In this short articles I will give some tips and trick to fix common wordpress database problem. When you’re planning to get a lot of visitors to your site you better looking for a ways to optimize your sql query. There is one options for this, using DB cache so when people coming to your site request the articles server don’t need to re-query database again. You just need to sacrifice some memory and space which may be better in result if you’re not planning to go for vps or dedicated at the moment.

How to do this? Search on google is good idea, I found many articles for database caching last night, this is the best one. For wordpress users there is a simple solution. Just get and install DB-CACHE-RELOADED plugin, setting it as you need, example you want cache stays for 24 hours or maybe just 10 minutes.

In this sample I set 180 minutes (3 hours). Cache will stay for 3 hours and then when it expired all cache files will deleted from cache folder and generated new cache. The result after using this plugin is better than not using it. When I tested it I have never seen wordpress database error again (of course because when someone read articles again server doesn’t need to re-read again from the sql). If you like this plugin you can spare some money for Ivan for his great works

The effect?? I’m not sure but in the past when I’m using similar plugin like this I have error on feed, when this happen disable the plugin clear all the cache files and reactivate plugin again. But if not then you don’t need to do anything just keep monitors your site availability and traffic. Before I close this articles I want to tell you, you can also combine this plugin with auto cron job to repair and optimize your mysql, just search on my blog you will find the articles. This combination will giving a better result.

That’s share for today, I need back to work on project he he, Have a great day everyone

On this short articles I will share the way to created youtube related video using combination of PHP and javascript (using wordpress as CMS, of course you can edit it to fit your site). This feature will fits for mp3 sites or reviews related site which may need related video to give more information to visitors.

First we will need this javascript code:

function ytlist(data) {
var feed = data.feed;
var entries = feed.entry || [];
var html = ['<ul class="yt-related">'];
for (var i = 0; i < entries.length; i++) {
var entry = entries[i];
var thumbnailUrl = entries[i].media$group.media$thumbnail[0].url;
var playerUrl = entries[i].media$group.media$content[0].url;
html.push(‘<li onclick=”loadVideo(\”, playerUrl, ‘\’, true)”>’, ‘<img src=”‘, thumbnailUrl, ‘” width=”130″ height=”90″/>’, ‘</span></li>’);
}
html.push(‘</ul><br style=”clear: left;”/>’);
document.getElementById(‘ytlist’).innerHTML = html.join(”);
if (entries.length > 0) {
loadVideo(entries[0].media$group.media$content[0].url, false);
}
}
function loadVideo(playerUrl, autoplay) {
var atts = {
id: ‘ytbox’
};
swfobject.embedSWF(playerUrl + ‘&fs=1&enablejsapi=1&autoplay=’ + (autoplay ? 1 : 0), ‘player’, ’500′, ’300′, ’9.0.0′, false, false, {
allowfullscreen: ‘true’
}, {
allowscriptaccess: ‘always’
});
}
function setVisibility(id, visibility) {
document.getElementById(id).style.display = visibility;

Save it as yt.js or get it directly from here yt.js upload it into the right place (in this sample I used wordpress so I put it into themes folder). Next in your header site put this code before </head> tag

<script type=”text/javascript” src=”http://YOURDOMAIN/PATH/yt.js”></script>
<script type=”text/javascript” src=”http://swfobject.googlecode.com/svn/trunk/swfobject/swfobject.js”></script>

After this done create CSS file or add this code bellow if you’re already have the CSS file.

#yt{background:#FFF;width:575px}
.close{background:#eee;font-size:12px;height:20px;text-align:right;width:500px}
.close a{color:#111}
ul.yt-related li{cursor:pointer;float:left;list-style:none;margin:5px;width:130px}
ul.yt-related{margin-bottom:10px;margin-top:10px}
#ytbox{display:none;float:left;height:300px;margin:20px;width:500px}
#player{margin-bottom:20px}
#ytlist{margin-top:10px}

Last step is just put this code in area where you want related video shown. Because in this sample I used wordpress I put this code on single.php and using <?php the_title(); ?> as the keyword for related video (you can change this to anything you like).

