan di dalam CD Windows XP Professional dengan menggunakan dua nama yang berbeda. Sebagai contoh, single-processor dan multi-processor masing-masing memiliki file Ntoskrnl.exe dan Ntkrnlmp.exe.</div><div class="MsoNormal" style="text-align: justify;">- Jika mengalami pesan ini setelah mengganti setting firmware, restore-lah setting asli Windows XP Professional. Karena sistem yang menggunakan ACPI HAL mengabaikan penugasan IRQ yang berada di firmware, maka Anda hanya bisa mengubah setting IRQ secara manual untuk sistem non-ACPI (Standard PC HAL). Beberapa sistem X86-based menyediakan opsi untuk mengaktifkan atau menonaktifkan fungsi ACPI. Untuk meng-enable dan men-disable ACPI, Anda harus mengubah setting firmware dan meng-install ulang Windows XP-nya karena perlu perubahan registry dan file sistem yang sangat banyak, Anda diharuskan melakukan Setup lagi (installasi dengan jalan upgrade tidak akan berhasil).</div><div class="MsoNormal" style="text-align: justify;"><b><br />
13. ATTEMPTED WRITE TO READONLY MEMORY (0x000000BE)</b><br />
Biasanya masalah ini disebabkan adanya kesalahan pada driver atau service. Tidak beda jauh dengan yang nomor 1 diatas.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Apabila nama file dan service disebutkan coba uninstal software tersebut atau driver tersebut (rolling back the driver) dan cari driver yang sesuai dengan Operating System-nya.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
14. DRIVER POWER STATE FAILURE (0X0000009F)</b></div><div class="MsoNormal" style="text-align: justify;">Tidak cocok/kompatibel antara “computer’s power management” dengan driver atau services yang berjalan. Biasa terjadi pada saat komputer melakukan “hibernasi”.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Apabila nama file dan service disebutkan coba uninstal software tersebut atau driver tersebut (rolling back the driver) atau coba men-disable “Windows’ support for power management”.<br />
<br />
<b>15. DRIVER UNLOADED WITHOUT CANCELLING PENDING OPERATIONS (0X000000CE)</b></div><div class="MsoNormal" style="text-align: justify;">Penyebab masalah ini mirip dengan masalah Attempted Write To Readonly Memory, bisa lihat masalah tersebut diatas.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>16. DRIVER USED EXCESSIVE PTES (0X000000D)</b></div><div class="MsoNormal" style="text-align: justify;">Lihat pada masalah No More System PTEs.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
17. HARDWARE INTERRUPT STORM (0X000000F2)</b></div><div class="MsoNormal" style="text-align: justify;">Masalah timbul ketika suatu hardware (USB atau SCSI controller) gagal untuk “melepas” sebuah IRQ. Kegagalan tersebut biasanya disebabkan karena masalah pada driver. Selain itu masalah ini juga dapat timbul karena adanya dua perangkat menggunakan IRQ yang sama.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>18. KERNEL DATA INPAGE ERROR (0X0000007A)</b></div><div class="MsoNormal" style="text-align: justify;">Masalah timbul pada virtual memory, biasanya karena windows tidak dapat membaca atau menulis data ke swap file. Kemungkinan penyebab antara lain bad sectors, virus, memory yang cacat, atau bahkan kerusakan motherboard.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>19. KERNEL STACK INPAGE ERROR (0X00000077)</b></div><div class="MsoNormal" style="text-align: justify;">Penyebab mirip dengan masalah “Kernel Data Inpage Error,” di atas.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
20. KMODE EXCEPTION NOT HANDLED (0X0000001E)</b></div><div class="MsoNormal" style="text-align: justify;">Biasanya masalah ini disebabkan adanya kesalahan pada driver atau service, konfilk IRQ. Apabila nama file dan service disebutkan coba uninstal software tersebut atau driver tersebut (rolling back the driver). Masalah ini juga dapat disebabkan karena kurangnya space pada disk pada saat melakukan instalasi.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>21. NO MORE SYSTEM PTES (0X0000003F)</b></div><div class="MsoNormal" style="text-align: justify;">Masalah muncul karena Windows kekurangan Page Table Entries (PTEs). PTEs digunakan untuk melakukan mapping RAM. Dimana mapping ini dilakukan oleh Virtual Memory Manager (VMM). Masalah ini juga dapat muncul ketika anda menggunakan beberapa monitor sekaligus.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Apabila error tersebut sering muncul, coba untuk menambah alokasi untuk PTEs pada Windows dengan cara sebagai berikut:</div><div class="MsoNormal" style="text-align: justify;"><br />
•Buka Registry Editor.</div><div class="MsoNormal" style="text-align: justify;">•Lihat pada: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager\Memory Management</div><div class="MsoNormal" style="text-align: justify;">•Double-click pada PagedPoolSize , masukkan value-nya 0 , klik OK.</div><div class="MsoNormal" style="text-align: justify;">•Kemudian double-click pada SystemPages. Jika menggunakan beberapa monitor sekaligus masukkan valuenya 36000. Selain itu masukkan valuenya 40000 jika RAM sebesar 128MB atau kurang. Jika RAM 128MB atau lebih masukkan valuenya 110000.<br />
•Setelah selesai, klik OK, tutup Registry Editor dan restart komputernya.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
22. STATUS IMAGE CHECKSUM MISMATCH (0Xc0000221)</b></div><div class="MsoNormal" style="text-align: justify;">Kemungkinan penyebab error ini adalah kerusakan pada swap file, atau driver yang corrupted.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Dapat menggunakan Driver Rollback atau System Restore dari safe mode, untuk mengembalikan driver sebelumnya. Anda juga dapat menggunakan Windows XP Professional pemulihan fitur seperti Konfigurasi Baik Terakhir yang Diketahui pilihan startup, Cadangan, atau Automated System Recovery untuk mengembalikan konfigurasi bekerja sebelumnya. Setelah mengembalikan dari media backup, anda mungkin perlu mengajukan permohonan kembali service pack atau hotfix, tergantung pada saat backup dilakukan.</div><div class="MsoNormal" style="text-align: justify;">- Jika pesan Stop nama file tertentu, cobalah menggantinya secara manual dengan salinan dari Windows XP Professional sistem operasi CD dengan mode aman atau Recovery Console. Untuk sistem yang menggunakan FAT16 atau sistem file FAT32, Anda memiliki pilihan untuk menggunakan Windows 98 atau Windows Millennium Edition Emergency Boot Disk untuk mengakses hard disk.</div><div class="MsoNormal" style="text-align: justify;">Jika file asli dari CD sistem operasi memiliki nama file yang berakhir dengan tanda garis bawah (_) karakter, Anda tidak dapat menggunakan file sampai terkompresi. Konsol Pemulihan’s Salin perintah ini sangat ideal untuk menyalin file terkompresi karena mendeteksi dan memperluas mereka. Jika Anda tidak menentukan nama file tujuan, Anda harus mengubah nama file diperluas dengan ekstensi yang benar sebelum menggunakannya. Dari safe mode atau Recovery Console, Anda dapat menggunakan perintah Expand uncompress dan menyalin file ke lokasi tujuan. Dalam Recovery Console, file yang diperluas diberi nama yang benar setelah disalin ke lokasi tujuan. Untuk informasi lebih lanjut tentang Expand Menyalin atau perintah, lihat Windows XP Help and Support Centre.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>23. STATUS SYSTEM PROCESS TERMINATED (0Xc000021A)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan adanya masalah pada Winlogon.exe atau pada Client Server Runtime Subsystem (CSRSS). Bisa juga disebabkan karena suatu user dengan level administrator merubah permission suatu file-file penting pada sistem Windows.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>24. UNMOUNTABLE BOOT VOLUME (stop code 0X000000ED)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan karena Windows tidak bisa “mount” boot volume. Lihat juga pada bagian “Inaccessible Boot Device,”</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>25. UNABLE TO LOCATE DLL (0 X00000135)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan oleh sebuah file yang telah hilang atau rusak, atau kesalahan registri.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Jika dokumen tersebut hilang atau rusak, biasanya blue screen akan menampilkan informasi nam file yang berkaitan, anda dapat mencari computer network atau dokumen lain yang sesuai, dan meng-copynya ke folder Sistem SYSTEM32 subfolder. Jika blue screen tidak menunjukkan nama file, kemungkinan kerusakan berada pada registry, gunakan System Restore.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>26. THREAD STUCK IN DEVICE DRIVER (X000000EA)</b></div><div class="MsoNormal" style="text-align: justify;">Biasanya disebabkan oleh video card (VGA) atau disebabkan oleh driver-nya.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Install driver terbaru untuk video card anda, jika tidak, anda perlu mengganti VGA untuk checking jika kegagalan masih terjadi.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>27. ACPI BIOS Error (x000000A5)</b></div><div class="MsoNormal" style="text-align: justify;">BIOS motherboard tidak mendukung/tidak support spesifikasi ACPI.<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Jika tidak ada file BIOS yang sesuai, maka dapat meng-instal-nya melalui CD Windows 2K/XP, ketika muncul “press F6 if you need to install a third-party SCSI or RAID driver” tekan tombol F7, jadi Windows akan secara otomatis mencegah instalasi ACPI HAL, dan instalasi PC Standar HAL.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b>28. Kernel Mode Exception Not Handled (x0000008E)</b></div><div class="MsoNormal" style="text-align: justify;">Kesalahan pada kernel level aplikasi, tetapi Windows tidak menangkap kesalahan prosesor. Biasanya kesalahan kompatibilitas hardware.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Upgrade ke driver terbaru atau meng-upgrade BIOS.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
29. NMI Hardware Failure (x00000080)</b></div><div class="MsoNormal" style="text-align: justify;">Disebabkan oleh hardware (Sepertinya ada kesalahan lblue screen dan hardware bond).<br />
Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Jika Anda baru saja memasang hardware baru, copot hardware-nya, ganti slot dan kemudian coba install driver terbaru, jika masalah muncul stelah update suatu driver, silakan kembalikan versi asli sebelumnya, untuk memeriksa apakah ada pencemaran di Goldfinger memori dan kerusakan, pemindaian virus, jalankan “chkdsk / r” untuk memeriksa dan memperbaiki kesalahan disk, memeriksa semua hardware add-in card. Jika masih gagal, hubungi perusahaan perbaikan komputer profesional dan minta bantuan.<br />
<br />
<b>30. System Thread Exception Not Handled(x0000007E)</b></div><div class="MsoNormal" style="text-align: justify;">Kesalahan system process, tetapi Windows tidak dapat menangkap kesalahan prosesor. Banyak penyebabnya, termasuk: kompatibilitas hardware, ada masalah system driver atau system service, atau beberapa software.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Harap gunakan “Event Viewer” untuk mendapatkan informasi lebih lanjut dari akar penyebab kesalahan yang ditemukan.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>31. Registry Error (x00000051)</b></div><div class="MsoNormal" style="text-align: justify;">kesalahan system configuration manager atau kesalahan manajer karena hard disk itu sendiri memiliki kerusakan fisik atau file system, sehingga di dalam register file membaca input / output erorr.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Gunakan “chkdsk / r” untuk memeriksa dan memperbaiki kesalahan disk.<br />
<br />
<b>32. FTDISK Internal Error (x00000058)</b></div><div class="MsoNormal" style="text-align: justify;"><br />
Kegagalan karena kesalahan driver utama.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Pertama coba restart komputer untuk melihat apakah dapat menyelesaikan masalah, Jika tidak, coba “Last Known Good Configuration” untuk menyelesaikan.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
33. Critical Service Failed (x0000005E)</b></div><div class="MsoNormal" style="text-align: justify;">Awal yang sangat penting untuk mengidentifikasi sistem yang disebabkan.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Jika Anda baru saja memasang hardware baru, copot hardware-nya, lalu buka Internet untuk memeriksa daftar apakah hardware itu kompatibel dengan Windows 2K/XP, dan kemudian restart komputer Anda, jika blue screen muncul, gunakan “Last Known Good Configuration” ,jika gagal, dianjurkan untuk memperbaiki atau re-install.<br />
<br />
<b>34. Session3 Initialization Failed (x0000006F)</b></div><div class="MsoNormal" style="text-align: justify;">Error ini biasanya muncul pada Windows startup, biasanya muncul pertanyaan driver atau kerusakan yang timbul dari sistem file.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">- Direkomendasikan bahwa penggunaan CD instalasi Windows untuk memperbaiki instalasi sistem.</div><div class="MsoNormal" style="text-align: justify;"><b><br />
35. Process Has Locked Pages(x00000076)</b></div><div class="MsoNormal" style="text-align: justify;">Dikarenakan driver pada penyelesaian input / output.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><div class="MsoNormal" style="text-align: justify;">Langkah pertama: Klik Start -> Run: regedt32, cari [HKLM \ SYSTEM \ Currentcontrol Set \ control \ session manager \ memory management], double-byte value di sisi kanan “TrackLockedPages”, nilai 1.Langkah Kedua: Jika blue screen lagi, maka pesan kesalahan akan menjadi: STOP: 0x0000000CB (0xY, 0xY, 0xY, 0xY) DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS salah satu dari keempat “0xY” akan muncul nama driver yang menjadi masalah, repair atau uninstall driver yang muncul.Langkah ketiga: Untuk masuk ke registri, hapus “TrackLockedPages” yang sudah ditambahkan tadi.</div><div class="MsoNormal" style="text-align: justify;">Multiple IRP Complete Request (stop code 0 x00000044) Biasanya disebabkan oleh driver perangkat hardware.</div><div class="MsoNormal" style="text-align: justify;">- Uninstall driver yang baru diinstal.</div><div class="MsoNormal" style="text-align: justify;"><br />
<b style="mso-bidi-font-weight: normal;">36. RDR File System (x00000027)</b></div><div class="MsoNormal" style="text-align: justify;">Penyebab kesalahan ini sulit untuk dinilai, tetapi “out of Windows memory management problem” kemungkinan akan menyebabkan munculnya stop code ini.</div><div class="MsoNormal" style="text-align: justify;">Solusinya :</div><span style="font-family: "Times New Roman"; font-size: 12.0pt; mso-ansi-language: EN-US; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US;">- Jika disebabkan karena memory management, meningkatkan/upgrade memori (RAM) akan memecahkan masalah.</span>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-65242212822009067872011-06-30T17:19:00.001+07:002011-06-30T17:23:21.116+07:00Trojan.Siggen1.42827<div align="center" class="MsoNormal" style="text-align: center;"><b style="mso-bidi-font-weight: normal;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Trojan.Siggen1.42827</span></b></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Saat ini untuk membuat virus tidak harus menempuh pendidikan tinggi atau menyandang title sarjana atauu sederetan gelar di belakang nama, karena saat ini sudah banyak buku-buku ”pintar” atau tulisan-tulisan di dunia maya yang mengajarkan bagaimana teknik membuat virus, walaupun sebenarnya mempunyai tujuan yang baik tetapi jika dibaca oleh orang yang tidak bertanggung jawab tentu akan berbeda ceritanya.</span></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Sebagai mana kita ketahui bahwa Screen Saver Windows akan muncul jika komputer dalam posisi tidak di gunakan (standby), tetapi pernahkan Anda mengalami dimana tiba-tiba muncul Screen Saver (lihat gambar</span><span style="font-family: Arial; font-size: 10pt;"> </span><span style="font-family: Arial; font-size: 10pt;">4) pada saat </span><span lang="IN" style="font-family: Arial; font-size: 10pt;">anda sedang menggunakan </span><span style="font-family: Arial; font-size: 10pt;">komputer</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">. Dan p</span><span style="font-family: Arial; font-size: 10pt;">ada saat screensaver tersebut muncul Anda tidak dapat melakukan akti</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">v</span><span style="font-family: Arial; font-size: 10pt;">itas lain dalam beberapa detik sampai Screen Saver </span><span lang="IN" style="font-family: Arial; font-size: 10pt;">(lebih tepat dikatakan Virus Saver) </span><span style="font-family: Arial; font-size: 10pt;">tersebut selesai </span><span lang="IN" style="font-family: Arial; font-size: 10pt;">aktif. </span><span style="font-family: Arial; font-size: 10pt;">Jika Anda pernah mengalami hal tersebut, sebaiknya berhati-hati karena perilaku yang tidak normal menandakan ada suatu masalah dalam komputer tersebut termasuk adanya aktivitas virus.</span></div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Ciri-ciri virus Trojan.Siggen1.42827</span></b></div><div class="MsoNormal" style="text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Secara ”kasat” mata, sebenarnya tidak terlalu sulit untuk mengetahui apakah komputer Anda sudah terinfeksi virus ini, berikut beberapa ciri-ciri yang muncul pada saat komputer terinfeksi Trojan.Siggen1.42827</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l39 level1 lfo1; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">Muncul beberapa file yang di simpan pada root setiap hard disk dengan nama file berikut :</span></div><div class="MsoNormal" style="margin-left: 36.0pt; mso-list: l39 level2 lfo1; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: "Courier New"; font-size: 10pt;">o<span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">%tanggal% _ TrueLove.exe, %tanggal%, menunjukan tanggal system komputer (contoh: 13 March 2011 _ TrueLove.exe)</span></div><div class="MsoNormal" style="margin-left: 36.0pt; mso-list: l39 level2 lfo1; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: "Courier New"; font-size: 10pt;">o<span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">TransparentScreenSaver...scr</span></div><div class="MsoNormal" style="margin-left: 36.0pt; mso-list: l39 level2 lfo1; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: "Courier New"; font-size: 10pt;">o<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [kasihku]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; mso-list: l39 level2 lfo1; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: "Courier New"; font-size: 10pt;">o<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [–], folder ini akan disembunyikan</span></div><div class="MsoNormal" style="margin-left: 36.0pt; mso-list: l39 level2 lfo1; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: "Courier New"; font-size: 10pt;">o<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [Koleksi ScreenSaver]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Catatan</span></b><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">: untuk file %tanggal% _ TrueLove.exe dan <i style="mso-bidi-font-style: normal;">TransparentScreenSaver...scr </i>tidak akan mempunyai icon</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l20 level1 lfo2; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Muncul Screensaver yang akan ditampilkan secara otomatis sesuai dengan waktu yang telah ditentukan. Pada saat Screen Saver tersebut muncul user tidak dapat melakukan aktivitas di komputer sampai screensaver terseb</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">u</span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">t selesai dijalan</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">k</span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">an.</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l12 level1 lfo3; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Tidak dapat mengakses (double click) file yang di kompresi baik menggunakan program WINZIP atau WINRAR dengan menampilkan pesan error </span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l33 level1 lfo4; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Terjadi perubahan pada icon file dan type file yang mempunyai ekstensi ZIP </span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">File induk Trojan.Siggen1.42827</span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Sama seperti kebanyakan virus lokal yang beredar saat ini yang rata-rata dibuat dengan menggunakan program bahasa Visual Basic, begitupun dengan virus Trojan.siggen1.42827, file ini akan mempunyai ciri-ciri</span><span style="font-family: Arial; font-size: 10pt;"> </span><span style="font-family: Arial; font-size: 10pt;">:</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l35 level1 lfo5; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">Ukuran file 76 KB</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l35 level1 lfo5; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">Ekstensi EXE dan SCR </span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l35 level1 lfo5; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Tidak mempunyai icon yang menyertai file virus</span></div><div class="MsoNormal" style="margin-left: 18.0pt; mso-list: l35 level1 lfo5; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10pt;">·<span style="font: 7pt "Times New Roman";"> </span></span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Type ”Application” dan ”Screen Saver”</span></div><div class="MsoNormal" style="text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Pada saat file virus tersebut aktif ia akan membuat beberapa file induk yang akan di tempatkan di beberapa lokasi yang berbeda-beda dengan tujuan untuk mempersulit pencarian, berikut beberapa file induk yang akan dibuat:</span></div><ol start="1" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l0 level1 lfo6; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Semua Drive</span></li>
</ol><ul style="margin-top: 0cm;" type="disc"><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">13 March 2011 _ TrueLove.exe (sesuai tanggal yang tercantum pada system komputer)</span></li>
<li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">OBE.sacura</span></li>
<li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Autorun.inf</span></li>
<li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">TransparentScreenSaver...scr</span></li>
<li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Folder [Kasihku]</span></li>
<ul style="margin-top: 0cm;" type="square"><li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$$Forever In Love.. TransparentScreenSaver.exe</span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">GEO.Sayoki</span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt </span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship...txt</span></li>
</ul><li class="MsoNormal" style="mso-list: l27 level2 lfo7; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Folder [-]</span></li>
<ul style="margin-top: 0cm;" type="square"><li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">$v3-$CkP.exe</span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">explorer.exe</span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">TransparentScreenSaver...scr</span></li>
