<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>ProperBlog</title>
	<atom:link href="http://www.propergander.org.uk/properblog/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.propergander.org.uk/properblog</link>
	<description>Security for the masses</description>
	<lastBuildDate>Tue, 11 Oct 2011 21:28:12 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Big Time Charlie Potatoes</title>
		<link>http://www.propergander.org.uk/properblog/?p=320</link>
		<comments>http://www.propergander.org.uk/properblog/?p=320#comments</comments>
		<pubDate>Sat, 08 Oct 2011 22:34:10 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Propergander.]]></category>
		<category><![CDATA[charlie potatoes]]></category>
		<category><![CDATA[free music]]></category>
		<category><![CDATA[Johnny Smokes]]></category>
		<category><![CDATA[mp3]]></category>
		<category><![CDATA[Naughty Nathan]]></category>
		<category><![CDATA[Oldham st Manchester]]></category>
		<category><![CDATA[The Castle]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=320</guid>
		<description><![CDATA[Some 15 or so years ago I used to regularly watch bands at the Castle on Oldham street Manchester. Bands such as Pagans Chemistry Set, The Hot Bananas and Charlie Potatoes amongst others. All that I have from that time are wonderful memories and some tunes. Here are some of Charlie Potatoes tunes. &#8220;The recording [...]]]></description>
			<content:encoded><![CDATA[<p>Some 15 or so years ago I used to regularly watch bands at the Castle on Oldham street Manchester. Bands such as Pagans Chemistry Set, The Hot Bananas and Charlie Potatoes amongst others. All that I have from that time are wonderful memories and some tunes.</p>
<p>Here are some of Charlie Potatoes tunes.</p>
<p>&#8220;The recording and performance quality is generally pretty poor by professional standards, but I believe they are mostly all good or great songs. Maybe one day a real band will record some of Charlie’s stuff properly and make him a happy man.&#8221; &#8211; Naughty Nathan: <a title="Naughty Nathans Charlie page" href="http://www.naughtynathan.co.uk/?page_id=14" target="_blank">Naughty Nathans Charlie page</a></p>
<p>Big Time Charlie are<br />
Naughty Nathan &#8211; Bass guitar<br />
Johnny Smokes &#8211; Drums and backing vocals<br />
Charlie Potatoes &#8211; Rhythm/lead guitar and vocals</p>
<p>Enjoy&#8230;</p>
<!-- Begin MP3 Player for Wordpress Version "1.2.4"-->
<div align="bottom" id="playerMultipleList10">
  <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab" width="250" height="200">
    <param name="wmode" value="">
    <param name="movie" value="http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/player_options/playerMultipleList.swf" />
<param name="FlashVars" value="autoPlay=no&amp;playlistPath=http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/playlist1.php?var1=mp3/yes&amp;overColor=#1F55B2&amp;playerSkin=4"/>
<!--[if !IE]> <-->
<script type="text/javascript" src="http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/swfobject.js"></script>
		
<div id="flashPlayerplayerMultipleList10">
<img src="http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/img/noflash.gif" alt="Flash required " />
</div>

<script type="text/javascript">
   var so = new SWFObject("http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/player_options/playerMultipleList.swf", "mymovie", "250", "200", "7", "#FFFFFF");  
   so.addParam("wmode", "")
   so.addVariable("autoPlay","no")
   so.addVariable("overColor","#1F55B2")
   so.addVariable("playerSkin","4")
   so.addVariable("playlistPath","http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/playlist1.php?var1=mp3/yes")
   so.write("flashPlayerplayerMultipleList10");
</script>    
<!--> <![endif]-->
</object></div>

<!-- End MP3 Player for Wordpress Version "1.2.4"--><input class="htmlselectcode" type="button" value="Open Window" onclick="open_win('1.2.4','bottom','playerMultipleList','','10','http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/player_options/playerMultipleList.swf','250','200','no','playlistPath','http%3A%2F%2Fwww.propergander.org.uk%2Fproperblog%2Fwp-content%2Fplugins%2Fmp3play%2Fplaylist1.php','mp3','yes','%231F55B2','4','http://www.propergander.org.uk/properblog/wp-content/plugins/mp3play/', '2')"/>
<p>All music and lyrics are copyright W. J. Cooke 2000/2008.</p>
