Cara install Yahoo Messenger tanpa macet

Cara install Yahoo Messenger tanpa macetYahoo Messenger saat ini adalah program chatting yang sangat populer, & saya pun memakainya hampir setiap hari agar tidak kehilangan komunikasi dengan teman-teman. Kemarin, saat saya login ke Yahoo Messenger pake versi 8, ada sebuah pesan yang muncul agar saya meng-upgrade YM saya menjadi versi 9. Saya disarankan untuk menuju ke http://messenger.yahoo.com untuk mendownload installer Yahoo Messsenger versi 9. Filenya kecil, hanya 427kb, tetapi ketika diinstall, gagal maning gagal maning alias ga selesai-selesai. Jadi bagaimana solusinya?Installer Yahoo Messenger yang diperoleh dari http://messenger.yahoo.com adalah installer kecil yang ketika dijalankan akan mendownload file installer yang komplit. Lalu kenapa kita tidak mendownload file installer komplit sekalian? Ada bisa mendownload file installer yang komplit di sini (versi 9.00.2034, ukuran 14.5 MB):

download Yahoo Messenger full version / standalone installer dari server Yahoo
atau
download Yahoo Messenger full version / standalone installer dari server Softpedia

yahoo messenger  versi 9

Dengan menggunakan file installer yang komplit tadi, dijamin proses instalasi akan berjalan lancar tanpa takut koneksi putus, karena instalasi akan jalan terus meski koneksi internet putus. Yahoo Messenger versi 9 ini sudah merupakan versi final (bukan beta) dan free. Untuk mempercepat download, bisa menggunakan DAP. Jangan lupa untuk selalu menambah teman, buka menu Contact -> Add a contact, kemudian masukkan ID Yahoo atau email teman anda, misalnya Mikomove untuk menjadikan saya sebagai teman Anda. Selamat mencoba!

Download Adobe Photoshop CS 3 Portable Full Version












Seorang fotographer menggunakan adobe photoshop untuk mengedit hasil karyanya. Untuk hasil yg maksimal, dia menggunakan adobe photoshop versi CS 3. Apalagi ini adalah portable, jadi bisa dibawa kemana - mana olehnya.

Jika anda sudah mencari di tempat lain tapi tidak ketemu2, kalian bisa download Download Adobe Photoshop CS 3 Portable Gratis disini.

klik disini untuk download

setelah kalian download, ada passwordnya lo dalam zip tersebut.

Password : http://www.thesaltinez.com

Free Download: Microsoft Office 2007 Portable









Bingung mencari software kantoran ini? Cari yg gratisan? Disini tempatnya ! Silahkan download Microsoft Office 2007 Portable di bawah ini:

download microsoft office 2007 portable part-1
download mirosoft office 2007 part-2

Membuka Document Yang Corrupt

word-repair1Saat kita membuka file document word kita kadang harus menelan kekecewaan yang sangat, apalagi kalau document tersebut sangat penting dan mendesak untuk segera digunakan. Document tersebut kadang tidak bisa terbuka karena corrupt yang diakibatkan oleh proses pengcopyan yang tidak sempurna, bisa juga karena pengaruh teknis lainnya. Saat ini ada software yang bisa membantu kita semua, namanya wordrepair untuk memilikinya cukup mudah silahkan download langsung disini Semoga Bermanfaat.

Gambar Tampilan Wordrepair
word-repair

Sofware pilihan

Selamat Datang Pengunjung Dari Googler! Jika kamu suka situs ini, kenapa tidak Langganan RSS Feed? Atau Masukkan alamat email anda di kolom langganan. Supaya tidak Ketinggalan Artikel.
Ribuan software gratisan yang berceceran di dunia teknologi tidak semua mempunyai kualitas yang bagus dan dapat dipercaya. Ada juga software berbayar yg kadang kita tidak ingin membelinya. Kita harus mencari crack atau serial number jika ingin menggunakan software berbayar itu.