<li class="MsoNormal" style="mso-list: l27 level3 lfo7; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">%tanggal%-=- 01 25 01.ex_ (file regedit.exe) contohnya : 13 March 2011 -=- 01 25 01.ex_, tanggal acak sesuai dengan tanggal yang tercantum pada system komputer</span></li>
</ul></ul></ul><ul style="margin-top: 0cm;" type="disc"><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l29 level2 lfo8; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Folder [Koleksi screensaver]</span></li>
<ul style="margin-top: 0cm;" type="square"><li class="MsoNormal" style="mso-list: l29 level3 lfo8; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$$Forever In Love.. TransparentScreenSaver.exe</span></li>
<li class="MsoNormal" style="mso-list: l29 level3 lfo8; tab-stops: list 108.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$$Forever In Love.. TransparentScreenSaver.scr</span></li>
</ul></ul></ul><ol start="2" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l32 level1 lfo9; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Windows</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l32 level2 lfo9; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AudioSystem.exe</span></li>
<li class="MsoNormal" style="mso-list: l32 level2 lfo9; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">msVBVM60.dll</span></li>
</ul></ol><ol start="3" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l9 level1 lfo10; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Windows\security</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">autorun.inf</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">pesan.htm</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.txt</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">fItRi.txt</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$v3-$CkP.exe</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.scr</span></li>
<li class="MsoNormal" style="mso-list: l9 level2 lfo10; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">svchost.exe</span></li>
</ul></ol><ol start="4" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l24 level1 lfo11; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Windows\system32</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">blank.htm</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">OBE.sacura</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.scr</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Forever In Love.scr</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Fitri-on.scr</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">explorer.exe</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">AudioSystem.exe</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></li>
<li class="MsoNormal" style="mso-list: l24 level2 lfo11; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.txt</span><span style="font-family: "Courier New"; font-size: 10pt;"><span style="font: 7pt "Times New Roman";"> </span></span></li>
<li class="MsoNormal" style="text-align: justify;"><span style="font-family: "Courier New"; font-size: 10pt;"><span style="font: 7pt "Times New Roman";"> </span></span><span style="font-family: Arial; font-size: 10pt;">C:\Document and Settings\%user%</span></li>
</ul></ol><ul style="margin-top: 0cm;" type="circle"><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l15 level2 lfo12; tab-stops: list 72.0pt left 119.25pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></li>
<li class="MsoNormal" style="mso-list: l15 level2 lfo12; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.txt</span></li>
</ul></ul><ol start="5" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l34 level1 lfo13; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Documents and Settings\%user%</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l34 level2 lfo13; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">http_www.patah-hati.com</span></li>
</ul></ol><ol start="6" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l5 level1 lfo14; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Program Files\$v3-$CkP.exe</span></li>
</ol><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Registry Windows auto start</span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Dari sekian banyak file induk yang dibuat tersebut, beberapa diantaranya akan di aktifkan secara otomatis pada saat komputer </span><span lang="IN" style="font-family: Arial; font-size: 10pt;">dihidupkan</span><span style="font-family: Arial; font-size: 10pt;">, hal ini untuk memastikan virus aktif secara otomatis tanpa bantuan user. Berikut beberapa string registr</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">i</span><span style="font-family: Arial; font-size: 10pt;"> yang diubah oleh virus:</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</span></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AudioSystem.exe = C:\WINDOWS\system32\AudioSystem.exe</span></div><div class="MsoNormal" style="margin-left: 54.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Virus ini juga akan aktif secara otomatis pada waktu-waktu yang telah ditentukan berupa Screen Saver dengan merubah string pada registry berikut:</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_CURRENT_USER\Control Panel\Desktop</span></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">SCRNSAVE = C\Windows\system32\Fitri-on.scr</span></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">ScreenSaveTimeOut = 100</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Blok Fungsi Windows </span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Untuk mempertahankan dirinya, ia akan blok program security termasuk antivirus dengan melakukan debugger (pengalihan) untuk mengeksekusi file virus yang sudah ditentukan, blok file instalasi yang mempunyai ekstensi <b style="mso-bidi-font-weight: normal;">MSI</b>, serta blok agar user tidak dapat menampilkan file yang tersembunyi.</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Berikut beberapa lokasi registry yang akan diubah :</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l16 level1 lfo15; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">DisableMSI = 1</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">LimitSystemRestoreCheckPointing = 1</span></div><div class="MsoNormal" style="margin-left: 18.0pt; text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l30 level1 lfo16; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">UncheckedValue = 0</span></div><div class="MsoNormal" style="margin-left: 54.0pt; text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l13 level1 lfo17; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AntiVirusDisableNotify = 1</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AntiVirusOverride = 1</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">FirewallDisableNotify = 1</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">FirewallOverride =1 </span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">FirstRunDisable = 1</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">UpdatesDisableNotify = 1</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l8 level1 lfo18; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Debugger file</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l8 level2 lfo18; tab-stops: list 72.0pt; text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Alamat key:</span></b></li>
</ul></ul><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\0000.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ahnlab.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ansavd.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Avas.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVG.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ccapp.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cclaw.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cleaner.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cleanmgr.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DriverDetective.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DriverScanner.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Fixinstall.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\folderlockbox_setup.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Free Fire Screensaver.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hunter.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install_flash_player.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ISUNIST.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kaspersky.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\keygen.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\limeware.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LNKSTUB.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mobsync.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSOOBE.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msra.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAPSTAT.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NETSETUP.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nip.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nipsvc.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Niu.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Njeeves.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NOD32krn.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NOD32kui.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norman.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norton.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvccf.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcoas.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcod.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcsched.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Panda.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMV-RTP.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ppclean.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Procexp.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regdir.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Restore my files.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rminstall.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSTRUI.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecurityConfig.exe.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Smadav 2009 Rev. 3.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SmaRTP.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Sophos.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\st5unst.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\supercleaner.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Task.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Taskkill.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tasklist.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tfnotice.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Tiny.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trend.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrendAntiVirus.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojan Hunter.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojan.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanHunter.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TweakUi.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Unins.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Unins000.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Uninst.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Uninstall.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unlocer.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unlocker.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UNWISE.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Upd.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Update.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\V2iBrowser.exe.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VProConsole_.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WinHIIP.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\youtubesetup.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ypsr.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ypsrru.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zanda.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zlh.exe</span></div><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ZoneLabs.exe</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="disc"><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l6 level2 lfo19; tab-stops: list 72.0pt; text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Value:</span></b></li>
</ul></ul><div class="MsoNormal" style="margin-left: 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Debugger = C:\WINDOWS\security\svchost.exe</span></div><div class="MsoNormal" style="margin-left: 90.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span lang="IN" style="font-family: Arial; font-size: 10pt;">Mencoba jadi Robin Hood</span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Tidak seperti yang dilakukan oleh virus lokal lainnya, virus ini tidak akan melakukan blok terhadap fungsi windows seperti Task Manager, Folder Options ataupun Registry Editor, virus ini</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">malah </span><span style="font-family: Arial; font-size: 10pt;"> mengembalikan beberapa fungsi Windows yang biasa di blok oleh virus lokal seperti RUN, Folder Options, Task Manager, CMD atau Registry Editor, berikut beberapa lokasi registr yang akan di pulihkan:</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l11 level1 lfo20; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoClose = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoControlPanel = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoFind = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoFolderOptions = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoRun = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoSaveSettings = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoStartMenuMorePrograms = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoViewContexMenu = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">NoViewonDrive = 0</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l21 level1 lfo21; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">DisableMsConfig = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">DisableRegistryTools = 0</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">DisableTaskMgr = 0</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l4 level1 lfo22; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\system</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">DisableCMD = 0</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Selain melakukan perubahan registry di atas, ia juga akan membuat registry berikut:</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l40 level1 lfo23; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\noF i T r I on Computer\Fitri\CurrentVersion</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">ComputerForeverInLove_status = 1</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l7 level1 lfo24; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_CURRENT_USER\Software\noF i T r I on Computer</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Build2009 = 1d (29 = decimal)</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l26 level1 lfo25; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\noF i T r I on Computer</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Changed = 0</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l10 level1 lfo26; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\noF i T r I on Computer</span></li>
<li class="MsoNormal" style="mso-list: l10 level1 lfo26; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\noF i T r I on Computer</span></li>
<li class="MsoNormal" style="mso-list: l10 level1 lfo26; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\noF i T r I on Computer</span></li>
</ul><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Aktif pada mode “</span></b><b style="mso-bidi-font-weight: normal;"><span lang="IN" style="font-family: Arial; font-size: 10pt;">S</span></b><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">afe </span></b><b style="mso-bidi-font-weight: normal;"><span lang="IN" style="font-family: Arial; font-size: 10pt;">M</span></b><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">ode with </span></b><b style="mso-bidi-font-weight: normal;"><span lang="IN" style="font-family: Arial; font-size: 10pt;">C</span></b><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">ommand </span></b><b style="mso-bidi-font-weight: normal;"><span lang="IN" style="font-family: Arial; font-size: 10pt;">P</span></b><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">rompt”</span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Untuk mempersulit proses pembersihan, ia akan melakukan perubahan pada registry berikut dengan tujuan agar dirinya dapat aktif walaupun komputer booting pada mode “safe mode with command prompt”</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l17 level1 lfo27; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AlternateShell = C:\WINDOWS\security\svchost.exe</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l19 level1 lfo28; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AlternateShell = C:\WINDOWS\security\svchost.exe</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l37 level1 lfo29; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">AlternateShell = C:\WINDOWS\security\svchost.exe</span></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Media penyebaran</span></b></div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Untuk menyebarkan dirinya, ia akan memanfaatkan USB Flash sebagai jalur penyebaran dengan membuat beberapa file berikut:</span></div><ul style="margin-top: 0cm;" type="disc"><li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Autorun.inf</span></li>
<li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$v3-$CkP.exe</span></li>
<li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">%tanggal Bulan Tahun % _ TrueLove.exe : contoh: 13 March 2011 _ TrueLove.exe ( sesuai tanggal yang berjalan pada system komputer)</span></li>
<li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">OBE.sacura </span></li>
<li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">TransparentScreenSaver...scr</span></li>
<li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Folder [-]</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l41 level2 lfo30; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$v3-$CkP.exe</span></li>
<li class="MsoNormal" style="mso-list: l41 level2 lfo30; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">explorer.exe</span></li>
<li class="MsoNormal" style="mso-list: l41 level2 lfo30; tab-stops: list 72.0pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">TransparentScreenSaver...scr</span></li>
</ul><li class="MsoNormal" style="mso-list: l41 level1 lfo30; tab-stops: list 36.0pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [Kasihku]</span></li>
<ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l41 level2 lfo30; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">$$Forever In Love.. TransparentScreenSaver.exe</span></li>
<li class="MsoNormal" style="mso-list: l41 level2 lfo30; tab-stops: list 72.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">GEO.Sayoki</span></li>
</ul></ul><div class="MsoNormal" style="margin-left: 54.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Agar dirinya dapat aktif secara otomatis pada saat user mengakses USB Flash, ia akan memanfaatkan fitur autorun Windows dengan membuat file autorun.inf. File autorun.inf ini berisi script untuk menjalankan file virus yang sudah dipersiapkan</span></div><div class="MsoNormal" style="tab-stops: 119.25pt;"><br />
</div><div class="MsoNormal" style="tab-stops: 119.25pt;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Blok akses file WinZIp</span></b></div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Aksi lain yang akan dilakukan adalah blok akses file yang di kompresi baik dengan menggunakan program WINZIP maupun WINRAR serta merubah icon. Jika user mencoba untuk mengakses dengan cara double click (klik 2x file yang di kompresi) maka akan muncul pesan error </span></div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Anda tidak perlu khawatir, karena file tersebut tidak akan benar-benar diblok tetapi masih bisa di buka dengan cara: </span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l28 level1 lfo31; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik kanan pada file ZIP/WINRAR </span></li>
<li class="MsoNormal" style="mso-list: l28 level1 lfo31; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik [Winzip]</span></li>
<li class="MsoNormal" style="mso-list: l28 level1 lfo31; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Kemudian pilih menu yang disediakan untuk ekstrak file tersebut</span></li>
</ul><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Untuk melakukan perubahan tersebut, ia akan merubah string registr</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">i</span><span style="font-family: Arial; font-size: 10pt;"> berikut:</span></div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zip</span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l1 level1 lfo32; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Default = exefile </span></li>
</ul><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Pesan</span></b></div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Virus ini juga akan meninggalkan beberapa pesan yang ditujukan kepada “seseorang” baik dalam bentuk text document (TXT) atau pun HTML. Berikut beberapa lokasi penyimpanan pesan tersebut</span><span style="font-family: Arial; font-size: 10pt;"> </span><span style="font-family: Arial; font-size: 10pt;">:</span><span style="font-family: Arial; font-size: 10pt;"> </span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l23 level1 lfo33; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Documents and Settings\All Users\Desktop\</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship..TXT</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Baca Aku..txt</span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l25 level1 lfo34; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Users\Public\Publick Desktop\</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship..TXT</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Baca Aku..txt</span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l38 level1 lfo35; tab-stops: list 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Folder [Kasihku]</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship...txt</span></div><div class="MsoNormal" style="margin-left: 54.0pt; text-align: justify;"><br />
</div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l14 level1 lfo36; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Windows\Security\Kenapa kamu mencintai se....txt</span></li>
