> PENGUMUMAN <

**Rahman** · 18-12-2011 05:55:44

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Topic: PCMAV 6.2 + Clamav 0.97

TIM Pcmav, saya mau nanya apakah pemakaian memory (phisical memory) bisa di optimalisasi apabila PCMAV 6.2 digabungkan dengan engine Clamav 0.97. karena waktu proses scanning saya melihat di task manager CPU usage mencapai 100% dan phisical memory mencapai 211.145 K, sehingga terasa berat. apakah TIM Pcmav bisa mengambil semacam tindakan untuk mengatasi hal tsb, ataukah hanya sebatas mengenai PCMAV saja? mohon pencerahan dari Moderator!! terima ksih

PCMAV 6.2 sudah OK TIM PCMAV, saluut atas kerja keras TIM PCMAV.....

Last edited by Rahman (18-12-2011 05:59:05)

**Fandy** · 18-12-2011 17:36:49

Fandy
Trial Member
Offline

From: Bandung
Registered: 15-12-2011
Posts: 47
User Karma: 1

Re: PCMAV 6.2 + Clamav 0.97

sangat di sayangkan PCMAV 6.2, bug mengenai icon pcmav di sistem Tray tidak dapat klik kanan masih terjadi di windows 7. saat pcmav sdang di sleep kemudian di aktifkan lagi, mulai lagi tidak dapat di klik, mungkin ada yang dapat memberi solusi.

**Rahman** · 19-12-2011 19:31:46

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

bug PCMAV 6.2

ketika menutup Extension Manager, Extman.exe tetap aktif di Proses (task Manager) sehingga kita harus melakukan End Process manual terhadap Extman.exe. karena kalau di biarkan Extman aktif di proses walaupun sudah menutup extension manager, maka ketika kita menggunakan extension manager kedua kalinya maka tidak akan dapat di buka lagi extension manager. makanya extman harus di End Proses di task manager. tolong di perbaiki ya tim PCMAV

Oh ya PCMAV 6.2 saat scanning biasanya scan progressnya berjalan, tetapi Objek Scan sampai information nggak jalan, itu kenapa ya? mau upload screenshoot tapi belum tahu caranya, kirain di forum bisa insert screenshoot langsung dari penyimpanan data, ternyata mesti di upload dulu rupanya di blog kata teman di forum.

Last edited by Rahman (19-12-2011 21:22:48)

**fajar.anggiawan** · 20-12-2011 09:33:46

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

apakah pemakaian memory (phisical memory) bisa di optimalisasi

Database ClamAV memang berukuran besar. Saat ini kami belum fokus untuk optimalisasi ke hal ini. Namun, hal ini memang sudah terdapat di to do list kami.

Fandy wrote:

mungkin ada yang dapat memberi solusi.

Mohon maaf untuk bugnya. Saat ini untuk membuat PCMAV berjalan baik lagi yaitu dengan merestart komputer atau cara cepatnya dengan Log off dan Sign in kembali. Semoga perbaikan bug ini dapat cepat dimasukan ke versi PCMAV terbaru.

Rahman wrote:

tetapi Objek Scan sampai information nggak jalan, itu kenapa ya

Ada proses pengumpulan informasi (misalnya pengumpulan proses-proses yang sedang aktif) yang sedang berjalan. Hal ini biasanya terjadi lama jika kerja CPU terlalu sibuk.

Rahman wrote:

ketika menutup Extension Manager

Untuk Extman dan extensions yang sudah diperbaharui, bisa di download di hxxp://www.sendspace.com/file/ulvxlh

**Rahman** · 20-12-2011 13:01:11

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
apakah pemakaian memory (phisical memory) bisa di optimalisasi
Database ClamAV memang berukuran besar. Saat ini kami belum fokus untuk optimalisasi ke hal ini. Namun, hal ini memang sudah terdapat di to do list kami.
Fandy wrote:
mungkin ada yang dapat memberi solusi.
Mohon maaf untuk bugnya. Saat ini untuk membuat PCMAV berjalan baik lagi yaitu dengan merestart komputer atau cara cepatnya dengan Log off dan Sign in kembali. Semoga perbaikan bug ini dapat cepat dimasukan ke versi PCMAV terbaru.
Rahman wrote:
tetapi Objek Scan sampai information nggak jalan, itu kenapa ya
Ada proses pengumpulan informasi (misalnya pengumpulan proses-proses yang sedang aktif) yang sedang berjalan. Hal ini biasanya terjadi lama jika kerja CPU terlalu sibuk.
Rahman wrote:
ketika menutup Extension Manager
Untuk Extman dan extensions yang sudah diperbaharui, bisa di download di hxxp://www.sendspace.com/file/ulvxlh

Ok, Trima kash atas responnya mas Fajar.

ada lagi nih Ma Fajar mengenai tulisan di atas menu scanner PCMAV biasanya tulisannya
"PC Media Scan for worm, trojan and viruses" kenapa jadi adXraKZOMkhVOEJoiGoTiocXjinjDz, ini kenapa ya tim PCMAV?? setiap kali beli majalah PC Media selalu seperti itu, beda dengan yg di Download. malahan yg di download seperti biasa tulisannya, biasanya berubah saat pakai parameter.

Mengenai PCMAV 6.1 yg tidak bisa di klik kanan saat di aktif di sistem tray. tolong Mas Fajar analisa ya hasil coba-coba saya, saya tes mengklik kanan proses PCMAV di task manager kemudian memilih SET PRIORITY kemudian memilih realtime, masalah icon PCMAV yg tidak bisa di klik kanan bisa di atasi, sekalipun PC di Sleep ataupun di HIBERNATE kemudian dipakai lagi, saya tidak menemui masalah lagi.

Oh Iya Mas fajar kenapa PCMAV 6.2 tidak ditampilakn di Virusindonesia.com, malahan PCMAV 6.1 yang terus di update, kenapa seperti itu padahal kan Mjalah PC Media edisi terbaru udah keluar tanggal 17 lalu???? saya jadi bingung mau pakai versi yang mana???

Last edited by Rahman (20-12-2011 13:11:48)

**fajar.anggiawan** · 20-12-2011 13:25:53

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

kenapa jadi adXraKZOMkhVOEJoiGoTiocXjinjDz

Jika nama folder tempat PCMAV berada adalah "PCMAV" (tanpa tanda kutip), tulisan/caption pada jendela PCMAV tidak akan berisi tulisan acak. Hal ini untuk mencegah virus yang ingin mendeteksi jendela PCMAV untuk tujuan tertentu.

Rahman wrote:

saya tes mengklik kanan proses PCMAV di task manager kemudian memilih SET PRIORITY kemudian memilih realtime, masalah icon PCMAV yg tidak bisa di klik kanan bisa di atasi

Terima kasih untuk analisanya.

Kami juga membutuhkan saran, jika PCMAV terjadi crash/error (misalnya masalah icon yang tidak dapat diklik), apakah sebaiknya PCMAV melakukan restart secara otomatis ketika error terjadi (sehingga pengguna tidak pernah berinteraksi dengan jendela peringatan error)?

**Rahman** · 20-12-2011 13:35:00

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
kenapa jadi adXraKZOMkhVOEJoiGoTiocXjinjDz
Jika nama folder tempat PCMAV berada adalah "PCMAV" (tanpa tanda kutip), tulisan/caption pada jendela PCMAV tidak akan berisi tulisan acak. Hal ini untuk mencegah virus yang ingin mendeteksi jendela PCMAV untuk tujuan tertentu.
Rahman wrote:
saya tes mengklik kanan proses PCMAV di task manager kemudian memilih SET PRIORITY kemudian memilih realtime, masalah icon PCMAV yg tidak bisa di klik kanan bisa di atasi
Terima kasih untuk analisanya.
Kami juga membutuhkan saran, jika PCMAV terjadi crash/error (misalnya masalah icon yang tidak dapat diklik), apakah sebaiknya PCMAV melakukan restart secara otomatis ketika error terjadi (sehingga pengguna tidak pernah berinteraksi dengan jendela peringatan error)?

oh begitu ya, berarti saya harus merubah nama foldernya.

ya mungkin sebaiknya begitu Mas Fajar agar lebih memudahkan pengguna PCMAV, tapi saya belum mngerti dengan yg mas fajar katakn bhwa PCMAV sebaiknya melakukan restart otomatis, gimana caranya Mas?
oh ya mas kenapa PCMAV 6.2 tidak di tampilkan di halaman depan?

**fajar.anggiawan** · 20-12-2011 13:46:46

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

katakn bhwa PCMAV sebaiknya melakukan restart otomatis, gimana caranya Mas?

Ketika PCMAV mengalami error (muncul peringatan error dengan pilihan continue, stop, dsb), PCMAV akan melakukan restart dirinya sendiri, sehingga PCMAV seperti baru dijalankan. Sehingga permasalahan seperti tray icon tidak akan ditemui oleh pengguna. Meskipun memperbaiki bug adalah pilihan pertama, namun cara yang saya ungkapkan ini dapat dijadikan antisipasi untuk mempermudah pengguna dalam menggunakan PCMAV yang terdapat bug yang lolos dari pantauan kami.

**Rahman** · 20-12-2011 14:05:30

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
katakn bhwa PCMAV sebaiknya melakukan restart otomatis, gimana caranya Mas?
Ketika PCMAV mengalami error (muncul peringatan error dengan pilihan continue, stop, dsb), PCMAV akan melakukan restart dirinya sendiri, sehingga PCMAV seperti baru dijalankan. Sehingga permasalahan seperti tray icon tidak akan ditemui oleh pengguna. Meskipun memperbaiki bug adalah pilihan pertama, namun cara yang saya ungkapkan ini dapat dijadikan antisipasi untuk mempermudah pengguna dalam menggunakan PCMAV yang terdapat bug yang lolos dari pantauan kami.

iya Mas bagus juga seperti itu, kalau itu sebgai langkah antisipasi untuk memudahkan Pengguna. bisa di coba mas cara seperti itu, tapi bagimana kalau pesan erorrnya tidak muncul, maka bagaimana solusinya?? agar PCMAV bisa melakukan restart.
sekalpun sy rasa kurang efektif selain memperbaiki bugnya tapi harus di coba untuk antisipasi. alhmdulillah cara yg sy pakai sampai sekrang masih mempan untuk mencegah masalah di sistem tray.

**fajar.anggiawan** · 20-12-2011 14:15:48

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

tapi bagimana kalau pesan erorrnya tidak muncul, maka bagaimana solusinya??

Untuk permasalahan pada icon PCMAV, memang tidak muncul pesan errornya, namun sebenarnya kami bisa saja memunculkannya Jadi nantinya PCMAV masih bisa restart secara otomatis jika mendapakan bug icon tersebut.

**Rahman** · 20-12-2011 14:23:02

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
tapi bagimana kalau pesan erorrnya tidak muncul, maka bagaimana solusinya??
Untuk permasalahan pada icon PCMAV, memang tidak muncul pesan errornya, namun sebenarnya kami bisa saja memunculkannya Jadi nantinya PCMAV masih bisa restart secara otomatis jika mendapakan bug icon tersebut.

oh begitu kalau seperti itu saya dukung, memang tim PCMAV memang hebat2 selalu punya langkah alternatif. sy dukung solusi yg Mas fajar ungkpkan, kira2 di versi berapa cara seperti itu di terapkan di PCMAV?? kalau bisa nanti pesan erorrnya munculkan satu opsi saja pilihannya yaitu restart Mas fajar supaya pengguna tidak bingung lagi.

**Rahman** · 20-12-2011 14:28:15

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

Mas fajar mau nanya lagi, apakah cara penggunaan parameter PCMAV sperti ini sudah benar?? soalnya update clamav masih bisa berjalan meskipun sudah di jalankan parameter NOUPDCLAM

"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe" " /FORCE /NOMUTEX /NOUPDCLAM /REGCLEAN /NOMEM

**fajar.anggiawan** · 20-12-2011 14:53:13

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

yaitu restart Mas fajar supaya pengguna tidak bingung lagi

Implementasinya diharapkan sudah ada di versi 6.x. Ok, jadi sebaiknya PCMAV ,masih menampilkan satu opsi saja ya daripada langsung restart secara otomatis. Ide akan kami tampung terlebih dahulu.

Rahman wrote:

cara penggunaan parameter PCMAV sperti ini sudah benar??

