<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Digital Media Works</title>
	<atom:link href="http://digital-media-works.co.uk/articles/feed/" rel="self" type="application/rss+xml" />
	<link>http://digital-media-works.co.uk/articles</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Sun, 24 Jul 2011 21:07:16 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>How to remove goingonearth virus from windows 7</title>
		<link>http://digital-media-works.co.uk/articles/2011/07/24/how-to-remove-goingonearth-virus-from-windows-7/</link>
		<comments>http://digital-media-works.co.uk/articles/2011/07/24/how-to-remove-goingonearth-virus-from-windows-7/#comments</comments>
		<pubDate>Sun, 24 Jul 2011 21:07:16 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[Windows]]></category>
		<category><![CDATA[goingonearth]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[virus]]></category>

		<guid isPermaLink="false">http://digital-media-works.co.uk/articles/?p=32</guid>
		<description><![CDATA[Despite scanning a file I had received, without issue, I knew something was wrong  within seconds of opening it. The file itself disappeared from the my folder view and my system went into a &#8216;Microsoft minutes&#8217; moment. I pulled up taskmanger via right clicking on the taskbar and ended as many non-essential processes as I [...]]]></description>
			<content:encoded><![CDATA[<p>Despite scanning a file I had received, without issue, I knew something was wrong  within seconds of opening it. The file itself disappeared from the my folder view and my system went into a &#8216;Microsoft minutes&#8217; moment. I pulled up taskmanger via right clicking on the taskbar and ended as many non-essential processes as I could identify. I tasked an on boot scan and left the machine to it.</p>
<p>Couple of hours later&#8230; on boot scan completed I spot immediately that that security centre is disabled and security essentials isn&#8217;t able to start &#8211; without thinking I start to google &#8216;starting security centre&#8217; and find I am redirected to goingonearth.com search results (with a blank webpage).</p>
<p class="ListHead">System OS &#8211; <em style="font-weight: normal;">very high level view</em></p>
<ul>
<li>Windows 7 64bit &#8211; patched up to date.</li>
<li>Microsoft Security Essentials &#8211; fully updated.</li>
<li>Windows firewall.</li>
</ul>
<p class="ListHead">Symptoms -</p>
<ul>
<li>No security</li>
<li>No windows updates</li>
<li>No System Restore</li>
<li>browser redirection to <span style="text-decoration: underline;">goingonearth.com</span></li>
<li>sluggish system</li>
</ul>
<p>Having tried various goingonearth fixes and many, many scans using goingonearth removal tools and the usual anti-malware  products, each time finding that on reboot I was <em>back to square one &#8211; with exactly the same symptoms</em>; very frustrating.</p>
<p class="ListHead">My fix <em style="font-weight: normal;">how I removed goingonearth</em> -</p>
<ul>
<li>Run, with administrator privileges, <a title="freeware" href="http://www.combofix.org/" target="_blank">Combofix</a>. Removes an exe file from C:\Windows</li>
<li>Run a full scan with <a title="Malwarebytes home page" href="http://www.malwarebytes.org/" target="_blank">Malwarebytes</a>, which removed objects with a FakeAlert theme from the following areas -<br />
4 &#8211; Registry Keys<br />
1 &#8211; Registry Values<br />
5 &#8211; Files Infected</li>
<li>Having rebooted, <strong>don&#8217;t be disheartened</strong> that you still have no security open <acronym title="type this into a command prompt">services.msc</acronym> and look for &#8216;Security Center&#8217; &#8211; right click -&gt; properties -&gt; Startup type = Automatic -&gt; Apply -&gt; OK</li>
<li>Perform an update of Microsoft Security Essentials (just download and install in situ)</li>
<li>Reboot again.</li>
</ul>
<p><strong>By this point Robert should be your mothers brother.</strong></p>
<img src="http://digital-media-works.co.uk/articles/?ak_action=api_record_view&id=32&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://digital-media-works.co.uk/articles/2011/07/24/how-to-remove-goingonearth-virus-from-windows-7/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>WordPress logout error</title>
		<link>http://digital-media-works.co.uk/articles/2011/07/02/wordpress-logout-error/</link>
		<comments>http://digital-media-works.co.uk/articles/2011/07/02/wordpress-logout-error/#comments</comments>
		<pubDate>Sat, 02 Jul 2011 20:58:33 +0000</pubDate>
		<dc:creator>Steve</dc:creator>
				<category><![CDATA[WordPress]]></category>
		<category><![CDATA[connection]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[logout]]></category>
		<category><![CDATA[reset]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://digital-media-works.co.uk/articles/?p=5</guid>
		<description><![CDATA[The connection to the server was reset while the page was loading You have most likely arrived here suffering from the WordPress affliction - &#8216;The Connection Was Reset - The connection to the server was reset while the page was loading.&#8217; The main thing here is the connection has been reset. fatcow hosting customers jump [...]]]></description>
			<content:encoded><![CDATA[<h3>The connection to the server was reset while the page was loading</h3>
<p>You have most likely arrived here suffering from the WordPress affliction -<em> &#8216;The Connection Was Reset -</em> <em>The connection to the server was reset while the page was loading.&#8217;<strong> The main thing here is the connection has been reset.</strong><br />
</em></p>
<p><a href="http://www.fatcow.com/join/index.bml?AffID=659080">fatcow</a> hosting customers jump <a href="#fatcow">over here</a>.</p>
<p><span style="text-decoration: underline;">Modify php.ini for the folder/or site.</span></p>
<ol>
<li>Set the max script execution time to 90 seconds. ( It was 300 ).</li>
<li>Set the php memory limit to 128m. ( It was 32m )</li>
<li>Verified that the session.save_path was accurate. This may involve some interaction with your  hosting provider.</li>
<li>Enabled (true) zlib.output_compression</li>
</ol>
<p><span style="text-decoration: underline;"><a name="fatcow"></a>The <a href="http://www.fatcow.com/join/index.bml?AffID=659080">fatcow.com</a> hosted process</span></p>
<ol>
<li>Log into your FatCow control panel and click &#8220;Scripting and Add-Ons&#8221; from the main menu.</li>
<li>Click &#8220;CGI and Scripted Language Support&#8221;.</li>
<li>Click &#8220;PHP Scripting&#8221;.</li>
<li>Near the bottom of the page you will see an area highlighted in orange saying &#8220;Edit your php.ini file for PHP&#8221;</li>
<li>Copy the entire text from the PHP.ini file into a blank text file so I had a handy backup.</li>
<li>Paste that same text into Notepad++ which is a handy free code editor</li>
<li>Change line 244 to: max_execution_time = 90</li>
<li>Change line 246 to: memory_limit = 128M</li>
<li>Verify that line 881 was in the format: session.save_path = /home/users/web/YOURBOX/moo.YOURSITE/cgi-bin/tmp</li>
<li>Finally, change line 126 to: zlib.output_compression = On</li>
</ol>
<p>Thanks to <a title="Many thanks" href="http://wordpress.org/support/profile/squishy79" target="_blank">squishy79</a> who did the leg work only to have the resource squirrelled away.</p>
<img src="http://digital-media-works.co.uk/articles/?ak_action=api_record_view&id=5&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://digital-media-works.co.uk/articles/2011/07/02/wordpress-logout-error/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