<div id=”yt”> <h4>Video Terkait Tentang <?php the_title(); ?></h4>
<div id=”ytbox”>
<div class=”close”
onclick=”setVisibility(‘ytbox’, ‘none’);”>
<center><a href=”javascript:void(0)”>Selesai Menonton</a></center>
</div>
<object id=”player”></object>
</div>
<div id=”ytlist” onclick=”setVisibility(‘ytbox’, ‘block’);”>
</div>
<center><script type=”text/javascript”
src=”http://gdata.youtube.com/feeds/api/videos?q=<?php the_title(); ?>&alt=json-in-script&callback=ytlist&max-results=4&format=5″>
</script></center>
</div>
<div id=”yt”> <h4>Video Terkait Tentang <?php the_title(); ?></h4>
<div id=”ytbox”>
<div class=”close”
onclick=”setVisibility(‘ytbox’, ‘none’);”>
<center><a href=”javascript:void(0)”>Selesai Menonton</a></center>
</div>
<object id=”player”></object>
</div>
<div id=”ytlist” onclick=”setVisibility(‘ytbox’, ‘block’);”>
</div>
<center><script type=”text/javascript”
src=”http://gdata.youtube.com/feeds/api/videos?q=<?php the_title(); ?>&alt=json-in-script&callback=ytlist&max-results=4&format=5“>
</script></center>
</div>

The result will be like this sample:

You can check the live sample in here http://lyrics.mp3zap.net/judas.html Try opening another post and check the related video it will automatically searching related video on youtube using post title as keyword.

Have problem to integrate? don’t be shy to asking as long I’m not busy I will help. That’s share for today, Have a nice day

To detect when you’re infected by this Trojan:

1. When your computer start-up you will see 2 IEXPLORE.exe running on process background.
2. When It’s already totally control your computer you will see VRTxxx.TMP in your process background (xxx=random from 1 to z) and sometimes created random executable in  your username folder.
3. You can’t open anti-virus website, to test if try to browse www.microsoft.com
4. If you’re monitoring your traffic Trojan will try to communicate with their server, I don’t know who own this IP but sure it’s located and registered in CHINA!.
5. You’re executable programs sometimes not working properly.
6. Your Internet connection slower than usual.

That’s some sign for you to make sure you’re infected by this Trojan. This is really hard Trojan, when I try to remove it using manual technique Trojans keep coming back again and again. Even after I using ckean image from ghost software it’s coming back really fast!. This Trojan infected everything! not only .exe files but .htm and .txt also got infected! specially windows file common used example: explorer.exe, userinit.exe, svchost.exe, and much more.

If you’re got infected by Trojan virut you actually doesn’t need to re-install total your system. This information was false (but it’s fine), when I try to follow it Trojan coming back in seconds. So don’t waste your time to re-install the system it’s will not working!

How to repair your computer if infected by trojan Virut.56 :

1. Make sure your computer totally not connected to local network and Internet to make sure Trojan can’t hidden or run from the scanner.

2. Download Dr. Web Cure It! and burn it into your CD/DVD (to make sure it’s not infected I used CD non re-writable). Why use Cure It? I try using another anti-virus, anti-malware, and anti-spyware none of them workings right! this is not promotion!

3. Run your computer in safe-mode (recommended) then run Dr. Web Cure It! scan total your system including your removable device (if available) don’t use express scan or custom scan. It should be complete scan! should there is no infected file left or you may cry.

4. After scan complete (usually in 3-6 hours) reboot your computer and try to connect it into local network and Internet. Always check your background process if you find something strange on there disconnected from local network and Internet and re-scan total again your system.

5. If you’re already connected to local network/Internet then you can browse to www.microsoft.com and there is nothing strange on your computer background take a deep breath, the Trojan has been assassinated!

That’s a share for today, have a nice day

To detect if you’re infected by this virus is your computer run very slow especially if you’re using explorer.exe resource. You will find file with name “recycler.lnk” in C:\ drive and you will find also “Internet explorer.lnk” (without icon) in your start menu. When you try to delete this shortcut it will coming back and your computer response become more slowly.

Virus spreading from USB drive, if you find out your computer infected don’t add USB drive into it and also if you can unplug that infected computers from local networks to stop it spreading.

How To Remove Recycler.lnk Virus :

1. Disconnected your computer from Internet/local networks.

2. Close all running programs, Press CTRL+ALT+DEL to run task manager and kill all process name “Rundll32.exe“.

3. Go to c:\ drive and choose folder option, tab view, show hidden files and folders, and the un-check “Hide protected operating system files (recommended)” then click apply.

4. Find file with name “mso.sys” in c:\ root drive then deleted it. Don’t worry this is a fake system files which actually the core of this virus.