<p>If anyone reading this has recordings of The Hot Bananas, Pagans Chemistry set or indeed any bands that played the Castle on Oldham street Manchester in the mid to late &#8217;90&#8242;s please drop me a line.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=320</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Driver problems shared printers Win7 to XP</title>
		<link>http://www.propergander.org.uk/properblog/?p=311</link>
		<comments>http://www.propergander.org.uk/properblog/?p=311#comments</comments>
		<pubDate>Thu, 22 Sep 2011 11:46:13 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Diagnosis, Prognosis, Treatment.]]></category>
		<category><![CDATA[printer won't instal Win 7 to XP]]></category>
		<category><![CDATA[share printer from Win 7 to XP]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=311</guid>
		<description><![CDATA[Trying to share a Canon IP3600 from a Windows 7 PC to a Windows XP PC over Ethernet I found that the XP PC would not install the drivers for the shared printer. XP claiming that a suitable driver could not be found. It seems the issue was with the way the printer was named. [...]]]></description>
			<content:encoded><![CDATA[<p>Trying to share a Canon IP3600 from a Windows 7 PC to a Windows XP PC over Ethernet I found that the XP PC would not install the drivers for the shared printer. XP claiming that a suitable driver could not be found. It seems the issue was with the way the printer was named. In Windows 7 Devices and printers the printer name was &#8220;Canon Inkjet iP3600&#8243; whilst in the .inf file for the Windows XP driver the printer was called &#8220;Canon iP3600 series&#8221; as below.</p>
<p><code><br />
[Manufacturer]<br />
"Canon" = Canon,NTx86.5.1,NTx86.6.0<br />
;<br />
; Model sections.<br />
;<br />
; Each section here corresponds with an entry listed in the<br />
; [Manufacturer] section, above. The models will be displayed in the order<br />
; that they appear in the INF file.<br />
;<br />
;WindowsXP<br />
[Canon.NTx86.5.1]<br />
"Canon iP3600 series" = CNM_0333XP, LPTENUM\CanoniP3600_seriesEABF, CanoniP3600_series<br />
"Canon iP3600 series" = CNM_0333XP, USBPRINT\CanoniP3600_seriesEABF, CanoniP3600_series<br />
</code></p>
<p>So Windows XP when connecting to the Windows 7 share for this printer was actually looking for a &#8220;Canon inkjet iP3600 series&#8221; as named in Windows 7, driver. As the printer name in the Windows XP driver .inf file is &#8220;Canon iP3600 series&#8221; Windows XP presumed that this was not the correct driver.</p>
<p>A simple edit of the Windows XP driver .inf file changing the name from &#8220;Canon iP3600 series&#8221; to &#8220;Canon inkjet iP3600 series&#8221; fixed the problem and I was able to install the driver and thus connect to the shared printer. This information probably applies to other printers where the name of the printer displayed in the Windows 7 devices and printer settings differs from the name present in the driver .inf file for the Windows XP driver.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=311</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Thunderbird 6 Blurry fonts in Windows 7</title>
		<link>http://www.propergander.org.uk/properblog/?p=308</link>
		<comments>http://www.propergander.org.uk/properblog/?p=308#comments</comments>
		<pubDate>Sat, 17 Sep 2011 16:54:11 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Diagnosis, Prognosis, Treatment.]]></category>
		<category><![CDATA[blurry fonts thunderbird]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=308</guid>
		<description><![CDATA[In Thunderbird, go to: tools>options>advanced>general>Config Editor Find: gfx.direct2d.disabled Right click on it, and set it to true.]]></description>
			<content:encoded><![CDATA[<p>In Thunderbird, go to: tools>options>advanced>general>Config Editor</p>
<p>Find: gfx.direct2d.disabled</p>
<p>Right click on it, and set it to true.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=308</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SEO Spam</title>
		<link>http://www.propergander.org.uk/properblog/?p=261</link>
		<comments>http://www.propergander.org.uk/properblog/?p=261#comments</comments>
		<pubDate>Fri, 26 Aug 2011 09:54:13 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Propergander.]]></category>
		<category><![CDATA[post spam]]></category>
		<category><![CDATA[SEO Spam]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=261</guid>