Jika mengisi parameter di properties file:

"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE  /NOMUTEX  /NOUPDCLAM  /REGCLEAN  /NOMEM"

**Rahman** · 21-12-2011 12:16:26

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
yaitu restart Mas fajar supaya pengguna tidak bingung lagi
Implementasinya diharapkan sudah ada di versi 6.x. Ok, jadi sebaiknya PCMAV ,masih menampilkan satu opsi saja ya daripada langsung restart secara otomatis. Ide akan kami tampung terlebih dahulu.
Rahman wrote:
cara penggunaan parameter PCMAV sperti ini sudah benar??
Jika mengisi parameter di properties file:
"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE  /NOMUTEX  /NOUPDCLAM  /REGCLEAN  /NOMEM"

Mas fajar setelah sy tes mengisi parameter sesuai format yg mas fajar berikan, malah nggk bisa mas PCMAV saat startup malah ingin di restart terus untuk fix registry.

oh ya mas ada bug baru mengenai efek dari icon PCMAV di sistem tray yg tdk dpt di klik kanan juga berdampak pada proses scanning yg tidak berjalan dengan baik scan progressnya berjalan tapi tidak seperti biasanya dan objek scan dll tidak berjalan, kemudian me-REFRESH PCMAV juga nggk bisa. mudah2n versi 6.3 tidak seperti ini lagi, paling tidak solusi yg mas Fajar ungkapkan kemarin bisa di implementasikan di PCMAV 6.3, soalnya bug ini sangat menganggu karena proses SCAN tidak berjalan sebagaimana mestinya, jadinya PCMAV tidak bisa berbuat apa2 dlm kondisi seperti itu, maka hrs restrt ulg. br kmbli normal.
1 lagi Mas PCMAV tidak bisa mendeteksi virus yg ada di dalam file ZIP/RAR, mohon di periksa lagi keakuratan pendeteksiannya padahal sy sudah mencentang SCAN ARCHIVE.

Last edited by Rahman (21-12-2011 20:23:18)

**fajar.anggiawan** · 21-12-2011 22:33:58

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Tentu saja meminta restart karena ada parameter "/REGCLEAN". Gunakan saja parameter berikut:

"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE /NOUPDCLAM"

Rahman wrote:

Mas PCMAV tidak bisa mendeteksi virus yg ada di dalam file ZIP/RAR

Ups, segera diperbaiki.. perbaiki.. selesai diperbaiki untuk rilis yang akan datang.

**Rahman** · 23-12-2011 04:52:59

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

Mas Fajar, Extman.exe yg diproses task manager koq tidak bisa exit otomatis ya begitu selesai gunakan extension manager?? soalnya kalau posisi extman.exe aktif terus di proses task manager walaupun sudah menutup extension manager maka apabila kita ingin menggunakan extension manager lagi udah nggak bisa kecuali kita hrs exit manual extman.exe baru normal kembali, tolong di periksa ya mas Fajar

oh ya mas, saya sudah coba ptunjuk pnggunaan parameter dari Mas fajar, walaupun sudah menggunakan NOUPDCLAM, update Clamav masih bisa berjalan tapi tiba2 muncul pesan error.

ini format yang saya pakai
"D:\Buku Sekolah Elektronikku\PCMAV 6.2\PCMAV.exe" /FORCE /NOUPDCLAM

petunjuk yg Mas fajar berikan
"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE /NOUPDCLAM"

kalau tanpa tanda petik setelah PCMaV.exe nggak bisa Mas, yang saya mau tanyakan penggunaan tanda petik di belakang sesudah NOUPDCLAM itu harusnya ada atau tidak? mohon ptunjuknya dari Mas Fajar

sekedar saran buat PCMAV express kalau boleh di tambahin Select Scan Mode supya ada menu custom Scannya, PCMAV express for sality yang lalu keren, jadi kita bisa menentukan objek scannya, soalnya menunggu seluruh Local disk selesai di scan itu lama padahal kita hanya butuh Scan salah satu objek saja. harap jadi bahan pertimbangan bagi Tim PCMAV.

Last edited by Rahman (23-12-2011 16:49:41)

**ondenkz** · 24-12-2011 01:34:10

ondenkz
Trial Member
Offline

From: Purwokerto
Registered: 27-11-2011
Posts: 45

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

oh ya mas, saya sudah coba ptunjuk pnggunaan parameter dari Mas fajar, walaupun sudah menggunakan NOUPDCLAM, update Clamav masih bisa berjalan tapi tiba2 muncul pesan error.
ini format yang saya pakai
"D:\Buku Sekolah Elektronikku\PCMAV 6.2\PCMAV.exe" /FORCE /NOUPDCLAM
petunjuk yg Mas fajar berikan
"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE /NOUPDCLAM"
kalau tanpa tanda petik setelah PCMaV.exe nggak bisa Mas, yang saya mau tanyakan penggunaan tanda petik di belakang sesudah NOUPDCLAM itu harusnya ada atau tidak? mohon ptunjuknya dari Mas Fajar

coba di bikin shortcut PCMAV.exe ke desktop, trus klik kanan shortcut tsb, pilih properties, di bagian target tambahkan parameter tanpa tanda kutip seperti punya saya nih bos :

trus buka shortcut tsb..

Last edited by ondenkz (24-12-2011 18:09:36)

>> Blog Saya

<<

**Fandy** · 24-12-2011 06:02:43

Fandy
Trial Member
Offline

From: Bandung
Registered: 15-12-2011
Posts: 47
User Karma: 1

Re: PCMAV 6.2 + Clamav 0.97

kenapa PCMAV nggk bisa detect virus di dalam Archive dan hidden ya??
biasanya kalau virus yang tidak/ belum di kenal biasanya terdeteksi sebagai virus suspected sekrang koq nggk ada lagi? bisa tidak PCMAV mendeteksi virus2 yg belum ada di databasenya, sekalipun hanya bisa karantina virus, mungkin begitu lebih bagus, karena masih banyak virus yg belum bisa terdeteksi sama PCMAV padahal contoh virusnya sudah di upload

Last edited by Fandy (24-12-2011 06:05:36)

**Rahman** · 24-12-2011 18:20:32

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

ondenkz wrote:

Rahman wrote:
oh ya mas, saya sudah coba ptunjuk pnggunaan parameter dari Mas fajar, walaupun sudah menggunakan NOUPDCLAM, update Clamav masih bisa berjalan tapi tiba2 muncul pesan error.
ini format yang saya pakai
"D:\Buku Sekolah Elektronikku\PCMAV 6.2\PCMAV.exe" /FORCE /NOUPDCLAM
petunjuk yg Mas fajar berikan
"D:\Buku Sekolah Elektronikku\PCMAV\PCMAV.exe /FORCE /NOUPDCLAM"
kalau tanpa tanda petik setelah PCMaV.exe nggak bisa Mas, yang saya mau tanyakan penggunaan tanda petik di belakang sesudah NOUPDCLAM itu harusnya ada atau tidak? mohon ptunjuknya dari Mas Fajar
coba di bikin shortcut PCMAV.exe ke desktop, trus klik kanan shortcut tsb, pilih properties, di bagian target tambahkan parameter tanpa tanda kutip seperti punya saya nih bos :
trus buka shortcut tsb..

trima kasih, tapi mas masih tetap juga bisa update CLAMAV sekalipun sudah pakai parameter NOUPDCLAM

**fajar.anggiawan** · 24-12-2011 19:21:13

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Ups..jangan gunakan tanda '/". Jadi cukup "NOUPDCLAM" saja. Berlaku untuk parameter ini saja. Nanti kami perbaiki.

**Rahman** · 24-12-2011 20:05:11

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Ups..jangan gunakan tanda '/". Jadi cukup "NOUPDCLAM" saja. Berlaku untuk parameter ini saja. Nanti kami perbaiki.

Iya cara seperti itu baru bisa Mas fajar, baru saja saya mencobanya. Tks. atas responnya
oh ya Mas saya mau nanya lagi apkh sampai saat ini Tim PCMAV sudah dapat mengatsi bug yg tidak dapat klik kanan icon PCMAV di sistem tray? karena bug ini apabila terjadi mengganngu proses scan, proses scan tidak berjalan normal.

Mas apakah pengintegrasian PCMAV + Clamav 0.97.3 sudah tidak mengalami Crash? dan apa perbedaannya dengan Clamav 0.97?

Last edited by Rahman (24-12-2011 20:17:45)

**fajar.anggiawan** · 24-12-2011 21:56:12

fajar.anggiawan
Super ModeratoЯ
Offline

Registered: 02-04-2010
Posts: 442
User Karma: 18

Re: PCMAV 6.2 + Clamav 0.97

Rahman wrote:

bug yg tidak dapat klik kanan icon

Saat ini kami sedang memastikan bug ini tidak akan terjadi kembali.

Rahman wrote:

Mas apakah pengintegrasian PCMAV + Clamav 0.97.3 sudah tidak mengalami Crash?

Saat ini kami belum fokus tentang permasalahan pada library baru ClamAV ini dikarenakan kami sedang mengembangkan scan engine baru untuk generasi PCMAV selanjutnya. Sabar ya mas Rahman, semoga (kedua) hal ini cepat terselesaikan.

**Rahman** · 24-12-2011 22:10:40

Rahman
VIP
Offline

Registered: 31-05-2010
Posts: 731
User Karma: 32

Re: PCMAV 6.2 + Clamav 0.97

fajar.anggiawan wrote:

Rahman wrote:
bug yg tidak dapat klik kanan icon
Saat ini kami sedang memastikan bug ini tidak akan terjadi kembali.
Rahman wrote:
Mas apakah pengintegrasian PCMAV + Clamav 0.97.3 sudah tidak mengalami Crash?
Saat ini kami belum fokus tentang permasalahan pada library baru ClamAV ini dikarenakan kami sedang mengembangkan scan engine baru untuk generasi PCMAV selanjutnya. Sabar ya mas Rahman, semoga (kedua) hal ini cepat terselesaikan.

begitu ya, mudah2n sukses ya Tim PCMAV.
Mas bagian forum ini yg bahas malware koq beda dengan di bagian laporan bug, dibagian ini cepat mendapat respon dari moderator, sementara di bagian malware udah sktr 2 hari belum ada respon dari moderator, padahl lagi bnyk varian ngrbot/virus lain yg belum terdeteksi sama PCMAV.

mohon maaf ya Mas Fajar kalau saya banyk nanya dan keluhan di forum ini. Tks

Last edited by Rahman (24-12-2011 22:18:11)

**indraramadhan094** · 29-12-2011 22:44:03

indraramadhan094
Moderator
Offline

From: Kota Tangerang, Banten
Registered: 04-04-2010
Posts: 545
User Karma: 13

Re: PCMAV 6.2 + Clamav 0.97

Muncul Bug Report dari MadExcept

Penyebab error yaitu ketika membuka Quarantine Window lalu Klik Main Window pada tray PCMAV lalu Klik Quarantine, akhirnya muncul error...

date/time         : 2011-12-28, 23:23:25, 156ms
computer name     : INDRA
user name         : Administrator <admin>
registered owner  : Administrator
operating system  : Windows XP Service Pack 3 build 2600
system language   : English
system up time    : 6 hours 39 minutes
program up time   : 28 seconds
processors        : 2x Intel(R) Pentium(R) D CPU 2.66GHz
physical memory   : 503/958 MB (free/total)
free disk space   : (C:) 41.16 GB
display mode      : 1024x768, 32 bit
process id        : $d40
allocated memory  : 61.51 MB
command line      : "C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2\PCMAV.scr" /S
executable        : PCMAV.scr
exec. date/time   : 2011-11-08 13:26
version           : 6.2.0.0
compiled with     : Delphi 2006/07
madExcept version : 3.0n
PCMAV.scr.mad     : $000270c8, $32fc3f68, $d01a3045
contact name      : Indra
contact email     : indra.ramadhan094@gmail.com
callstack crc     : $903b8115, $e70411ec, $e70411ec
exception number  : 1
exception class   : EInvalidOperation
exception message : Cannot make a visible window modal.