</ul><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l3 level1 lfo37; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Windows\System32</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.txt</span></div><ul style="margin-top: 0cm;" type="circle"><li class="MsoNormal" style="mso-list: l22 level1 lfo38; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">C:\Document and Settings\%user%</span></li>
</ul><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span lang="FR" style="font-family: Arial; font-size: 10pt;">Kenapa kamu mencintai se....txt</span></div><div class="MsoNormal" style="margin-left: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">My Friendship.txt</span></div><div class="MsoNormal" style="tab-stops: 119.25pt; text-align: justify;"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Cara membasmi Trojan.Siggen1.42827</span></b></div><ol start="1" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l2 level1 lfo39; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Matikan proses virus yang aktif di memor</span><span lang="IN" style="font-family: Arial; font-size: 10pt;">i</span><span style="font-family: Arial; font-size: 10pt;">. Sebagai informasi virus ini dibuat dengan menggunakan program Visual Basic (VB), sehingga relatif mudah untuk mematikan proses virus yang sedang aktif di memori salah satunya dengan menggunakan tools <b style="mso-bidi-font-weight: normal;">KillVB.</b> Silahkan download tools tersebut di alamat berikut</span><span style="font-family: Arial; font-size: 10pt;"> </span><span style="font-family: Arial; font-size: 10pt;">:</span><span style="font-family: Arial; font-size: 10pt;"> </span></li>
</ol><div class="MsoNormal" style="margin-left: 18.0pt; tab-stops: 36.0pt; text-align: justify;"><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;"> </span><span style="font-family: Arial; font-size: 10pt;"><a href="http://yohan.es/killvb/">http://yohan.es/killvb/</a></span></div><ol start="2" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l36 level1 lfo40; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Fix registry yang sudah di ubah oleh virus. Virus ini cukup banyak melakukan perubahan pada registry Windows, untuk mempercepat proses perbaikan copy script di bawah ini pada program <i style="mso-bidi-font-style: normal;">notepad</i> kemudian simpan dengan nama REPAIR.INF. Install file tersebut dengan cara :</span></li>
</ol><ol start="2" style="margin-top: 0cm;" type="1"><ol start="1" style="margin-top: 0cm;" type="a"><li class="MsoNormal" style="mso-list: l18 level2 lfo41; tab-stops: list 72.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">klik kanan REPAIR.INF </span></li>
<li class="MsoNormal" style="mso-list: l18 level2 lfo41; tab-stops: list 72.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Kemudian pilih [INSTALL]</span></li>
</ol></ol><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Berikut script yang harus di copy:</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">[Version]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">Signature="$Chicago$"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">Provider=Vaksincom</span><span lang="IN" style="font-family: Arial; font-size: 10pt;"> Oyee</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">[DefaultInstall]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">AddReg=UnhookRegKey</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">DelReg=del</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">[UnhookRegKey]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Classes\.zip,,, "winzip"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">[del]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\noF i T r I on Computer</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SYSTEM\CurrentControlSet\Services\noF i T r I on Computer</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SYSTEM\ControlSet001\Services\noF i T r I on Computer</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\noF i T r I on Computer</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AudioSystem.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Policies\Microsoft\Windows\system, DisableCMD</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoClose</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFind</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoFolderOptions</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoControlPanel</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoRun</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NosaveSettings</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoStartMenuMorePrograms</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoViewContextMenu</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, NoViewonDrive </span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableMsConfig</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegistryTools</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableTaskMgr</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKCU, Control Panel\Desktop,SCRNSAVE.EXE</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AudioSystem.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\noF i T r I on Computer</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, DisableMSI</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Policies\Microsoft\Windows\Installer, LimitSystemRestoreCheckPointing</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\0000.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ahnlab.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ansavd.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\attrib.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Avas.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVG.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ccapp.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cclaw.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccleaner.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Cleaner.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cleanmgr.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DriverDetective.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DriverScanner.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Fixinstall.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\folderlockbox_setup.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Free Fire Screensaver.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hunter.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\install_flash_player.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ISUNIST.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Kaspersky.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\keygen.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\limeware.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LNKSTUB.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mobsync.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSOOBE.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msra.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAPSTAT.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NETSETUP.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nip.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nipsvc.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Niu.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Njeeves.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NOD32krn.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NOD32kui.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norman.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Norton.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvccf.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcoas.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcod.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Nvcsched.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Panda.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMAV.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PCMV-RTP.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ppclean.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Procexp.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regdir.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Restore my files.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rminstall.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RSTRUI.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecurityConfig.exe.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Smadav 2009 Rev. 3.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SmaRTP.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Sophos.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symantec.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\st5unst.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\supercleaner.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Task.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Taskkill.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tasklist.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tfnotice.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Tiny.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trend.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrendAntiVirus.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojan Hunter.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojan.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanHunter.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TweakUi.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Unins.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Unins000.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Uninst.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Uninstall.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unlocer.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unlocker.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UNWISE.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Upd.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Update.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\V2iBrowser.exe.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\VProConsole_.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WinHIIP.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\unwise32.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\youtubesetup.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ypsr.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ypsrru.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zanda.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Zlh.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><span style="font-family: Arial; font-size: 10pt;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ZoneLabs.exe</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 119.25pt;"><br />
</div><ol start="3" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l31 level1 lfo42; tab-stops: list 36.0pt left 119.25pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Hapus file yang dibuat oleh virus termasuk di USB Flash. Untuk mempercepat proses penghapusan, Anda dapat menggunakan fungsi Search/Find dari Windows. Sebelum melakukan pencarian direkomendasikan untuk menampilkan semua file yang tersembunyi agar lebih optimal hal ini disebabkan virus akan menyembunyikan beberapa file induk yang di buat.</span></li>
</ol><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 36.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Untuk menampilkan file yang tersembunyi caranya:</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt list 72.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Wingdings; font-size: 10pt;">v</span><span style="font-size: 7pt;"> </span><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Windows XP</span></b><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;"> </span></b></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Buka [Windows Explorer]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Klik menu [Tools]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Klik [Folder Options]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Setelah layer Folder Options terbuka, klik tabulasi [View]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Pilih opsi [Show hidden files and folder]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Hilangkan tanda centang pada opsi [Hide extentions for known file types]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Hilangkan tanda centang pada opsi [Hide protected operating system files (Recommended)]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik tombol [Apply]</span></div><div class="MsoNormal" style="margin-left: 90.0pt; tab-stops: 36.0pt list 90.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik tombol [OK]</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: list 72.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Wingdings; font-size: 10pt;">v</span><span style="font-size: 7pt;"> </span><b style="mso-bidi-font-weight: normal;"><span style="font-family: Arial; font-size: 10pt;">Windows Vista / 7</span></b></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Buka [Windows Explorer]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Klik [Organize]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Klik [Folder and search options]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-size: 10pt;">o</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Setelah muncul [Folder Options], klik tabulasi [View]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Pilih opsi [Show hidden files, folders, or drives]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Hilangkan tanda centang pada opsi [Hide extentions for known file types]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Hilangkan tanda centang pada opsi [Hide protected operating system files (Recommended)]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik tombol [Apply]</span></div><div class="MsoNormal" style="margin-left: 108.0pt; tab-stops: list 108.0pt left 119.25pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Klik tombol [OK]</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 36.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Setelah berhasil menampilkan file yang tersembunyi, lakukan pencarian dengan menggunakan Search dengan format pencarian : *.exe, *.scr</span></div><div class="MsoNormal" style="margin-left: 36.0pt; tab-stops: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;">Jangan sampai terjadi kesalahan dalam menghapus file tersebut, hapus file virus yang mempunyai ciri-ciri:</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt list 72.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Ukuran 76 KB</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt list 72.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Tidak menyertakan icon</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt list 72.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Ekstensi EXE dan SCR</span></div><div class="MsoNormal" style="margin-left: 72.0pt; tab-stops: 36.0pt list 72.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-size: 10pt;">o</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Type file “Application” atau “Screen Saver”</span></div><div class="MsoNormal" style="tab-stops: 36.0pt; text-align: justify;"><br />
</div><div class="MsoNormal" style="tab-stops: 36.0pt; text-align: justify;"><span style="font-family: Arial; font-size: 10pt;"> Kemudian hapus juga file berikut:</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Calibri; font-size: 10pt;">-</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">OBE.sacura [semua drive]</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Calibri; font-size: 10pt;">-</span><span style="font-size: 7pt;"> </span><span style="font-family: Arial; font-size: 10pt;">Autorun.inf [semua drive]</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-family: Calibri; font-size: 10pt;">-</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [-], semua drive</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-family: Calibri; font-size: 10pt;">-</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [Kasihku], semua drive</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-family: Calibri; font-size: 10pt;">-</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">Folder [Koleksi ScreenSaver], semua drive</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: 36.0pt list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span lang="NO-BOK" style="font-family: Calibri; font-size: 10pt;">-</span><span lang="NO-BOK" style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">C:\WINDOWS\system32\blank.htm</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Calibri; font-size: 10pt;">-</span><span style="font-size: 7pt;"> </span><span lang="NO-BOK" style="font-family: Arial; font-size: 10pt;">C:\Documents and Settings\%user%\http_www.pat</span><span style="font-family: Arial; font-size: 10pt;">ah-hati.com</span></div><div class="MsoNormal" style="margin-left: 54.0pt; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><br />
</div><ol start="4" style="margin-top: 0cm;" type="1"><li class="MsoNormal" style="mso-list: l31 level1 lfo42; tab-stops: list 36.0pt;"><span style="font-family: Arial; font-size: 10pt;">Untuk pembersihan optimal, sebaiknya scan dengan menggunakan antivirus yang up-to-date.</span></li>
</ol>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-53803332366198030222011-06-17T15:25:00.000+07:002011-06-17T15:25:10.571+07:00W32/Obfuscated.J (Trojan.Downloader2.25378)<div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: center;"><b>Trojan proaktif yang jangan dijadikan karyawan</b></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Andai saja ada calon karyawan yang memiliki spesifikasi seperti Trojan W32/Obfuscated.J. Dijamin banyak perusahaan yang berlomba-lomba untuk mepekerjakan karyawan tersebut dan karyawan tersebut kalau bekerja di KFC dijamin setiap bulan akan muncul fotonya sebagai Karyawan Teladan. Bagaimana tidak ? Trojan ini memiliki kebiasaan :</div><div class="MsoNormal" style="text-align: justify;">Selalu berkoordinasi dengan kantor pusatnya (alias selalu menghubungi server pusat komando Trojan untuk mendownload trojan baru).</div><div class="MsoNormal" style="text-align: justify;">Memiliki sifat terbuka alias aktif membuka port-port komputer yang di infeksinya.</div><div class="MsoNormal" style="text-align: justify;">Supel dalam pergaulan, dimana setelah menginfeksi komputer ia akan mengundang teman-temannya virus lain dan mendownloadkan ke komputer yang di infeksinya.</div><div class="MsoNormal" style="text-align: justify;">Memangkas birokrasi, dimana ia akan melumpuhkan firewall komputer yang diinfeksinya.</div><div class="MsoNormal" style="text-align: justify;">Memanfaatkan sumberdaya distribusi yang secara efektif dimana ia akan memanfaatkan jaringan baik intranet dan internet secara optimal dalam menyebarkan dirinya.</div><div class="MsoNormal" style="text-align: justify;">Tetapi sayangnya sifat ini bukan sifat yang dimiliki oleh calon karyawan melainkan Trojan Obfuscated, karena itu Vaksincom tidak menyarankan anda pengguna komputer untuk mempekerjakan karya... virus ini.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Serangan virus dari mancanegara masih menjadi dominan di Indonesia, jika kemarin kita masih dibuat sibuk oleh sekumpulan virus yang menggunakan celah shortcut (LNK) seperti Stuxnet, Ramnit dan Webmoner, kini makin banyak bermunculan berbagai macam varian dari virus/trojan berbahaya dan worm jaringan yang akan membuat komputer anda menjadi lambat dan tentunya mengganggu pekerjaan anda.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Bagi anda para pengguna komputer dan internet di Indonesia, harap berhati-hati karena sejak akhir Januari 2011 hingga saat ini banyak pengguna komputer yang sudah terinfeksi oleh serangan trojan ini, dan salah satu varian baru yang terdeteksi oleh Norman sebagai W32/Obfuscated.j (Dr Web mendeteksi sebagai Trojan.Downloader2.25378).</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Keluarga trojan Obfuscated </b></div><div class="MsoNormal" style="text-align: justify;">Trojan Obfuscated (Norman) atau sering disebut Rimecud (McAfee, Microsoft) atau Palevo (Symantec, Kaspersky), sedangkan Dr.Web mendeteksi sebagai Trojan.Downloader, merupakan salah satu kelompok trojan yang mampu mengganggu system komputer dalam jaringan dan mencoba memanipulasi system yang ada dalam jaringan. Salah satu aksi yang mengganggu dari trojan ini adalah melakukan broadcast internet dan membuat komputer menjadi lambat. </div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Trojan Obfuscated ditemukan sejak tahun 2009, dan hingga kini sudah berbagai varian macam Obfuscated yang beredar. Salah satu varian terbaru dari Obfuscated yang terdeteksi yaitu W32/Obfuscated.J.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Gejala & Efek Virus</b></div><div class="MsoNormal" style="text-align: justify;">Beberapa gejala yang terjadi jika anda sudah terinfeksi yaitu :</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Aktif menggunakan file program Visual Basic</b></div><div class="MsoNormal" style="text-align: justify;">Aksi virus mudah diketahui oleh pengguna komputer, trojan W32/Obfuscated.J berusaha aktif dan berjalan menggunakan file program Visual Basic (walaupun pengguna tidak memiliki program Visual Basic di komputer). Dengan banyak-nya file program tersebut yang berjalan, trojan W32/Obfuscated.J dapat dengan mudah melakukan infeksi, membaca aktivitas pengguna serta melakukan koneksi pada Remote Server.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Membuat komputer menjadi hang (explorer error)</b></div><div class="MsoNormal" style="text-align: justify;">Saat komputer dinyalakan pertama kali dan login, Windows Explorer akan terasa lambat (hang) akibat aktivitas dari trojan yang mencoba menjalankan banyak file trojan. Dengan melakukan hal tersebut, pengguna komputer akan merasa terganggu dan tidak nyaman menggunakan komputer. Terkadang hal ini membuat akibat fatal pada Windows Explorer yang menjadi error.</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Melakukan koneksi ke Remote Server</b></div><div class="MsoNormal" style="text-align: justify;">Trojan W32/Obfuscated.J juga berusaha melakukan koneksi ke Remote Server untuk melakukan pengiriman informasi yang dibutuhkan pada Remote Server. Koneksi ke remote server dilakukan dengan menggunakan beberapa port acak seperti :</div><div class="MsoNormal" style="text-align: justify;">112.78.112.208 : 80</div><div class="MsoNormal" style="text-align: justify;">216.108.234.10 : 80</div><div class="MsoNormal" style="text-align: justify;">218.85.133.201 : 80</div><div class="MsoNormal" style="text-align: justify;">72.18.202.18 : 80</div><div class="MsoNormal" style="text-align: justify;">91.213.29.141 : 80</div><div class="MsoNormal" style="text-align: justify;">91.213.29.147 : 80</div><div class="MsoNormal" style="text-align: justify;">123.183.217.32 : 5943</div><div class="MsoNormal" style="text-align: justify;">60.190.223.125 : 6943</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Selain itu, trojan akan membuka berbagai macam port seperti : </div><div class="MsoNormal" style="text-align: justify;">1053, 1055, 2290, 2291, 2292, 2294, 2386, 2397, 2398, 2400 s/d 2490</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Mendownload file agar tetap terupdate</b></div><div class="MsoNormal" style="text-align: justify;">Untuk mempermudah aksi-nya melakukan infeksi komputer, trojan W32/Obfuscated.J juga melakukan download beberapa file tertentu dari Remote Server yang bertujuan agar virus/trojan tetap terupdate dan tidak mudah dikenali oleh antivirus.