		<description><![CDATA[It seems my site has been noticed by commercial entities wishing to sell me their SEO products (I guess that&#8217;s what they were, I didn&#8217;t click the contained links). Well, I don&#8217;t allow posts without first checking them out, so please do not waste your time. In addition to such posts being deleted without ever [...]]]></description>
			<content:encoded><![CDATA[<p>It seems my site has been noticed by commercial entities wishing to sell me their SEO products (I guess that&#8217;s what they were, I didn&#8217;t click the contained links). Well, I don&#8217;t allow posts without first checking them out, so please do not waste your time. In addition to such posts being deleted without ever being shown, I will never click on a link contained in such posts.</p>
<p>I would urge others who receive such posts to their blog or similar email spam to just delete them without clicking any contained links no matter how enticing. Every click on such spam only encourages them to post more.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=261</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Site updates</title>
		<link>http://www.propergander.org.uk/properblog/?p=254</link>
		<comments>http://www.propergander.org.uk/properblog/?p=254#comments</comments>
		<pubDate>Tue, 02 Aug 2011 17:01:58 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Propergander.]]></category>
		<category><![CDATA[advertising]]></category>
		<category><![CDATA[propergander updates]]></category>
		<category><![CDATA[Twitter]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=254</guid>
		<description><![CDATA[Like buttons have been added for posts and a follow button has been added for Twitter. I have also added a couple of advertisements. I so despise loud flashy animated ads so these are subtle and unobtrusive. Any advertisements that are here on propergander are for products that I use or have used in the [...]]]></description>
			<content:encoded><![CDATA[<p>Like buttons have been added for posts and a follow button has been added for Twitter. I have also added a couple of advertisements. I so despise loud flashy animated ads so these are subtle and unobtrusive. Any advertisements that are here on propergander are for products that I use or have used in the past. Products I trust and recommend.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=254</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facial recognition identifies your social security number</title>
		<link>http://www.propergander.org.uk/properblog/?p=244</link>
		<comments>http://www.propergander.org.uk/properblog/?p=244#comments</comments>
		<pubDate>Tue, 02 Aug 2011 15:19:23 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[A cat called password.]]></category>
		<category><![CDATA[facial recognition]]></category>
		<category><![CDATA[identity theft]]></category>
		<category><![CDATA[social networks]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=244</guid>
		<description><![CDATA[Here&#8217;s an interesting article I came across on New Scientist: facial-recognition-identifies There was an old wartime saying that &#8220;careless talk costs lives&#8221;. Perhaps there should be a new saying for the social networking age something along the lines of &#8220;careless postings cost identities&#8221;. The Internet is a vast searchable database of personal information, be careful [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s an interesting article I came across on New Scientist:</p>
<p><a href="http://www.newscientist.com/blogs/onepercent/2011/08/facial-recognition-identifies.html" target="_blank">facial-recognition-identifies</a></p>
<p>There was an old wartime saying that &#8220;careless talk costs lives&#8221;. Perhaps there should be a new saying for the social networking age something along the lines of &#8220;careless postings cost identities&#8221;.</p>
<p>The Internet is a vast searchable database of personal information, be careful what you post online.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=244</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PDF to JPG Automation</title>
		<link>http://www.propergander.org.uk/properblog/?p=213</link>
		<comments>http://www.propergander.org.uk/properblog/?p=213#comments</comments>
