MG Data

As a web developer I get a lot of inquires from business owners who are trying to find a stable, reliable, and affordable webhost. I have spent the last 12 years dealing with different hosting companies on a daily basis and I’m in a position to offer sound advice regarding at least my various experiences with some of the companies offerings and services. I have seen some hosts that get better over time and some that get worse. One of the most frustrating things are companies that seem to offer a lot of storage space and bandwidth for a low price but put severe limits on CPU usage which can in some cases cause severe and sometimes completely disabling downtime to an ordinary website.  Clients of mine want stable webhosts, at the same time they want to know that they’re getting a competitive price.

Delving more into the issue of stability, further stability comes from a webhost that does not overload it’s servers. An overloaded server simply does not perform well. It may have programs that die due to the server being overloaded. At first glance this might not seem critical but it is very critical. For example, suppose that program that dies is the MySQL server. I bring this up because it has been a common problem I have seen over the years. When MySQL dies, any database driven website will die with it. This has been critical for some of my e-commerce customers who simply cannot operate without a database. Consider alternatively if the web server (e.g. Apache) dies. Then the website doesn’t function at all, it’s as if the DNS is sending the potential customer directly into a roadblock the cause of which is an overloaded server. The only solution is for the host to restart the server. This can all be avoided by selecting a quality host that does not overload it’s servers and has the measures in place to correct a problem should it occur.

A few months ago, I had a friend of mine who manages a 501(c)(3) nonprofit contact me regarding hosting for her website. Initially she wanted me to host the site for her, when I told her that is not something I do I began to explore hosting options for her. One main requirement in her situation was for the hosting company to be as affordable as possible as her nonprofit funds are limited. I explained to her the problem of sometimes ridiculous CPU usage limits of low cost companies and overloaded server problems as I explained above. I also wanted to find her a cPanel-based hosting platform as I’ve found that clients prefer this system over other web-based control panels. After looking into it, I found a Nevada based company McKremie, LLC which offers their business hosting plan free to any US-based registered 501(c)(3) nonprofit or to public schools including all the features of their paid plan.

I directed her to the webhosting for nonprofits form and she was up and running with her website shortly thereafter. She has been happy with her hosting, I have done some work on the site and have also been delighted to deal with a quality webhost. Uptime has been fantastic as well as server availability and stability with quick access times of the pages on her website.

lentil burgers

1 cup dry lentils (green)
2 small to medium russet potatoes
1/2 yellow onion chopped
4 cloves garlic, diced
1 red seranno chili pepper
7 mushrooms, coarsly chopped
1 6oz can tomato paste
Handful of fresh spinach leaves, chopped
1/3 cup oat flour (approx)
1 tbsp raw pumpkin seed
1 tbsp flax seed
1 tbsp sunflower seed
1 tsp parsley flakes
1 tsp dried oregano
1 tsp dried basil
some black pepper
1/4 tsp ground cumin
1/4 tsp ground tumeric
1/4 tsp curry powder
1-2 tsp sriracha hot sauce
1 tbsp worchestershire sauce
Add 1 cup lentils in 3 cups water. Boil for 5 minutes uncovered, then cover and simmer for 45 minutes.
Drain water off. Pour into a large mixing bowl.

Add 2 cooked russet potatoes with skin, 1 small, 1 s-m size to lentils. (Cooked in microwave).

Mash it together with a potato masher for a while.

Add tomato paste and mash.

Add onion, garlic, red pepper, mash together.

In separate small bowl, try to mash up the seeds together.

Add seeds to lentil mix, add spices and mash up.

Add mushrooms, spinach and sauces, mash up.

Add oat flour and mash up.

Form 12 burgers and cook on george forman 5 minutes, flip and cook another 3 minutes. They did not stick.

had 3/4 cup leftover pumpkin, course my first thought is pancakes and here’s what happened. The batter was okay at first, but really thickened up after a few minutes, turning into perfect consistency for waffle batter, but not pancakes. Course with me no waffle iron, had to nearly burn them to get them to cook cause they were so thick. After that the flavor was just syrup cause I needed to use a lot.

1/2 cup quick oats

1/2 cup oat bran

1/2 cup wheat flour

1/2 cup buckwheat flour

1 heaping teaspoon cinnamon

1 teaspoon baking powder

1/2 teaspoon baking soda

—

2 cups fat free milk

2 whole eggs + 1 more egg white

2 tablespoons honey

1 heaping teaspoon vanilla extract

1/2 cup fat free plain yogurt

3/4 cup libby’s pure canned pumpkin

In a small-medium sauce pan:

1/2 heaping cup Straus whole milk organic yogurt (vanilla flavor) european style

1/2 cup vegetable oil

1 cup evaporated cane sugar crystals

Heat this mixture on the stove, low heat, while stirring it to make a thick brown sugary cream. Heat until it’s well warmed but not hot.