Dalam postingan ini, anda akan menemukan 33 lebih software ajaib dan terbaik untuk kebutuhan anda. Yang lebih menyenangkan lagi, semua software ajaib ini bisa kalian download gratis ! Mulai dari download manager, pembaca email, pengirim pesan, kebutuhan kantor, dan masih banyak lainnya yg bisa ditemukan disini.

Penasaran apa saja kah software2 itu?

  • Untuk Kebutuhan Kantor dan Produksi

OpenOffice.org

openoffice-org

One of the best alternatives available for Microsoft Office Suite, OpenOffice.org has not only received several awards and accolades, it is one of the best alternatives to managing your document, spreadsheets, presentations and more.

With Open Office you can do everything you can with Microsoft Office and with the software being open source you can expect 100s and 1000s of cool software engineers contributing to make it better.

Download OpenOffice.org | Learn more about OpenOffice.org

Thunderbird

thunderbird

Maintaining several email accounts in a single place has always been a forte associated with Microsoft Outlook.
Thunderbird
on the other hand is a alternative which is as good as Outlook if not better, providing you with the many of the same features to manage multiple email accounts at no cost at all.

Thunderbird lets you manage your POP and IMAP accounts with ease.
Thunderbird
also allows you to extend the basic functionality by allowing you to add useful add-ons and extensions making it just too good to resist.

Download Thunderbird | Learn more about Thunderbird

Dia

dia

A good software is always conceptualized by defining the exact way in which it should work with process diagrams and flowcharts. If you have been paying out of your pocket for Microsoft Visio it is high time you switched to Dia a open source software that allows you to create structured diagrams and flowcharts for free.

Download Dia for Windows | Learn more about Dia

Sunbird

sunbird

Though not one of the most talked about product, Sunbird definitely is a great alternative to managing your appointments and events without having to use
Microsoft Outlook
.

And if you would frown about having to use two different applications to manage emails and calendars you should definitely try out Lightning that combines
Thunderbird
with Sunbird to create a great productivity application.

Download and learn more about Sunbird

  • Browser, Instan Messenger, FTP, Shell, dan Linux Emulation.

Firefox

firefox

Firefox is not only the best open source browser available today, it also provides you with a much safer and faster browsing experience. It is really much better than Internet Explorer and not many would say otherwise.

Well if you have been reading us for sometime you may already know how much we love Firefox. You can definitely check out the ultimate list of tips and tricks for firefox 3 and while your at it don’t forget to see the Firefox extensions we have put up for you.

Download Firefox 3 | Learn more about Firefox

Digsby

digsby

Digsby is much more than just a just a multi-protocol IM client. With Digsby you can communicate with your friends over AIM, Yahoo, MSN, GTalk and more without having to install separate clients, as well as check your emails from multiple providers.

If that was not enough you can also use Digsby to update your social networking statues in Facebook, Twitter and MySpace.

Download Digsby | Learn more about Digsby

WinSCP

winscp

Remote file management is always a challenge and though there are several softwares out there our preferred one is WinSCP, a incredible and versatile software that makes file management quite a breeze.

WinSCP is not only allows you to transfer files but they do it by providing you a way to securely do them, using the SFTP protocol instead of the regular FTP protocol.

Download WinSCP | Learn more about WinSCP

uTorrent

utorrent

If you are looking to download files using torrents, look no farther than uTorrent, one of the best softwares to manage torrents. Not only is it lightweight it also can be managed using the browser by accessing the uTorrent site and the best part is it runs out of the box without requiring any installations. Software ini bisa kalian gunakan untuk download dari download-provider.com

Download uTorrent | Learn more about uTorrent

Free Download Manager

free-download-manager

Managing your downloads with browsers have never been that easy and download managers definitely allow you to download files in a much better way. Free Download Manager allows you to download files from multiple sources, accelerating your download process, along with allowing you to pause and resume them.

Free Download Manager makes your download management much better and also comes with inbuilt support to download torrent files.