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Melakukan transfer informasi yang telah didapatkan ke Remote Server</b></div><div class="MsoNormal" style="text-align: justify;">Hal yang perlu diperhatikan dari trojan W32/Obfuscated.J adalah kemampuan mengirimkan informasi dari pengguna komputer yang sudah terinfeksi ke remote server. Hal ini sangat membahayakan jika yang dikirim adalah informasi mengenai sistem komputer yang ada dalam jaringan.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Mematikan Windows Firewall</b></div><div class="MsoNormal" style="text-align: justify;">Salah satu usaha agar dapat menggunakan berbagai macam port untuk melakukan koneksi ke remote server yaitu dengan mematikan fitur Windows Firewall pada komputer. Dengan begitu maka trojan dapat mudah melakukan koneksi setiap saat.</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>File trojan W32/Obfuscated.J</b></div><div class="MsoNormal" style="text-align: justify;">File utama trojan W32/Obfuscated.J dibuat menggunakan bahasa pemrograman C. Penggunaan C sebagai bahasa pemrograman secara tidak langsung menunjukkan “kasta” virus ini masuk dalam tingkatan tinggi, sebagai gambaran, virus lokal di Indonesia pada umumnya menggunakan bahasa pemrograman (sejuta umat) Visual Basic yang relatif mudah dipelajari tetapi sangat tergantung pada komponen lain seperti MSVBVM60.dll sehingga aktivitasnya akan mudah dilumpuhkan jika komponen yang mengaktifkannya dilumpuhkan.</div><div class="MsoNormal" style="text-align: justify;">Berikut ciri-ciri file utama trojan sebagai berikut :</div><div class="MsoNormal" style="text-align: justify;">Berukuran 49 kb (tergantung varian yg ditemukan)</div><div class="MsoNormal" style="text-align: justify;">Type file “application” </div><div class="MsoNormal" style="text-align: justify;">Icon file “Command Prompt</div><div class="MsoNormal" style="text-align: justify;">Berekstensi “exe”</div><div class="MsoNormal" style="text-align: justify;">Lokasi file “C:\WINDOWS\wjdrive32.exe”</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;">Selain file utama, trojan W32/Obfuscated.J akan mendownload beberapa file lain yang dibuat menggunakan bahasa pemrograman Visual Basic, yaitu sebagai berikut :</div><div class="MsoNormal" style="text-align: justify;">C:\WINDOWS\system32\.exe (76 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\WINDOWS\system32\vyre32.exe (76 kb)</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Dan beberapa file trojan lain yaitu :</div><div class="MsoNormal" style="text-align: justify;">C:\asetup.exe (31 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\wincache.exe (31 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe (31 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\Documents and Settings\[UserName]\bnt.exe (51 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\Documents and Settings\[UserName]\Local Settings\Temp\_co.txt (1 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini (1 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini (1 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\Windows\System32\browseit.log (0 kb)</div><div class="MsoNormal" style="text-align: justify;">C:\Windows\System32\umdmgr.exe (61 kb)</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Modifikasi Registri</b></div><div class="MsoNormal" style="text-align: justify;">Beberapa modifikasi registri yang dilakukan oleh malware ini adalah sebagai berikut :</div><div class="MsoNormal" style="text-align: justify;">Menambah Registri</div><div class="MsoNormal" style="text-align: left;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run</div><div class="MsoNormal" style="text-align: left;">Microsoft Config Setup = "C:\WINDOWS\wjdrive32.exe"</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</div><div class="MsoNormal" style="text-align: left;">Microsoft Config Setup = "C:\WINDOWS\wjdrive32.exe"</div><div class="MsoNormal" style="text-align: left;">(Default) = "C:\WINDOWS\system32\.exe"</div><div class="MsoNormal" style="text-align: left;">vyre32 = " C:\WINDOWS\system32\vyre32.exe"</div><div class="MsoNormal" style="text-align: left;">ms0593[1] = " C:\WINDOWS\system32\umdmgr.exe"</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</div><div class="MsoNormal" style="text-align: left;">Taskman = "C:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\wincache.exe"</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run</div><div class="MsoNormal" style="text-align: left;">12CFG214-K641-12SF-N85P = "C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe"</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">File-file tersebut berjalan pada start-up Windows, sehingga trojan dapat langsung aktif pada saat komputer dinyalakan.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Metode Penyebaran</b></div><div class="MsoNormal" style="text-align: justify;">Beberapa cara trojan W32/Obfuscated.J melakukan penyebaran yaitu sebagai berikut :</div><div class="MsoNormal" style="text-align: justify;">Removable drive/disk</div><div class="MsoNormal" style="text-align: justify;">Metode ini adalah metode yang umum dilakukan oleh para pengguna komputer. Trojan (memanfaatkan celah autoplay) membuat beberapa file agar menginfeksi komputer yaitu :</div><div class="MsoNormal" style="text-align: justify;">RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\wincache.exe</div><div class="MsoNormal" style="text-align: justify;">RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Dengan membuat pada folder RECYCLER, trojan dapat menyebar tanpa diketahui oleh pengguna komputer.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Jaringan LAN & internet</b></div><div class="MsoNormal" style="text-align: justify;">Salah satu metode utama yang digunakan untuk melakukan penyebaran yaitu menggunakan jaringan LAN & internet. Dengan melakukan download trojan terbaru dan broadcast informasi dari internet, trojan melakukan penyebaran kepada jaringan LAN melalui port-port tertentu sehingga dengan mudah menginfeksi dan tidak mudah dideteksi oleh antivirus.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Pembersihan Obfuscated :</b></div><div class="MsoNormal" style="text-align: justify;">Putuskan hubungan komputer dari jaringan/internet.</div><div class="MsoNormal" style="text-align: justify;">Lakukan pembersihan virus pada mode “safe mode”. Untuk masuk pada mode “safe mode”, tekan tombol F8 pada keyboard saat komputer dinyalakan. </div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"></div><div class="MsoNormal" style="text-align: justify;">Biarkan Windows berjalan hingga anda dapat login Windows dan mendapatkan konfirmasi penggunaan “safe mode”.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;"><b>Matikan dan hapus trojan W32/Obfuscated.J</b></div><div class="MsoNormal" style="text-align: justify;">Lakukan langkah-langkah berikut :</div>- Scan dengan antivirus yang terupdate<br />
<div class="MsoNormal" style="text-align: justify;">- Repair registri yang telah dimodifikasi.</div><div class="MsoNormal" style="text-align: justify;">- Lakukan langkah-langkah berikut :</div><div class="MsoNormal" style="text-align: justify;">Salin script dibawah ini dengan notepad :</div><div class="MsoNormal" style="text-align: left;">[Version]</div><div class="MsoNormal" style="text-align: left;">Signature="$Chicago$"</div><div class="MsoNormal" style="text-align: left;">Provider=Vaksincom Oyee 2011</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">[DefaultInstall]</div><div class="MsoNormal" style="text-align: left;">AddReg=UnhookRegKey</div><div class="MsoNormal" style="text-align: left;">DelReg=del</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">[UnhookRegKey]</div><div class="MsoNormal" style="text-align: left;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0x00010001,1</div><div class="MsoNormal" style="text-align: left;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0x00010001,1</div><div class="MsoNormal" style="text-align: left;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HideFileExt,0x00010001,0</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\CLASSES\batfile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\CLASSES\comfile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\CLASSES\exefile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\CLASSES\piffile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe</div><div class="MsoNormal" style="text-align: left;"><br />
</div><div class="MsoNormal" style="text-align: left;">[del]</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Config Setup</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, (Default)</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vyre32</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS0593[1]</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run, Microsoft Config Setup</div><div class="MsoNormal" style="text-align: left;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman</div><div class="MsoNormal" style="text-align: left;">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, 12CFG214-K641-12SF-N85P</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Simpan file dengan nama “repair.inf”. Gunakan pilihan Save As Type menjadi All Files agar tidak terjadi kesalahan.</div><div class="MsoNormal" style="text-align: justify;">Klik kanan file “repair.inf”, kemudian pilih “install”.</div><div class="MsoNormal" style="text-align: justify;">Restart komputer.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Bersihkan temporary file dari jejak trojan.</div><div class="MsoNormal" style="text-align: justify;">Lakukan langkah-langkah berikut :</div><div class="MsoNormal" style="text-align: justify;">Klik Menu Start -> Run</div><div class="MsoNormal" style="text-align: justify;">Ketik perintah pada kotak open : cleanmgr , kemudian klik OK.</div><div class="MsoNormal" style="text-align: justify;">Pada drive system (C) klik OK, biarkan proses scan drive.</div><div class="MsoNormal" style="text-align: justify;">Setelah muncul jendela Disk Cleanup, beri tanda file yang akan di hapus (terutama Temporary Files), kemudian klik OK.</div><div class="MsoNormal" style="text-align: justify;">Tunggu hingga selesai.</div><div class="MsoNormal" style="text-align: justify;"><br />
</div><div class="MsoNormal" style="text-align: justify;">Untuk pembersihan yang optimal dan mencegah infeksi ulang, sebaiknya menggunakan antivirus yang ter-update dan mengenali trojan ini dengan baik.</div><div class="MsoNormal" style="text-align: justify;"><br />
sumber : www.vaksin.com</div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-61926706059351672712011-05-20T12:41:00.000+07:002011-05-20T12:41:53.862+07:00Trojan.FakeAV.3510<!--[if !mso]> <style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style> <![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if gte mso 9]><xml> <w:LatentStyles DefLockedState="false" LatentStyleCount="156"> </w:LatentStyles> </xml><![endif]--><!--[if !mso]><img src="http://img2.blogblog.com/img/video_object.png" style="background-color: #b2b2b2; " class="BLOGGER-object-element tr_noresize tr_placeholder" id="ieooui" data-original-id="ieooui" /> <style>
st1\:*{behavior:url(#ieooui) }
</style> <![endif]--><!--[if gte mso 10]> <style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style> <![endif]--> <br />
<div align="center" class="MsoNormal" style="text-align: center;"><b style="mso-bidi-font-weight: normal;"> Manipulasi Windows HOSTS file dan block antivirus</b></div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Kalau antivirus palsu (Rogue Antivirus) yang lain memiliki ciri khas menakut-nakuti korbannya dengan laporan infeksi virus yang palsu, maka antivirus palsu yang satu ini memiliki hobi melakukan blokir atas segambreng software sekuriti dan pengalihan file hosts Windows sehingga komputer korbannya yang berhasil di infeksinya tidak dapat mengakses situs-situs penyedia jasa sekuriti. Pengalihan Hosts file ini yang perlu diwaspadai oleh para pengguna komptuer, khususnya pengguna internet banking karena dengan pengalihan hosts, phishing website dan teknik rekayasa sosial yang tepat, hal ini berpotensi menyebabkan pembobolan pada akun internet banking. Sekalipun sudah dilengkapi dengan yang perlindungan Kalkulator PIN / Token (two factor authentication). Karena itulah penting bagi anda yang menggunakan Internet Banking untuk menggunakan antivirus yang memiliki fitur Proteksi Hosts file seperti yang diberikan oleh Dr Web Security Space.</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Ciri-ciri dan gejala virus</b></div><div class="MsoNormal">Virus ini dibuat dengan menggunakan bahasa pemograman Visual Basic dengan ukuran sekitar 62 KB dengan menggunakan icon Visual Basic.</div><div class="MsoNormal"></div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Salah satu ciri yang dapat dikenali adalah, setiap user membuka Internet explorer akan muncul website [http://www.qseach.com/?ref=kzCXow==] yang menyerupai website search engine <a href="http://www.google.com/">www.google.com</a> (lihat gambar 2). Selain itu akan muncul beberapa file shortcut dengan icon yang berbeda-beda, kabar baiknya file shortcut ini sementara hanya akan muncul di USB Flash. File shortcut ini merupakan file duplikat dari file/direktori yang disembunyikan oleh virus dengan tujuan untuk mengelabui user </div><div class="MsoNormal"><br />
</div><br />
<div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">File induk virus</b></div><div class="MsoNormal">Pada saat user menjalankan file induk virus, maka akan muncul pesan error kemudian ia akan membuat file induk yang akan di jalankan secara otomatis pada saat komputer booting.</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Berikut beberapa file yang akan dibuat oleh virus:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Catatan: %user%, adalah user yang digunakan pada saat login Windows </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Registri Windows</b></div><div class="MsoNormal">Agar file tersebut dapat di aktifkan secara otomatis pada saat komputer booting, ia akan membuat beberapa registri berikut:</div><div class="MsoNormal">HKCU\Software\Microsoft\WIndows\CurrentVersion\Run </div><div class="MsoNormal">74e4144414 = C:\Documents and Settings\%user%\132616c4\winlogon.exe </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKLM\Software\Microsoft\WIndows\CurrentVersion\Run </div><div class="MsoNormal">74e4144414 = C:\Documents and Settings\%user%\132616c4\winlogon.exe </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Catatan: %user% adalah user yang digunakan pada saat login Windows </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Blok Fungsi Windows </b></div><div class="MsoNormal">Agar user kesulitan dalam melakukan pembersihan, ia akan melakukan blok beberapa fungsi Windows seperti Task Manager, MSConfig, CMD (Command Prompt), Regedit atau Folder Options dengan melakukan perubahan pada registry berikut:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Microsoft\WIndows\CurrentVersion\Policies\Associations </div><div class="MsoNormal">LowRiskFileTypes = .exe </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer </div><div class="MsoNormal">NoFile = 1 </div><div class="MsoNormal">NoFolderOptions = 1 </div><div class="MsoNormal">NoRun = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System </div><div class="MsoNormal">DisableRegistryTools = 1 </div><div class="MsoNormal">DisableTaskMgr = 1 </div><div class="MsoNormal"> </div><div class="MsoNormal">HKCU\Software\Policies\Microsoft\Windows\System </div><div class="MsoNormal">DisableCMD = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKLM\Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer </div><div class="MsoNormal">NoFolderOptions = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile </div><div class="MsoNormal">EnableFirewall = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile </div><div class="MsoNormal">EnableFirewall = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Selain itu ia jug akan membuat string pada registry berikut agar file virus diaktifkan pada layer administrator serta mendaftarkan pada list Firewall agar tidak di blok oleh Firewall Windows. </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\layers </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = RUNASADMIN </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\layers </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = RUNASADMIN </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Blok Software Security</b></div><div class="MsoNormal">Selain blok fungsi Windows tersebut, ia akan melakukan blok terhadap tools/software security termasuk program antivirus dengan membaca “caption text Windows” serta dengan melakukan debugger (pengalihan) untuk menjalankan file virus yang berada di direktori [C:\Documents and Settings\%user%\132616c4\winlogon.exe]. Untuk melakukan debugger (pengalihan) tersebut, ia akan membuat string pada registry berikut:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Alamat Key:</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Image File Execution Options\</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Alamat sub key:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">_apv.exe</div><div class="MsoNormal"> _avp32.exe</div><div class="MsoNormal"> _apvcc.exe</div><div class="MsoNormal"> _apvm.exe</div><div class="MsoNormal"> _findviru.exe</div><div class="MsoNormal">a2servic.exe</div><div class="MsoNormal">ackwin32.exe</div><div class="MsoNormal">acs.exe</div><div class="MsoNormal">advxdwin.exe</div><div class="MsoNormal">agentsvr.exe</div><div class="MsoNormal">agentw.exe</div><div class="MsoNormal">ahnsd.exe</div><div class="MsoNormal">alerter.exe</div><div class="MsoNormal">alertsvc.exe</div><div class="MsoNormal">alogserv.exe</div><div class="MsoNormal">amon.exe</div><div class="MsoNormal">amon9x.exe</div><div class="MsoNormal">antigem.exe</div><div class="MsoNormal">anti-trojan.exe</div><div class="MsoNormal">antivirus.exe</div><div class="MsoNormal">ants.exe</div><div class="MsoNormal">apimonitor.exe</div><div class="MsoNormal">aplica32.exe</div><div class="MsoNormal">apvxdwin.exe</div><div class="MsoNormal">ashwebsv.exe</div><div class="MsoNormal">atcon.exe</div><div class="MsoNormal">atguard.exe</div><div class="MsoNormal">atro55en.exe</div><div class="MsoNormal">atupdates.exe</div><div class="MsoNormal">atwatch.exe</div><div class="MsoNormal">aupdate.exe</div><div class="MsoNormal">autodown.exe</div><div class="MsoNormal">autotrace.exe</div><div class="MsoNormal">autoupdate.exe</div><div class="MsoNormal">avcenter.exe</div><div class="MsoNormal">avconfig.exe</div><div class="MsoNormal">avconsol.exe</div><div class="MsoNormal">ave32.exe</div><div class="MsoNormal">avgcc32.exe</div><div class="MsoNormal">avgctrl.exe</div><div class="MsoNormal">avgmc.exe</div><div class="MsoNormal">avgnt.exe</div><div class="MsoNormal">avgserv9.exe</div><div class="MsoNormal">avguard.exe</div><div class="MsoNormal">avgw.exe</div><div class="MsoNormal">avkserv.exe</div><div class="MsoNormal">avkpop.exe</div><div class="MsoNormal">avkservice.exe</div><div class="MsoNormal">avkwcl9.exe</div><div class="MsoNormal">avkwtl9.exe</div><div class="MsoNormal">avnotify.exe</div><div class="MsoNormal">avnt.exe</div><div class="MsoNormal">avp.exe</div><div class="MsoNormal">avp32.exe</div><div class="MsoNormal">avpccc.exe</div><div class="MsoNormal">avpdos32.exe</div><div class="MsoNormal">avpexec.exe</div><div class="MsoNormal">avpinst.exe</div><div class="MsoNormal">avpm.exe</div><div class="MsoNormal">avpmon.exe</div><div class="MsoNormal">avpnt.exe</div><div class="MsoNormal">avptc32.exe</div><div class="MsoNormal">avpupd.exe</div><div class="MsoNormal">avrescue.exe avscanavsha-</div><div class="MsoNormal">dow.exe</div><div class="MsoNormal">avsched32.exe</div><div class="MsoNormal">avsynmgr.exe</div><div class="MsoNormal">avupgsvc.exe</div><div class="MsoNormal">avwebloader.exe</div><div class="MsoNormal">avwin95.exe</div><div class="MsoNormal">avwinnt.exe</div><div class="MsoNormal">avwsc.exe</div><div class="MsoNormal">avwupd32.exe</div><div class="MsoNormal">avxmonitor9x.exe</div><div class="MsoNormal">avxmonitornt.exe</div><div class="MsoNormal">avxquar.exe</div><div class="MsoNormal">avxw.exe</div><div class="MsoNormal">azonealarm.exe bd_professional.exe</div><div class="MsoNormal">bidef.exe</div><div class="MsoNormal">bidserver.exe</div><div class="MsoNormal">bipcp.exe bipcpevalsetup.exe</div><div class="MsoNormal">bisp.exe</div><div class="MsoNormal">blackd.exe</div><div class="MsoNormal">blackice.exe</div><div class="MsoNormal">boot.exe</div><div class="MsoNormal">bootwarn.exe</div><div class="MsoNormal">borg2.exe</div><div class="MsoNormal">bs120.exe</div><div class="MsoNormal">BullGuard.exe</div><div class="MsoNormal">callmsi.exe</div><div class="MsoNormal">ccapp.exe</div><div class="MsoNormal">ccevtmgr.exe</div><div class="MsoNormal">cclaw.exe</div><div class="MsoNormal">ccpsetmgr.exe</div><div class="MsoNormal">ccshtdwn.exe</div><div class="MsoNormal">cdp.exe</div><div class="MsoNormal">cfgwiz.exe</div><div class="MsoNormal">cfiadmin.exe</div><div class="MsoNormal">cfiaudit.exe</div><div class="MsoNormal">cfind.exe</div><div class="MsoNormal">cfinet.exe</div><div class="MsoNormal">cfinet32.exe</div><div class="MsoNormal">ChromeSetup.exe</div><div class="MsoNormal">clamauto.exe</div><div class="MsoNormal">claw95.exe</div><div class="MsoNormal">claw95cf.exe</div><div class="MsoNormal">claw95ct.exe</div><div class="MsoNormal">Clean.exe</div><div class="MsoNormal">clear.exe</div><div class="MsoNormal">clear3.exe</div><div class="MsoNormal">cleanpc.exe</div><div class="MsoNormal">cmd.exe</div><div class="MsoNormal">cmgrdian.exe</div><div class="MsoNormal">cmon016.exe</div><div class="MsoNormal">combofix.exe connectionmoni-</div><div class="MsoNormal">tor.exe</div><div class="MsoNormal">cpd.exe</div><div class="MsoNormal">cpdclnt.exe</div><div class="MsoNormal">cpf.exe</div><div class="MsoNormal">cpf9x206.exe</div><div class="MsoNormal">cpfnt206.exe</div><div class="MsoNormal">csinject.exe</div><div class="MsoNormal">cdinsm32.exe</div><div class="MsoNormal">css1631.exe</div><div class="MsoNormal">ctfmon.exe</div><div class="MsoNormal">ctrl.exe</div><div class="MsoNormal">cv.exe</div><div class="MsoNormal">cwntdwmo.exe</div><div class="MsoNormal">defalert.exe</div><div class="MsoNormal">defscangui.exe</div><div class="MsoNormal">defwatch.exe</div><div class="MsoNormal">deputy.exe</div><div class="MsoNormal">Diskmon.exe</div><div class="MsoNormal">doors.exe</div><div class="MsoNormal">dpf.exe</div><div class="MsoNormal">drvins32.exe</div><div class="MsoNormal">drwatson.exe</div><div class="MsoNormal">drweb32.exe</div><div class="MsoNormal">dumphive.exe</div><div class="MsoNormal">dv95.exe</div><div class="MsoNormal">dv95_o.exe</div><div