		<pubDate>Mon, 01 Aug 2011 11:18:20 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[LAMP]]></category>
		<category><![CDATA[pdf to jpg]]></category>
		<category><![CDATA[pdf to png]]></category>
		<category><![CDATA[upload automation]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=213</guid>
		<description><![CDATA[I need to download a PDF document and convert each page to a jpg and upload the results to a web server on a regular basis. I thought I would automate the task and share my code. This is a quick and dirty method (very quick and very dirty). There is no sanity checking and [...]]]></description>
			<content:encoded><![CDATA[<p>I need to download a PDF document and convert each page to a jpg and upload the results to a web server on a regular basis. I thought I would automate the task and share my code. This is a quick and dirty method (very quick and very dirty). There is no sanity checking and the code is very insecure, a perfect example of how *NOT* to write code for deployment on a website. I use this code from a command line and it is not accessible from the Internet. Imagemagick is a pre-requisite as this is what does the actual pdf to jpg conversion.</p>
<p><code>&lt;?php<br />
$htmlPage=&lt;&lt;&lt;HTMLHEAD<br />
&lt;!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"&gt;<br />
&lt;html&gt;<br />
&lt;head&gt;&lt;/head&gt;<br />
&lt;body&gt;<br />
&nbsp;&nbsp;&lt;div&gt;<br />
HTMLHEAD;<br />
$htmlEnd="&nbsp;&nbsp;&lt;/div&gt;&lt;/body&gt;&lt;/html&gt;";<br />
if ($argc &gt; 0) {<br />
&nbsp;&nbsp;for ($i=1;$i &lt; $argc;$i++) {<br />
&nbsp;&nbsp;&nbsp;&nbsp;parse_str($argv[$i],$tmp);<br />
&nbsp;&nbsp;&nbsp;&nbsp;$_REQUEST = array_merge($_REQUEST, $tmp);<br />
&nbsp;&nbsp;}<br />
}<br />
$filename=$_REQUEST['fn'];<br />
$sourceserver=$_REQUEST['ss'];<br />
$sourcefilename=urlencode($_REQUEST['sf']);<br />
$localfilename=$_REQUEST['sf'];<br />
$sourceuser=$_REQUEST['suser'];<br />
$sourcepass=$_REQUEST['spass'];<br />
$cmd="wget --user=".$sourceuser." --password=".$sourcepass." ".$sourceserver."/".$sourcefilename;<br />
exec($cmd);<br />
echo "Download complete... Converting\n\n";<br />
$Ccmd="convert ./'".$localfilename."' -resize 570x800\! -quality 80 -density 72 -depth 16 -strip ./jpgs/page%d.jpg";<br />
exec($Ccmd);<br />
echo "conversion complete\n\nCreating html\n\n";<br />
$dir = opendir ("jpgs");<br />
$files=array();<br />
while (false !== ($file = readdir($dir))) {<br />
&nbsp;&nbsp;if (strpos($file, '.jpg',1)) {<br />
&nbsp;&nbsp;&nbsp;&nbsp;$files[]=$file;<br />
&nbsp;&nbsp;}<br />
}<br />
natsort($files);<br />
foreach($files as $Ifilename) {<br />
&nbsp;&nbsp;$htmlPage.="\n&lt;img src='jpgs/".$Ifilename."' /&gt;";<br />
}<br />
$htmlPage.=$htmlEnd;<br />
$htmlFile=fopen("webpage.html",'w') or die("cannot create file");<br />
fwrite($htmlFile,$htmlPage);<br />
fclose($htmlFile);<br />
echo "starting upload...\n\n";<br />
$destserver=$_REQUEST['ds'];<br />
$ftpUser =$_REQUEST['duser'];<br />
$ftpPass =$_REQUEST['dpass'];<br />
$conn_id = ftp_connect($destserver) or die("Error connecting to $destserver");<br />
if(ftp_login($conn_id, $ftpUser, $ftpPass)) {<br />
&nbsp;&nbsp;echo "login to ".$destserver." sucessful";<br />
&nbsp;&nbsp;ftp_chdir($conn_id, "/public/www");<br />
&nbsp;&nbsp;ftp_put($conn_id, basename("webpage.html"), "webpage.html", FTP_ASCII);<br />
&nbsp;&nbsp;ftp_chdir($conn_id, "/public/www/jpgs");<br />
&nbsp;&nbsp;foreach (glob("./jpgs/*.*") as $filename) {<br />
&nbsp;&nbsp;&nbsp;&nbsp;ftp_put($conn_id, basename($filename), $filename, FTP_BINARY);<br />
&nbsp;&nbsp;}<br />
ftp_close($conn_id);<br />
} else {<br />
&nbsp;&nbsp;echo "login failure\n\n";<br />
&nbsp;&nbsp;exit();<br />
}<br />
echo "Upload complete";<br />
exit();<br />
?&gt;<br />
</code></p>
<p>Presuming the php code above has been saved as doit.php.</p>
<p><code>php doit.php sf=pdf_source_filename ss=ftp://domain.com/path_to_source_pdf  suser=source_server_username spass=source_server_password $ds=destinationserver.com duser=destination_user_name dpass=destination_password</code></p>
<p>I don&#8217;t actually run it with command line options, I have hard coded the variables including user names and passwords into the script itself. This is bad practice even though the I have saved the script so that only root can read and run it.</p>