Download Free Download Manager | Learn more about Free Download Manager

Putty

putty

Ever wanted to manage Linux servers from your
Windows
machine using shell.
Putty is one of the best way to access shell environment. As far as we know there is not competition to Putty.

If you have been using Putty, don’t forget to check out how you can manage your putty sessions in a database and work in a tabbed interface or minimize it to a tray so that you are not overwhelmed with the number of open
windows
.

Download Putty | Learn more about Putty

Cygwin

cygwin

Ever wanted to emulate a Linux system on your
Windows
PC or just wanted to practice few skills before you actually installed Linux as you main system?
Cygwin is one of the best Linux emulator you will ever find using which you can get your hands dirty without worrying about screwing up a actual operating system.

Download Cygwin | Installation Instructions | Learn more about Cygwin

  • Manajemen Sistem, File Manager, Sistem Maintenance, Antivirus, Anti Spyware, dan FireWall

AVG Free Anti-virus

avg-8

Symantec no doubt has a huge market in the anti-virus industry with Norton, with support from computer manufacturers who bundle the trial version of Norton in factory shipped desktops and laptops, that obliviously does not mean it is the best.

Norton has had huge complaints of considerably slowing down PCs and using considerable system resources. AVG on the other hand is a real good alternative which is free and does not tax you system as much as Norton does. The latest version of AVG also comes with several new features such as Anti-spyware, Anti-rootkit and more.

Download AVG 8 | Learn more about AVG

CCleaner

ccleaner

Your PC accumulates several temporary files and traces that are not useful to you. These temporary files and traces slows down the PC along with taking up unwanted disk space.

CCleaner is a cleaning robot for your computer, which is smart enough to know which places to look for unwanted files and traces. CCleaner can also cleanup several applications along cleaning temporary and unwanted files created by
Windows
.

Download CCleaner | Learn more about CCleaner

Defraggler

defraggler

Your PC is not the smartest thing in the world and it has a tendency to spread fragments of files all over the place. Defraggler allows you to sort out the mess and make your PC run faster and much better. The good thing about defraggler is that it allows you to choose the files you want to defrag making the process much more easier and faster.

Download Defraggler | Learn more about Defraggler

Comodo Firewall Pro

comodo


Windows
inbuilt Firewall is good but not really one of the best things around, there are several alternatives which you can definitely try out but our personal favorite is
Comodo which packs in all the features of a professional version as a free software.

Download Comodo Firewall Pro | Learn more about Comodo Firewall Pro

Recuva

recuva

“Oops I deleted that important file” is a statement many users have right after using Shift + Delete option for a file.If you thought that you could never recover the deleted file you are in for a surprise. There are several softwares that will allow you to recover deleted files.

Recuva is one of the best alternative that is available today, not only is it very reliable, you will not have to spend a penny for it as it is completely free.

Download Recuva | Learn more about Recuva

  • Imaging Tool, Grafik, 3D tool, Image Manager

Gimp

gimp

Gimp is undoubtedly the best alternative available for Photoshop. Edit your images with ease without having to worry about paying a fortune for
Photoshop
. Gimp also can be used in conjunction with plugins bringing a host of new features to the core software.

Download Gimp | Learn more about Gimp

Blender

blender

Creating 3D applications is not that easy but even more harder is spending thousands of dollars to get a software that allows you to create 3D animations.

Blender is a great application to work with 3D modeling with a great interface at a unmatchable price, Free.

Download Blender | Learn more about Blender

Picasa

picasa

Picasa is definitely one of the best tools available for managing your photos. With Picasa you can import your pictures from your camera and edit them to change contrast, remove red eyes and more. You can also upload your pictures to your online album and share them with family and friends without having to upload each and every file individually.

Download Picasa | Learn more about Picasa

  • Video Softwares, Audio Softwares, 3D Softwares

VLC Player

vlc-logo

VLC Player is one of the best video softwares available to view different files and formats. VLC player supports multiple codecs out of the the box allowing you to play almost all kinds of file formats without having to install any additional softwares or codecs.