5. Run MSConfig, Start -> Run -> Type “msconfig” (without quote), Remove “recycler.lnk” and “Internet Explorer.lnk” from your startup list.

6. Delete “recycler.lnk” in c:\ and “Internet explorer.lnk” in your start menu, then restart your computer.

7. It’s done, Your computers should back normal again.

That’s share for today, have a nice day

Frustrated, I’m looking on google with keyword services303.exe but it’s refers to non computer virus. I believe this is first case of services303.exe documented. Lucky me this virus not spreading in my network so I can stop it fast before it infected others computers. I try scan my computer using malwarebytes, avira, avg, eset32/NOD and they not detects any virus *great*.

The main virus is services303.exe and it’s located in [WINDOWSDRIVE]\DOCUMENTS AND SETTINGS\[USERNAME]\APPLICATION DATA\MICROSOFT\SERVICES303.exe with attributes read only and hidden.

It’s also change your registry in:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

It’s set to run services303.exe when computer starts and giving fake program description about Adobe speed launcher.

How To Remove Services303.exe

1. Run your computers in safe mode.

2. Open command prompt, Go to folder [WINDOWSDRIVE]\DOCUMENTS AND SETTINGS\[USERNAME]\APPLICATION DATA\MICROSOFT\ and type Attrib -s -h /S /D.

3. Once attrib process done you can see file with name services303.exe, delete it! don’t forget empty your recycle bin too.

4. Delete manually auto-start services303.exe in registry, start – run -> regedit and look on this field :

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

5. Delete all temporary Internet and windows files. Use ATFCleaner or Ccleaner.

6. Scan whole system with updated antivirus.

Done, Your computers should back normal again. Have a nice day everyone

W32/Obfuscated.J (Trojan.Downloader2.25378) created using C language. There is 2 important files for this virus it was .exe and wjdrive32.exe, both of file have size 49KB, hidden attributes, located in \windows\ folder.

Just like an older method W32/Obfuscated.J (Trojan.Downloader2.25378) will spreading using your removable device and hidden in recycler folder. (I’m not sure if this Trojan can spreading on network since I eleminate it before it grown in my networks)

It’s very easy to detect if your computer infected by W32/Obfuscated.J (Trojan.Downloader2.25378) just take a look on some information bellow.

1. You’ll see a lot of visual basic activity.

2. If you’re running an old computer sometimes virus may crash your explorer.exe

3. Virus will send your information to this server list (use netstats command or another tools to find out):

112.78.112.208 : 80
216.108.234.10 : 80
218.85.133.201 : 80
72.18.202.18 : 80
91.213.29.141 : 80
91.213.29.147 : 80
123.183.217.32 : 5943
60.190.223.125 : 6943

When I check those IP using online IP whois information some of that IP located in JAPAN and some in UNITED STATES. I think this is to make us confused to know who’s creating this Trojan.

4. Virus will turn off your windows firewall.

How to remove W32/Obfuscated.J (Trojan.Downloader2.25378)

1. Disconnect your computers from local networks/Internet.

2. Run you computers in safe mode.

3. Download Dr.Web CureIt! (from clean computers) and then zip it. Transfer this zipped files to your infected computers. Double click zip file and choose the main programs. Scan all yours computer drives including removable device.

*ATTENTION DON’T EXTRACT THE ZIP CONTENT TO FOLDER OR IT MAY GET INFECTED!

4. Repair your registry using this code below:

[Version]
Signature=”$Chicago$”
Provider=Nobody

[DefaultInstall]
AddReg=Repair
DelReg=Remove

[Repair]
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, ShowSuperHidden,0×00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, SuperHidden,0×00010001,1
HKCU, Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced, HideFileExt,0×00010001,0
HKLM, SOFTWARE\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, SOFTWARE\CLASSES\regfile\shell\open\command,,,”regedit.exe “%1″”
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Shell,0, “Explorer.exe

[Remove]
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Microsoft Config Setup
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, (Default)
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, vyre32
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\Run, MS0593[1]
HKLM, SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run, Microsoft Config Setup
HKLM, SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, Taskman
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, 12CFG214-K641-12SF-N85P

Save it as whateveryoulike.inf , right click on it choose install. You may download repairtrojandownloader.inf from my site.

5. Restart your computers and then clean all temporary files (you can use windows disk cleanup, but I recommended CCLEANER).

6. If you won’t this virus coming back update your windows or get some great antivirus you trust.

Done, Have a nice day