Pour into a large mixing bowl. Mix with wire wisk until well blended and most of sugar is dissolved.

To this mixture add

1-2 tbsp maple syrup (grade b organic), mix in 

2 tsp pure vanilla extract, mix in

2 eggs, mix in

1 cup Libby’s 100% pure pumpkin (canned), mix in

In a medium bowl mix the dry ingredients:

2 cups 100% whole wheat flour

1 tsp baking soda

1 tsp baking powder

1 heaping tsp cinnamon

mix the dry ingredients together.

Slowly pour the dry ingredients into the wet mixture while mixing with a wire wisk.

Mix this to a smooth texture.

Add

1 cup quick oats

Fold the oats in with a spoon.

———-

Bake at 350 deg for about 17-22 minutes.

Makes about 36 puffy, muffin-like cookies small to medium size or 30 medium to large size.

1/2 cup quick oats

1/2 cup oat bran

1/2 cup wheat flour

1/2 cup buckwheat flour

1 heaping teaspoon cinnamon

1 teaspoon baking powder

1/2 teaspoon baking soda

—

2 cups fat free milk

2 whole eggs + 1 more egg white

2 tablespoons honey

1 heaping teaspoon vanilla extract

2 tablespoons vegetable oil

mix the dry, in a separate bowl beat eggs with a wisk until a little bubbly, add the wet stuff into the eggs and mix very well with wisk until arm is tired and there is full layer of froth on top and honey is completly mixed in, batter should be pretty thin and airy (bubbly), add wet to dry & mix just enough to wet the dry stuff, don’t overmix, and cook em up. Do not press down, flip only once. makes about 12 - 5″ pancakes

My sister came over and left some yogurt behind….. had to do something with it. These taste like the lazy mans sourdough pancakes.

1 cup wheat flour

1/4 cup oat bran

1/4 tsp baking soda

1/2 tsp baking powder

mix together

separate bowl

1 egg, beat with wisk

1 cup whole milk yogurt (used straus organic vanilla flavor, european style)

1 cup skim milk

mix together very well until frothy.

Add wet to dry and fold together, don’t overmix. Makes about 6-8 4″ hearty pancakes.

Below is my account of getting the Trojan.Vundo virus. Here’s what I did to get rid of it. Use this info at your own risk. 

Recently while browsing the internet with MSIE version 7 on Windows XP SP 2, fully updated I got a bunch of windows suddenly popping up and things started downloading onto my computer. AVG antivirus said I had a virus but couldn’t do anything about it. The virus seemed to install a number of crap software on my computer and imbedded into winlogon.exe process. Some things I saw were think-adz search assistant, zenosearch, twink, yazzle, outerinfo. Keep in mind I was just browsing the internet, I did not download anything.

The first thing I did when processes and things started going crazy was start killing processes, then disconnected my internet connection. I delete whatever I could out of my temp folders, windows/temp and each users temp folder in documents&settings/localsettings/temp. I deleted all my internet browsers cache/history/cookes. I downloaded a uninstall for outerinfo from outerinfo website which I will not link to here. In short I deleted everything I could that I could find and that the system would let me delete. I also tried to delete things in safe mode but still could not remove the apparent virus file sstqp.dll. When using MSIE, search windows would pop open and windows to other websites, some of them are think-adz, searchhound, mysearchlive, hollywood, canceriq, jack9, and a few other ip address, all of which I blocked with norton internet security. I also changed my browser settings. In internet explorer -> tools->internet options->security->trusted sites, set the slider to high and click ok, delete every site that was there which were added by the viruses because I never use this feature. These viruses exploit the trusted sites feature by injecting urls in there, having another program visit them, which becuase they are trusted, download more viruses with ease because of the slacker active x default settings of the trusted sites.