main thread ($970):
004c378d +071 PCMAV.scr segment%59  public%5894
004a7de7 +02f PCMAV.scr segment%55  public%4938
004bed6e +03a PCMAV.scr segment%59  public%5770
0068d093 +01f PCMAV.scr segment%292 public%13164
004a9a54 +064 PCMAV.scr segment%55  public%5023
004a9ecf +06b PCMAV.scr segment%55  public%5040
004a954f +2bb PCMAV.scr segment%55  public%5016
004ad1d8 +18c PCMAV.scr segment%55  public%5163
004a91dc +024 PCMAV.scr segment%55  public%5012
004ad039 +0a1 PCMAV.scr segment%55  public%5162
004ad400 +3b4 PCMAV.scr segment%55  public%5163
004acc70 +02c PCMAV.scr segment%55  public%5158
004788b4 +014 PCMAV.scr segment%31  public%3553
004c71fc +0fc PCMAV.scr segment%59  public%6025
004c7236 +00a PCMAV.scr segment%59  public%6027
004c7547 +0b3 PCMAV.scr segment%59  public%6032
00692305 +1c9 PCMAV.scr segment%427 public%13315

thread $8e8:
7c90df48 +a ntdll.dll  NtWaitForMultipleObjects

thread $3d8 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($970) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $b74 (TWndProc): <suspended>
00669917 +1f PCMAV.scr segment%283 public%12870

thread $c6c:
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $d0 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $594 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($970) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $ed0:
7c90d218 +a ntdll.dll  NtDelayExecution

thread $c9c:
7c90da48 +a ntdll.dll  NtRemoveIoCompletion

thread $a38: <priority:1>
7c90da48 +0a ntdll.dll              NtRemoveIoCompletion
00455385 +0d PCMAV.scr   segment%23 public%2360
004553ef +37 PCMAV.scr   segment%23 public%2361
>> created by main thread ($970) at:
71a5d926 +00 mswsock.dll

thread $87c:
7c90df48 +0a ntdll.dll              NtWaitForMultipleObjects
00455385 +0d PCMAV.scr   segment%23 public%2360
004553ef +37 PCMAV.scr   segment%23 public%2361
>> created by main thread ($970) at:
77f774af +c9 SHLWAPI.dll            SHCreateThread

thread $484 (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($970) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $c48 (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($970) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $2e4:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by main thread ($970) at:
77e7d10d +00 RPCRT4.dll

thread $4b0:
7c90d218 +0a ntdll.dll               NtDelayExecution
7c8023eb +4b kernel32.dll            SleepEx
7c802450 +0a kernel32.dll            Sleep
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($970) at:
775309b3 +00 ole32.dll

thread $7b8:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by thread $2e4 at:
77e7d10d +00 RPCRT4.dll

thread $65c:
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $db8 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $e6c (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by thread $db8 at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

processes:
000 Idle                      0   0
004 System                    0   0   normal
560 smss.exe                  0   0   normal       C:\WINDOWS\system32
590 csrss.exe                 62  61  normal
5ac winlogon.exe              51  14  high         C:\WINDOWS\system32
5d8 services.exe              4   2   normal       C:\WINDOWS\system32
5e4 lsass.exe                 6   3   normal       C:\WINDOWS\system32
69c svchost.exe               4   1   normal       C:\WINDOWS\system32
6e0 svchost.exe               4   1   normal
7d0 svchost.exe               11  34  normal       C:\WINDOWS\System32
1d4 svchost.exe               4   1   normal
248 svchost.exe               4   7   normal
30c spoolsv.exe               4   4   normal       C:\WINDOWS\system32
47c Explorer.EXE              542 231 normal       C:\WINDOWS
680 egui.exe                  210 69  normal       C:\Program Files\ESET\ESET Smart Security
6bc VTTimer.exe               22  5   normal       C:\WINDOWS\system32
708 VTtrayp.exe               26  5   normal       C:\WINDOWS\system32
724 ctfmon.exe                28  12  normal       C:\WINDOWS\system32
580 ekrn.exe                  23  11  normal       C:\Program Files\ESET\ESET Smart Security
7bc sqlservr.exe              4   1   normal
1c0 sqlwriter.exe             4   2   normal       C:\Program Files\Microsoft SQL Server\90\Shared
1b0 wscntfy.exe               30  9   normal       C:\WINDOWS\system32
850 alg.exe                   4   2   normal
954 taskmgr.exe               122 130 high         C:\WINDOWS\system32
b88 dllhost.exe               8   3   normal
ae4 ping.exe                  8   1   normal       C:\WINDOWS\system32
578 IDMan.exe                 600 211 normal       C:\Program Files\Internet Download Manager
54c SbieSvc.exe               4   1   normal       C:\Program Files\Sandboxie
3a8 ZHider.exe                20  12  normal       C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX59.464
ab8 svchost.exe               4   3   normal       C:\WINDOWS\system32
168 PresentationFontCache.exe 4   1   normal
a4c GoogleCrashHandler.exe    4   1   normal       C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\1.3.21.79
6c4 wmplayer.exe              684 107 normal       C:\Program Files\Windows Media Player
554 imapi.exe                 4   6   normal       C:\WINDOWS\system32
974 SandboxieRpcSs.exe        4   1   above normal C:\Program Files\Sandboxie
f0c SbieCtrl.exe              116 59  normal       C:\Program Files\Sandboxie
c00 SandboxieDcomLaunch.exe   4   1   above normal C:\Program Files\Sandboxie
d40 PCMAV.scr                 281 227 normal       C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2

cpu registers:
eax = 01252c90
ebx = 01210100
ecx = 01252c90
edx = 004c378d
esi = 004a99f0
edi = 0013f954
eip = 004c378d
esp = 0013f77c
ebp = 0013f7e0

stack dump:
0013f77c  8d 37 4c 00 de fa ed 0e - 01 00 00 00 07 00 00 00  .7L.............
0013f78c  90 f7 13 00 8d 37 4c 00 - 90 2c 25 01 00 01 21 01  .....7L..,%...!.
0013f79c  f0 99 4a 00 54 f9 13 00 - e0 f7 13 00 ac f7 13 00  ..J.T...........
0013f7ac  d8 f9 13 00 d0 4f 40 00 - e0 f7 13 00 f0 99 4a 00  .....O@.......J.
0013f7bc  00 01 21 01 00 00 00 00 - ea 7d 4a 00 54 f9 13 00  ..!......}J.T...
0013f7cc  f0 27 21 01 00 00 00 00 - 73 ed 4b 00 f0 99 4a 00  .'!.....s.K...J.
0013f7dc  10 0a 86 02 e8 f7 13 00 - 99 d0 68 00 48 f9 13 00  ..........h.H...
0013f7ec  5a 9a 4a 00 00 01 21 01 - d4 9e 4a 00 00 00 05 00  Z.J...!...J.....
0013f7fc  00 00 00 00 05 00 00 00 - 00 00 00 00 00 00 00 00  ................
0013f80c  06 00 00 00 0d 00 00 00 - 52 03 75 00 00 01 21 01  ........R.u...!.
0013f81c  54 f9 13 00 52 95 4a 00 - 52 03 75 00 08 fa 13 00  T...R.J.R.u.....
0013f82c  00 01 21 01 e5 9c 23 7d - 52 03 75 00 a8 f8 13 00  ..!...#}R.u.....
0013f83c  00 01 00 00 00 01 01 01 - 00 01 01 00 00 00 00 00  ................
0013f84c  01 01 00 00 01 01 00 01 - 00 00 00 00 68 f8 13 00  ............h...
0013f85c  8e 8a 41 7e 99 8a 41 7e - 00 00 00 00 dc f8 13 00  ..A~..A~........
0013f86c  e5 9c 23 7d 52 03 75 00 - e4 f8 13 00 00 00 00 00  ..#}R.u.........
0013f87c  01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0013f88c  01 00 00 01 01 01 00 00 - 00 00 00 00 00 00 00 00  ................
0013f89c  00 00 00 00 bc fa 13 00 - e5 af 23 7d 40 0d 00 00  ..........#}@...
0013f8ac  b8 fa 13 00 00 00 00 00 - 52 03 75 00 00 00 00 00  ........R.u.....