Download VLC Player | Learn more about VLC Player

Miro

miro

Miro allows you to convert your PC into a Internet TV. You can use it to watch Internet video channels and play any video file. You can play files from YouTube and more and you can play almost any types of file with it including HD videos.

Download Miro | Learn more about Miro

PicLens

piclens

PicLens is a Firefox add-on that transforms your browser into full screen 3D browser allowing you to browse images and videos in full screen.

Learn more and download PicLens

Audacity

audacity

Audacity is one of the best free tools available for audio editing and recording for several operating systems.

You can record live audio, convert tapes into digital recordings, cut, copy, splice or mix sounds together and more.

Download Audacity | Learn more about Audacity

Development Tools, Editors

Eclipse

eclipse

Eclipse is one of the best development IDE available for building robust enterprise applications, embedded software development and more with support for several languages.

The Eclipse project has been supported by several well know companies and also has a very large open source community to help develop and test the product.

Learn more and download Eclipse

Notepad++

notepad

Notepad++ is not just a mere notepad replacement, it will allow you to modify several file types and has been getting better by the day with new features like auto complete and more.

If you are stuck with notepad this is definitely one software you should give a try.

Learn more and download Notepad++

  • CD / DVD Writing Softwares, DVD Ripping, Virtual CD / DVD

Handbrake

handbrake

Handbrake is a DVD Ripper that will allow you to rip DVD files and convert them to MPEG-4 format for Mac OS, Linux and Windows.

Download and learn more about Handbrake

CDBurnerXP

cdburnerxp

CDBurnerXP is a free application to burn CDs and DVDs, including Blu-Ray and HD-DVDs. It also includes the feature to burn and create ISOs, as well as a multilanguage interface.

Download CDBurnerXP | Learn more about CDBurnerXP

MagicDisc

magicdisc

Several softwares and games can be downloaded as image files like ISO, BIN etc. If you do not have a CD / DVD writer those files may be practically useless to you. With MagicDisc you can easily mount those image files as Virtual CD / DVDs and install the software, copy them and do more.

Download MagicDisc | Learn more about MagicDisc

  • Utilities

Foxit PDF Reader

foxit-pdf-reader

Foxit PDF Reader is no doubt one of the best alternative to the Adobe PDF reader. It is much more faster and robust than the reader provided by Adobe.

There are several features that you make you completely ditch Adobe PDF reader, if you have not already done that.

Download Foxit PDF Reader | Learn more about Foxit PDF Reader

7Zip

7zip

7Zip is one of the best open source software which allows you to manage several types of archives with simplicity and ease. 7Zip supports all the popular archive formats such as zip, rar, gzip, tar and more.

It is by far a much better alternative to the dominating WinZip and WinRar softwares that require you to purchase licenses.

xPlorer2 Lite

xplorer2

Windows explorer is definitely not the best to manage files, with you have to open several windows just to perform a simple task of copying and pasting files.

xPlorer2 Lite is a very handy utility when it comes to managing files in Windows. The tabbed interface saves you lot of times and hassles simplifying the task of managing files.

Download xPlorer2 Lite | Learn more about xPlorer2 Lite

Launchy

launchy

Loading applications has never been more easier than it is with Launchy. This is probably one of the best software that makes your life much more easier when it comes to opening applications without having to go through the pain of creating a desktop shortcut or searching for them.

Download and learn more about Launchy

Google Desktop

google-desktop

If you thought Google only worked online then you are in for a surprise. Google Desktop is one of the best indexing and desktop search tools for your PC with results as accurate as their web based search.

With Google Desktop Search you can search your files, emails, chat conversations and more. The handy sidebar also allows you to add gadgets so that you can access information quickly and easily.

Download and learn more about Google Desktop

Windows Live Writer

windows-live-writer

One of the best tools to manage your blogs offline, Windows Live Writer has grown to become one of the most loved applications from Microsoft.

You can manage multiple weblogs and post to them with ease, save drafts online and offline, edit images, add watermarks to them and more.

