I’ve made a long list of all the things I own and I’ve put them all up for sale, some of it breaks my heart to sell especially my mafia DVDs.

On another note, I might have lost my police record and my birth certificate after leaving it the pub drunk. I’ll find out later today.

I know it’s early but check out this letter to Santa. If anyone has an actual video of Cow Tipping I would like to see it. Me and some friends wanted to do once when we were kids but we could only find a bull and we didn’t fancy our chances.

The reason why I didn’t post yesterday is because I was to busy fixing a friends PC. The bottom line is if you have a problem with your PC you often find a fix on a blog or a forum some where. Even today’s latest firewalls and anti-virus software can’t fix certain bugs. Leaving me to think these bastards actually create the problem to eventually sell a fix. Ok here is the problem in case someone else has this problem. I got some bad malaware that took over and high jacked my home page in IE with a bogus message: 

Detected Spyware! System error #384

Your IP address is XX.XXX.XX.XX. Using this address a remote computer has gained access to your computer and probably is collecting the information about the sites you’ve visited and the files contained in the folder Temporary Internet Files. Attention! Ask for help of install the software for deleting secret information about the sites you visited”. Here is the fix if you are unfortunate to get this problem:  

Click here to download ewido security suite – it is a trial version of the program.   

• Install ewido security suite
•  When installing, under “Additional Options” uncheck “Install background guard” and “Install scan via context menu”. 
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen 
• You will need to update ewido to the latest definition files.
• On the left hand side of the main screen click update  
• Then click on Start Update  

The update will start and a progress bar will show the updates being installed. If you are having problems with the updater, you can use this link to manually update ewido. Then:

• Click on scanner
• Click on Complete System Scan and the scan will begin (do not open any folders or open the windows control panel while the scan is in progress).
• While the scan is in progress you will be prompted to clean files, click OK
• When it asks if you want to clean the first file, put a check in the lower left corner of the box that says “Perform action on all infections” then choose clean and click OK.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop.

Now close ewido security suite.Rescan with HJT and post a new log here together with the ewido log so that any remnants can be removed manually.
If you are running HijackThis from the Desktop; please create a new folder for it and move the program into the new folder.

Click here to download Killbox by Option^Explicit. Extract it from the zip file then double-click on Killbox.exe to run it. In the ‘Full Path of File to Delete’ box, copy and paste the following, clicking the red ‘Delete File’ button (red circle with a white X) after pasting each one:

C:\Program Files\Common Files\Microsoft
Shared\Web Folders\ibm00001.exe 
C:\WINDOWS\inet20003\services.exe

Click ‘Exit’ when done.

Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking ‘fixed checked’:

Click ‘Exit’ when done. Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking ‘fixed checked’:

R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
F2 – REG:system.ini: Shell=explorer.exe “C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe”
F3 – REG:win.ini: run=C:\WINDOWS\inet20003\services.exe
O4 – HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 – HKCU\..\Run: [Shell] “C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe”

Exit HijackThis when done. Reboot, rescan with HijackThis.