disassembling:
004c371c public segment%59.public%5894 (PCMAV.scr):  ; function entry point
004c371c   push    ebp
004c371d   mov     ebp, esp
004c371f   add     esp, -$20
004c3722   push    ebx
004c3723   push    esi
004c3724   xor     edx, edx
004c3726   mov     [ebp-$20], edx
004c3729   mov     [ebp-4], eax
004c372c   xor     eax, eax
004c372e   push    ebp
004c372f   push    $4c3a0e                ; segment%0.public%227 (PCMAV.scr)
004c3734   push    dword ptr fs:[eax]
004c3737   mov     fs:[eax], esp
004c373a   call    -$1d38b ($4a63b4)      ; segment%55.public%4850 (PCMAV.scr)
004c373a
004c373f   mov     eax, [ebp-4]
004c3742   cmp     byte ptr [eax+$57], 0
004c3746   jnz     loc_4c376c
004c3746
004c3748   mov     eax, [ebp-4]
004c374b   mov     edx, [eax]
004c374d   call    dword ptr [edx+$50]
004c374d
004c3750   test    al, al
004c3752   jz      loc_4c376c
004c3752
004c3754   mov     eax, [ebp-4]
004c3757   test    byte ptr [eax+$358], 8
004c375e   jnz     loc_4c376c
004c375e
004c3760   mov     eax, [ebp-4]
004c3763   cmp     byte ptr [eax+$277], 1
004c376a   jnz     loc_4c378d
004c376a
004c376c loc_4c376c:
004c376c   lea     edx, [ebp-$20]
004c376f   mov     eax, [$6a3e14]
004c3774   call    -$bba29 ($407d50)      ; segment%0.public%388 (PCMAV.scr)
004c3774
004c3779   mov     ecx, [ebp-$20]
004c377c   mov     dl, 1
004c377e   mov     eax, [$46add8]
004c3783   call    -$63668 ($460120)      ; segment%26.public%2635 (PCMAV.scr)
004c3783
004c3788   call    -$be699 ($4050f4)      ; segment%0.public%230 (PCMAV.scr)
004c3788
004c378d loc_4c378d:
004c378d > call    -$ba7ae ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c378d
004c3792   test    eax, eax
004c3794   jz      loc_4c37a7
004c3794
004c3796   push    0
004c3798   push    0
004c379a   push    $1f
004c379c   call    -$ba7bd ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c379c
004c37a1   push    eax
004c37a2   call    -$ba3eb ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c37a2
004c37a7 loc_4c37a7:
004c37a7   call    -$ba428 ($409384)      ; segment%3.public%1004 (PCMAV.scr)
004c37a7
004c37ac   mov     eax, [$6aaeb0]
004c37b1   call    +$276a ($4c5f20)       ; segment%59.public%5998 (PCMAV.scr)
004c37b1
004c37b6   xor     edx, edx
004c37b8   push    ebp
004c37b9   push    $4c39f1                ; segment%0.public%227 (PCMAV.scr)
004c37be   push    dword ptr fs:[edx]
004c37c1   mov     fs:[edx], esp
004c37c4   mov     eax, [ebp-4]
004c37c7   or      byte ptr [eax+$358], 8
004c37ce   mov     eax, [ebp-4]
004c37d1   cmp     byte ptr [eax+$330], 0
004c37d8   jnz     loc_4c37f8
004c37d8
004c37da   mov     eax, [$6aaeb0]
004c37df   cmp     byte ptr [eax+$d4], 0
004c37e6   jz      loc_4c37f8
004c37e6
004c37e8   mov     eax, [ebp-4]
004c37eb   call    -$16f98 ($4ac858)      ; segment%55.public%5153 (PCMAV.scr)
004c37eb
004c37f0   mov     eax, [ebp-4]
004c37f3   call    -$137f0 ($4b0008)      ; segment%55.public%5291 (PCMAV.scr)
004c37f3
004c37f8 loc_4c37f8:
004c37f8   call    -$ba829 ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c37f8
004c37fd   mov     [ebp-$1c], eax
004c3800   call    -$77a1 ($4bc064)       ; segment%59.public%5660 (PCMAV.scr)
004c3800
004c3805   mov     [ebp-$10], eax
004c3808   mov     eax, [$6aaeb4]
004c380d   mov     ecx, [eax+$78]
004c3810   mov     eax, [$6aaeb4]
004c3815   mov     eax, [eax+$7c]
004c3818   xor     edx, edx
004c381a   call    -$55da3 ($46da7c)      ; segment%31.public%3072 (PCMAV.scr)
004c381a
004c381f   mov     eax, [$6aaeb4]
004c3824   mov     edx, [ebp-4]
004c3827   mov     [eax+$78], edx
004c382a   mov     eax, [$6aaeb4]
004c382f   movzx   eax, word ptr [eax+$44]
004c3833   mov     [ebp-$12], ax
004c3837   xor     edx, edx
004c3839   mov     eax, [$6aaeb4]
004c383e   call    +$1581 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c383e
004c3843   mov     eax, [$6aaeb4]
004c3848   mov     eax, [eax+$48]
004c384b   mov     [ebp-$18], eax
004c384e   xor     eax, eax
004c3850   call    -$7649 ($4bc20c)       ; segment%59.public%5666 (PCMAV.scr)
004c3850
004c3855   mov     [ebp-$c], eax
004c3858   xor     edx, edx
004c385a   push    ebp
004c385b   push    $4c39cf                ; segment%0.public%227 (PCMAV.scr)
004c3860   push    dword ptr fs:[edx]
004c3863   mov     fs:[edx], esp
004c3866   mov     eax, [ebp-4]
004c3869   call    -$242 ($4c362c)        ; segment%59.public%5890 (PCMAV.scr)
004c3869
004c386e   xor     edx, edx
004c3870   push    ebp
004c3871   push    $4c392e                ; segment%0.public%227 (PCMAV.scr)
004c3876   push    dword ptr fs:[edx]
004c3879   mov     fs:[edx], esp
004c387c   push    0
004c387e   push    0
004c3880   push    $b000
004c3885   mov     eax, [ebp-4]
004c3888   call    -$13861 ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3888
004c388d   push    eax
004c388e   call    -$ba4d7 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c388e
004c3893   mov     eax, [ebp-4]
004c3896   xor     edx, edx
004c3898   mov     [eax+$294], edx
004c3896
004c389e loc_4c389e:
004c389e   mov     eax, [$6aaeb0]
004c38a3   call    +$3984 ($4c722c)       ; segment%59.public%6027 (PCMAV.scr)
004c38a3
004c38a8   mov     eax, [$6aaeb0]
004c38ad   cmp     byte ptr [eax+$a4], 0
004c38b4   jz      loc_4c38c5
004c38b4
004c38b6   mov     eax, [ebp-4]
004c38b9   mov     dword ptr [eax+$294], 2
004c38c3   jmp     loc_4c38d9
004c38c3
004c38c3 ; ---------------------------------------------------------
004c38c3
004c38c5 loc_4c38c5:
004c38c5   mov     eax, [ebp-4]
004c38c8   cmp     dword ptr [eax+$294], 0
004c38cf   jz      loc_4c38d9
004c38cf
004c38d1   mov     eax, [ebp-4]
004c38d4   call    -$34d ($4c358c)        ; segment%59.public%5888 (PCMAV.scr)
004c38d4
004c38d9 loc_4c38d9:
004c38d9   mov     eax, [ebp-4]
004c38dc   mov     eax, [eax+$294]
004c38e2   test    eax, eax
004c38e4   jz      loc_4c389e
004c38e4
004c38e6   mov     [ebp-8], eax
004c38e9   push    0
004c38eb   push    0
004c38ed   push    $b001
004c38f2   mov     eax, [ebp-4]
004c38f5   call    -$138ce ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c38f5
004c38fa   push    eax
004c38fb   call    -$ba544 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c38fb
004c3900   mov     eax, [ebp-4]
004c3903   call    -$138dc ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3903
004c3908   mov     ebx, eax
004c390a   call    -$ba93b ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c390a
004c390f   cmp     ebx, eax
004c3911   jz      loc_4c3918
004c3911
004c3913   xor     eax, eax
004c3915   mov     [ebp-$1c], eax
004c3913
004c3918 loc_4c3918:
004c3918   xor     eax, eax
004c391a   pop     edx
004c391b   pop     ecx
004c391c   pop     ecx
004c391d   mov     fs:[eax], edx
004c3920   push    $4c3935
004c391d
004c3925 loc_4c3925:
004c3925   mov     eax, [ebp-4]
004c3928   call    -$309 ($4c3624)        ; segment%59.public%5889 (PCMAV.scr)
004c3928
004c392d   ret
004c392d
004c392d ; ---------------------------------------------------------
004c392d
004c392e   jmp     -$be9e3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c392e
004c3933   jmp     loc_4c3925
004c3933
004c3933 ; ---------------------------------------------------------
004c3933
004c3935   xor     eax, eax
004c3937   pop     edx
004c3938   pop     ecx
004c3939   pop     ecx
004c393a   mov     fs:[eax], edx
004c393d   push    $4c39d9
004c393a
004c3942 loc_4c3942:
004c3942   mov     eax, [$6aaeb4]
004c3947   mov     eax, [eax+$48]
004c394a   cmp     eax, [ebp-$18]
004c394d   jnz     loc_4c395f
004c394d
004c394f   movzx   edx, word ptr [ebp-$12]
004c3953   mov     eax, [$6aaeb4]
004c3958   call    +$1467 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3958
004c395d   jmp     loc_4c396b
004c395d
004c395d ; ---------------------------------------------------------
004c395d
004c395f loc_4c395f:
004c395f   xor     edx, edx
004c3961   mov     eax, [$6aaeb4]
004c3966   call    +$1459 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3966
004c396b loc_4c396b:
004c396b   mov     eax, [ebp-$c]
004c396e   call    -$76a3 ($4bc2d0)       ; segment%59.public%5667 (PCMAV.scr)
004c396e
004c3973   mov     eax, [$6aaeb4]
004c3978   mov     ebx, [eax+$7c]
004c397b   cmp     dword ptr [ebx+8], 0
004c397f   jle     loc_4c39a3
004c397f
004c3981   mov     eax, ebx
004c3983   call    -$55f90 ($46d9f8)      ; segment%31.public%3068 (PCMAV.scr)
004c3983
004c3988   mov     esi, eax
004c398a   mov     eax, [$6aaeb4]
004c398f   mov     [eax+$78], esi
004c3992   mov     edx, esi
004c3994   mov     eax, [$6aaeb4]
004c3999   mov     eax, [eax+$7c]
004c399c   call    -$55e05 ($46db9c)      ; segment%31.public%3076 (PCMAV.scr)
004c399c
004c39a1   jmp     loc_4c39ad
004c39a1
004c39a1 ; ---------------------------------------------------------
004c39a1
004c39a3 loc_4c39a3:
004c39a3   mov     eax, [$6aaeb4]
004c39a8   xor     edx, edx
004c39aa   mov     [eax+$78], edx
004c39a8
004c39ad loc_4c39ad:
004c39ad   cmp     dword ptr [ebp-$1c], 0
004c39b1   jz      loc_4c39bc
004c39b1
004c39b3   mov     eax, [ebp-$1c]
004c39b6   push    eax
004c39b7   call    -$ba5d0 ($4093ec)      ; segment%3.public%1017 (PCMAV.scr)
004c39b7
004c39bc loc_4c39bc:
004c39bc   mov     eax, [ebp-$10]
004c39bf   call    -$7958 ($4bc06c)       ; segment%59.public%5661 (PCMAV.scr)
004c39bf
004c39c4   mov     eax, [ebp-4]
004c39c7   and     byte ptr [eax+$358], -9
004c39ce   ret
004c39ce
004c39ce ; ---------------------------------------------------------
004c39ce
004c39cf   jmp     -$bea84 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39cf
004c39d4   jmp     loc_4c3942
004c39d4
004c39d4 ; ---------------------------------------------------------
004c39d4
004c39d9   xor     eax, eax
004c39db   pop     edx
004c39dc   pop     ecx
004c39dd   pop     ecx
004c39de   mov     fs:[eax], edx
004c39e1   push    $4c39f8
004c39de
004c39e6 loc_4c39e6:
004c39e6   mov     eax, [$6aaeb0]
004c39eb   call    +$255c ($4c5f4c)       ; segment%59.public%5999 (PCMAV.scr)
004c39eb
004c39f0   ret
004c39f0
004c39f0 ; ---------------------------------------------------------
004c39f0
004c39f1   jmp     -$beaa6 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39f1
004c39f6   jmp     loc_4c39e6
004c39f6
004c39f6 ; ---------------------------------------------------------
004c39f6
004c39f8   xor     eax, eax
004c39fa   pop     edx
004c39fb   pop     ecx
004c39fc   pop     ecx
004c39fd   mov     fs:[eax], edx
004c3a00   push    $4c3a15
004c39fd
004c3a05 loc_4c3a05:
004c3a05   lea     eax, [ebp-$20]
004c3a08   call    -$be28d ($405780)      ; segment%0.public%253 (PCMAV.scr)
004c3a08
004c3a0d   ret
004c3a0d
004c3a0d ; ---------------------------------------------------------
004c3a0d
004c3a0e   jmp     -$beac3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c3a0e
004c3a13   jmp     loc_4c3a05
004c3a13
004c3a13 ; ---------------------------------------------------------
004c3a13
004c3a15   mov     eax, [ebp-8]
004c3a18   pop     esi
004c3a19   pop     ebx
004c3a1a   mov     esp, ebp
004c3a1c   pop     ebp
004c3a1d   ret

date/time         : 2011-12-29, 20:11:13, 46ms
computer name     : INDRA
user name         : Administrator <admin>
registered owner  : Administrator
operating system  : Windows XP Service Pack 3 build 2600
system language   : English
system up time    : 11 hours 3 minutes
program up time   : 32 seconds
processors        : 2x Intel(R) Pentium(R) D CPU 2.66GHz
physical memory   : 515/958 MB (free/total)
free disk space   : (C:) 38.23 GB
display mode      : 1024x768, 32 bit
process id        : $7f0
allocated memory  : 59.37 MB
command line      : "C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2\PCMAV.scr" /S
executable        : PCMAV.scr
exec. date/time   : 2011-11-08 13:26
version           : 6.2.0.0
compiled with     : Delphi 2006/07
madExcept version : 3.0n
PCMAV.scr.mad     : $000270c8, $32fc3f68, $d01a3045
contact name      : Indra
contact email     : indra.ramadhan094@gmail.com
callstack crc     : $903b8115, $f2d9aa78, $f2d9aa78
exception number  : 1
exception class   : EInvalidOperation
exception message : Cannot make a visible window modal.

main thread ($ce8):
004c378d +071 PCMAV.scr  segment%59  public%5894
004a7de7 +02f PCMAV.scr  segment%55  public%4938
004bed6e +03a PCMAV.scr  segment%59  public%5770
0068d093 +01f PCMAV.scr  segment%292 public%13164
004a9a54 +064 PCMAV.scr  segment%55  public%5023
004a9ecf +06b PCMAV.scr  segment%55  public%5040
004a954f +2bb PCMAV.scr  segment%55  public%5016
004057ef +01b PCMAV.scr  segment%0   public%255
004a91dc +024 PCMAV.scr  segment%55  public%5012
004ad039 +0a1 PCMAV.scr  segment%55  public%5162
004ad400 +3b4 PCMAV.scr  segment%55  public%5163
004acc70 +02c PCMAV.scr  segment%55  public%5158
004788b4 +014 PCMAV.scr  segment%31  public%3553
7e4196c2 +00a USER32.dll             DispatchMessageA
004c71fc +0fc PCMAV.scr  segment%59  public%6025
004c7236 +00a PCMAV.scr  segment%59  public%6027
004c38a3 +187 PCMAV.scr  segment%59  public%5894
0068d093 +01f PCMAV.scr  segment%292 public%13164
004a9a54 +064 PCMAV.scr  segment%55  public%5023
004a9ecf +06b PCMAV.scr  segment%55  public%5040
004a954f +2bb PCMAV.scr  segment%55  public%5016
004ad1d8 +18c PCMAV.scr  segment%55  public%5163
004a91dc +024 PCMAV.scr  segment%55  public%5012
004ad039 +0a1 PCMAV.scr  segment%55  public%5162
004ad400 +3b4 PCMAV.scr  segment%55  public%5163
004acc70 +02c PCMAV.scr  segment%55  public%5158
004788b4 +014 PCMAV.scr  segment%31  public%3553
7e4196c2 +00a USER32.dll             DispatchMessageA
004c71fc +0fc PCMAV.scr  segment%59  public%6025
004c7236 +00a PCMAV.scr  segment%59  public%6027
004c7547 +0b3 PCMAV.scr  segment%59  public%6032
00692305 +1c9 PCMAV.scr  segment%427 public%13315

thread $ad0:
7c90df48 +a ntdll.dll  NtWaitForMultipleObjects

thread $7ac (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($ce8) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $440 (TWndProc): <suspended>
00669917 +1f PCMAV.scr segment%283 public%12870