Download and learn more about Windows Live Writer

Daftar Perintah ‘Run’ di Windows XP

Netter pasti tahu apa itu Run. Run adalah menu atau command yang bisa diakses di Start atau menekan tombol Windows + R.

Nah berikut daftar perintahnya:

compmgmt.msc - Computer management
devmgmt.msc - Device manager
diskmgmt.msc - Disk management
dfrg.msc - Disk defrag
eventvwr.msc - Event viewer
fsmgmt.msc - Shared folders
gpedit.msc - Group policies
lusrmgr.msc - Local users and groups
perfmon.msc - Performance monitor
rsop.msc - Resultant set of policies
secpol.msc - Local security settings
services.msc - Various Services
msconfig - System Configuration Utility
regedit - Registry Editor
msinfo32 - System Information
sysedit - System Edit
win.ini - windows loading information(also system.ini)
winver - Shows current version of windows
mailto: - Opens default email client
cmd - Opens command prompt
msconfig - to configurate start up
mspaint - to open ms paint program
calc - to call calculator

Software Terbaik Untuk Download Manager


images3

Bagi netter yang suka download, software download manager seperti Flashget, Getright merupakan sebuah keharusan. Nah kali ini kami akan membahas software terbaik untuk kegiatan ini…

Download manager sangat dibutuhkan oleh mereka yang suka download dan kadang meninggalkan komputernya. Fitur download resume atau meneruskan download merupakan salah satu kelebihan dari semua download manager, dimana bila koneksi internet putus atau komputer dimatikan, download tetap bisa dilanjutkan kembali.

Berikut 5 buah software download manager terbaik:

1. Free Download Manager - Software download ini sudah mendapat banyak penghargaan dari situs atau majalah. Selain gratis, fitur-fiturnya sangat baik dan mendukung download torrent.

2. Download Acclerator Plus (DAP) - Software yang satu ini sangat diminati karena selain buat download, bisa meningkatkan kecepatan download hingga di atas 30%

3. FlashGet - Software yang satu ini sempat sangat populer di kalangan pengguna download, tapi karena adanya iklan dan malware pada programnya, Flashget sempat ditinggalkan penggunanya

4. GetRight - Software yang dahulu merupakan suatu keharusan bagi saya untuk menggunakannya karena adalah pilihan terbaik. Pamornya juga turun karena adanya iklan.

5. Orbit Downloader - Software yang satu ini sedang naik daun karena bisa mendownload video, MP3 dari situs ternama seperti Myspace, YouTube, Imeem, Pandora, dan Rapidshare.

W32/Alman (Almanahe)


Komputer kacau karena file .exe di injeksi virus

Selain virus ARP Poisoning yang sedang marak menyebar di Indonesia. Diam-diam ada satu virus yang juga merepotkan para pengguna komputer di Indonesia dan banyak sekali memakan korbannya. Salah satu ciri khas dari virus ini adalah kehebatannya dalam mengubah semua file yang memiliki ekstensi .EXE sehingga jelas mengganggu korbannya karena aplikasi di komputer yang menjadi korban virus ini akan menjadi kacau.

Dalam menyebarkan dirinya, virus hasil racikan luar ini akan menyebar dengan melalui jaringan dengan mengincar direktori yang di share “full” dan menginfeksi file EXE yang ada di dalam folder tersebut.

Ada beberapa lokasi yang tidak akan di rubah seperti file yang berada di direktori :

  • \LOCAL SETTINGS\T

  • \QQ

  • \Windows

  • \Winnt

Untuk mempertahankan dirinya, ia akan aktif di memori sebagai services serta akan menginfeksi library (.dll file) dari file explorer.exe serta memantau koneksi internet yang kemudian akan mendownload malware lainnya serta menjalankannya. Virus ini dibuat dengan menggunakan program bahasa “Microsoft Visual C ++ 6.0”.

Dengan update terbaru Norman sudah dapat mendeteksi virus ini sebagai W32/Alman. (lihat gambar 1).

Gambar 1, Norman Virus Control mendeteksi varian-varian virus Alman / Almanahe yang sedang mengganas di Indonesia.