AVG antivirus couldn’t do anything about it. I installed norton internet security including the firewall and antivirus and it also couldn’t do anything about it. I downloaded fixvundo.exe from Norton, followed the instructions and after a long scan of the computer it could not even find the virus…. yet Norton Antivirus is showing me the problem file seems to be in WINDOWS/system32/sstqp.dll

I downloaded a VundoFix.exe file by atribune.org. It found a list of files that were problems but couldn’t delete 3 of them:

cbxvsst.dll

ddcbcyw.dll

pmnljii.dll

pmnnono.dll - could not be deleted

pqtss.bak1

pqtss.ini - could not be deleted

sstqp.dll - could not be deleted

Seeing how all these programs had been downloaded and installed on my computer without my knowledge during this time, I was limiting my internet connection, I’d just turn it off. Checking my running processes with windows task manager (ctrl+alt+del) I observed winlogon.exe using tons of resources, about every second it would flicker on then off, then on then off…… it was really slowing the computer down. I found that by using process explorer and suspending winlogon.exe which is where the virus was hiding, the resource usage went back to normal and I could still use the computer normally. I connected to the internet only when winlogon.exe was suspended thinking that if the resources aren’t being used, possibly nothing more is being downloaded. I would un-suspend winlogon.exe only when I was not connected to the internet and I also set internet explorer to work-offline and was using netscape instead which the virus didn’t seem to be involved with. When the virus would try to pop open an IE window, I would just click tell IE to stay offline.

Now to actually fixing the problem. I found my answer at spywareinfo forums. I had before downloaded some software while reading in other forums about the problem. Software I downloaded included HiJackThis, which is vitally useful for this problem, brute force uninstaller, which I didn’t end up using and some other files at the suggestions of different forum threads that I read. I used hijackthis and delete registry entries that didn’t look right to me, but only ones I was sure about. I followed the suggestions from spywareinfo forums, downloaded their software called VundoFix.exe. Their instructions were basically to do the following, run VundoFix.exe to unzip the files:

restart in safemode:

run killvundo.bat

at the first screen type: C:\WINDOWS\system32\sstqp.dll

enter 

at the second screen type C:\WINDOWS\system32\sstqp.*

enter, and the program does its magic.

Place the hijackthis file in the root C folder (do this to begin with). After typing the second string I got an error that the hijackthis file couldn’t be found and the whole safemode desktop screen went black and all my desktop icons disappeared. I got worried.

I manually turned the computer off by holding the power button. Turned it back on and it started normally. First thing I noticed is that when norton antivirus loaded it no longer gave me a popup that could not be turned off saying I had the trojan.vundo virus in file sstqp.dll. That was nice. Then I opened hijack this and deleted the two entries pertaining to sstqp.dll, one a BHO and one a winlogon notify which now said (file missing) next to them. I also noticed my system resources seemed normal.

Looking good……. I was still not connected to the internet. I then deleted every possible thing I could think of, all the temp folders, internet cache…. etc…. Installed Spybot, Spywareblaster, and Ad-aware SE personal, ran them without updating the definitions and deleted everything they found that was a problem.

Then connected to the internet, update the definitions of all 3 programs and ran them all again. Deleting everything found.

System seems fine. Resources and usage is normal and no apparent virus.

I do still have the pmnnono.dll file and it runs as a winlogon notify according to hijackthis. The main infection is gone, but there is still cleaning up to do.

I found this page, which is very useful: http://forums.spywareinfo.com/lofiversion/index.php/t96702.html

I followed all the directions there. The program VirtumundoBeGone managed to get rid of pmnnono.dll, and also gave me the blue screen of death which was a bit heart stopping for a moment… but all is well, reboot by holding the power button and it booted fine.

Then I ran Dr. Web CureIt. It found a few more files with problems that I took care of. This program scan takes a long time but seems very thorough.

The next program SDfix found a few hidden files which shouldn’t have been there and I manually reviewed them and deleted them. One of them was C:\Program Files\Common Files\Yazzle1281OinUninstaller.exe. The other 4 belonged to GTek, which it seems from a Google search is not a good thing, so I deleted that entire folder also. C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp

Back in non-safe-mode….. I removed my older version of Java via add/remove and downloaded the latest version from sun java and installed it. I also replaced my hosts file in windows/system32/drivers/etc with one from http://www.mvps.org/winhelp2002/hosts.htm ….. there were a few entries that I omitted in the file because I need them turned on, but it is nice to have this level of definite security from these sites, most of which are no good.

System seems good and may even be running better than before all of this. HiJackThis log file shows no apparent problems to me, one file it shows that I can’t figure out what it is for is named mjdsregl.exe in windows/system32. Google search for this turns up nothing.

The hijackthis entry is O4 - HKLM\..\Run: [{F4-4A-A9-9E-ZN}] C:\windows\system32\mjdsregl.exe CHD003

The file does not even exist on my computer, so I guess it is fine.All in all, I lost about 2 days productivity due to this virus.