thread $a40:
7c90d9d8 +00a ntdll.dll                NtReadFile
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $ce0 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $940 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($ce8) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $cec:
7c90d218 +a ntdll.dll  NtDelayExecution

thread $cbc:
7c90da48 +a ntdll.dll  NtRemoveIoCompletion

thread $100: <priority:1>
7c90da48 +0a ntdll.dll              NtRemoveIoCompletion
00455385 +0d PCMAV.scr   segment%23 public%2360
004553ef +37 PCMAV.scr   segment%23 public%2361
>> created by main thread ($ce8) at:
71a5d926 +00 mswsock.dll

thread $d18 (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($ce8) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $d08 (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($ce8) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $da8:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by main thread ($ce8) at:
77e7d10d +00 RPCRT4.dll

thread $978:
7c90d218 +0a ntdll.dll               NtDelayExecution
7c8023eb +4b kernel32.dll            SleepEx
7c802450 +0a kernel32.dll            Sleep
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($ce8) at:
775309b3 +00 ole32.dll

thread $24c:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by thread $da8 at:
77e7d10d +00 RPCRT4.dll

thread $854:
7c90d9d8 +00a ntdll.dll                NtReadFile
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $7b8 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $684 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by thread $7b8 at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

processes:
000 Idle                      0   0
004 System                    0   0   normal
560 smss.exe                  0   0   normal C:\WINDOWS\system32
590 csrss.exe                 64  66  normal C:\WINDOWS\system32
5ac winlogon.exe              51  14  high   C:\WINDOWS\system32
5d8 services.exe              4   2   normal C:\WINDOWS\system32
5e4 lsass.exe                 6   3   normal C:\WINDOWS\system32
6a0 svchost.exe               4   1   normal C:\WINDOWS\system32
6e4 svchost.exe               4   1   normal C:\WINDOWS\system32
7d4 SbieSvc.exe               4   1   normal C:\Program Files\Sandboxie
7e8 svchost.exe               11  36  normal C:\WINDOWS\System32
204 svchost.exe               4   1   normal C:\WINDOWS\system32
288 svchost.exe               4   6   normal C:\WINDOWS\system32
360 spoolsv.exe               4   4   normal C:\WINDOWS\system32
330 Explorer.EXE              546 221 normal C:\WINDOWS
728 egui.exe                  214 69  normal C:\Program Files\ESET\ESET Smart Security
740 VTTimer.exe               22  5   normal C:\WINDOWS\system32
74c VTtrayp.exe               26  5   normal C:\WINDOWS\system32
788 ctfmon.exe                28  12  normal C:\WINDOWS\system32
748 ekrn.exe                  23  11  normal C:\Program Files\ESET\ESET Smart Security
12c sqlservr.exe              4   1   normal C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn
278 sqlwriter.exe             4   2   normal C:\Program Files\Microsoft SQL Server\90\Shared
a9c alg.exe                   4   2   normal C:\WINDOWS\System32
e48 wscntfy.exe               33  10  normal C:\WINDOWS\system32
de8 DllHost.exe               8   4   normal C:\WINDOWS\system32
97c taskmgr.exe               123 130 high   C:\WINDOWS\system32
790 SbieCtrl.exe              159 69  normal C:\Program Files\Sandboxie
fb4 PresentationFontCache.exe 4   1   normal c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF
fd4 adb.exe                   4   1   normal C:\Documents and Settings\Administrator\My Documents\Downloads\Compressed\SuperOneClickv2.1.1-ShortFuse\ADB
83c ping.exe                  4   1   normal C:\WINDOWS\system32
2ac ping.exe                  4   1   normal C:\WINDOWS\system32
260 IDMan.exe                 382 160 normal C:\Program Files\Internet Download Manager
7f0 PCMAV.scr                 282 174 normal C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2

cpu registers:
eax = 01253210
ebx = 01210100
ecx = 01253210
edx = 004c378d
esi = 004a99f0
edi = 0012f974
eip = 004c378d
esp = 0012f79c
ebp = 0012f800

stack dump:
0012f79c  8d 37 4c 00 de fa ed 0e - 01 00 00 00 07 00 00 00  .7L.............
0012f7ac  b0 f7 12 00 8d 37 4c 00 - 10 32 25 01 00 01 21 01  .....7L..2%...!.
0012f7bc  f0 99 4a 00 74 f9 12 00 - 00 f8 12 00 cc f7 12 00  ..J.t...........
0012f7cc  f8 f9 12 00 d0 4f 40 00 - 00 f8 12 00 f0 99 4a 00  .....O@.......J.
0012f7dc  00 01 21 01 00 00 00 00 - ea 7d 4a 00 74 f9 12 00  ..!......}J.t...
0012f7ec  f0 27 21 01 00 00 00 00 - 73 ed 4b 00 f0 99 4a 00  .'!.....s.K...J.
0012f7fc  10 0a 86 02 08 f8 12 00 - 99 d0 68 00 68 f9 12 00  ..........h.h...
0012f80c  5a 9a 4a 00 00 01 21 01 - d4 9e 4a 00 04 00 0a 00  Z.J...!...J.....
0012f81c  04 00 00 00 0a 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f82c  06 00 00 00 0d 00 00 00 - 38 01 57 00 00 01 21 01  ........8.W...!.
0012f83c  74 f9 12 00 52 95 4a 00 - 38 01 57 00 28 fa 12 00  t...R.J.8.W.(...
0012f84c  00 01 21 01 00 00 00 00 - 00 00 00 00 00 00 00 00  ..!.............
0012f85c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f86c  00 00 00 00 00 00 00 00 - 0e 00 00 00 00 00 00 00  ................
0012f87c  00 00 00 00 00 00 00 00 - 00 00 00 00 a0 00 7d 00  ..............}.
0012f88c  f0 27 21 01 00 00 00 00 - d8 f9 12 00 ba 2f 40 00  .'!........../@.
0012f89c  55 58 40 00 0a 00 00 00 - 01 00 00 00 f4 57 40 00  UX@..........W@.
0012f8ac  98 2c 25 01 d8 f9 12 00 - 98 58 40 00 a0 fa 12 00  .,%......X@.....
0012f8bc  00 00 00 00 00 00 00 00 - 3a 2c 60 00 d4 f8 12 00  ........:,`.....
0012f8cc  b2 51 40 00 49 2c 60 00 - e0 f8 12 00 be 35 60 00  .Q@.I,`......5`.