Drop File

Pada saat virus ini aktif, ia akan membuat beberapa file induk yang akan di jalankan pertama kali setiap kali komputer aktif, file ini akan di jadikan sebagai service Windows.

  • C:\Windows\linkinfo.dll

  • C:\Windows\System32\drivers\LsDrv118.sys

  • C:\Windows\system32\drivers\nvmini.sys

  • C:\Windows\System32\drivers\cdralw.sys

  • C:\Windows\System32\drivers\riodrvs.sys

  • C:\Windows\System32\drivers\DKIs6.sys

Registri

Agar dirinya dapat aktif secara otomatis, ia akan membuat dirinya seolah-olah merupakan service Windows dengan terlebih dahulu membuat string pada registri berikut:

  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\%file%]

    • "DisplayName" = "NVIDIA Compatible Windows Miniport Driver"

    • "ImagePath" = "%system%\drivers\%file%.sys"

  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_%file%]

    • "NextInstance" = 1

  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_%file%\0000]

    • "Service" = "%file%"

    • "Legacy" = 1

    • "ConfigFlags" = 0

    • "Class" = "LegacyDriver"

    • "ClassGUID" = "{8ECC055D-047F-11D1-A537-0000F8753ED1}"

    • "DeviceDesc" = "%file%"

  • [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_%file%\0000\Control]

    • "NewlyCreated" = 0

    • "ActiveService" = "%file%"

  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\%file%

    • "DisplayName" = "RioDrvs Usb Driver"

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\%file%

    • DisplayName" = "RioDrvs Usb Driver"

Catatan:

%file% ini berbeda-beda yang terdiri dari salah satu file dibawah ini:

  • Nvmini

  • Cdralw

  • RioDrvs

Terminate program / Aplikasi / Malware

W32/Alman juga akan mencoba untuk mematikan dan menghapus beberapa program/apalikasi/malware/library (dll file) salah satu file dibawah ini:

  • c0nime.exe

  • cmdbcs.exe

  • ctmontv.exe

  • explorer.exe

  • fuckjacks.exe

  • iexpl0re.exe

  • iexpl0re.exe

  • iexplore.exe

  • internat.exe

  • logo_1.exe

  • logo1_.exe

  • lsass.exe

  • lying.exe

  • msdccrt.exe

  • msvce32.exe

  • ncscv32.exe

  • nvscv32.exe

  • realschd.exe

  • rpcs.exe

  • run1132.exe

  • rundl132.exe

  • smss.exe

  • spo0lsv.exe

  • spoclsv.exe

  • ssopure.exe

  • svhost32.exe

  • svch0st.exe

  • sxs.exe

  • sysbmw.exe

  • sysload3.exe

  • tempicon.exe

  • upxdnd.exe

  • wdfmgr32.exe

  • wsvbs.exe

  • dllwm.dll

  • dllhosts.dll

  • notepad.dll

  • rpcs.dll

  • rdihost.dll

  • rdfhost.dll

  • reshost.dll

  • lgsym.dll

  • rund11.dll

  • midddsccrt.dll

  • wsvbs.dll

  • cmdb.dll

  • richdll.dll

  • wininfo.rxk

  • windhcp.dll

  • upxdhnd.dll

Ia juga akan blok proses dari software antirootkit atau network filter dibawah ini:

  • SPUBDRV

  • ISDRV1

  • RKREVEAL

  • PROCEXP

  • SAFEMON

  • RKHDRV10

  • NPF

  • IRIS

  • NPPTNT

  • DUMP_WMIMMC

  • SPLITTER

  • EAGLENT

Media penyebaran

Virus ini menyebar cukup cepat dengan memanfaatkan media Flash Disk atau Disket dan melalui jaringan. Untuk menyebar melalui Flash Disk / Disket, ia akan membuat 2 buah file yakni boot.exe (40KB) dan autorun.inf. Virus ini akan aktif secara otomatis setiap kali Flash Disk tersebut dihubungkan ke komputer atau pada saat pengguna komputer mengakses ke Flash Disk tersebut. File autorun.inf ini berisi script untuk menjalankan file boot.exe. Selain meembuat 2 file tersebut, ia juga akan menginfeksi semua file yang mempunyai ekstensi EXE. File yang sudah terinfeksi tersebut akan bertambah 32 KB dari ukuran semula.