class="MsoNormal">dvp95.exe</div><div class="MsoNormal">dvp95_0.exe</div><div class="MsoNormal">earthagent.exe</div><div class="MsoNormal">ecengine.exe</div><div class="MsoNormal">ecls.exe</div><div class="MsoNormal">ecmd.exe</div><div class="MsoNormal">edi.exe</div><div class="MsoNormal">efinet32.exe</div><div class="MsoNormal">efpeadm.exe</div><div class="MsoNormal">egui.exe</div><div class="MsoNormal">EHttpSrv.exe</div><div class="MsoNormal">ekrn.exe</div><div class="MsoNormal">ent.exe</div><div class="MsoNormal">esafe.exe</div><div class="MsoNormal">escanhnt.exe</div><div class="MsoNormal">escanv95.exe</div><div class="MsoNormal">espwatch.exe</div><div class="MsoNormal">etrustcip.exe</div><div class="MsoNormal">evpn.exe</div><div class="MsoNormal">ewido.exe</div><div class="MsoNormal">exanantivirus-cnet.exe</div><div class="MsoNormal">exit.exe</div><div class="MsoNormal">expert.exe</div><div class="MsoNormal">explored.exe</div><div class="MsoNormal">fact.exe</div><div class="MsoNormal">f-agnt95.exe</div><div class="MsoNormal">fameh32.exe</div><div class="MsoNormal">fa-setup.exe</div><div class="MsoNormal">fast.exe</div><div class="MsoNormal">fch32.exe</div><div class="MsoNormal">fih32.exe</div><div class="MsoNormal">filemon.exe</div><div class="MsoNormal">findviru/exe</div><div class="MsoNormal">firewall.exe</div><div class="MsoNormal">FirewallCOntrolPanel.exe FirewallSettings.exe</div><div class="MsoNormal">fix-it.exe</div><div class="MsoNormal">flowprotector.exe</div><div class="MsoNormal">fnrb32.exe</div><div class="MsoNormal">FPAVServer.exe</div><div class="MsoNormal">fprot.exe</div><div class="MsoNormal">f-prot95.exe</div><div class="MsoNormal">fp-win.exe</div><div class="MsoNormal">fp-win_trial.exe</div><div class="MsoNormal">frw.exe</div><div class="MsoNormal">fsaa.exe</div><div class="MsoNormal">fsav.exe</div><div class="MsoNormal">fsav32.exe</div><div class="MsoNormal">fsav530stbyb.exe</div><div class="MsoNormal">fsav530wtbyb.exe</div><div class="MsoNormal">fsav95.exe</div><div class="MsoNormal">fsave32.exe</div><div class="MsoNormal">fsgk32.exe</div><div class="MsoNormal">fslaunch.exe</div><div class="MsoNormal">fsm32.exe</div><div class="MsoNormal">fsma32.exe</div><div class="MsoNormal">fsmb32.exe</div><div class="MsoNormal">fssm32.exe</div><div class="MsoNormal">f-stopw.exe</div><div class="MsoNormal">fwenc.exe</div><div class="MsoNormal">fwinstall.exe</div><div class="MsoNormal">gbmenu.exe</div><div class="MsoNormal">gbpoll.exe GenericRenosFix.exe</div><div class="MsoNormal">generics.exe</div><div class="MsoNormal">gibe.exe GoogleToolsbalInstaller_download_signed.exe</div><div class="MsoNormal">gpedit.exe</div><div class="MsoNormal">guard.exe</div><div class="MsoNormal">guarddog.exe</div><div class="MsoNormal">guardgui.exe</div><div class="MsoNormal">guardhlp.exe hacktracersetup.exe</div><div class="MsoNormal">HelpPane.exe</div><div class="MsoNormal">hidec.exe</div><div class="MsoNormal">HijackThis.exe</div><div class="MsoNormal">HJTInstall.exe</div><div class="MsoNormal">HostsCHK.exe</div><div class="MsoNormal">htlog.exe</div><div class="MsoNormal">hwpe.exe</div><div class="MsoNormal">iamapp.exe</div><div class="MsoNormal">iamserv.exe</div><div class="MsoNormal">iamstats.exe</div><div class="MsoNormal">ibmasn.exe</div><div class="MsoNormal">ibmasn.exe</div><div class="MsoNormal">ibmavsp.exe</div><div class="MsoNormal">icloadnt.exe</div><div class="MsoNormal">icmon.exe</div><div class="MsoNormal">icmoon.exe</div><div class="MsoNormal">icssuppnt.exe</div><div class="MsoNormal">icsupp.exe</div><div class="MsoNormal">icsupp95.exe</div><div class="MsoNormal">icsuppnt.exe</div><div class="MsoNormal">IEDFix.exe</div><div class="MsoNormal">iface.exe</div><div class="MsoNormal">ifw2000.exe</div><div class="MsoNormal">iomon98.exe</div><div class="MsoNormal">iparmor.exe</div><div class="MsoNormal">iris.exe</div><div class="MsoNormal">isrv95.exe</div><div class="MsoNormal">jammer.exe</div><div class="MsoNormal">jed.exe</div><div class="MsoNormal">jedi.exe kav8.0.0.357es.exe</div><div class="MsoNormal">kavlite40eng.exe</div><div class="MsoNormal">kacpers40eng.exe</div><div class="MsoNormal">kavsvc.exe</div><div class="MsoNormal">kerio-pf-213-en-win.exe</div><div class="MsoNormal">kerio-wrl.421-en-win.exe</div><div class="MsoNormal">kerio-wrp-421-en-win.exe killprocesssetup-</div><div class="MsoNormal">161.exe</div><div class="MsoNormal">kiss8.0.0.50gla-</div><div class="MsoNormal">tam.exe</div><div class="MsoNormal">kpf.exe</div><div class="MsoNormal">kpfw32.exe</div><div class="MsoNormal">ldnetmon.exe</div><div class="MsoNormal">ldpro.exe</div><div class="MsoNormal">dpromenu.exe</div><div class="MsoNormal">ldscan.exe</div><div class="MsoNormal">licmgr.exe</div><div class="MsoNormal">localnet.exe</div><div class="MsoNormal">lockdown.exe</div><div class="MsoNormal">lockdown2000.exe</div><div class="MsoNormal">lookout.exe</div><div class="MsoNormal">lsetup.ese</div><div class="MsoNormal">luall.exe</div><div class="MsoNormal">luau.exe</div><div class="MsoNormal">lucomserver.exe</div><div class="MsoNormal">luinit.exe</div><div class="MsoNormal">lispt.exe</div><div class="MsoNormal">mbam.exe</div><div class="MsoNormal">mbamgui.exe</div><div class="MsoNormal">mbabservice.exe</div><div class="MsoNormal">mcagent.exe</div><div class="MsoNormal">mcmnhdlr.exe</div><div class="MsoNormal">mcshield.exe</div><div class="MsoNormal">mctool.exe</div><div class="MsoNormal">mcuimgr.exe</div><div class="MsoNormal">mcupdate.exe</div><div class="MsoNormal">mcvsrte.exe</div><div class="MsoNormal">mcvsshld.exe mfw2en.exe</div><div class="MsoNormal">mfweng3.02d30.exe</div><div class="MsoNormal">mgavrtcl.exe</div><div class="MsoNormal">mgahtml.exe</div><div class="MsoNormal">mgui.exe</div><div class="MsoNormal">minilog.exe</div><div class="MsoNormal">monitor.exe</div><div class="MsoNormal">monsys32.exe</div><div class="MsoNormal">monsysnt.exe</div><div class="MsoNormal">monwow.exe</div><div class="MsoNormal">moolive.exe</div><div class="MsoNormal">mpfagent.exe</div><div class="MsoNormal">mpfservice.exe</div><div class="MsoNormal">mpftray.exe</div><div class="MsoNormal">mrflux.exe</div><div class="MsoNormal">MSASCui.exe</div><div class="MsoNormal">msblast.exe</div><div class="MsoNormal">msconfig.exe</div><div class="MsoNormal">msinfo32.exe</div><div class="MsoNormal">msn.exe</div><div class="MsoNormal">mspatch.exe</div><div class="MsoNormal">mssmmc32.exe</div><div class="MsoNormal">mu0311ad.exe</div><div class="MsoNormal">mwatch.exe</div><div class="MsoNormal">mxtask.exe</div><div class="MsoNormal">n32scan.exe n32scanw.exe</div><div class="MsoNormal">nai_vs_stst.exe</div><div class="MsoNormal">nav32_loader.exe</div><div class="MsoNormal">nav8-try.exe</div><div class="MsoNormal">navap.exe</div><div class="MsoNormal">navapsvc.exe</div><div class="MsoNormal">navvapw32.exe</div><div class="MsoNormal">navauto-protect.exe</div><div class="MsoNormal">navdx.exe</div><div class="MsoNormal">naveng.exe navengnavex15.exe</div><div class="MsoNormal">navex15.exe</div><div class="MsoNormal">navlu32.exe</div><div class="MsoNormal">navnt.exe</div><div class="MsoNormal">navrunr.exe</div><div class="MsoNormal">navsched.exe</div><div class="MsoNormal">navstub.exe</div><div class="MsoNormal">navw.exe navw32.exe</div><div class="MsoNormal">navwnt.exe</div><div class="MsoNormal">nc2000.exe</div><div class="MsoNormal">ncinst4.exe</div><div class="MsoNormal">nd98spst.exe</div><div class="MsoNormal">ndntspst.exe</div><div class="MsoNormal">neomonitor.exe</div><div class="MsoNormal">neowatchlog.exe</div><div class="MsoNormal">netarmor.exe</div><div class="MsoNormal">netcfg.exe</div><div class="MsoNormal">netinfo.exe</div><div class="MsoNormal">netmon.exe</div><div class="MsoNormal">netscanpro.exe</div><div class="MsoNormal">Netscape/exe</div><div class="MsoNormal">netspyhunter-1.2exe</div><div class="MsoNormal">netstat.exe</div><div class="MsoNormal">netutils.exe</div><div class="MsoNormal">nisserv.exe</div><div class="MsoNormal">nisum.exe</div><div class="MsoNormal">nmain.exe</div><div class="MsoNormal">nod32.exe</div><div class="MsoNormal">normist.exe norton_internet_sec_3.0_407.exe</div><div class="MsoNormal">notstart.exe npf40_tw_98_nt_me_2k.exe</div><div class="MsoNormal">npfmessenger.exe</div><div class="MsoNormal">nprotect.exe</div><div class="MsoNormal">npscheck.exe</div><div class="MsoNormal">npssvc.exe</div><div class="MsoNormal">nsched32.exe</div><div class="MsoNormal">ntdetect.exe</div><div class="MsoNormal">ntrtscan/exe</div><div class="MsoNormal">ntxconfig.exe</div><div class="MsoNormal">nui.exe</div><div class="MsoNormal">nupdate.exe</div><div class="MsoNormal">nupgrade.exe</div><div class="MsoNormal">nvapsvc.exe</div><div class="MsoNormal">nvarch16.exe</div><div class="MsoNormal">nvc95.exe</div><div class="MsoNormal">nvlaunch.exe</div><div class="MsoNormal">nvsvc32.exe</div><div class="MsoNormal">nwinst4.exe</div><div class="MsoNormal">nwservice.exe</div><div class="MsoNormal">nwtools16/exe</div><div class="MsoNormal">offguard.exe</div><div class="MsoNormal">ogrc.exe</div><div class="MsoNormal">opera.exe opera_964_int_Setup.exe</div><div class="MsoNormal">ostronet.exe</div><div class="MsoNormal">outpost.exe outpostproinstall.exe</div><div class="MsoNormal">padmin.exe</div><div class="MsoNormal">panixk.exe</div><div class="MsoNormal">pathping.exe</div><div class="MsoNormal">pavcl.exe</div><div class="MsoNormal">pavproxy.exe</div><div class="MsoNormal">pavsched.exe</div><div class="MsoNormal">pavw.exe</div><div class="MsoNormal">pcc2002s902.exe</div><div class="MsoNormal">pccclient.exe</div><div class="MsoNormal">pccguide.exe</div><div class="MsoNormal">pcciomon.exe</div><div class="MsoNormal">pccmain.exe</div><div class="MsoNormal">pccntmon.exe</div><div class="MsoNormal">pccpfw.exe</div><div class="MsoNormal">pccwin97.exe</div><div class="MsoNormal">pccwin98.exe</div><div class="MsoNormal">pcdsetup.exe</div><div class="MsoNormal">pcfwallicon.exe</div><div class="MsoNormal">pcp10117_0.exe</div><div class="MsoNormal">pcscan.exe pcscanpdsetup.exe</div><div class="MsoNormal">penis32.exe</div><div class="MsoNormal">periscope.exe</div><div class="MsoNormal">persfw.exe</div><div class="MsoNormal">pev.exe</div><div class="MsoNormal">pf2.exe</div><div class="MsoNormal">pfwadmin.exe</div><div class="MsoNormal">ping.exe</div><div class="MsoNormal">pingscan.exe</div><div class="MsoNormal">platin.exe</div><div class="MsoNormal">pop3trap.exe</div><div class="MsoNormal">poproxy.exe</div><div class="MsoNormal">popscan.exe</div><div class="MsoNormal">portdetective.exe</div><div class="MsoNormal">portmon.exe</div><div class="MsoNormal">portmonitor.exe</div><div class="MsoNormal">ppinupdt.exe</div><div class="MsoNormal">pptbc.exe</div><div class="MsoNormal">ppvstop.exe</div><div class="MsoNormal">prckiller.exe</div><div class="MsoNormal">process.exe processmonitor.exe</div><div class="MsoNormal">procexp.exe</div><div class="MsoNormal">procexplorerv1.0.exe</div><div class="MsoNormal">procmon.exe</div><div class="MsoNormal">programauditor.exe</div><div class="MsoNormal">proport.exe</div><div class="MsoNormal">protectx.exe</div><div class="MsoNormal">pspf.exe</div><div class="MsoNormal">purge.exe</div><div class="MsoNormal">pview.exe</div><div class="MsoNormal">pview95.exe</div><div class="MsoNormal">qconsole.exe</div><div class="MsoNormal">qserver.exe</div><div class="MsoNormal">rapapp.exe</div><div class="MsoNormal">rav.exe</div><div class="MsoNormal">rav7.exe</div><div class="MsoNormal">rav7win.exe</div><div class="MsoNormal">rav8win32eng.exe</div><div class="MsoNormal">realmon.exe</div><div class="MsoNormal">regedt32.exe</div><div class="MsoNormal">rescue.exe</div><div class="MsoNormal">rescue32.exe</div><div class="MsoNormal">restart.exe</div><div class="MsoNormal">route.exe</div><div class="MsoNormal">routemon.exe</div><div class="MsoNormal">rrguard.exe</div><div class="MsoNormal">rshell.exe</div><div class="MsoNormal">rstrui.exe</div><div class="MsoNormal">rtvscn95.exe</div><div class="MsoNormal">rulaunch.exe</div><div class="MsoNormal">safari.exe</div><div class="MsoNormal">safeweb.exe</div><div class="MsoNormal">SandboxieBITS.exe</div><div class="MsoNormal">sandboxieCrypto.exe</div><div class="MsoNormal">sandboxieRPcSs.exe</div><div class="MsoNormal">sandboxieWUAU.exe</div><div class="MsoNormal">SbieCtrl.exe</div><div class="MsoNormal">SBieSvc.exe</div><div class="MsoNormal">sbserv.exe</div><div class="MsoNormal">scan32.exe</div><div class="MsoNormal">scan 95.exe</div><div class="MsoNormal">scanpm.exe</div><div class="MsoNormal">sched.exe</div><div class="MsoNormal">schedapp.exe</div><div class="MsoNormal">scrscan.exe</div><div class="MsoNormal">scvhosl.exe</div><div class="MsoNormal">sd.exe</div><div class="MsoNormal">sdclt.exe</div><div class="MsoNormal">serv95.exe</div><div class="MsoNormal">setup_flowprotector_us.exe</div><div class="MsoNormal">setupvameeval.exe</div><div class="MsoNormal">sgssfw32.exe</div><div class="MsoNormal">sh.exe</div><div class="MsoNormal">sharedaccess.exe</div><div class="MsoNormal">shellspyinstall.exe</div><div class="MsoNormal">shn.exe</div><div class="MsoNormal">smc.exe</div><div class="MsoNormal">SmitfraudFix.exe</div><div class="MsoNormal">sofi.exe</div><div class="MsoNormal">spf.exe</div><div class="MsoNormal">sphinx.exe</div><div class="MsoNormal">spider.exe</div><div class="MsoNormal">spysweeper.exe</div><div class="MsoNormal">spyxx.exe</div><div class="MsoNormal">SrchSTS.exe</div><div class="MsoNormal">srwatch.exe</div><div class="MsoNormal">ss3edit.exe</div><div class="MsoNormal">st2.exe</div><div class="MsoNormal">supftrl.exe</div><div class="MsoNormal">supporter5.exe</div><div class="MsoNormal">sweep.exe</div><div class="MsoNormal">sweep95.exe</div><div class="MsoNormal">sweepnet.ese</div><div class="MsoNormal">sweepsrv.sys.exe</div><div class="MsoNormal">swnetup.exe</div><div class="MsoNormal">swreg.exe</div><div class="MsoNormal">swsc.exe</div><div class="MsoNormal">swxcacls.exe</div><div class="MsoNormal">symprxysvc.exe</div><div class="MsoNormal">symtray.exe</div><div class="MsoNormal">sysdoc32.exe</div><div class="MsoNormal">syshelp.exe</div><div class="MsoNormal">taskkill.exe</div><div class="MsoNormal">tasklist.exe</div><div class="MsoNormal">taskmgr.exe</div><div class="MsoNormal">taskmon.exe</div><div class="MsoNormal">taumon.exe</div><div class="MsoNormal">tauscan.exe</div><div class="MsoNormal">tbscan.exe</div><div class="MsoNormal">tc.exe</div><div class="MsoNormal">tca.exe</div><div class="MsoNormal">tcm.exe</div><div class="MsoNormal">tcpsvs32.exe</div><div class="MsoNormal">tds2.exe</div><div class="MsoNormal">tds2-98.exe</div><div class="MsoNormal">tds2-nt.exe</div><div class="MsoNormal">tds-3.exe</div><div class="MsoNormal">tfak.exe</div><div class="MsoNormal">tfak5.exe</div><div class="MsoNormal">tftpd.exe</div><div class="MsoNormal">tgbob.exe</div><div class="MsoNormal">titain.exe</div><div class="MsoNormal">titainxp.exe</div><div class="MsoNormal">tmlisten.exe</div><div class="MsoNormal">tmntsrv.exe</div><div class="MsoNormal">tracertpt.exe</div><div class="MsoNormal">trjscan.exe</div><div class="MsoNormal">trjsetup.exe</div><div class="MsoNormal">trojantrap3.exe</div><div class="MsoNormal">UCCLSID.exe</div><div class="MsoNormal">Ui0Detect.exe</div><div class="MsoNormal">undoboot.exe</div><div class="MsoNormal">unzip.exe</div><div class="MsoNormal">update.exe</div><div class="MsoNormal">UserAccountControlSettings.exe</div><div class="MsoNormal">VACFix.exe</div><div class="MsoNormal">vbcmserv.exe</div><div class="MsoNormal">vbcons.exe</div><div class="MsoNormal">vbust.ese</div><div class="MsoNormal">vbwin9x,exe</div><div class="MsoNormal">vbwinntw.exe</div><div class="MsoNormal">vccmserv.exe</div><div class="MsoNormal">vcontrol.exe</div><div class="MsoNormal">vcsetup.exe vet32.exe</div><div class="MsoNormal">vet98.exe</div><div class="MsoNormal">vettray.exe</div><div class="MsoNormal">vfsetup.exe</div><div class="MsoNormal">vir-help.exe</div><div class="MsoNormal">virusmdpersonalfirewall.exe</div><div class="MsoNormal">vmsrvc.exe</div><div class="MsoNormal">vlan300.exe</div><div class="MsoNormal">vnpc3000.exe</div><div class="MsoNormal">vpc32.exe</div><div class="MsoNormal">vpc42.exe</div><div class="MsoNormal">vpcmap.exe</div><div class="MsoNormal">vpfw30s.exe</div><div class="MsoNormal">vtray.exe</div><div class="MsoNormal">vscan.exe</div><div class="MsoNormal">vscan40.exe</div><div class="MsoNormal">vscan6.02d30.exe</div><div class="MsoNormal">vsched.exe</div><div class="MsoNormal">vsecomr.exe</div><div class="MsoNormal">vshwin32.exe</div><div class="MsoNormal">vsisetup.exe</div><div class="MsoNormal">vsmain.exe</div><div class="MsoNormal">vsmon.exe</div><div class="MsoNormal">vsscan40.exe</div><div class="MsoNormal">vsstat.exe</div><div class="MsoNormal">vswin9xe.exe</div><div class="MsoNormal">vswinntse.exe</div><div class="MsoNormal">vswinperse.exe</div><div class="MsoNormal">vvstat.exe</div><div class="MsoNormal">w32dsm89.exe</div><div class="MsoNormal">w9x.exe</div><div class="MsoNormal">eatchdog.exe</div><div class="MsoNormal">webscan.exe</div><div class="MsoNormal">webscanx.exe</div><div class="MsoNormal">webtrap.exe</div><div class="MsoNormal">WerFault.exe</div><div class="MsoNormal">wfindv32.exe</div><div class="MsoNormal">whoswatchingme.exe</div><div class="MsoNormal">wingate.exe</div><div class="MsoNormal">winhlpp32.exe</div><div class="MsoNormal">wink.exe</div><div class="MsoNormal">winmgm32.exe</div><div class="MsoNormal">winppr32.exe</div><div class="MsoNormal">winrecon.exe</div><div class="MsoNormal">Winroute.exe</div><div class="MsoNormal">winservices.exe</div><div class="MsoNormal">winsfcm.exe</div><div class="MsoNormal">wmias.exe</div><div class="MsoNormal">wnt.exe</div><div class="MsoNormal">wradmin.exe</div><div class="MsoNormal">wrctrl.exe</div><div class="MsoNormal">WS2Fix.exe</div><div class="MsoNormal">wsbgate.exe</div><div class="MsoNormal">wuauclt.exe</div><div class="MsoNormal">wyvernworksfirewall.exe</div><div class="MsoNormal">xpf202en.exe</div><div class="MsoNormal">xscan.exe</div><div class="MsoNormal">zapro.exe</div><div class="MsoNormal">zapsetup3001.exe</div><div class="MsoNormal">zatutor.exe</div><div class="MsoNormal">zatutorzauinst.exe</div><div class="MsoNormal">zauinst.exe</div><div class="MsoNormal">zlh.exe</div><div class="MsoNormal">zonalarm.exe</div><div class="MsoNormal">zobalm2601.exe</div><div class="MsoNormal">zonealarm.exe</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Alamat String dan value</b></div><div class="MsoNormal">Debugger = "C:\Documents and Settings\%user%\132616C4\winlogon.exe"</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Catatan: %user% ini adalah user/account yang digunakan pada saat login Windows </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Ubah halaman utama Internet Explorer</b></div><div class="MsoNormal">Selain itu, ia juga akan melakukan perubahan pada halaman utama Internet Explorer dengan menampilkan website yang telah ditentukan. Untuk melakukan hal tersebut ia akan merubah string registry berikut:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel </div><div class="MsoNormal">HomePage = 1 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKCU\Software\Microsoft\Internet Explorer\main </div><div class="MsoNormal">Start Page = <a href="http://768yeh1j7yj5t07.directorio-w.com/">http://768yeh1j7yj5t07.directorio-w.com</a> </div><div class="MsoNormal">Search Page = <a href="http://e1hhl4a03j39jb3.directorio-w.com/">http://e1hhl4a03j39jb3.directorio-w.com</a> </div><div class="MsoNormal">Local Page = <a href="http://nm17u2g9x4l2nj3.directorio-w.com/">http://nm17u2g9x4l2nj3.directorio-w.com</a> </div><div class="MsoNormal">Default_Search_URL = <a href="http://82580978n05e6zb.directorio-w.com/">http://82580978n05e6zb.directorio-w.com</a> </div><div class="MsoNormal">Default_Page_URL = <a href="http://6448664he9p069e.directorio-w.com/">http://6448664he9p069e.directorio-w.com</a> </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Merubah icon USB Flash</b></div><div class="MsoNormal">Virus ini juga akan merubah icon USB Flash menjadi icon Folder dan blok akses USB Flash jika user mengakses dengan cara double click pada USB Flash tersebut. Dengan melakukan double click pada USB Flash tersebut maka secara otomatis akan mengaktifkan virus. </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"></div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Menyembunyikan file/folder </b></div><div class="MsoNormal">Lagi-lagi USB Flash menjadi korban, kali ini ia akan menyembunyikan semua file/folder yang ada di USB Flash dan sebagai gantinya ia akan membuat file duplikat yang mempunyai nama yang sama dengan file/folder yang disembunyikan berupa file shortcut dengan ciri-ciri</div><div class="MsoNormal">Jika yang disembunyikan berupa Folder </div><div class="MsoNormal">Icon Folder </div><div class="MsoNormal">Mempunyai ekstensi .LNK </div><div class="MsoNormal">Ukuran 1 KB </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Jika yang disembunyikan berupa File </div><div class="MsoNormal">Icon acak </div><div class="MsoNormal">Mempunyai ekstensi %ekstensi asal%.lnk, dimana %ekstensi asal% adalah ekstensi asli yang dimiliki oleh file tersebut, contohnya: lamaran.doc.lnk </div><div class="MsoNormal">Ukuran 1 KB </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Untuk setiap file shortcut yang dibuat akan mempunyai target untuk menjalankan file virus (Ua3kmh73O3jyut4Iok.exe) yang sudah dipersiapkan bila di jalankan, file target tersebut biasanya akan di simpan di USB Flash.</div><br />
<b>Ubah Hosts File Windows</b> <br />