<p>This is the line that does the actual conversion for those who don&#8217;t need to download the pdf and upload the resulting images. Substituting png for jpg at the end of this command will save the pdf pages as a lossless png. You can play with the quality setting in order to compromise between quality and file size for jpg images.</p>
<p><code>convert pdf_file.pdf -resize width_in_pixelsxheight_in_pixels -quality 80 page%d.jpg<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=213</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu &#8211; Remove old kernels</title>
		<link>http://www.propergander.org.uk/properblog/?p=202</link>
		<comments>http://www.propergander.org.uk/properblog/?p=202#comments</comments>
		<pubDate>Sun, 31 Jul 2011 12:01:42 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[LAMP]]></category>
		<category><![CDATA[kernel]]></category>
		<category><![CDATA[remove old kernel]]></category>
		<category><![CDATA[Ubuntu]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=202</guid>
		<description><![CDATA[Overtime the number of old Kernels on an Ubuntu install grows. On this server the /boot partition is almost full because of them. So it&#8217;s time to do a bit of house keeping. This server does not have a UI installed so there&#8217;s no easy point and click package manager option. There is a simple [...]]]></description>
			<content:encoded><![CDATA[<p>Overtime the number of old Kernels on an Ubuntu install grows. On this server the /boot partition is almost full because of them. So it&#8217;s time to do a bit of house keeping. This server does not have a UI installed so there&#8217;s no easy point and click package manager option.</p>
<p>There is a simple one line command that will do the job:</p>
<p><code>sudo aptitude purge '~ilinux-image-[0-9].* !'`uname -r`</code></p>
<p>This command will remove all but the current in use kernel from the system without removing any other package.</p>
<p>If you want to see what will be removed without actually removing anything the command is:</p>
<p><code>sudo aptitude search '~ilinux-image-[0-9].* !'`uname -r`</code></p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=202</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PC Support Phone Scam</title>
		<link>http://www.propergander.org.uk/properblog/?p=193</link>
		<comments>http://www.propergander.org.uk/properblog/?p=193#comments</comments>
		<pubDate>Sun, 31 Jul 2011 09:47:53 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[A cat called password.]]></category>
		<category><![CDATA[Ammyy]]></category>
		<category><![CDATA[PC phone support scam]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=193</guid>
		<description><![CDATA[On the 20th of July my telephone rang at 12:31pm the callers number was witheld. The caller informed me that my PC was infected with viruses and that it has sent messages over the Internet to the company he worked for, he said the company was called Internet Control. Out of curiosity I played dumb [...]]]></description>
			<content:encoded><![CDATA[<p>On the 20th of July my telephone rang at 12:31pm the callers number was witheld. The caller informed me that my PC was infected with viruses and that it has sent messages over the Internet to the company he worked for, he said the company was called Internet Control. Out of curiosity I played dumb and went along with him, the guy had a heavy Indian accent.</p>
<p>He guided me through the opening of the windows inf and prefetch folders and told me that all the files within those folders were viruses. (These are infact windows system files that Windows needs to function correctly) He then guided me to open Windows event viewer and told me that all the Warnings in the application events log were evidence of infection. Playing dumb I asked him what I could do about it.</p>
<p>He passed me on to another person whom he said was his supervisor. This &#8220;supervisor&#8221; had an Eastern European accent. This supervisor asked me to download a program from the Internet to help him diagnose and fix the problem. The program he asked me to download was ammyy admin from ammyy.com this is a remote desktop server. I am unaware if Ammyy are complicit in anyway with this scam, I have no evidence to support such a claim. However the Whois for Ammyy.com reports that the registrant is protected by WhoisGuard. A company that hides the true owners of a domian from a whois lookup. I would advise the looking up of ammyy and ammyy.com in a search engine and you to drawn your own conclusions. Just because one has nothing to fear doesn&#8217;t mean one cannot choose to hide anyway.</p>