disassembling:
004c371c public segment%59.public%5894 (PCMAV.scr):  ; function entry point
004c371c   push    ebp
004c371d   mov     ebp, esp
004c371f   add     esp, -$20
004c3722   push    ebx
004c3723   push    esi
004c3724   xor     edx, edx
004c3726   mov     [ebp-$20], edx
004c3729   mov     [ebp-4], eax
004c372c   xor     eax, eax
004c372e   push    ebp
004c372f   push    $4c3a0e                ; segment%0.public%227 (PCMAV.scr)
004c3734   push    dword ptr fs:[eax]
004c3737   mov     fs:[eax], esp
004c373a   call    -$1d38b ($4a63b4)      ; segment%55.public%4850 (PCMAV.scr)
004c373a
004c373f   mov     eax, [ebp-4]
004c3742   cmp     byte ptr [eax+$57], 0
004c3746   jnz     loc_4c376c
004c3746
004c3748   mov     eax, [ebp-4]
004c374b   mov     edx, [eax]
004c374d   call    dword ptr [edx+$50]
004c374d
004c3750   test    al, al
004c3752   jz      loc_4c376c
004c3752
004c3754   mov     eax, [ebp-4]
004c3757   test    byte ptr [eax+$358], 8
004c375e   jnz     loc_4c376c
004c375e
004c3760   mov     eax, [ebp-4]
004c3763   cmp     byte ptr [eax+$277], 1
004c376a   jnz     loc_4c378d
004c376a
004c376c loc_4c376c:
004c376c   lea     edx, [ebp-$20]
004c376f   mov     eax, [$6a3e14]
004c3774   call    -$bba29 ($407d50)      ; segment%0.public%388 (PCMAV.scr)
004c3774
004c3779   mov     ecx, [ebp-$20]
004c377c   mov     dl, 1
004c377e   mov     eax, [$46add8]
004c3783   call    -$63668 ($460120)      ; segment%26.public%2635 (PCMAV.scr)
004c3783
004c3788   call    -$be699 ($4050f4)      ; segment%0.public%230 (PCMAV.scr)
004c3788
004c378d loc_4c378d:
004c378d > call    -$ba7ae ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c378d
004c3792   test    eax, eax
004c3794   jz      loc_4c37a7
004c3794
004c3796   push    0
004c3798   push    0
004c379a   push    $1f
004c379c   call    -$ba7bd ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c379c
004c37a1   push    eax
004c37a2   call    -$ba3eb ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c37a2
004c37a7 loc_4c37a7:
004c37a7   call    -$ba428 ($409384)      ; segment%3.public%1004 (PCMAV.scr)
004c37a7
004c37ac   mov     eax, [$6aaeb0]
004c37b1   call    +$276a ($4c5f20)       ; segment%59.public%5998 (PCMAV.scr)
004c37b1
004c37b6   xor     edx, edx
004c37b8   push    ebp
004c37b9   push    $4c39f1                ; segment%0.public%227 (PCMAV.scr)
004c37be   push    dword ptr fs:[edx]
004c37c1   mov     fs:[edx], esp
004c37c4   mov     eax, [ebp-4]
004c37c7   or      byte ptr [eax+$358], 8
004c37ce   mov     eax, [ebp-4]
004c37d1   cmp     byte ptr [eax+$330], 0
004c37d8   jnz     loc_4c37f8
004c37d8
004c37da   mov     eax, [$6aaeb0]
004c37df   cmp     byte ptr [eax+$d4], 0
004c37e6   jz      loc_4c37f8
004c37e6
004c37e8   mov     eax, [ebp-4]
004c37eb   call    -$16f98 ($4ac858)      ; segment%55.public%5153 (PCMAV.scr)
004c37eb
004c37f0   mov     eax, [ebp-4]
004c37f3   call    -$137f0 ($4b0008)      ; segment%55.public%5291 (PCMAV.scr)
004c37f3
004c37f8 loc_4c37f8:
004c37f8   call    -$ba829 ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c37f8
004c37fd   mov     [ebp-$1c], eax
004c3800   call    -$77a1 ($4bc064)       ; segment%59.public%5660 (PCMAV.scr)
004c3800
004c3805   mov     [ebp-$10], eax
004c3808   mov     eax, [$6aaeb4]
004c380d   mov     ecx, [eax+$78]
004c3810   mov     eax, [$6aaeb4]
004c3815   mov     eax, [eax+$7c]
004c3818   xor     edx, edx
004c381a   call    -$55da3 ($46da7c)      ; segment%31.public%3072 (PCMAV.scr)
004c381a
004c381f   mov     eax, [$6aaeb4]
004c3824   mov     edx, [ebp-4]
004c3827   mov     [eax+$78], edx
004c382a   mov     eax, [$6aaeb4]
004c382f   movzx   eax, word ptr [eax+$44]
004c3833   mov     [ebp-$12], ax
004c3837   xor     edx, edx
004c3839   mov     eax, [$6aaeb4]
004c383e   call    +$1581 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c383e
004c3843   mov     eax, [$6aaeb4]
004c3848   mov     eax, [eax+$48]
004c384b   mov     [ebp-$18], eax
004c384e   xor     eax, eax
004c3850   call    -$7649 ($4bc20c)       ; segment%59.public%5666 (PCMAV.scr)
004c3850
004c3855   mov     [ebp-$c], eax
004c3858   xor     edx, edx
004c385a   push    ebp
004c385b   push    $4c39cf                ; segment%0.public%227 (PCMAV.scr)
004c3860   push    dword ptr fs:[edx]
004c3863   mov     fs:[edx], esp
004c3866   mov     eax, [ebp-4]
004c3869   call    -$242 ($4c362c)        ; segment%59.public%5890 (PCMAV.scr)
004c3869
004c386e   xor     edx, edx
004c3870   push    ebp
004c3871   push    $4c392e                ; segment%0.public%227 (PCMAV.scr)
004c3876   push    dword ptr fs:[edx]
004c3879   mov     fs:[edx], esp
004c387c   push    0
004c387e   push    0
004c3880   push    $b000
004c3885   mov     eax, [ebp-4]
004c3888   call    -$13861 ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3888
004c388d   push    eax
004c388e   call    -$ba4d7 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c388e
004c3893   mov     eax, [ebp-4]
004c3896   xor     edx, edx
004c3898   mov     [eax+$294], edx
004c3896
004c389e loc_4c389e:
004c389e   mov     eax, [$6aaeb0]
004c38a3   call    +$3984 ($4c722c)       ; segment%59.public%6027 (PCMAV.scr)
004c38a3
004c38a8   mov     eax, [$6aaeb0]
004c38ad   cmp     byte ptr [eax+$a4], 0
004c38b4   jz      loc_4c38c5
004c38b4
004c38b6   mov     eax, [ebp-4]
004c38b9   mov     dword ptr [eax+$294], 2
004c38c3   jmp     loc_4c38d9
004c38c3
004c38c3 ; ---------------------------------------------------------
004c38c3
004c38c5 loc_4c38c5:
004c38c5   mov     eax, [ebp-4]
004c38c8   cmp     dword ptr [eax+$294], 0
004c38cf   jz      loc_4c38d9
004c38cf
004c38d1   mov     eax, [ebp-4]
004c38d4   call    -$34d ($4c358c)        ; segment%59.public%5888 (PCMAV.scr)
004c38d4
004c38d9 loc_4c38d9:
004c38d9   mov     eax, [ebp-4]
004c38dc   mov     eax, [eax+$294]
004c38e2   test    eax, eax
004c38e4   jz      loc_4c389e
004c38e4
004c38e6   mov     [ebp-8], eax
004c38e9   push    0
004c38eb   push    0
004c38ed   push    $b001
004c38f2   mov     eax, [ebp-4]
004c38f5   call    -$138ce ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c38f5
004c38fa   push    eax
004c38fb   call    -$ba544 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c38fb
004c3900   mov     eax, [ebp-4]
004c3903   call    -$138dc ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3903
004c3908   mov     ebx, eax
004c390a   call    -$ba93b ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c390a
004c390f   cmp     ebx, eax
004c3911   jz      loc_4c3918
004c3911
004c3913   xor     eax, eax
004c3915   mov     [ebp-$1c], eax
004c3913
004c3918 loc_4c3918:
004c3918   xor     eax, eax
004c391a   pop     edx
004c391b   pop     ecx
004c391c   pop     ecx
004c391d   mov     fs:[eax], edx
004c3920   push    $4c3935
004c391d
004c3925 loc_4c3925:
004c3925   mov     eax, [ebp-4]
004c3928   call    -$309 ($4c3624)        ; segment%59.public%5889 (PCMAV.scr)
004c3928
004c392d   ret
004c392d
004c392d ; ---------------------------------------------------------
004c392d
004c392e   jmp     -$be9e3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c392e
004c3933   jmp     loc_4c3925
004c3933
004c3933 ; ---------------------------------------------------------
004c3933
004c3935   xor     eax, eax
004c3937   pop     edx
004c3938   pop     ecx
004c3939   pop     ecx
004c393a   mov     fs:[eax], edx
004c393d   push    $4c39d9
004c393a
004c3942 loc_4c3942:
004c3942   mov     eax, [$6aaeb4]
004c3947   mov     eax, [eax+$48]
004c394a   cmp     eax, [ebp-$18]
004c394d   jnz     loc_4c395f
004c394d
004c394f   movzx   edx, word ptr [ebp-$12]
004c3953   mov     eax, [$6aaeb4]
004c3958   call    +$1467 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3958
004c395d   jmp     loc_4c396b
004c395d
004c395d ; ---------------------------------------------------------
004c395d
004c395f loc_4c395f:
004c395f   xor     edx, edx
004c3961   mov     eax, [$6aaeb4]
004c3966   call    +$1459 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3966
004c396b loc_4c396b:
004c396b   mov     eax, [ebp-$c]
004c396e   call    -$76a3 ($4bc2d0)       ; segment%59.public%5667 (PCMAV.scr)
004c396e
004c3973   mov     eax, [$6aaeb4]
004c3978   mov     ebx, [eax+$7c]
004c397b   cmp     dword ptr [ebx+8], 0
004c397f   jle     loc_4c39a3
004c397f
004c3981   mov     eax, ebx
004c3983   call    -$55f90 ($46d9f8)      ; segment%31.public%3068 (PCMAV.scr)
004c3983
004c3988   mov     esi, eax
004c398a   mov     eax, [$6aaeb4]
004c398f   mov     [eax+$78], esi
004c3992   mov     edx, esi
004c3994   mov     eax, [$6aaeb4]
004c3999   mov     eax, [eax+$7c]
004c399c   call    -$55e05 ($46db9c)      ; segment%31.public%3076 (PCMAV.scr)
004c399c
004c39a1   jmp     loc_4c39ad
004c39a1
004c39a1 ; ---------------------------------------------------------
004c39a1
004c39a3 loc_4c39a3:
004c39a3   mov     eax, [$6aaeb4]
004c39a8   xor     edx, edx
004c39aa   mov     [eax+$78], edx
004c39a8
004c39ad loc_4c39ad:
004c39ad   cmp     dword ptr [ebp-$1c], 0
004c39b1   jz      loc_4c39bc
004c39b1
004c39b3   mov     eax, [ebp-$1c]
004c39b6   push    eax
004c39b7   call    -$ba5d0 ($4093ec)      ; segment%3.public%1017 (PCMAV.scr)
004c39b7
004c39bc loc_4c39bc:
004c39bc   mov     eax, [ebp-$10]
004c39bf   call    -$7958 ($4bc06c)       ; segment%59.public%5661 (PCMAV.scr)
004c39bf
004c39c4   mov     eax, [ebp-4]
004c39c7   and     byte ptr [eax+$358], -9
004c39ce   ret
004c39ce
004c39ce ; ---------------------------------------------------------
004c39ce
004c39cf   jmp     -$bea84 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39cf
004c39d4   jmp     loc_4c3942
004c39d4
004c39d4 ; ---------------------------------------------------------
004c39d4
004c39d9   xor     eax, eax
004c39db   pop     edx
004c39dc   pop     ecx
004c39dd   pop     ecx
004c39de   mov     fs:[eax], edx
004c39e1   push    $4c39f8
004c39de
004c39e6 loc_4c39e6:
004c39e6   mov     eax, [$6aaeb0]
004c39eb   call    +$255c ($4c5f4c)       ; segment%59.public%5999 (PCMAV.scr)
004c39eb
004c39f0   ret
004c39f0
004c39f0 ; ---------------------------------------------------------
004c39f0
004c39f1   jmp     -$beaa6 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39f1
004c39f6   jmp     loc_4c39e6
004c39f6
004c39f6 ; ---------------------------------------------------------
004c39f6
004c39f8   xor     eax, eax
004c39fa   pop     edx
004c39fb   pop     ecx
004c39fc   pop     ecx
004c39fd   mov     fs:[eax], edx
004c3a00   push    $4c3a15
004c39fd
004c3a05 loc_4c3a05:
004c3a05   lea     eax, [ebp-$20]
004c3a08   call    -$be28d ($405780)      ; segment%0.public%253 (PCMAV.scr)
004c3a08
004c3a0d   ret
004c3a0d
004c3a0d ; ---------------------------------------------------------
004c3a0d
004c3a0e   jmp     -$beac3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c3a0e
004c3a13   jmp     loc_4c3a05
004c3a13
004c3a13 ; ---------------------------------------------------------
004c3a13
004c3a15   mov     eax, [ebp-8]
004c3a18   pop     esi
004c3a19   pop     ebx
004c3a1a   mov     esp, ebp
004c3a1c   pop     ebp
004c3a1d   ret

Like Fan Page Majalah PC Media : http://www.facebook.com/pages/Majalah-P … 1773385582
Follow Akun Twitter Majalah PC Media : https://twitter.com/PCMedia_ID

**indraramadhan094** · 29-12-2011 22:46:53

indraramadhan094
Moderator
Offline

From: Kota Tangerang, Banten
Registered: 04-04-2010
Posts: 545
User Karma: 13

Re: PCMAV 6.2 + Clamav 0.97

date/time         : 2011-12-29, 20:51:57, 78ms
computer name     : INDRA
user name         : Administrator <admin>
registered owner  : Administrator
operating system  : Windows XP Service Pack 3 build 2600
system language   : English
system up time    : 11 hours 43 minutes
program up time   : 10 seconds
processors        : 2x Intel(R) Pentium(R) D CPU 2.66GHz
physical memory   : 471/958 MB (free/total)
free disk space   : (C:) 42.76 GB
display mode      : 1024x768, 32 bit
process id        : $338
allocated memory  : 60.67 MB
command line      : "C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2\PCMAV.scr" /S
executable        : PCMAV.scr
exec. date/time   : 2011-11-08 13:26
version           : 6.2.0.0
compiled with     : Delphi 2006/07
madExcept version : 3.0n
PCMAV.scr.mad     : $000270c8, $32fc3f68, $d01a3045
callstack crc     : $903b8115, $d2d66229, $d2d66229
count             : 2
exception number  : 1
exception class   : EInvalidOperation
exception message : Cannot make a visible window modal.

main thread ($db8):
004c378d +071 PCMAV.scr  segment%59  public%5894
004a7de7 +02f PCMAV.scr  segment%55  public%4938
004bed6e +03a PCMAV.scr  segment%59  public%5770
0068d093 +01f PCMAV.scr  segment%292 public%13164
004a9a54 +064 PCMAV.scr  segment%55  public%5023
004a9ecf +06b PCMAV.scr  segment%55  public%5040
004a954f +2bb PCMAV.scr  segment%55  public%5016
004ad1d8 +18c PCMAV.scr  segment%55  public%5163
004a91dc +024 PCMAV.scr  segment%55  public%5012
004ad039 +0a1 PCMAV.scr  segment%55  public%5162
004ad400 +3b4 PCMAV.scr  segment%55  public%5163
004acc70 +02c PCMAV.scr  segment%55  public%5158
004788b4 +014 PCMAV.scr  segment%31  public%3553
7e4196c2 +00a USER32.dll             DispatchMessageA
004c71fc +0fc PCMAV.scr  segment%59  public%6025
004c7236 +00a PCMAV.scr  segment%59  public%6027
004c38a3 +187 PCMAV.scr  segment%59  public%5894
0068d093 +01f PCMAV.scr  segment%292 public%13164
004a9a54 +064 PCMAV.scr  segment%55  public%5023
004a9ecf +06b PCMAV.scr  segment%55  public%5040
004a954f +2bb PCMAV.scr  segment%55  public%5016
004ad1d8 +18c PCMAV.scr  segment%55  public%5163
004a91dc +024 PCMAV.scr  segment%55  public%5012
004ad039 +0a1 PCMAV.scr  segment%55  public%5162
004ad400 +3b4 PCMAV.scr  segment%55  public%5163
004acc70 +02c PCMAV.scr  segment%55  public%5158
004788b4 +014 PCMAV.scr  segment%31  public%3553
7e4196c2 +00a USER32.dll             DispatchMessageA
004c71fc +0fc PCMAV.scr  segment%59  public%6025
004c7236 +00a PCMAV.scr  segment%59  public%6027
004c7547 +0b3 PCMAV.scr  segment%59  public%6032
00692305 +1c9 PCMAV.scr  segment%427 public%13315

thread $fcc:
7c90df48 +a ntdll.dll  NtWaitForMultipleObjects

thread $48c (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($db8) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $c6c (TWndProc): <suspended>
00669917 +1f PCMAV.scr segment%283 public%12870

thread $af0:
7c90d9d8 +00a ntdll.dll                NtReadFile
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $638 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $f74 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($db8) at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $8a8:
7c90d218 +a ntdll.dll  NtDelayExecution

thread $954:
7c90da48 +a ntdll.dll  NtRemoveIoCompletion

thread $240: <priority:1>
7c90da48 +0a ntdll.dll              NtRemoveIoCompletion
00455385 +0d PCMAV.scr   segment%23 public%2360
004553ef +37 PCMAV.scr   segment%23 public%2361
>> created by main thread ($db8) at:
02ffd926 +00 mswsock.dll