<div class="MsoNormal">Ia juga akan melakukan perubahan terhadap file Hosts Windows [C:\Windows\System32\Drivers\Etc\Hosts] yang mengakibatkan sejumlah website tidak dapat di akses. Berikut beberapa alamat website yang akan di blok </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">208.109.220.97 viabcp.com</div><div class="MsoNormal">208.109.220.97 www.viabcp.com</div><div class="MsoNormal">208.109.220.97 bcpzonasegura.viabcp.com</div><div class="MsoNormal">173.236.65.144 www.produbanco.com</div><div class="MsoNormal">173.236.65.144 produbanco.com</div><div class="MsoNormal">173.236.65.144 www.pichincha.com</div><div class="MsoNormal">173.236.65.144 pichincha.com</div><div class="MsoNormal">173.236.65.144 wwwp1.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwwp2.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwwp3.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwwp4.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwww01.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwww02.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwww03.pichincha.com</div><div class="MsoNormal">173.236.65.144 wwww04.pichincha.com</div><div class="MsoNormal">173.236.65.144 www.bancoguayaquil.com</div><div class="MsoNormal">173.236.65.144 bancoguayaquil.com</div><div class="MsoNormal">216.245.208.36 bn.com.pe</div><div class="MsoNormal">216.245.208.36 www.bn.com.pe</div><div class="MsoNormal">216.245.208.36 zonasegura1.bn.com.pe</div><div class="MsoNormal">216.245.208.36 www.zonasegura1.bn.com.pe</div><div class="MsoNormal">151.164.123.246 iniciorapido.info</div><div class="MsoNormal">65.29.206.117 www.iniciorapido.info</div><div class="MsoNormal">129.230.114.137 buscalo.in</div><div class="MsoNormal">205.0.103.170 www.buscalo.in</div><div class="MsoNormal">107.39.173.27 buscafacil.com</div><div class="MsoNormal">21.160.69.154 www.buscafacil.com</div><div class="MsoNormal">85.105.233.106 emsisoft.com</div><div class="MsoNormal">161.131.222.207 ahnlab.com</div><div class="MsoNormal">63.171.36.253 antivir.es</div><div class="MsoNormal">234.35.119.192 antiy.net</div><div class="MsoNormal">41.236.27.143 authentium.com</div><div class="MsoNormal">118.7.16.176 avast.com</div><div class="MsoNormal">19.46.86.34 avg.com</div><div class="MsoNormal">190.234.237.229 bitdefender.com</div><div class="MsoNormal">253.112.145.181 quickheal.com</div><div class="MsoNormal">74.138.134.213 clamav.net</div><div class="MsoNormal">232.245.204.71 comodo.com</div><div class="MsoNormal">146.110.31.198 drweb.com</div><div class="MsoNormal">210.55.195.218 aladdin.com</div><div class="MsoNormal">30.13.184.251 ca.com</div><div class="MsoNormal">120.120.254.41 f-prot.com</div><div class="MsoNormal">102.241.82.235 f-secure.com</div><div class="MsoNormal">98.186.58.187 fortinet.com</div><div class="MsoNormal">242.212.47.220 gdata.es</div><div class="MsoNormal">76.252.49.78 ikarus.at</div><div class="MsoNormal">59.116.200.17 jiangmin.com</div><div class="MsoNormal">54.61.108.224 kaspersky.com</div><div class="MsoNormal">199.88.97.1 mcafee.com</div><div class="MsoNormal">32.127.167.115 microsoft.com</div><div class="MsoNormal">15.247.250.242 eset.es</div><div class="MsoNormal">10.193.226.6 norman.com</div><div class="MsoNormal">87.219.215.38 nprotect.com</div><div class="MsoNormal">245.2.217.84 pandasecurity.com</div><div class="MsoNormal">227.123.112.23 pctools.com</div><div class="MsoNormal">223.68.20.231 prevx.com</div><div class="MsoNormal">43.94.9.8 rising-global.com</div><div class="MsoNormal">201.201.79.121 sophos.com</div><div class="MsoNormal">183.66.163.60 sunbeltsoftware.com</div><div class="MsoNormal">179.11.71.12 symantec.com</div><div class="MsoNormal">255.225.60.45 hacksoft.com.pe</div><div class="MsoNormal">157.77.130.159 trendmicro.com</div><div class="MsoNormal">140.197.25.30 anti-virus.by</div><div class="MsoNormal">135.142.189.49 hauri.net</div><div class="MsoNormal">212.101.178.82 virusbuster.hu</div><div class="MsoNormal">113.208.248.196 www.emsisoft.com</div><div class="MsoNormal">96.72.75.67 www.ahnlab.com</div><div class="MsoNormal">91.18.239.19 www.antivir.es</div><div class="MsoNormal">168.44.228.51 www.antiy.net</div><div class="MsoNormal">70.83.42.165 www.authentium.com</div><div class="MsoNormal">52.204.125.104 www.avast.com</div><div class="MsoNormal">48.149.101.56 www.avg.com</div><div class="MsoNormal">124.175.90.89 www.bitdefender.com</div><div class="MsoNormal">26.214.92.202 www.quickheal.com</div><div class="MsoNormal">8.79.244.73 www.clamav.net</div><div class="MsoNormal">4.24.152.93 www.comodo.com</div><div class="MsoNormal">80.50.141.126 www.drweb.com</div><div class="MsoNormal">238.90.211.240 www.aladdin.com</div><div class="MsoNormal">221.22.38.111 www.ca.com</div><div class="MsoNormal">216.223.14.62 www.f-prot.com</div><div class="MsoNormal">37.182.3.95 www.f-secure.com</div><div class="MsoNormal">194.33.5.209 www.fortinet.com</div><div class="MsoNormal">109.153.156.148 www.gdata.es</div><div class="MsoNormal">172.99.64.100 www.ikarus.at</div><div class="MsoNormal">249.57.53.132 www.jiangmin.com</div><div class="MsoNormal">151.164.123.246 www.kaspersky.com</div><div class="MsoNormal">65.29.206.117 www.mcafee.com</div><div class="MsoNormal">129.230.114.137 www.microsoft.com</div><div class="MsoNormal">205.0.103.170 www.eset.es</div><div class="MsoNormal">107.39.173.27 www.norman.com</div><div class="MsoNormal">21.160.69.154 www.nprotect.com</div><div class="MsoNormal">85.105.233.106 www.pandasecurity.com</div><div class="MsoNormal">161.131.222.207 www.pctools.com</div><div class="MsoNormal">63.171.36.253 www.prevx.com</div><div class="MsoNormal">234.35.119.192 www.rising-global.com</div><div class="MsoNormal">41.236.27.143 www.sophos.com</div><div class="MsoNormal">118.7.16.176 www.sunbeltsoftware.com</div><div class="MsoNormal">19.46.86.34 www.symantec.com</div><div class="MsoNormal">190.234.237.229 www.hacksoft.com.pe</div><div class="MsoNormal">253.112.145.181 www.trendmicro.com</div><div class="MsoNormal">74.138.134.213 www.anti-virus.by</div><div class="MsoNormal">232.245.204.71 www.hauri.net</div><div class="MsoNormal">146.110.31.198 www.virusbuster.hu</div><div class="MsoNormal">210.55.195.218 www.emsisoft.com</div><div class="MsoNormal">30.13.184.251 www.anti-trojan.net</div><div class="MsoNormal">120.120.254.41 malwarescan.emsisoft.com</div><div class="MsoNormal">102.241.82.235 forum.emsisoft.com</div><div class="MsoNormal">98.186.58.187 www.emsisoft.net</div><div class="MsoNormal">242.212.47.220 www.emsisoft.it</div><div class="MsoNormal">76.252.49.78 www.emsisoft.de</div><div class="MsoNormal">59.116.200.17 www.anti-trojan-software.net</div><div class="MsoNormal">54.61.108.224 mamutu.com</div><div class="MsoNormal">199.88.97.1 www.emsisoft.es</div><div class="MsoNormal">32.127.167.115 malwarescan.emsisoft.de</div><div class="MsoNormal">15.247.250.242 ww.emsisoft.com</div><div class="MsoNormal">10.193.226.6 www.emsisoft.fr</div><div class="MsoNormal">87.219.215.38 www.emsisoft.nl</div><div class="MsoNormal">245.2.217.84 onlinecheck.emsisoft.com</div><div class="MsoNormal">227.123.112.23 onlinecheck.emsisoft.de</div><div class="MsoNormal">223.68.20.231 www.emsisoft.org</div><div class="MsoNormal">43.94.9.8 scan.anti-trojan.net</div><div class="MsoNormal">201.201.79.121 www.trojaner.info</div><div class="MsoNormal">183.66.163.60 onlinecheck.emsisoft.org</div><div class="MsoNormal">179.11.71.12 onlinecheck.emsisoft.net</div><div class="MsoNormal">255.225.60.45 blitzblank.com</div><div class="MsoNormal">157.77.130.159 www.emsisoft.at</div><div class="MsoNormal">140.197.25.30 www.emsisoft.jp</div><div class="MsoNormal">135.142.189.49 www.mamutu.com</div><div class="MsoNormal">212.101.178.82 malwarescan.emsisoft.es</div><div class="MsoNormal">113.208.248.196 www.mamutu.de</div><div class="MsoNormal">96.72.75.67 download5.emsisoft.com</div><div class="MsoNormal">91.18.239.19 download1.emsisoft.com</div><div class="MsoNormal">168.44.228.51 download4.emsisoft.com</div><div class="MsoNormal">70.83.42.165 global.ahnlab.com</div><div class="MsoNormal">52.204.125.104 www.hackshields.com</div><div class="MsoNormal">48.149.101.56 www.internationalservicecheck.com</div><div class="MsoNormal">124.175.90.89 www.irangoals.com</div><div class="MsoNormal">26.214.92.202 ixomodels.com</div><div class="MsoNormal">8.79.244.73 www.indielisboa.com</div><div class="MsoNormal">4.24.152.93 www.latin-mass-society.org</div><div class="MsoNormal">80.50.141.126 www.arpia.be</div><div class="MsoNormal">238.90.211.240 www.owen.org</div><div class="MsoNormal">221.22.38.111 www.prdouglas.co.uk</div><div class="MsoNormal">216.223.14.62 www.zarya.info</div><div class="MsoNormal">37.182.3.95 www.willsee.com</div><div class="MsoNormal">194.33.5.209 halmapr.com</div><div class="MsoNormal">109.153.156.148 karuna-shechen.org</div><div class="MsoNormal">172.99.64.100 www.barder.com</div><div class="MsoNormal">249.57.53.132 www.antivir.es</div><div class="MsoNormal">151.164.123.246 www.buraka.tv</div><div class="MsoNormal">65.29.206.117 www.dr-bull.com</div><div class="MsoNormal">129.230.114.137 www.manchester-offices.co.uk</div><div class="MsoNormal">205.0.103.170 saverssite.com</div><div class="MsoNormal">107.39.173.27 canada.karuna-shechen.org</div><div class="MsoNormal">21.160.69.154 developmentdrums.org</div><div class="MsoNormal">85.105.233.106 www.imddomains.co.uk</div><div class="MsoNormal">161.131.222.207 cutlines.org</div><div class="MsoNormal">63.171.36.253 elblogdemanu.com</div><div class="MsoNormal">234.35.119.192 ruben.bzin.net</div><div class="MsoNormal">41.236.27.143 welkam.co.jp</div><div class="MsoNormal">118.7.16.176 www.cambridge-steiner-school.co.uk</div><div class="MsoNormal">19.46.86.34 naturesimages.net</div><div class="MsoNormal">190.234.237.229 www.1stavenuelimousines.co.uk</div><div class="MsoNormal">253.112.145.181 www.mtr-design.com</div><div class="MsoNormal">74.138.134.213 dev.depeuter.org</div><div class="MsoNormal">232.245.204.71 www.emeraldclassic.co.uk</div><div class="MsoNormal">146.110.31.198 www.peterhearnwaste.co.uk</div><div class="MsoNormal">210.55.195.218 etrr.co.uk</div><div class="MsoNormal">30.13.184.251 www.avoncourt.com</div><div class="MsoNormal">120.120.254.41 sarahmcconnellphotography.net</div><div class="MsoNormal">102.241.82.235 www.ixomodels.com</div><div class="MsoNormal">98.186.58.187 natsko.com</div><div class="MsoNormal">242.212.47.220 www.nottinghampoetryseries.com</div><div class="MsoNormal">76.252.49.78 www.sheffieldmind.co.uk</div><div class="MsoNormal">59.116.200.17 ixostore.ixomodels.com</div><div class="MsoNormal">54.61.108.224 www.flairweddings.co.uk</div><div class="MsoNormal">199.88.97.1 www.fimasys.com</div><div class="MsoNormal">32.127.167.115 cohartuk.com</div><div class="MsoNormal">15.247.250.242 qqjkw.net</div><div class="MsoNormal">10.193.226.6 vivo-austin.com</div><div class="MsoNormal">87.219.215.38 www.freeality.com</div><div class="MsoNormal">245.2.217.84 bestofewan.com</div><div class="MsoNormal">227.123.112.23 www.handwritingforkids.com</div><div class="MsoNormal">223.68.20.231 cowsmo.com</div><div class="MsoNormal">43.94.9.8 www.2xlgames.com</div><div class="MsoNormal">201.201.79.121 kimzimmer.net</div><div class="MsoNormal">183.66.163.60 basetendencies.com</div><div class="MsoNormal">179.11.71.12 trackingtheworld.com</div><div class="MsoNormal">255.225.60.45 www.reviewsofbooks.com</div><div class="MsoNormal">157.77.130.159 www.collectedcurios.com</div><div class="MsoNormal">140.197.25.30 www.renningers.com</div><div class="MsoNormal">135.142.189.49 ccslaughterspdx.com</div><div class="MsoNormal">212.101.178.82 www.briarhurst.com</div><div class="MsoNormal">113.208.248.196 www.smf.org</div><div class="MsoNormal">96.72.75.67 ribbonwarehouse.com</div><div class="MsoNormal">91.18.239.19 www.garryowen.com</div><div class="MsoNormal">168.44.228.51 45pounds.com</div><div class="MsoNormal">70.83.42.165 isotopecomics.com</div><div class="MsoNormal">52.204.125.104 roysephotos.com</div><div class="MsoNormal">48.149.101.56 www.stadiumpage.com</div><div class="MsoNormal">124.175.90.89 www.elvis-express.com</div><div class="MsoNormal">26.214.92.202 www.tomorrowsedge.net</div><div class="MsoNormal">8.79.244.73 www.beautybar.com</div><div class="MsoNormal">4.24.152.93 pineleafboys.com</div><div class="MsoNormal">80.50.141.126 www.mountainlakeslodge.com</div><div class="MsoNormal">238.90.211.240 pvtc.org</div><div class="MsoNormal">221.22.38.111 bhsbees.com</div><div class="MsoNormal">216.223.14.62 baristamagazine.com</div><div class="MsoNormal">37.182.3.95 www.gokidding.com</div><div class="MsoNormal">194.33.5.209 defalcos.com</div><div class="MsoNormal">109.153.156.148 www.celticmerchant.com</div><div class="MsoNormal">172.99.64.100 www.hxproduction.com</div><div class="MsoNormal">249.57.53.132 www.wellgousa.com</div><div class="MsoNormal">151.164.123.246 blog.titanium-jewelry.com</div><div class="MsoNormal">65.29.206.117 www.brightoctober.com</div><div class="MsoNormal">129.230.114.137 hishomeforchildren.com</div><div class="MsoNormal">205.0.103.170 www.phoenixtrikeworks.com</div><div class="MsoNormal">107.39.173.27 www.professorbeyer.com</div><div class="MsoNormal">21.160.69.154 www.secondchanceboxer.com</div><div class="MsoNormal">85.105.233.106 www.residentphotography.com</div><div class="MsoNormal">161.131.222.207 woottonfootball.com</div><div class="MsoNormal">63.171.36.253 www.deborahshelton.net</div><div class="MsoNormal">234.35.119.192 bobbondart.com</div><div class="MsoNormal">41.236.27.143 www.authentium.com</div><div class="MsoNormal">118.7.16.176 asap.authentium.com</div><div class="MsoNormal">19.46.86.34 www.authentium.com.au</div><div class="MsoNormal">190.234.237.229 avast.com</div><div class="MsoNormal">253.112.145.181 www.avast.com</div><div class="MsoNormal">74.138.134.213 files.avast.com</div><div class="MsoNormal">232.245.204.71 download535.avast.com</div><div class="MsoNormal">146.110.31.198 avg.com</div><div class="MsoNormal">210.55.195.218 www.avg.com</div><div class="MsoNormal">30.13.184.251 grisoft.com</div><div class="MsoNormal">120.120.254.41 www.grisoft.com</div><div class="MsoNormal">102.241.82.235 antivirus-tools.com</div><div class="MsoNormal">98.186.58.187 archive.bitdefender.com</div><div class="MsoNormal">242.212.47.220 avx.rob-have.net</div><div class="MsoNormal">76.252.49.78 b-have.orgbitdefender-ar.com</div><div class="MsoNormal">127.184.12.85 bitdefender.com</div><div class="MsoNormal">122.129.176.36 bitdefender.org</div><div class="MsoNormal">11.156.165.69 bitdefenderchina.com</div><div class="MsoNormal">100.195.235.183 bitdefenderguatemala.com</div><div class="MsoNormal">83.59.62.54 bitdefendermalaysia.com</div><div class="MsoNormal">78.5.38.74 bitdefendertaiwan.com</div><div class="MsoNormal">155.31.27.106 bitdefenderuruguay.com</div><div class="MsoNormal">57.70.29.152 bitdefenderusa.com</div><div class="MsoNormal">39.191.180.91 buy.bitdefender-es.com</div><div class="MsoNormal">35.136.88.43 buy.bitdefender.com</div><div class="MsoNormal">111.162.77.76 buy.bitdefender.de</div><div class="MsoNormal">13.13.147.189 de.bitdefender.com</div><div class="MsoNormal">251.134.231.128 fr.bitdefender.com</div><div class="MsoNormal">247.79.139.80 futurenow.bitdefender.com</div><div class="MsoNormal">67.37.128.113 it.bitdefender.com</div><div class="MsoNormal">225.145.198.227 jobs.bitdefender.com</div><div class="MsoNormal">208.9.93.98 kb.bitdefender.com</div><div class="MsoNormal">203.210.1.117 kb.bitdefender.de</div><div class="MsoNormal">24.169.246.150 kb.bitdefender.us</div><div class="MsoNormal">181.20.60.8 latin.bitdefender.com</div><div class="MsoNormal">164.140.143.135 linux.bitdefender.com</div><div class="MsoNormal">159.86.51.87 malwarecity.com</div><div class="MsoNormal">236.112.40.119 malwarecity.netmalwarecity.org</div><div class="MsoNormal">138.151.110.233 malwarepedia.com</div><div class="MsoNormal">120.16.193.172 neunet.orgnews.bitdefender.com</div><div class="MsoNormal">116.217.169.124 nl.bitdefender.com</div><div class="MsoNormal">192.243.158.157 renewals.bitdefender.com</div><div class="MsoNormal">94.26.160.14 sales.bitdefender.com</div><div class="MsoNormal">76.147.56.141 square.bitdefender.com</div><div class="MsoNormal">72.92.220.161 store.bitdefender.com</div><div class="MsoNormal">148.118.209.194 store.de.bitdefender.com</div><div class="MsoNormal">50.158.23.52 us.bitdefender.com</div><div class="MsoNormal">33.90.106.179 virusscanonline.net</div><div class="MsoNormal">28.35.82.130 wedoantivirus.com</div><div class="MsoNormal">105.250.71.163 www.antivirus-tools.com</div><div class="MsoNormal">6.101.73.21 www.avx.ro</div><div class="MsoNormal">177.221.224.216 www.bit-defender.de</div><div class="MsoNormal">240.167.132.168 www.bitdefende.de</div><div class="MsoNormal">61.125.121.200 www.bitdefender-es.com</div><div class="MsoNormal">219.232.191.58 www.bitdefender.be</div><div class="MsoNormal">133.97.18.185 www.bitdefender.cl</div><div class="MsoNormal">197.42.182.205 www.bitdefender.co.uk</div><div class="MsoNormal">17.68.171.238 www.bitdefender.com</div><div class="MsoNormal">175.107.241.95 www.bitdefender.com.au</div><div class="MsoNormal">89.228.136.222 www.bitdefender.com.sg</div><div class="MsoNormal">153.173.45.174 www.bitdefender.com.tw</div><div class="MsoNormal">229.199.34.19 www.bitdefender.com.vn</div><div class="MsoNormal">131.239.104.65 www.bitdefender.de</div><div class="MsoNormal">46.103.187.4 www.bitdefender.es</div><div class="MsoNormal">109.48.95.211 www.bitdefender.fr</div><div class="MsoNormal">186.75.84.244 www.bitdefender.hk</div><div class="MsoNormal">87.114.154.102 www.bitdefender.us</div><div class="MsoNormal">2.46.49.41 www.bitdefenderme.com</div><div class="MsoNormal">65.180.213.249 www.malwarecity.com</div><div class="MsoNormal">178.242.238.62 www.malwarecity.fr</div><div class="MsoNormal">80.93.52.175 quickheal.com</div><div class="MsoNormal">250.214.135.46 www.quickheal.com</div><div class="MsoNormal">58.159.43.66 www.clamav.net</div><div class="MsoNormal">134.117.32.99 cgi.clamav.net</div><div class="MsoNormal">224.225.103.145 lurker.clamav.net</div><div class="MsoNormal">206.89.186.83 wwws.clamav.net</div><div class="MsoNormal">202.34.162.35 lists.clamav.net</div><div class="MsoNormal">91.60.151.68 bugs.clamav.net</div><div class="MsoNormal">180.100.153.182 system-cleaner.comodo.com</div><div class="MsoNormal">163.220.48.121 backup.comodo.com</div><div class="MsoNormal">158.165.212.72 www.comodoantispam.com</div><div class="MsoNormal">47.192.201.105 easy-vpn.comodo.com</div><div class="MsoNormal">136.231.15.219 www.trustlogo.com</div><div class="MsoNormal">119.95.98.90 ztl.comodo.com</div><div class="MsoNormal">114.41.74.110 www.livepcsupport.com</div><div class="MsoNormal">191.67.63.143 www.whichssl.com</div><div class="MsoNormal">93.106.65.188 www.trustix.com</div><div class="MsoNormal">75.227.216.127 disk-encryption.comodo.com</div><div class="MsoNormal">71.172.124.79 speedtest.comodo.com</div><div class="MsoNormal">147.198.113.112 www.contentverification.com</div><div class="MsoNormal">49.50.184.226 idauthority.com</div><div class="MsoNormal">31.170.11.164 www.comodo.tv</div><div class="MsoNormal">27.115.175.116 online-backup.comodo.com</div><div class="MsoNormal">104.73.164.149 www.testmypcsecurity.com</div><div class="MsoNormal">5.181.234.7 www.ccssforum.org</div><div class="MsoNormal">244.45.129.134 i-vault.comodo.com</div><div class="MsoNormal">239.246.37.153 internetsecurity.comodo.com</div><div class="MsoNormal">60.205.26.186 www.comodopartners.com</div><div class="MsoNormal">217.56.96.44 timestamp.comodoca.com</div><div class="MsoNormal">200.176.179.171 secure-email.comodo.com</div><div class="MsoNormal">195.122.87.123 timestamp.wosign.com</div><div class="MsoNormal">16.148.76.156 rover800.gaima.co.uk</div><div class="MsoNormal">174.187.146.13 www.nsclean.com</div><div class="MsoNormal">156.52.229.208 www.contentverification.com</div><div class="MsoNormal">152.253.205.160 new-estore.drweb.com</div><div class="MsoNormal">228.23.194.193 support.drweb.com</div><div class="MsoNormal">130.63.197.51 pda.drweb.com</div><div class="MsoNormal">112.183.92.177 updates.drweb.com</div><div class="MsoNormal">108.128.0.197 drweb.com</div><div class="MsoNormal">185.154.245.230 vms.drweb.com</div><div class="MsoNormal">86.194.59.88 solutions.drweb.com</div><div class="MsoNormal">69.126.142.215 news.drweb.com</div><div class="MsoNormal">64.71.118.166 my.drweb.com</div><div class="MsoNormal">141.30.107.199 buy.drweb.com</div><div class="MsoNormal">42.137.109.57 products.drweb.com</div><div class="MsoNormal">25.69.72.64 new-support.drweb.com</div><div class="MsoNormal">88.15.236.16 promotions.drweb.com</div><div class="MsoNormal">165.229.225.48 network.drweb.com</div><div class="MsoNormal">67.80.39.162 customers.drweb.com</div><div class="MsoNormal">237.201.122.33 store.drweb.com</div><div class="MsoNormal">45.146.30.53 company.drweb.com</div><div class="MsoNormal">121.172.19.86 training.drweb.com</div><div class="MsoNormal">23.212.90.200 license.drweb.com</div><div class="MsoNormal">193.76.241.70 cureit.ru</div><div class="MsoNormal">1.21.149.22 free.drweb.com</div><div class="MsoNormal">78.47.138.123 info.drweb.com</div><div class="MsoNormal">235.87.208.169 new-partners.drweb.com</div><div class="MsoNormal">150.207.35.108 drweb.net</div><div class="MsoNormal">213.152.199.59 new-company.drweb.com</div><div class="MsoNormal">34.179.188.92 new-beta.drweb.com</div><div class="MsoNormal">191.218.2.206 new-forum.drweb.com</div><div class="MsoNormal">106.150.153.145 secure.av-desk.com</div><div class="MsoNormal">169.28.61.97 www.av-desk.com</div><div class="MsoNormal">246.54.50.129 new-solutions.drweb.com</div><div class="MsoNormal">148.161.120.243 new-www.drweb.com</div><div class="MsoNormal">62.26.203.114 www.freedrweb.ru</div><div class="MsoNormal">126.227.111.134 daniloff.net</div><div class="MsoNormal">202.185.100.167 drweb-inside.com</div><div class="MsoNormal">36.37.171.213 drwebinside.com</div><div class="MsoNormal">18.157.254.151 aladdin.com</div><div class="MsoNormal">14.102.230.103 alladdin.ru</div><div class="MsoNormal">159.128.219.136 chickensroamfree.com</div><div class="MsoNormal">248.168.221.250 ealaddin.net</div><div class="MsoNormal">231.32.116.189 ealaddin.orgeshop.aladdin.com</div><div class="MsoNormal">226.233.24.140 secureme.com</div><div class="MsoNormal">115.4.13.173 www.aks.com</div><div class="MsoNormal">204.43.83.31 www.aladdin.com</div><div class="MsoNormal">187.163.166.158 www.ealaddin.com</div><div class="MsoNormal">182.109.142.178 www.ealaddin.com</div><div class="MsoNormal">3.135.131.210 auwww.ealaddin.nl</div><div class="MsoNormal">161.174.133.0 www.esafe.com</div><div class="MsoNormal">143.39.28.195 www.hasp.se</div><div class="MsoNormal">139.240.192.147 www.safenet-inc.com</div><div class="MsoNormal">215.10.181.180 www3.safenet-inc.com</div><div class="MsoNormal">117.118.252.38 www.ca.com</div><div class="MsoNormal">99.238.79.232 cacomvip.ca.com</div><div class="MsoNormal">95.183.243.184 www.netegrity.com</div><div class="MsoNormal">172.141.232.217 search.ca.com</div><div class="MsoNormal">73.249.46.75 cai.com</div><div class="MsoNormal">56.113.197.202 www.f-prot.com</div><div class="MsoNormal">51.58.105.221 frisk-software.com</div><div class="MsoNormal">128.17.94.254 www.frisk.is</div><div class="MsoNormal">29.124.164.112 www.frisk-software.com</div><div class="MsoNormal">12.244.247.239 f-secure.com</div><div class="MsoNormal">7.190.155.191 f-secure.frf-secure.hk</div><div class="MsoNormal">84.216.212.35 f-secure.nlfsecure.com</div><div class="MsoNormal">54.67.26.149 fsecure.nlwebyard.com</div><div class="MsoNormal">36.188.109.88 www.f-secure.com</div><div class="MsoNormal">32.133.85.40 www.fsecure.com</div><div class="MsoNormal">108.159.74.73 www.virus.fi</div><div class="MsoNormal">10.199.77.187 fortihero.com</div><div class="MsoNormal">248.63.228.57 fortilog.com</div><div class="MsoNormal">244.8.136.77 fortinet.co.at</div><div class="MsoNormal">65.34.125.110 fortinet.com</div><div class="MsoNormal">222.74.195.224 fortiprotect.com</div><div class="MsoNormal">205.6.22.95 fortiwifi.com</div><div class="MsoNormal">200.207.254.46 www.apsecure.com</div><div class="MsoNormal">21.166.243.79 www.fortifed.com</div><div class="MsoNormal">178.17.245.193 www.fortiid.com</div><div class="MsoNormal">93.137.140.132 www.fortimail.com</div><div class="MsoNormal">156.83.48.84 www.fortinet-apac.com</div><div class="MsoNormal">233.41.37.116 www.fortinet.ch</div><div class="MsoNormal">135.148.107.230 www.fortinet.co.il</div><div class="MsoNormal">49.13.190.101 www.fortinet.com</div><div class="MsoNormal">113.214.98.121 www.fortinet.com</div><div class="MsoNormal">189.240.87.154 arwww.fortinet.cz</div><div class="MsoNormal">91.24.157.12 www.fortinet.net</div><div