<p>I quickly fired up a VM of XP pro and downloaded the Ammyy software. After running the software it connected to an IP address owned by plusserver.de. This supervisor then ran through exactly what I had been asked to do previously, showing me the contents of Windows inf and prefetch folders and telling me that all the files in those folders were viruses.</p>
<p>Whilst remotely connected to my VM XP he didn&#8217;t notice the shortcuts to Immunity and IDA, nor the folder marked analysis tools or the Virtual box tool icon in the icon tray.</p>
<p>I asked him what I could do about all the &#8220;viruses&#8221; on my PC. He opened notepad and pasted a price list into it. I was told I could purchase a support contract that would rid my PC of viruses and keep it clean for a year. He then asked for an email address to which he could send information on how to pay. Under pressure to provide him with an email address quickly I made the mistake of giving him a propergander.org.uk email address. He was expecting me to use the VM XP install he was connected to to retrieve my email, as I use this VM to analyse malware I don&#8217;t have email set up on it. When I told him I use a different machine for my email he began to get suspicious and opened the propergander (this) website in a browser. Well game up, I never got the email. He was very angry that I had strung him along and asked why. I told him I was investigating how the scam he was running worked and that this little episode would make an ideal entry in my blog. He protested that he was not running a scam, I replied that I had recorded the conversation and had evidence of the lies and deception used to convince me my PC was infected. He then immediately hung up the phone. </p>
<p>I reported the abuse of this IP address to abuse@plusserver.de who replied &#8220;Our staff has investigated your complaint and checked your data. There are several indications that your complaint is well-grounded.&#8221;</p>
<p>Overall this was very amusing, but not so for ordinary users with no clue as to how operating systems work. This is a nasty scam. One that all computer users should be aware of.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=193</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Not so smooth WordPress update</title>
		<link>http://www.propergander.org.uk/properblog/?p=179</link>
		<comments>http://www.propergander.org.uk/properblog/?p=179#comments</comments>
		<pubDate>Thu, 23 Jun 2011 09:05:36 +0000</pubDate>
		<dc:creator>Blogkeep</dc:creator>
				<category><![CDATA[Propergander.]]></category>
		<category><![CDATA[bad Wordpress data]]></category>
		<category><![CDATA[broken Wordpress links]]></category>

		<guid isPermaLink="false">http://www.propergander.org.uk/properblog/?p=179</guid>
		<description><![CDATA[I made a stupid error updating WordPress to 3.1.3. I deleted my theme and had to restore from back up. Something very strange happened though, when I brought the site back up the blog did not work. Clicking on the link to the blog made my browser attempt to connect to the IP of a [...]]]></description>
			<content:encoded><![CDATA[<p>I made a stupid error updating WordPress to 3.1.3. I deleted my theme and had to restore from back up.</p>
<p>Something very strange happened though, when I brought the site back up the blog did not work. Clicking on the link to the blog made my browser attempt to connect to the IP of a Verizon address pool! Instead of propergander.org.uk, all the WordPress links were pointing to this address. Confused, I checked the source code for the site and discovered that this address was coming from the WordPress database. After further investigation I discovered that somehow the content of the WordPress database table wp_options had changed during my update. I quickly did some manual SQL updates on this table and corrected the option_values for a couple of records, namely option_id=1 and option_id=39.</p>
<p>All is fine now, but I am completely at a loss as to how this 70.105.xxx.xxx address got into my WordPress tables.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.propergander.org.uk/properblog/?feed=rss2&#038;p=179</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