thread $804 (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($db8) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $4fc (TRegMonitorThread):
7c90df58 +0a ntdll.dll                NtWaitForSingleObject
7c8025d5 +85 kernel32.dll             WaitForSingleObjectEx
7c80253d +0d kernel32.dll             WaitForSingleObject
0067b015 +15 PCMAV.scr    segment%289 public%13029
004554a3 +2b PCMAV.scr    segment%23  public%2362
00477140 +34 PCMAV.scr    segment%31  public%3446
004056f4 +28 PCMAV.scr    segment%0   public%250
00455385 +0d PCMAV.scr    segment%23  public%2360
004553ef +37 PCMAV.scr    segment%23  public%2361
>> created by main thread ($db8) at:
0067aef7 +1b PCMAV.scr    segment%289 public%13026

thread $9bc:
7c90d9d8 +00a ntdll.dll                NtReadFile
7c801873 +061 kernel32.dll             ReadFile
005b7e4d +1e5 PCMAV.scr    segment%209 public%10674
00455385 +00d PCMAV.scr    segment%23  public%2360
004553ef +037 PCMAV.scr    segment%23  public%2361
>> created by thread $b38 at:
005b80bc +22c PCMAV.scr    segment%209 public%10675

thread $ce0 (TgtTimerThread):
7c90df58 +0a ntdll.dll               NtWaitForSingleObject
7c8025d5 +85 kernel32.dll            WaitForSingleObjectEx
7c80253d +0d kernel32.dll            WaitForSingleObject
004d484b +13 PCMAV.scr    segment%65 public%6344
004554a3 +2b PCMAV.scr    segment%23 public%2362
00477140 +34 PCMAV.scr    segment%31 public%3446
004056f4 +28 PCMAV.scr    segment%0  public%250
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by thread $b38 at:
004d47c6 +1e PCMAV.scr    segment%65 public%6341

thread $574:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by main thread ($db8) at:
77e7d10d +00 RPCRT4.dll

thread $7a0:
7c90d218 +0a ntdll.dll               NtDelayExecution
7c8023eb +4b kernel32.dll            SleepEx
7c802450 +0a kernel32.dll            Sleep
00455385 +0d PCMAV.scr    segment%23 public%2360
004553ef +37 PCMAV.scr    segment%23 public%2361
>> created by main thread ($db8) at:
775309b3 +00 ole32.dll

thread $c98:
7c90daa8 +0a ntdll.dll             NtReplyWaitReceivePortEx
00455385 +0d PCMAV.scr  segment%23 public%2360
004553ef +37 PCMAV.scr  segment%23 public%2361
>> created by thread $574 at:
77e7d10d +00 RPCRT4.dll

processes:
000 Idle                      0   0
004 System                    0   0   normal
560 smss.exe                  0   0   normal C:\WINDOWS\system32
590 csrss.exe                 64  66  normal C:\WINDOWS\system32
5ac winlogon.exe              51  14  high   C:\WINDOWS\system32
5d8 services.exe              4   2   normal C:\WINDOWS\system32
5e4 lsass.exe                 6   3   normal C:\WINDOWS\system32
6a0 svchost.exe               4   1   normal C:\WINDOWS\system32
6e4 svchost.exe               4   2   normal C:\WINDOWS\system32
7d4 SbieSvc.exe               4   1   normal C:\Program Files\Sandboxie
7e8 svchost.exe               11  36  normal C:\WINDOWS\System32
204 svchost.exe               4   1   normal C:\WINDOWS\system32
288 svchost.exe               4   8   normal C:\WINDOWS\system32
360 spoolsv.exe               4   4   normal C:\WINDOWS\system32
330 Explorer.EXE              646 269 normal C:\WINDOWS
728 egui.exe                  217 70  normal C:\Program Files\ESET\ESET Smart Security
740 VTTimer.exe               22  5   normal C:\WINDOWS\system32
74c VTtrayp.exe               26  5   normal C:\WINDOWS\system32
788 ctfmon.exe                28  12  normal C:\WINDOWS\system32
748 ekrn.exe                  23  11  normal C:\Program Files\ESET\ESET Smart Security
12c sqlservr.exe              4   1   normal C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn
278 sqlwriter.exe             4   2   normal C:\Program Files\Microsoft SQL Server\90\Shared
a9c alg.exe                   4   2   normal C:\WINDOWS\System32
e48 wscntfy.exe               33  10  normal C:\WINDOWS\system32
de8 DllHost.exe               8   4   normal C:\WINDOWS\system32
97c taskmgr.exe               123 130 high   C:\WINDOWS\system32
790 SbieCtrl.exe              159 69  normal C:\Program Files\Sandboxie
fb4 PresentationFontCache.exe 4   1   normal c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF
fd4 adb.exe                   8   1   normal C:\Documents and Settings\Administrator\My Documents\Downloads\Compressed\SuperOneClickv2.1.1-ShortFuse\ADB
83c ping.exe                  8   1   normal C:\WINDOWS\system32
2ac ping.exe                  8   1   normal C:\WINDOWS\system32
260 IDMan.exe                 400 159 normal C:\Program Files\Internet Download Manager
464 wmplayer.exe              752 134 normal C:\Program Files\Windows Media Player
338 PCMAV.scr                 281 174 normal C:\Documents and Settings\Administrator\My Documents\Downloads\PCMAV Asgard 6.2

cpu registers:
eax = 01663240
ebx = 01620100
ecx = 01663240
edx = 004c378d
esi = 004a99f0
edi = 0012f974
eip = 004c378d
esp = 0012f79c
ebp = 0012f800

stack dump:
0012f79c  8d 37 4c 00 de fa ed 0e - 01 00 00 00 07 00 00 00  .7L.............
0012f7ac  b0 f7 12 00 8d 37 4c 00 - 40 32 66 01 00 01 62 01  .....7L.@2f...b.
0012f7bc  f0 99 4a 00 74 f9 12 00 - 00 f8 12 00 cc f7 12 00  ..J.t...........
0012f7cc  f8 f9 12 00 d0 4f 40 00 - 00 f8 12 00 f0 99 4a 00  .....O@.......J.
0012f7dc  00 01 62 01 00 00 00 00 - ea 7d 4a 00 74 f9 12 00  ..b......}J.t...
0012f7ec  f0 27 62 01 00 00 00 00 - 73 ed 4b 00 f0 99 4a 00  .'b.....s.K...J.
0012f7fc  10 0a b4 02 08 f8 12 00 - 99 d0 68 00 68 f9 12 00  ..........h.h...
0012f80c  5a 9a 4a 00 00 01 62 01 - d4 9e 4a 00 05 00 0b 00  Z.J...b...J.....
0012f81c  05 00 00 00 0b 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f82c  06 00 00 00 0d 00 00 00 - 02 02 82 00 00 01 62 01  ..............b.
0012f83c  74 f9 12 00 52 95 4a 00 - 02 02 82 00 28 fa 12 00  t...R.J.....(...
0012f84c  00 01 62 01 01 01 01 01 - 01 00 01 01 01 00 00 00  ..b.............
0012f85c  01 00 00 00 01 00 00 01 - 01 01 01 00 00 00 01 00  ................
0012f86c  01 01 01 00 01 01 01 01 - 01 00 00 01 00 00 00 00  ................
0012f87c  00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f88c  01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f89c  00 00 00 01 01 01 00 00 - 00 00 00 00 00 00 00 00  ................
0012f8ac  00 00 00 00 00 00 00 00 - 00 00 00 00 01 00 00 00  ................
0012f8bc  01 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00  ................
0012f8cc  00 00 00 00 00 00 00 00 - 00 00 00 00 00 01 00 00  ................