class="MsoNormal">5.144.53.138 www.fortinet.nl</div><div class="MsoNormal">69.89.217.90 www.fortinet.sg</div><div class="MsoNormal">146.115.206.191 www.fortinetuk.com</div><div class="MsoNormal">47.155.20.237 www.secure-elements.com</div><div class="MsoNormal">218.19.103.176 gdata.es</div><div class="MsoNormal">25.220.11.127 www.gdata.es</div><div class="MsoNormal">102.247.0.160 ikarus.at</div><div class="MsoNormal">3.30.70.18 www.ikarus.at</div><div class="MsoNormal">174.218.221.213 global.jiangmin.com</div><div class="MsoNormal">237.96.197.233 jiangmin.com.cn</div><div class="MsoNormal">126.190.186.9 jiangmin.com</div><div class="MsoNormal">28.41.0.123 www.jiangmin.com.cn</div><div class="MsoNormal">198.162.83.250 www.kaspersky.com</div><div class="MsoNormal">6.107.247.14 forum.kaspersky.com</div><div class="MsoNormal">82.65.236.47 support.kaspersky.co</div><div class="MsoNormal">172.172.50.93 usa.kaspersky.com</div><div class="MsoNormal">154.37.134.31 brazil.kaspersky.com</div><div class="MsoNormal">150.238.110.239 latam.kaspersky.com</div><div class="MsoNormal">39.8.99.16 kaspersky.com</div><div class="MsoNormal">128.48.101.130 me.kaspersky.com</div><div class="MsoNormal">111.168.252.69 images.kaspersky.com</div><div class="MsoNormal">106.113.160.20 www.mcafee.com</div><div class="MsoNormal">251.140.149.53 support.mcafee.com</div><div class="MsoNormal">84.179.219.167 msr.mcafee.com</div><div class="MsoNormal">67.43.46.38 home.mcafee.com</div><div class="MsoNormal">62.245.22.58 networkassociates.com</div><div class="MsoNormal">139.15.11.90 us.mcafee.com</div><div class="MsoNormal">41.54.13.136 tr.mcafee.com</div><div class="MsoNormal">23.175.164.75 au.mcafee.com</div><div class="MsoNormal">19.120.72.27 mx.mcafee.com</div><div class="MsoNormal">95.146.61.60 networkassociates.nai.com</div><div class="MsoNormal">253.253.131.174 go.mcafee.com</div><div class="MsoNormal">235.118.215.112 fr.mcafee.com</div><div class="MsoNormal">231.63.123.64 uk.mcafee.com</div><div class="MsoNormal">52.21.112.97 de.mcafee.com</div><div class="MsoNormal">209.229.26.55 obscgi.mcafee.com</div><div class="MsoNormal">36.94.177.182 nai.com</div><div class="MsoNormal">32.39.86.202 www.entercept.com</div><div class="MsoNormal">108.253.75.235 jp.mcafee.com</div><div class="MsoNormal">10.105.145.93 mcafeeb2b.com</div><div class="MsoNormal">249.225.228.219 cn.mcafee.com</div><div class="MsoNormal">244.170.136.171 service.mcafee.com</div><div class="MsoNormal">65.197.125.204 br.mcafee.com</div><div class="MsoNormal">222.236.195.62 www.mcafee.at</div><div class="MsoNormal">205.100.22.1 mcafeeretail.com</div><div class="MsoNormal">200.46.254.209 it.mcafee.com</div><div class="MsoNormal">21.72.243.241 tw.mcafee.com</div><div class="MsoNormal">178.111.245.99 privacy.microsoft.com</div><div class="MsoNormal">161.231.140.226 tempuri.org</div><div class="MsoNormal">157.177.48.246 schemas.xmlsoap.org</div><div class="MsoNormal">233.203.37.23 www.microsoft.com</div><div class="MsoNormal">135.242.107.136 specs.xmlsoap.org</div><div class="MsoNormal">117.175.190.7 www.eugrantsadvisor.ie</div><div class="MsoNormal">113.120.167.215 schemas.microsoft.com</div><div class="MsoNormal">189.78.156.248 encarta.msn.com</div><div class="MsoNormal">91.186.158.106 www.sysinternals.com</div><div class="MsoNormal">6.50.53.44 grv.microsoft.com</div><div class="MsoNormal">69.251.217.252 www.xmlsoap.org</div><div class="MsoNormal">146.210.206.29 www.eugrantsadvisor.se</div><div class="MsoNormal">115.129.88.211 www.eugrantsadvisor.com</div><div class="MsoNormal">30.249.171.82 research.microsoft.com</div><div class="MsoNormal">93.195.79.102 www.engyro.com</div><div class="MsoNormal">170.221.68.134 www.exchangeyourcareer.com</div><div class="MsoNormal">71.4.138.248 www.eugrantsadvisor.de</div><div class="MsoNormal">242.124.33.119 exchangeyourcareer.net</div><div class="MsoNormal">50.70.197.71 eugrantsadvisor.de</div><div class="MsoNormal">126.96.186.172 eugrantsadvisor.cz</div><div class="MsoNormal">28.135.0.217 www.eset.es</div><div class="MsoNormal">198.0.83.156 demos.eset.es</div><div class="MsoNormal">6.201.247.108 descargas.eset.es</div><div class="MsoNormal">82.227.237.141 blogs.protegerse.com</div><div class="MsoNormal">240.11.51.255 eos.eset.es</div><div class="MsoNormal">155.199.202.193 pedidos.protegerse.com</div><div class="MsoNormal">218.76.110.145 reg-int.nod32-es.com</div><div class="MsoNormal">39.103.99.178 reg.eset.es</div><div class="MsoNormal">196.210.169.36 vicentevirtual.com</div><div class="MsoNormal">111.74.252.163 cou85.com</div><div class="MsoNormal">174.20.160.183 www.norman.com</div><div class="MsoNormal">251.234.149.215 fsc.norman.com</div><div class="MsoNormal">84.85.219.5 nprobeta.norman.com</div><div class="MsoNormal">67.205.114.12 register.norman.com</div><div class="MsoNormal">131.219.90.220 webadmin.norman.no</div><div class="MsoNormal">19.245.79.253 sandbox.norman.com</div><div class="MsoNormal">109.28.81.110 www.nprotect.com</div><div class="MsoNormal">91.149.232.49 global.nprotect.com</div><div class="MsoNormal">87.94.140.1 www.nprotect.co.kr</div><div class="MsoNormal">231.120.130.34 www.npin.co.kr</div><div class="MsoNormal">65.160.200.148 siren24.nprotect.com</div><div class="MsoNormal">48.24.27.18 15660808.co.kr</div><div class="MsoNormal">43.225.3.38 biz.nprotect.com</div><div class="MsoNormal">120.252.248.71 nprotect.net</div><div class="MsoNormal">21.35.250.117 www.nprotect.com.br</div><div class="MsoNormal">4.155.145.56 liveprotect.net</div><div class="MsoNormal">255.101.53.8 nprotect.seoul.go.kr</div><div class="MsoNormal">76.127.42.40 chollian.nprotect.co.kr</div><div class="MsoNormal">233.234.112.154 www.pandasecurity.com</div><div class="MsoNormal">216.98.195.93 research.pandasecurity.com</div><div class="MsoNormal">212.44.103.45 support.pandasecurity.com</div><div class="MsoNormal">32.2.92.78 pandalabs.pandasecurity.com</div><div class="MsoNormal">190.109.162.191 pandasecurity.com</div><div class="MsoNormal">172.230.57.62 mop.pandasecurity.com</div><div class="MsoNormal">168.175.221.82 timeforyourbusi.pandasecurity.com</div><div class="MsoNormal">56.201.23.183 cybercrime.pandasecurity.com</div><div class="MsoNormal">214.53.93.41 free.pandasecurity.com</div><div class="MsoNormal">196.173.176.167 cloudprotection.pandasecurity.com</div><div class="MsoNormal">192.118.84.119 shop.pandasecurity.com</div><div class="MsoNormal">13.145.73.152 soporte.pandasecurity.com</div><div class="MsoNormal">170.184.143.10 together.pctools.com</div><div class="MsoNormal">153.48.226.205 www.prevx.com</div><div class="MsoNormal">148.249.202.157 info.prevx.com</div><div class="MsoNormal">225.20.191.189 free.prevx.com</div><div class="MsoNormal">126.59.193.47 spywarefiles.prevx.com</div><div class="MsoNormal">109.179.88.174 spywaredlls.prevx.com</div><div class="MsoNormal">105.125.252.194 shield.prevx.com</div><div class="MsoNormal">181.151.241.227 www.prevx1.com</div><div class="MsoNormal">83.190.55.84 howsafeismypc.com</div><div class="MsoNormal">65.123.138.211 www.retento.com</div><div class="MsoNormal">61.68.114.163 www.freerav.com</div><div class="MsoNormal">137.26.104.196 www.rising-global.com</div><div class="MsoNormal">39.134.106.54 www.risingav.com.au</div><div class="MsoNormal">210.254.1.248 support.rising-global.com</div><div class="MsoNormal">17.199.165.200 superboy2010.com.au</div><div class="MsoNormal">94.158.154.233 www.sophos.com</div><div class="MsoNormal">251.9.224.91 feeds.sophos.com</div><div class="MsoNormal">166.129.51.218 esp.sophos.com</div><div class="MsoNormal">229.74.215.238 cn.sophos.com</div><div class="MsoNormal">50.101.204.14 tw.sophos.com</div><div class="MsoNormal">207.140.18.128 kr.sophos.com</div><div class="MsoNormal">122.4.169.255 sophos.com</div><div class="MsoNormal">186.206.77.207 podcasts.sophos.com</div><div class="MsoNormal">6.232.66.52 www.sunbeltsoftware.com</div><div class="MsoNormal">164.15.136.97 go.sunbeltsoftware.com</div><div class="MsoNormal">78.136.219.36 oem.sunbeltsoftware.com</div><div class="MsoNormal">178.117.164.24 antispam.sunbeltsoftware.com</div><div class="MsoNormal">254.143.153.57 antispyware.sunbeltsoftware.com</div><div class="MsoNormal">156.183.223.171 antivirus.sunbeltsoftware.com</div><div class="MsoNormal">71.115.118.110 sunbeltsoftware.com</div><div class="MsoNormal">134.248.26.61 shop.sunbeltsoftware.com</div><div class="MsoNormal">211.19.15.94 live.sunbeltsoftware.com</div><div class="MsoNormal">112.126.85.208 firewall.sunbeltsoftware.com</div><div class="MsoNormal">27.246.168.79 www.symantec.com</div><div class="MsoNormal">90.192.76.99 security.symantec.com</div><div class="MsoNormal">167.150.65.131 securityrespons.symantec.com</div><div class="MsoNormal">1.1.135.177 service1.symantec.com</div><div class="MsoNormal">239.122.218.116 enterprisesecur.symantec.com</div><div class="MsoNormal">235.67.194.68 eval.symantec.com</div><div class="MsoNormal">123.93.183.101 symantec.com</div><div class="MsoNormal">213.132.185.214 definitions.symantec.com</div><div class="MsoNormal">195.253.80.153 investor.symantec.com</div><div class="MsoNormal">191.198.245.105 et.symantec.com</div><div class="MsoNormal">79.224.234.138 sfdoccentral.symantec.com</div><div class="MsoNormal">169.8.48.252 servicenews.symantec.com</div><div class="MsoNormal">152.128.131.123 securityrespons.symantec.com</div><div class="MsoNormal">147.73.107.142 sea.symantec.com</div><div class="MsoNormal">224.100.96.175 go.symantec.com</div><div class="MsoNormal">125.139.98.221 dell.symantec.com</div><div class="MsoNormal">108.3.249.160 sun.symantec.com</div><div class="MsoNormal">103.205.157.112 marian.symantec.com</div><div class="MsoNormal">180.231.146.144 tms.symantec.com</div><div class="MsoNormal">82.82.216.2 securitycheck.symantec.com</div><div class="MsoNormal">64.203.43.197 smallbiz.symantec.com</div><div class="MsoNormal">60.148.207.149 www.symantec.com</div><div class="MsoNormal">136.106.196.182 visualtracking.symantec.com</div><div class="MsoNormal">38.213.10.39 search.symantec.com</div><div class="MsoNormal">20.78.161.166 liveupdate.symantec.com</div><div class="MsoNormal">16.23.70.186 sitedirector.symantec.com</div><div class="MsoNormal">92.237.59.219 edm.symantec.com</div><div class="MsoNormal">250.89.129.145 hostedmailsecur.symantec.com</div><div class="MsoNormal">45.21.24.16 www4.symantec.com</div><div class="MsoNormal">40.222.188.223 education.symantec.com</div><div class="MsoNormal">117.249.177.0 vos.symantec.com</div><div class="MsoNormal">18.32.247.114 www.hacksoft.com.pe</div><div class="MsoNormal">1.152.74.53 hacksoft.pe</div><div class="MsoNormal">252.98.50.5 www.hacksoft.pe</div><div class="MsoNormal">73.124.39.37 housecall.trendmicro.com</div><div class="MsoNormal">231.163.41.151 www.trendmicro.com</div><div class="MsoNormal">213.27.192.22 housecall65.trendmicro.com</div><div class="MsoNormal">209.229.100.42 us.trendmicro.com</div><div class="MsoNormal">29.255.89.75 blog.trendmicro.com</div><div class="MsoNormal">187.38.159.188 emea.trendmicro.com</div><div class="MsoNormal">169.227.242.59 housecall60.trendmicro.com</div><div class="MsoNormal">165.172.219.11 jp.trendmicro.com</div><div class="MsoNormal">241.130.208.44 de.trendmicro.com</div><div class="MsoNormal">143.238.210.158 it.trendmicro.com</div><div class="MsoNormal">58.102.105.97 itw.trendmicro.com</div><div class="MsoNormal">121.47.13.48 esupport.trendmicro.com</div><div class="MsoNormal">198.6.2.81 es.trendmicro.com</div><div class="MsoNormal">99.113.72.195 br.trendmicro.com</div><div class="MsoNormal">14.233.155.66 tw.trendmicro.com</div><div class="MsoNormal">77.179.63.86 la.trendmicro.com</div><div class="MsoNormal">154.205.52.118 uk.trendmicro.com</div><div class="MsoNormal">56.244.122.232 ru.trendmicro.com</div><div class="MsoNormal">226.108.17.103 smbstore.trendmicro.com</div><div class="MsoNormal">34.54.181.55 apac.trendmicro.com</div><div class="MsoNormal">110.80.170.156 store.trendmicro.com</div><div class="MsoNormal">12.119.240.201 training.trendmicro.com</div><div class="MsoNormal">182.240.67.140 trial.trendmicro.com</div><div class="MsoNormal">246.185.232.92 ushousecall02.trendmicro.com</div><div class="MsoNormal">66.211.221.125 subwiz.trendmicro.com</div><div class="MsoNormal">224.251.35.239 go.trendmicro.com</div><div class="MsoNormal">139.183.186.178 feeds.trendmicro.com</div><div class="MsoNormal">202.60.94.129 channelpartner.trendmicro.com</div><div class="MsoNormal">23.87.83.162 wtc.trendmicro.com</div><div class="MsoNormal">180.194.153.20 shop.trendmicro.com</div><div class="MsoNormal">95.58.236.147 fr.trendmicro.com</div><div class="MsoNormal">158.4.144.167 threatinfo.trendmicro.com</div><div class="MsoNormal">235.218.133.199 newsletters.trendmicro.com</div><div class="MsoNormal">69.69.203.245 www.anti-virus.by</div><div class="MsoNormal">51.189.30.184 bg.virusblokada.com</div><div class="MsoNormal">47.135.6.136 www.vba.com.by</div><div class="MsoNormal">191.161.251.169 beta.anti-virus.by</div><div class="MsoNormal">25.200.253.26 www.bg.virusblokada.com</div><div class="MsoNormal">7.65.148.221 www.hauri.net</div><div class="MsoNormal">3.10.57.173 www.hauri.co.kr</div><div class="MsoNormal">147.36.46.206 company.hauri.net</div><div class="MsoNormal">237.76.116.64 www.globalhauri.com</div><div class="MsoNormal">220.196.199.191 shop.hauri.co.kr</div><div class="MsoNormal">215.141.175.210 hauri.co.kr</div><div class="MsoNormal">36.168.164.243 pg.hauri.net</div><div class="MsoNormal">193.207.166.33 esecurity.livecall.co.kr</div><div class="MsoNormal">176.71.61.228 mall.hauri.co.kr</div><div class="MsoNormal">171.17.225.180 company.hauri.co.kr</div><div class="MsoNormal">248.43.214.212 haurijapan.com</div><div class="MsoNormal">150.150.28.70 virobot.co.kr</div><div class="MsoNormal">132.14.111.9 www.virusbuster.hu</div><div class="MsoNormal">128.216.19.217 virusbuster.hu</div><div class="MsoNormal">204.174.8.250 scanner.novirusthanks.org</div><div class="MsoNormal">106.25.78.107 scanner2.novirusthanks.or</div><div class="MsoNormal">88.146.229.234 novirusthanks.org</div><div class="MsoNormal">84.91.138.254 www.novirusthanks.org</div><div class="MsoNormal">160.49.127.31 virustotal.com</div><div class="MsoNormal">62.157.197.145 www.virustotal.com</div><div class="MsoNormal">45.21.24.16 virscan.org</div><div class="MsoNormal">40.222.188.223 www.virscan.org</div><div class="MsoNormal">117.249.177.0 virusscan.jotti.org</div><div class="MsoNormal">18.32.247.114 jotti.org</div><div class="MsoNormal">1.152.74.53 www.jotti.org</div><div class="MsoNormal">252.98.50.5 viruschief.com</div><div class="MsoNormal">73.124.39.37 www.viruschief.com</div><div class="MsoNormal">231.163.41.151 scanner.virus.org</div><div class="MsoNormal">213.27.192.22 virus.org</div><div class="MsoNormal">209.229.100.42 www.virus.org</div><div class="MsoNormal">29.255.89.75 scan4you.net</div><div class="MsoNormal">187.38.159.188 www.scan4you.net</div><div class="MsoNormal">169.227.242.59 avhide.com</div><div class="MsoNormal">165.172.31.79 www.avhide.com</div><div class="MsoNormal">53.198.20.112 anubis.iseclab.org</div><div class="MsoNormal">211.50.22.226 iseclab.org</div><div class="MsoNormal">126.170.173.165 www.iseclab.org</div><div class="MsoNormal">189.115.81.116 threatexpert.com</div><div class="MsoNormal">10.74.70.149 www.threatexpert.com</div><div class="MsoNormal">167.181.140.7 forospyware.com</div><div class="MsoNormal">82.45.223.134 www.forospyware.com</div><div class="MsoNormal">145.247.131.154 in.answers.yahoo.com</div><div class="MsoNormal">222.17.120.186 es.answers.yahoo.com</div><div class="MsoNormal">123.56.190.44 kioskea.net</div><div class="MsoNormal">38.176.85.171 www.kioskea.net</div><div class="MsoNormal">102.122.249.123 es.kioskea.net</div><div class="MsoNormal">178.148.238.224 mygeekside.com</div><div class="MsoNormal">80.187.52.13 www.mygeekside.com</div><div class="MsoNormal">250.52.135.208 www.tecniservicioslys.com</div><div class="MsoNormal">58.253.44.160 tecniservicioslys.com</div><div class="MsoNormal">134.23.33.193 virusfreezone.info</div><div class="MsoNormal">36.63.103.51 www.virusfreezone.info</div><div class="MsoNormal">207.251.254.246 intranet.cidiroax.ipn.mx</div><div class="MsoNormal">14.128.162.197 spycheck.es</div><div class="MsoNormal">91.155.151.230 www.spycheck.es</div><div class="MsoNormal">248.6.221.88 antivirus.hispavista.com</div><div class="MsoNormal">163.126.48.215 computing.net</div><div class="MsoNormal">226.72.212.235 www.computing.net</div><div class="MsoNormal">47.30.201.11 spycheck.co.uk</div><div class="MsoNormal">137.137.15.57 www.spycheck.co.uk</div><div class="MsoNormal">119.1.98.252 midescargas.com</div><div class="MsoNormal">115.203.74.204 www.midescargas.com</div><div class="MsoNormal">3.229.63.237 static.yoreparo.com</div><div class="MsoNormal">93.12.65.94 softfaq.com</div><div class="MsoNormal">75.133.216.33 www.softfaq.com</div><div class="MsoNormal">71.78.125.241 configurarequipos.com</div><div class="MsoNormal">215.104.114.18 www.configurarequipos.com</div><div class="MsoNormal">49.144.184.132 seasonsecurity.com</div><div class="MsoNormal">32.8.11.3 www.seasonsecurity.com</div><div class="MsoNormal">27.209.243.22 removetrojanvirus.org</div><div class="MsoNormal">104.236.232.55 www.removetrojanvirus.org</div><div class="MsoNormal">5.19.234.101 ibusca.me</div><div class="MsoNormal">244.139.129.40 www.ibusca.me</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">Media penyebaran</b></div><div class="MsoNormal">Untuk menyebarkan dirinya, ia akan menggunakan media USB Flash dengan memanfaatkan fitur autorun Windows dengan membuat 2 buah file yakni:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><b style="mso-bidi-font-weight: normal;">autorun.inf </b></div><div class="MsoNormal">85luFefZ08lzEPQXsS014zzp9LV3F54yhE0zz5k0g\S-1-3-01-4639134501-7494416267-104346834-7052\Ua3kmh73O3jyut4Iok.exe </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">File [autorun.inf] ini berisi script untuk menjalankan file [Ua3kmh73O3jyut4Iok.exe] yang akan di aktifkan secara otomatis pada saat user mengakses USB Flash.</div><div class="MsoNormal">Selain itu untuk “menjebak” user ia akan membuat file duplikat berupa shortcut yang akan mempunyai nama file yang sama dengan nama file yang disembunyikan, file shortcut ini akan mempunyai icon acak </div><div class="MsoNormal"><br />
</div>Cara pembersihan Trojan.FakeAV.3510 <div class="MsoNormal">Untuk pembersihan, Anda dapat menggunakan Tools Dr.Web CureIt! dari antivirus Dr.Web. Silahkan download tools tersebut di alamat berikut: </div><div class="MsoNormal"><br />
</div><div class="MsoNormal"><a href="http://www.freedrweb.com/cureit/?lng=en">http://www.freedrweb.com/cureit/?lng=en</a></div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Fix Registry Windows yang sudah di ubah oleh virus, untuk mempercepat proses perbaikan salin script di bawah ini pada program Notepad dan simpan dengan nama REPAIR.INF, jalankan file tersebut dengan cara </div><div class="MsoNormal">Klik kanan REPAIR.INF </div><div class="MsoNormal">Klik INSTALL </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">[Version]</div><div class="MsoNormal">Signature="$Chicago$"</div><div class="MsoNormal">Provider=Vaksincom</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">[DefaultInstall]</div><div class="MsoNormal">AddReg=UnhookRegKey</div><div class="MsoNormal">DelReg=del</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">[UnhookRegKey]</div><div class="MsoNormal">HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal">HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal">HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal">HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal">HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""</div><div class="MsoNormal">HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"</div><div class="MsoNormal">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"</div><div class="MsoNormal">HKCU, Software\Microsoft\Internet Explorer\main, Start Page,0, "about:blank"</div><div class="MsoNormal">HKCU, Software\Microsoft\Internet Explorer\main, Search Page,0,"about:blank"</div><div class="MsoNormal">HKCU, Software\Microsoft\Internet Explorer\main, Local Page,0, "about:blank" </div><div class="MsoNormal">HKCU, Software\Microsoft\Internet Explorer\main, Default_Search_URL,0, "about:blank"</div><div class="MsoNormal">HKCU, Software\Microsoft\Internet Explorer\main, Default_Page_URL,0, "about:blank"</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">[del]</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Run, 74e4144414</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\Associations</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer, NoFile</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer, NoFolderOptions</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer, NoRun</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\System, DisableRegistryTools</div><div class="MsoNormal">HKCU, Software\Microsoft\WIndows\CurrentVersion\Policies\System, DisableTaskMgr</div><div class="MsoNormal">HKCU, Software\Policies\Microsoft\Windows\System, DisableCMD</div><div class="MsoNormal">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options</div><div class="MsoNormal">HKLM, SOFTWARE\Policies\Microsoft\WindowsFirewall</div><div class="MsoNormal">HKCU, Software\Policies\Microsoft\Internet Explorer\Control Panel, HomePage</div><div class="MsoNormal">HKLM, Software\Microsoft\WIndows\CurrentVersion\Run, 74e4144414</div><div class="MsoNormal">HKLM, Software\Microsoft\WIndows\CurrentVersion\Policies\Explorer, NoFolderOptions</div><div class="MsoNormal">HKLM, Software\Microsoft\WIndows\CurrentVersion\Policies\System, EnableLUA</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Hapus secara manual lokasi registy berikut: </div><div class="MsoNormal">Klik menu [Start] </div><div class="MsoNormal">Klik [RUN] </div><div class="MsoNormal">Ketik REGEDIT.EXE, kemudian klik tombol [OK] </div><div class="MsoNormal">Kamudian hapus string registry berikut </div><div class="MsoNormal">HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\layers </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = RUNASADMIN </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE \Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\layers </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = RUNASADMIN </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List </div><div class="MsoNormal">C:\Documents and Settings\%user%\132616c4\winlogon.exe = C:\Documents and Settings\%user%\132616c4\winlogon.exe:*:Enabled:@xpsp2res.dll,-53342401 </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Catatan: %user% ini adalah nama user/acount yang digunakan saat logon Windows </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Fix Image File Execution File. Silahkan download file FixImageFile di alamat <a href="http://rapidshare.com/files/446070146/FixImageFile.zip">http://rapidshare.com/files/446070146/FixImageFile.zip</a> kemudian import file FixImageFile_XP.reg (Windows XP) atau FixImageFile_Vista_Win7.reg (Windows Vista/7) dengan cara: (lihat gambar 15) </div><div class="MsoNormal">Klik [Start] </div><div class="MsoNormal">Klik [Run] </div><div class="MsoNormal">Ketik REGEDIT.EXE kemudian klik tombol [OK] </div><div class="MsoNormal">Setelah muncul layar “Registry Editor”, klik menu [File] </div><div class="MsoNormal">Klik [Import] </div><div class="MsoNormal">Kemudian arahkan ke file FixImageFile.reg, kemudian klik tombol [Open]</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Tampilkan file yang telah disembunyikan oleh virus di USB Flash, caranya: </div><div class="MsoNormal">Klik [Start] </div><div class="MsoNormal">Klik [Run] </div><div class="MsoNormal">Ketik CMD kemudian klik tombol [OK] </div><div class="MsoNormal">Setelah muncul aplikasi Command Prompt (CMD), pindahkan posisi kursor ke USB Flash dengan mengetik perintah %USB Flash%: kemudian tekan tombol Enter. </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Catatan:</div><div class="MsoNormal">%USB Flash% adalah drive yang berbeda-beda, contoh jika USB Flash Anda adalah E maka ketik perintah E:</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Kemudian ketik perintah ATTRIB -s -h -r /s /d kemudian klik tombol Enter </div><div class="MsoNormal">Tunggu beberapa saat sampai proses selesai dilakukan </div><div class="MsoNormal"><br />