Sedangkan untuk menyebar melalui jaringan, ia akan menginfeksi semua file EXE yang ada di folder yang di sharing yang mempunyai akses “Full”. Selain itu ia juga akan mencoba untuk mengakses drive lokal pada komputer target (C:\) dengan menggunakan username administrator serta mencoba beberapa password berikut:

  • admin

  • 1

  • 111

  • 123

  • Aaa

  • 12345

  • 123456789

  • 654321

  • !@#$

  • qsdf

  • asdfgh

  • !@#$%

  • !@#$%^

  • !@#$%^&

  • !@#$%^&*

  • !@#$%^&*(

  • !@#$%^&*()

  • qwer

  • admin123

  • love

  • test123

  • owner

  • mypass123

  • root

  • letmein

  • qwerty

  • abc123

  • password

  • monkey

  • password1

Jika berhasil di tembus, ia akan drop dan menjalankan satu file dengan nama setup.exe pada drive C:\.


Mampu mengupdate diri seperti antivirus

W32/Alman juga akan mencoba untuk mengirimkan beberapa informasi dari komputer yang telah terinfeksi serta mengirimkan informasi tentang keberadaan driver dari software security dibawah ini ke pembuat virus

  • Hooksys

  • KWatch3

  • KregEx

  • KLPF

  • NaiAvFilter1

  • NAVAP

  • AVGNTMGR

  • AvgTdi

  • nod32drv

  • PavProtect

  • TMFilter

  • BDFsDrv

  • VETFDDNT

dan mencoba untuk download malware lain dari url yang telah di tentukan seperti:

  • pic.imrw0rldwide.com

  • soft.imrw0rldwide.com

  • tj.imrw0rldwide.com

Injeksi File EXE

Target selanjutnya yang dilakukan adalah mencoba untuk menginfeksi semua file yang mempunyai ekstensi EXE yang tidak diproteksi oleh System File Checker (SFC).


Walaupun ia berusaha untuk menginfeksi file EXE tetapi ada beberapa lokasi yang tidak akan di incar yakni file yang berada di direktori berikut:

  • \LOCAL SETTINGS\TEMP

  • \QQ

  • \Windows

  • \Winnt

Serta beberapa file yang mempunyai salah satu nama dibawah ini:

  • launcher.exe

  • repair.exe

  • wow.exe

  • wooolcfg.exe

  • woool.exe

  • ztconfig.exe

  • patchupdate.exe

  • trojankiller.exe

  • xy2player.exe

  • flyff.exe

  • xy2.exe

  • au_unins_web.exe

  • cabal.exe

  • cabalmain9x.exe

  • cabalmain.exe

  • meteor.exe

  • patcher.exe

  • mjonline.exe

  • config.exe

  • zuonline.exe

  • userpic.exe

  • main.exe

  • dk2.exe

  • autoupdate.exe

  • dbfsupdate.exe

  • asktao.exe

  • sealspeed.exe

  • xlqy2.exe

  • game.exe

  • wb-service.exe

  • nbt-dragonraja2006.exe

  • dragonraja.exe

  • mhclient-connect.exe

  • hs.exe

  • mts.exe

  • gc.exe

  • zfs.exe

  • neuz.exe

  • maplestory.exe

  • nsstarter.exe

  • nmcosrv.exe

  • ca.exe

  • nmservice.exe

  • kartrider.exe

  • audition.exe

  • zhengtu.exe

Cara membersihkan W32/Alman

  • Putuskan komputer yang ingin dibersihkan dari jaringan.

  • Matikan “System Restore” selama proses pembersihan berlangsung.