disassembling:
004c371c public segment%59.public%5894 (PCMAV.scr):  ; function entry point
004c371c   push    ebp
004c371d   mov     ebp, esp
004c371f   add     esp, -$20
004c3722   push    ebx
004c3723   push    esi
004c3724   xor     edx, edx
004c3726   mov     [ebp-$20], edx
004c3729   mov     [ebp-4], eax
004c372c   xor     eax, eax
004c372e   push    ebp
004c372f   push    $4c3a0e                ; segment%0.public%227 (PCMAV.scr)
004c3734   push    dword ptr fs:[eax]
004c3737   mov     fs:[eax], esp
004c373a   call    -$1d38b ($4a63b4)      ; segment%55.public%4850 (PCMAV.scr)
004c373a
004c373f   mov     eax, [ebp-4]
004c3742   cmp     byte ptr [eax+$57], 0
004c3746   jnz     loc_4c376c
004c3746
004c3748   mov     eax, [ebp-4]
004c374b   mov     edx, [eax]
004c374d   call    dword ptr [edx+$50]
004c374d
004c3750   test    al, al
004c3752   jz      loc_4c376c
004c3752
004c3754   mov     eax, [ebp-4]
004c3757   test    byte ptr [eax+$358], 8
004c375e   jnz     loc_4c376c
004c375e
004c3760   mov     eax, [ebp-4]
004c3763   cmp     byte ptr [eax+$277], 1
004c376a   jnz     loc_4c378d
004c376a
004c376c loc_4c376c:
004c376c   lea     edx, [ebp-$20]
004c376f   mov     eax, [$6a3e14]
004c3774   call    -$bba29 ($407d50)      ; segment%0.public%388 (PCMAV.scr)
004c3774
004c3779   mov     ecx, [ebp-$20]
004c377c   mov     dl, 1
004c377e   mov     eax, [$46add8]
004c3783   call    -$63668 ($460120)      ; segment%26.public%2635 (PCMAV.scr)
004c3783
004c3788   call    -$be699 ($4050f4)      ; segment%0.public%230 (PCMAV.scr)
004c3788
004c378d loc_4c378d:
004c378d > call    -$ba7ae ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c378d
004c3792   test    eax, eax
004c3794   jz      loc_4c37a7
004c3794
004c3796   push    0
004c3798   push    0
004c379a   push    $1f
004c379c   call    -$ba7bd ($408fe4)      ; segment%3.public%888 (PCMAV.scr)
004c379c
004c37a1   push    eax
004c37a2   call    -$ba3eb ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c37a2
004c37a7 loc_4c37a7:
004c37a7   call    -$ba428 ($409384)      ; segment%3.public%1004 (PCMAV.scr)
004c37a7
004c37ac   mov     eax, [$6aaeb0]
004c37b1   call    +$276a ($4c5f20)       ; segment%59.public%5998 (PCMAV.scr)
004c37b1
004c37b6   xor     edx, edx
004c37b8   push    ebp
004c37b9   push    $4c39f1                ; segment%0.public%227 (PCMAV.scr)
004c37be   push    dword ptr fs:[edx]
004c37c1   mov     fs:[edx], esp
004c37c4   mov     eax, [ebp-4]
004c37c7   or      byte ptr [eax+$358], 8
004c37ce   mov     eax, [ebp-4]
004c37d1   cmp     byte ptr [eax+$330], 0
004c37d8   jnz     loc_4c37f8
004c37d8
004c37da   mov     eax, [$6aaeb0]
004c37df   cmp     byte ptr [eax+$d4], 0
004c37e6   jz      loc_4c37f8
004c37e6
004c37e8   mov     eax, [ebp-4]
004c37eb   call    -$16f98 ($4ac858)      ; segment%55.public%5153 (PCMAV.scr)
004c37eb
004c37f0   mov     eax, [ebp-4]
004c37f3   call    -$137f0 ($4b0008)      ; segment%55.public%5291 (PCMAV.scr)
004c37f3
004c37f8 loc_4c37f8:
004c37f8   call    -$ba829 ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c37f8
004c37fd   mov     [ebp-$1c], eax
004c3800   call    -$77a1 ($4bc064)       ; segment%59.public%5660 (PCMAV.scr)
004c3800
004c3805   mov     [ebp-$10], eax
004c3808   mov     eax, [$6aaeb4]
004c380d   mov     ecx, [eax+$78]
004c3810   mov     eax, [$6aaeb4]
004c3815   mov     eax, [eax+$7c]
004c3818   xor     edx, edx
004c381a   call    -$55da3 ($46da7c)      ; segment%31.public%3072 (PCMAV.scr)
004c381a
004c381f   mov     eax, [$6aaeb4]
004c3824   mov     edx, [ebp-4]
004c3827   mov     [eax+$78], edx
004c382a   mov     eax, [$6aaeb4]
004c382f   movzx   eax, word ptr [eax+$44]
004c3833   mov     [ebp-$12], ax
004c3837   xor     edx, edx
004c3839   mov     eax, [$6aaeb4]
004c383e   call    +$1581 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c383e
004c3843   mov     eax, [$6aaeb4]
004c3848   mov     eax, [eax+$48]
004c384b   mov     [ebp-$18], eax
004c384e   xor     eax, eax
004c3850   call    -$7649 ($4bc20c)       ; segment%59.public%5666 (PCMAV.scr)
004c3850
004c3855   mov     [ebp-$c], eax
004c3858   xor     edx, edx
004c385a   push    ebp
004c385b   push    $4c39cf                ; segment%0.public%227 (PCMAV.scr)
004c3860   push    dword ptr fs:[edx]
004c3863   mov     fs:[edx], esp
004c3866   mov     eax, [ebp-4]
004c3869   call    -$242 ($4c362c)        ; segment%59.public%5890 (PCMAV.scr)
004c3869
004c386e   xor     edx, edx
004c3870   push    ebp
004c3871   push    $4c392e                ; segment%0.public%227 (PCMAV.scr)
004c3876   push    dword ptr fs:[edx]
004c3879   mov     fs:[edx], esp
004c387c   push    0
004c387e   push    0
004c3880   push    $b000
004c3885   mov     eax, [ebp-4]
004c3888   call    -$13861 ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3888
004c388d   push    eax
004c388e   call    -$ba4d7 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c388e
004c3893   mov     eax, [ebp-4]
004c3896   xor     edx, edx
004c3898   mov     [eax+$294], edx
004c3896
004c389e loc_4c389e:
004c389e   mov     eax, [$6aaeb0]
004c38a3   call    +$3984 ($4c722c)       ; segment%59.public%6027 (PCMAV.scr)
004c38a3
004c38a8   mov     eax, [$6aaeb0]
004c38ad   cmp     byte ptr [eax+$a4], 0
004c38b4   jz      loc_4c38c5
004c38b4
004c38b6   mov     eax, [ebp-4]
004c38b9   mov     dword ptr [eax+$294], 2
004c38c3   jmp     loc_4c38d9
004c38c3
004c38c3 ; ---------------------------------------------------------
004c38c3
004c38c5 loc_4c38c5:
004c38c5   mov     eax, [ebp-4]
004c38c8   cmp     dword ptr [eax+$294], 0
004c38cf   jz      loc_4c38d9
004c38cf
004c38d1   mov     eax, [ebp-4]
004c38d4   call    -$34d ($4c358c)        ; segment%59.public%5888 (PCMAV.scr)
004c38d4
004c38d9 loc_4c38d9:
004c38d9   mov     eax, [ebp-4]
004c38dc   mov     eax, [eax+$294]
004c38e2   test    eax, eax
004c38e4   jz      loc_4c389e
004c38e4
004c38e6   mov     [ebp-8], eax
004c38e9   push    0
004c38eb   push    0
004c38ed   push    $b001
004c38f2   mov     eax, [ebp-4]
004c38f5   call    -$138ce ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c38f5
004c38fa   push    eax
004c38fb   call    -$ba544 ($4093bc)      ; segment%3.public%1011 (PCMAV.scr)
004c38fb
004c3900   mov     eax, [ebp-4]
004c3903   call    -$138dc ($4b002c)      ; segment%55.public%5292 (PCMAV.scr)
004c3903
004c3908   mov     ebx, eax
004c390a   call    -$ba93b ($408fd4)      ; segment%3.public%886 (PCMAV.scr)
004c390a
004c390f   cmp     ebx, eax
004c3911   jz      loc_4c3918
004c3911
004c3913   xor     eax, eax
004c3915   mov     [ebp-$1c], eax
004c3913
004c3918 loc_4c3918:
004c3918   xor     eax, eax
004c391a   pop     edx
004c391b   pop     ecx
004c391c   pop     ecx
004c391d   mov     fs:[eax], edx
004c3920   push    $4c3935
004c391d
004c3925 loc_4c3925:
004c3925   mov     eax, [ebp-4]
004c3928   call    -$309 ($4c3624)        ; segment%59.public%5889 (PCMAV.scr)
004c3928
004c392d   ret
004c392d
004c392d ; ---------------------------------------------------------
004c392d
004c392e   jmp     -$be9e3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c392e
004c3933   jmp     loc_4c3925
004c3933
004c3933 ; ---------------------------------------------------------
004c3933
004c3935   xor     eax, eax
004c3937   pop     edx
004c3938   pop     ecx
004c3939   pop     ecx
004c393a   mov     fs:[eax], edx
004c393d   push    $4c39d9
004c393a
004c3942 loc_4c3942:
004c3942   mov     eax, [$6aaeb4]
004c3947   mov     eax, [eax+$48]
004c394a   cmp     eax, [ebp-$18]
004c394d   jnz     loc_4c395f
004c394d
004c394f   movzx   edx, word ptr [ebp-$12]
004c3953   mov     eax, [$6aaeb4]
004c3958   call    +$1467 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3958
004c395d   jmp     loc_4c396b
004c395d
004c395d ; ---------------------------------------------------------
004c395d
004c395f loc_4c395f:
004c395f   xor     edx, edx
004c3961   mov     eax, [$6aaeb4]
004c3966   call    +$1459 ($4c4dc4)       ; segment%59.public%5966 (PCMAV.scr)
004c3966
004c396b loc_4c396b:
004c396b   mov     eax, [ebp-$c]
004c396e   call    -$76a3 ($4bc2d0)       ; segment%59.public%5667 (PCMAV.scr)
004c396e
004c3973   mov     eax, [$6aaeb4]
004c3978   mov     ebx, [eax+$7c]
004c397b   cmp     dword ptr [ebx+8], 0
004c397f   jle     loc_4c39a3
004c397f
004c3981   mov     eax, ebx
004c3983   call    -$55f90 ($46d9f8)      ; segment%31.public%3068 (PCMAV.scr)
004c3983
004c3988   mov     esi, eax
004c398a   mov     eax, [$6aaeb4]
004c398f   mov     [eax+$78], esi
004c3992   mov     edx, esi
004c3994   mov     eax, [$6aaeb4]
004c3999   mov     eax, [eax+$7c]
004c399c   call    -$55e05 ($46db9c)      ; segment%31.public%3076 (PCMAV.scr)
004c399c
004c39a1   jmp     loc_4c39ad
004c39a1
004c39a1 ; ---------------------------------------------------------
004c39a1
004c39a3 loc_4c39a3:
004c39a3   mov     eax, [$6aaeb4]
004c39a8   xor     edx, edx
004c39aa   mov     [eax+$78], edx
004c39a8
004c39ad loc_4c39ad:
004c39ad   cmp     dword ptr [ebp-$1c], 0
004c39b1   jz      loc_4c39bc
004c39b1
004c39b3   mov     eax, [ebp-$1c]
004c39b6   push    eax
004c39b7   call    -$ba5d0 ($4093ec)      ; segment%3.public%1017 (PCMAV.scr)
004c39b7
004c39bc loc_4c39bc:
004c39bc   mov     eax, [ebp-$10]
004c39bf   call    -$7958 ($4bc06c)       ; segment%59.public%5661 (PCMAV.scr)
004c39bf
004c39c4   mov     eax, [ebp-4]
004c39c7   and     byte ptr [eax+$358], -9
004c39ce   ret
004c39ce
004c39ce ; ---------------------------------------------------------
004c39ce
004c39cf   jmp     -$bea84 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39cf
004c39d4   jmp     loc_4c3942
004c39d4
004c39d4 ; ---------------------------------------------------------
004c39d4
004c39d9   xor     eax, eax
004c39db   pop     edx
004c39dc   pop     ecx
004c39dd   pop     ecx
004c39de   mov     fs:[eax], edx
004c39e1   push    $4c39f8
004c39de
004c39e6 loc_4c39e6:
004c39e6   mov     eax, [$6aaeb0]
004c39eb   call    +$255c ($4c5f4c)       ; segment%59.public%5999 (PCMAV.scr)
004c39eb
004c39f0   ret
004c39f0
004c39f0 ; ---------------------------------------------------------
004c39f0
004c39f1   jmp     -$beaa6 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c39f1
004c39f6   jmp     loc_4c39e6
004c39f6
004c39f6 ; ---------------------------------------------------------
004c39f6
004c39f8   xor     eax, eax
004c39fa   pop     edx
004c39fb   pop     ecx
004c39fc   pop     ecx
004c39fd   mov     fs:[eax], edx
004c3a00   push    $4c3a15
004c39fd
004c3a05 loc_4c3a05:
004c3a05   lea     eax, [ebp-$20]
004c3a08   call    -$be28d ($405780)      ; segment%0.public%253 (PCMAV.scr)
004c3a08
004c3a0d   ret
004c3a0d
004c3a0d ; ---------------------------------------------------------
004c3a0d
004c3a0e   jmp     -$beac3 ($404f50)      ; segment%0.public%227 (PCMAV.scr)
004c3a0e
004c3a13   jmp     loc_4c3a05
004c3a13
004c3a13 ; ---------------------------------------------------------
004c3a13
004c3a15   mov     eax, [ebp-8]
004c3a18   pop     esi
004c3a19   pop     ebx
004c3a1a   mov     esp, ebp
004c3a1c   pop     ebp
004c3a1d   ret

Like Fan Page Majalah PC Media : http://www.facebook.com/pages/Majalah-P … 1773385582
Follow Akun Twitter Majalah PC Media : https://twitter.com/PCMedia_ID

> PENGUMUMAN <

[ Closed ] PCMAV 6.2 + Clamav 0.97 (Page 1 of 2)

Posts [ 1 to 25 of 42 ]

1 Topic by Rahman 18-12-2011 05:55:44

Topic: PCMAV 6.2 + Clamav 0.97

2 Reply by Fandy 18-12-2011 17:36:49

Re: PCMAV 6.2 + Clamav 0.97

3 Reply by Rahman 19-12-2011 19:31:46

Re: PCMAV 6.2 + Clamav 0.97

4 Reply by fajar.anggiawan 20-12-2011 09:33:46

Re: PCMAV 6.2 + Clamav 0.97

5 Reply by Rahman 20-12-2011 13:01:11

Re: PCMAV 6.2 + Clamav 0.97

6 Reply by fajar.anggiawan 20-12-2011 13:25:53

Re: PCMAV 6.2 + Clamav 0.97

7 Reply by Rahman 20-12-2011 13:35:00

Re: PCMAV 6.2 + Clamav 0.97

8 Reply by fajar.anggiawan 20-12-2011 13:46:46

Re: PCMAV 6.2 + Clamav 0.97

9 Reply by Rahman 20-12-2011 14:05:30

Re: PCMAV 6.2 + Clamav 0.97

10 Reply by fajar.anggiawan 20-12-2011 14:15:48

Re: PCMAV 6.2 + Clamav 0.97

11 Reply by Rahman 20-12-2011 14:23:02

Re: PCMAV 6.2 + Clamav 0.97

12 Reply by Rahman 20-12-2011 14:28:15

Re: PCMAV 6.2 + Clamav 0.97

13 Reply by fajar.anggiawan 20-12-2011 14:53:13

Re: PCMAV 6.2 + Clamav 0.97

14 Reply by Rahman 21-12-2011 12:16:26

Re: PCMAV 6.2 + Clamav 0.97

15 Reply by fajar.anggiawan 21-12-2011 22:33:58

Re: PCMAV 6.2 + Clamav 0.97

16 Reply by Rahman 23-12-2011 04:52:59

Re: PCMAV 6.2 + Clamav 0.97

17 Reply by ondenkz 24-12-2011 01:34:10

Re: PCMAV 6.2 + Clamav 0.97

18 Reply by Fandy 24-12-2011 06:02:43

Re: PCMAV 6.2 + Clamav 0.97

19 Reply by Rahman 24-12-2011 18:20:32

Re: PCMAV 6.2 + Clamav 0.97

20 Reply by fajar.anggiawan 24-12-2011 19:21:13

Re: PCMAV 6.2 + Clamav 0.97

21 Reply by Rahman 24-12-2011 20:05:11

Re: PCMAV 6.2 + Clamav 0.97

22 Reply by fajar.anggiawan 24-12-2011 21:56:12

Re: PCMAV 6.2 + Clamav 0.97

23 Reply by Rahman 24-12-2011 22:10:40

Re: PCMAV 6.2 + Clamav 0.97

24 Reply by indraramadhan094 29-12-2011 22:44:03

Re: PCMAV 6.2 + Clamav 0.97

25 Reply by indraramadhan094 29-12-2011 22:46:53

Re: PCMAV 6.2 + Clamav 0.97

Posts [ 1 to 25 of 42 ]