</div><div class="MsoNormal">Untuk pembersihan optimal, scan dengan menggunaan antivirus yang up-to-date</div><div class="MsoNormal"><br />
</div><div class="MsoNormal">dikutip dari www.vaksin.com </div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0tag:blogger.com,1999:blog-1833297251536740824.post-47087248128867813462011-05-20T12:20:00.000+07:002011-05-20T12:20:22.362+07:00W32/Webmoner.BNH (PWS.Kann.12)<!--[if gte mso 9]><xml> <w:WordDocument> <w:View>Normal</w:View> <w:Zoom>0</w:Zoom> <w:PunctuationKerning/> <w:ValidateAgainstSchemas/> <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> <w:IgnoreMixedContent>false</w:IgnoreMixedContent> <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> <w:DontGrowAutofit/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if gte mso 9]><xml> <w:LatentStyles DefLockedState="false" LatentStyleCount="156"> </w:LatentStyles> </xml><![endif]--><!--[if !mso]><img src="http://img2.blogblog.com/img/video_object.png" style="background-color: #b2b2b2; " class="BLOGGER-object-element tr_noresize tr_placeholder" id="ieooui" data-original-id="ieooui" /> <style>
st1\:*{behavior:url(#ieooui) }
</style> <![endif]--><!--[if gte mso 10]> <style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style> <![endif]--> <div align="center" style="margin-bottom: .0001pt; margin: 0cm; text-align: center;"><b style="mso-bidi-font-weight: normal;"><span style="font-family: inherit;">“Gerombolan Siberat” yang menginfeksi Rundll32.exe</span></b></div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;">Beberapa waktu lalu, sering diberitakan pada beberapa media bahwa telah terjadi pencurian data/dokumen militer Indonesia saat berada di Korea Selatan. Insiden pencurian data/dokumen apalagi menyangkut data militer Indonesia dianggap menjadi skandal memalukan bagi Indonesia, terutama dari segi pengamanan yang lengah dan tidak ketat. Diduga, pencurian data terjadi pada hotel tempat delegasi menginap, dan pencuri berhasil menyalin beberapa dokumen dari laptop salah satu delegasi Indonesia. Sebenarnya banyak pengamanan yang dapat diterapkan komputer dan dokumen penting, salah satunya adalah menerapkan NDC Norman Device Control <a href="http://www.norman.com/products/device_control/en"><span style="font-family: inherit;">http://www.norman.com/products/device_control/en</span></a> yang secara otomatis akan mengenkripsi data di komputer, membatasi / memblok pengkopian data melalui USB dan memberikan pengamanan tambahan untuk data di USB dimana semua data yang di kopi ke USB akan di enkripsi sehingga jika jatuh ke tangan yang tidak berhak data secara teoritis sangat sulit untuk di dekripsi tanpa mengetahui kode dekripsi yang tepat.</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;">Kejahatan komputer memang kerap terjadi dan cenderung meningkat. Apalagi didukung dengan perkembangan teknologi informasi yang semakin pesat, yang justru semakin beragam cara yang digunakan bagi para penjahat komputer. Berbagai cara yang dilakukan diantaranya : hacking atau cracking, melakukan deface website, mengirim trojan/keylogger untuk mendapatkan user dan password, mengakses komputer tanpa ijin dan mengirim atau mengcopy data, serta membocorkan data rahasia ke luar/internet</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;">Salah satu metode yang sering digunakan bagi para penjahat komputer yaitu dengan mengirim sebuah trojan yang memiliki kemampuan mencatat data aktif seperti username dan password, yang kemudian data tersebut akan dikirim kembali ke pengirim tersebut. Salah satu trojan yang dapat melakukan aksi tersebut yaitu Trojan Webmoner. Dan hingga saat ini, tercatat sudah ratusan varian Webmoner yang menyerang pengguna komputer.</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;">Bagi anda yang para pengguna komputer di Indonesia, harap berhati-hati karena sejak Januari 2011 hingga saat ini banyak pengguna komputer yang sudah terinfeksi oleh serangan trojan ini, dan salah satu varian baru yang terdeteksi oleh Vaksincom adalah W32/Webmoner.BNH.</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b>Keluarga Webmoner : Pencuri data pribadi </b></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Keluarga Webmoner merupakan salah satu kelompok trojan yang dirancang untuk mencuri informasi/data dari pengguna komputer terutama hal-hal yang berhubungan dengan data pribadi keuangan. W32/Webmoner ditemukan sejak tahun 2004, dan hingga kini sudah ratusan varian W32/Webmoner yang beredar. Salah satu varian terbaru dari W32/Webmoner yang terdeteksi yaitu W32/Webmoner.BNH.</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">Lagi, manfaatkan Celah Keamanan (vulnerability) dari Windows</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Tampaknya, trend shortcut sudah menjadi kiblat baru bagi para pembuat virus untuk melancarkan aksinya menginfeksi pengguna komputer dengan mudah. Dengan memanfaatkan celah keamanan pada Windows yaitu <b>Windows Shell Icon Handler / LNK (MS10-046), </b>maka trojan W32/Webmoner.BNH dapat dengan mudah masuk dan menginfeksi komputer serta melakukan penyebaran dengan cepat.</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">Gejala & Efek Virus</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Beberapa gejala yang terjadi jika komputer anda sudah terinfeksi yaitu :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l16 level1 lfo1; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><b><span style="font-family: inherit;">Aktif menggunakan file Windows (rundll32)</span></b><span style="font-family: inherit;"></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Agar tidak mudah diketahui oleh pengguna komputer, trojan W32/Webmoner.BNH berusaha menyamarkan identitas saat aktif dengan memanfaatkan file system Windows yaitu RUNDLL32.exe. Dengan file tersebut, trojan W32/Webmoner.BNH dapat dengan mudah melakukan infeksi, membaca aktivitas pengguna serta melakukan koneksi pada Remote Server.</span></div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l10 level1 lfo2; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><b><span style="font-family: inherit;">Membuat komputer menjadi hang (explorer hang)</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Saat komputer dinyalakan pertama kali dan login, Windows Explorer akan terasa lambat (hang) akibat aktifitas dari trojan yang menjalankan beberapa file RUNDLL32.EXE. Dengan begitu, pengguna komputer akan merasa terganggu dan tidak nyaman menggunakan komputer.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l3 level1 lfo3; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><b><span style="font-family: inherit;">Melakukan koneksi ke Remote Server</span></b><span style="font-family: inherit;"></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 20.15pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Trojan W32/Webmoner.BNH berusaha melakukan koneksi ke Remote Server untuk melakukan pengiriman informasi yang dibutuhkan pada Remote Server. Koneksi ke remote server dilakukan dengan menggunakan berbagai macam port acak seperti : 127.0.0.1 : 45316, 2820, 5339, 47347, 28787, 30738, dllxx.195.47.170 : 57381</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 20.15pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l18 level1 lfo4; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><b><span style="font-family: inherit;">Mengupdate dirinya seperti antivirus</span></b><span style="font-family: inherit;"></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Agar mempermudah aksi-nya, trojan W32/Webmoner.BNH juga melakukan download beberapa file tertentu dari Remote Server serta agar tetap terupdate dan tidak mudah dikenali oleh antivirus.</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l14 level1 lfo5; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><b><span style="font-family: inherit;">Melakukan transfer data/dokumen yang telah didapatkan ke Remote Server</span></b><span style="font-family: inherit;"></span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Tujuan utama dari trojan W32/Webmoner.BNH adalah mendapatkan informasi dari pengguna komputer yang sudah terinfeksi. Untuk melakukan hal tersebut, trojan W32/Webmoner.BNH menggunakan perintah command sebagai berikut : </span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><i><span style="font-family: inherit;">C:\WINDOWS\system32\ftp.exe ftp-s : C:\WINDOWS\system32\ftp.sys-A</span></i><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">File trojan W32/Webmoner.BNH</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Trojan W32/Webmoner.BNH dibuat menggunakan bahasa pemrograman Delphi yang kemudian di kompress menggunakan UPX. Berikut ciri-ciri file trojan sebagai berikut :</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Berukuran 26 kb</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Type file “system file” </span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Icon file berubah-ubah sesuai dengan aplikasi/program pada komputer</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Bereksensi “sys”</span></div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;">Saat trojan W32/Webmoner.BNH berhasil dijalankan, trojan akan membuat beberapa file yaitu :</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\Documents and Settings\All Users\Start Menu\Internet Explorer.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Update.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\Documents and Settings\[UserName]\Favorites\Microsoft Update.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\mso.sys</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l5 level1 lfo6; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\WINDOWS\system32\ftp.sys</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Selain itu trojan juga akan berusaha mendownload file lain yaitu :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l9 level1 lfo7; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\RECYCLER.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l9 level1 lfo7; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\sysdmp.sys</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l9 level1 lfo7; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">C:\WINDOWS\system32\ftp.cmd</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Selain itu pada removable disk/drive akan membuat beberapa file yaitu :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Documents and Settings.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Program Files.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">RECYCLER.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">System Volume Information.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">WINDOWS.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l4 level1 lfo8; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">mso.sys</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">Modifikasi Registry</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Beberapa modifikasi registry yang dilakukan oleh trojan ini adalah sebagai berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l17 level1 lfo9; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Menambah Registry</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RECYCLER = C:\RECYCLER.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">Metode Penyebaran</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><span style="font-family: inherit;">Beberapa cara trojan W32/Webmoner.BNH melakukan penyebaran yaitu sebagai berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l13 level1 lfo10; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Removable drive/disk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Metode ini adalah metode yang umum dilakukan oleh para pengguna komputer. Trojan (memanfaatkan celah autoplay) membuat beberapa file agar menginfeksi komputer yaitu :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">1.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Documents and Settings.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">2.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Program Files.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">3.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">RECYCLER.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">4.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">System Volume Information.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">5.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">WINDOWS.lnk</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 54.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l12 level1 lfo11; tab-stops: list 54.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">6.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">mso.sys</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 74.15pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Selain itu, dengan memanfaatkan celah keamanan MS10-046 (Windows Icon handler) maka file shortcut/LNK menjadi memiliki kemampuan worm dan akan dapat aktif secara otomatis saat kita mengakses drive tersebut tanpa menjalankan file tersebut sekalipun.</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l0 level1 lfo12; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Jaringan</span></div><div style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Dengan memanfaatkan akses full sharing, trojan W32/Webmoner.BNH dapat mudah masuk dengan melakukan kopi beberapa file yang sama seperti penyebaran pada removable drive/disk.</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><b><span style="font-family: inherit;">Pembersihan Virus/Trojan</span></b><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l8 level1 lfo13; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">1.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Putuskan koneksi komputer dari jaringan/internet.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l8 level1 lfo13; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">2.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Matikan dan hapus trojan W32/Webmoner.BNH</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Lakukan langkah-langkah berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l7 level1 lfo14; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">a.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Download tools untuk membersihkan trojan W32/Webmoner.BNH pada komputer yang belum terinfeksi pada link berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Dr.Web Cure-It! </span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;"><a href="http://www.freedrweb.com/download+cureit/gr/?lng=en"><i>http://www.freedrweb.com/download+cureit/gr/?lng=en</i></a><em><span style="font-family: inherit; font-style: normal;"> </span></em></span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><em><span style="font-family: inherit; font-style: normal;">Norman Malware Cleaner</span></em><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><i><span style="font-family: inherit;"><a href="http://normanasa.vo.llnwd.net/o29/public/Norman_Malware_Cleaner.exe">http://normanasa.vo.llnwd.net/o29/public/Norman_Malware_Cleaner.exe</a> </span></i><span style="font-family: inherit;"></span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">b.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Setelah selesai, kompress file tersebut hingga menjadi file zip.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">c.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Kopi file tersebut dan letakkan dimana saja pada komputer yang terinfeksi.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">d.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Klik kanan file zip tersebut, kemudian klik explore.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">e.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Klik 2x file yang sudah di-explore tersebut untuk menjalankan, kemudian klik Run.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">f.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Jika sudah muncul jendela Dr.Web CureIt, klik OK untuk menjalankan dalam mode EPM (Enhanced Protection Mode).</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">g.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Klik Start untuk memulai Scan, dan klik Yes untuk memulai.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l21 level1 lfo15; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">h.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Biarkan hingga proses scan selesai.</span></div><div class="western" style="margin-bottom: .0001pt; margin: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l1 level1 lfo16; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">3.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Repair registry yang telah dimodifikasi.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Lakukan langkah-langkah berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l15 level1 lfo17; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Salin script dibawah ini dengan notepad :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">[Version]</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Signature="$Chicago$"</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Provider=Vaksincom Oyee 2011</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">[DefaultInstall]</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">AddReg=UnhookRegKey</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">DelReg=del</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">[UnhookRegKey]</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0x00010001,1</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0x00010001,1</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HideFileExt,0x00010001,0</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\CLASSES\batfile\shell\open\command,,,"""%1"" %*"</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\CLASSES\comfile\shell\open\command,,,"""%1"" %*"</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\CLASSES\exefile\shell\open\command,,,"""%1"" %*"</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\CLASSES\piffile\shell\open\command,,,"""%1"" %*"</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">[del]</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, RECYCLER</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 72.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l19 level1 lfo18; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Simpan file dengan nama “repair.inf”. Gunakan pilihan Save As Type menjadi All Files agar tidak terjadi kesalahan.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l19 level1 lfo18; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Klik kanan file “repair.inf”, kemudian pilih “install”.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l19 level1 lfo18; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: Symbol; font-size: 10.0pt; mso-bidi-font-family: Symbol; mso-bidi-font-size: 12.0pt; mso-fareast-font-family: Symbol;"><span style="mso-list: Ignore;">·<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Restart komputer.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l20 level1 lfo19; tab-stops: list 18.0pt; text-align: justify; text-indent: -18.0pt;"><a href="" name="_GoBack"></a><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">4.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Bersihkan temporary file dari jejak trojan.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;">Lakukan langkah-langkah berikut :</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l2 level1 lfo20; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">a.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Klik Menu Start -> Run</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l2 level1 lfo20; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">b.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Ketik perintah pada kotak open : cleanmgr , kemudian klik OK.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l2 level1 lfo20; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">c.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Pada drive system (C) klik OK, biarkan proses scan drive.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l2 level1 lfo20; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">d.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Setelah muncul jendela Disk Cleanup, beri tanda file yang akan di hapus (terutama Temporary Files), kemudian klik OK.</span></div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; mso-list: l2 level1 lfo20; tab-stops: list 36.0pt; text-align: justify; text-indent: -18.0pt;"><span style="font-family: inherit; mso-bidi-font-family: inherit; mso-fareast-font-family: inherit;"><span style="mso-list: Ignore;">e.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Tunggu hingga selesai.</span></div><br />
<span style="font-family: inherit;"><span>5.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Install security patch MS10-046 sesuai dengan versi windows yang anda miliki. Silahkan download pada link berikut :</span> <br />
<div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 36.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><span style="font-family: inherit;"><a href="http://www.microsoft.com/technet/security/Bulletin/MS10-046.mspx"><i>http://www.microsoft.com/technet/security/Bulletin/MS10-046.mspx</i></a></span></div><br />
<span style="font-family: inherit;"><span>6.<span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="font-family: inherit;">Untuk pembersihan yang optimal dan mencegah infeksi ulang, sebaiknya menggunakan antivirus yang ter-update dan mengenali trojan ini dengan baik.</span> <br />
<div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;"><br />
</div><div class="western" style="margin-bottom: .0001pt; margin-bottom: 0cm; margin-left: 18.0pt; margin-right: 0cm; margin-top: 0cm; text-align: justify;">Dikutip dari www.vaksin.com<span style="font-family: inherit;"></span></div>iwan shttp://www.blogger.com/profile/18120687808182169737noreply@blogger.com0