  • Disarankan lakukan pembersihan pada mode “safe mode”.

  • Matikan service virus yang aktif dimemory dengan cara:

  • Klik [Start] [Run].

  • Ketik services.msc, pada dialog box RUN kemudian klik tombol [OK]

  • Cari services virus dengan nama “NVIDIA Compatible Windows Miniport Driver” atau “RioDrvs Usb Driver”

  • Kemudian klik menu Action > Properties.

  • Klik tombol Stop.

  • Pada bagian Startup Type pilih Manual.

  • Klik OK

  • Hapus registry Windows yang sudah dibuat oleh virus. Untuk mempermudah proses penghapusan, silahakn salin script dibawah ini pada program notepad kemudian simpan dengan nama repair.inf. Jalankan file tersebut dengan cara: Klik kanan repair.inf | klik Install

[Version]

Signature="$Chicago$"

Provider=Vaksincom Oyee


[DefaultInstall]

AddReg=UnhookRegKey

DelReg=del

[UnhookRegKey]

HKLM, Software\CLASSES\batfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\comfile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\exefile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\piffile\shell\open\command,,,"""%1"" %*"

HKLM, Software\CLASSES\regfile\shell\open\command,,,"regedit.exe "%1""

HKLM, Software\CLASSES\scrfile\shell\open\command,,,"""%1"" %*"

HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, "Explorer.exe"

HKLM, SYSTEM\ControlSet001\Control\SafeBoot, AlternateShell,0, "cmd.exe"

HKLM, SYSTEM\ControlSet002\Control\SafeBoot, AlternateShell,0, "cmd.exe"

HKLM, SYSTEM\CurrentControlSet\Control\SafeBoot, AlternateShell,0, "cmd.exe"

HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden, UncheckedValue,0x00010001,1

[del]

HKLM, Software\Microsoft\Internet Explorer\Main, Window Title

HKLM, SYSTEM\ControlSet001\Services\RioDrvs

HKLM, SYSTEM\ControlSet001\Services\cdralw

HKLM, SYSTEM\ControlSet001\Services\nvmini

HKLM, SYSTEM\CurrentControlSet\Services\RioDrvs

HKLM, SYSTEM\CurrentControlSet\Services\nvmini

HKLM, SYSTEM\CurrentControlSet\Services\cdralw

HKLM, SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RIODRVS

HKLM, SYSTEM\CurrentControlSet001\Enum\Root\LEGACY_RIODRVS

HKLM, SYSTEM\CurrentControlSet001\Enum\Root\LEGACY_nvmini

HKLM, SYSTEM\CurrentControlSet\Enum\Root\LEGACY_cdralw

HKLM, SYSTEM\CurrentControlSet001\Enum\Root\LEGACY_cdralw

HKLM, SYSTEM\CurrentControlSet001\Enum\Root\LEGACY_nvmini

  • Hapus file yang di drop oleh virus di direktori:

    • C:\Windows\linkinfo.dll

    • C:\Windows\System32\drivers\lsDrv118.sys

    • C:\Windows\system32\\drivers\nvmini.sys

    • C:\Windows\System32\\drivers\cdralw.sys

    • C:\Windows\System32\drivers\riodrvs.sys

    • C:\Windows\System32\drivers\DKIs6.sys

Hapus juga file Boot.exe dan autorun.inf yang dibuat di Flash Disk


Catatan:

Sebelum menghapus file tersebut, sebaiknya tampilkan terlebih dahulu file yang disembunyikan dengan cara (lihat gambar 2):

  • Buka Windows Explorer

  • Klik menu “Tools” | Folder Option

  • Klik tabulasi “View”

  • Pilih opsi “Show hidden files and folders”

  • Uncheck pilihan “Hide protected operating system files (recommended)”

  • Klik “Apply”

  • Klik “Ok”

Gambar 2, Menampilkan file yang tersembunyi

Silahkan download antivirus Norman free trial 1 bulan di alamat berikut

http://www.norman.com/Download/Trial_versions/