If the get_flash_update.exe file is downloaded and installed on your computer, it will proceed to download further malware that are set to start on your computer automatically when you reboot. When the whole infection process is complete, you will notice a variety of changes have occurred. The first change you will notice is that your Windows desktop background has been changed to a warning stating that Spyware was detected on your computer. Next, your screen saver will be changed to use SysInternals BlueScreen Screen Saver, which when running, emulates your operating system crashing into a blue screen of death.

Some of the messages that will appear on this blue screen are:

PAGE_FAULT_IN_NONPAGED_AREA
PANIC_STACK_SWITCH
MAXIMUM_WAIT_OBJECTS_EXCEEDED
NO_MORE_IRP_STACK_LOCATIONS
BAD_POOL_HEADER
IRQL_NOT_LESS_OR_EQUAL
KMODE_EXCEPTION_NOT_HANDLED
BOGUS_DRIVER
SYSINTERNALS_GREAT_SITE
UNEXPECTED_KERNEL_MODE_TRAP

Though the screen saver will make it appear that your computer has crashed, and even make it look like your computer is rebooting, in reality it still is only a screen saver. Simply press the space bar and you will go right back to your desktop. The malware will also disable your ability to change your desktop or screen saver by modifying the Windows Registry so that the tabs to change these settings are not visible. Last, but not least, the CNN Daily Top 10 malware will also download and install a rogue anti-spyware program onto your computer. Currently the rogue being installed is one called Antivirus XP 2008. This program will automatically run and scan your computer. When done, it will display a variety of false risks on your computer that cannot be removed unless you first purchase the software. Please do not buy this software, but rather use the guide below to remove all of the malware installed by this SPAM.

CNN Daily Top 10 Spam Email Message
For more screen shots of this infection click on the image above.
There are a total of 7 images you can view.This guide will walk you through removing the CNN.com Daily Top 10 malware pack .

Tools Needed for this fix:

• Malwarebytes’ Anti-Malware

For full instructions go to http://www.bleepingcomputer.com/malware-removal/remove-cnn-daily-top-10

Symptoms that may be in a HijackThis Log:

Some of these entries are random:

O4 - HKLM\..\Run: [lphcjkrj0etfg] C:\WINDOWS\system32\lphcjkrj0etfg.exe
O4 - HKLM\..\Run: [SMrhcnkrj0etfg] C:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
O23 - Service: CbEvtSvc - Unknown owner - C:\WINDOWS\System32\CbEvtSvc.exe

Associated CNN.com Daily Top 10 Files:

Some of these entries are random:

c:\Program Files\rhcnkrj0etfg
c:\Program Files\rhcnkrj0etfg\database.dat
c:\Program Files\rhcnkrj0etfg\license.txt
c:\Program Files\rhcnkrj0etfg\MFC71.dll
c:\Program Files\rhcnkrj0etfg\MFC71ENU.DLL
c:\Program Files\rhcnkrj0etfg\msvcp71.dll
c:\Program Files\rhcnkrj0etfg\msvcr71.dll
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe.local
c:\Program Files\rhcnkrj0etfg\Uninstall.exe
c:\WINDOWS\system32\blphcjkrj0etfg.scr
c:\WINDOWS\system32\CbEvtSvc.exe
c:\WINDOWS\system32\lphcjkrj0etfg.exe
c:\WINDOWS\system32\phcjkrj0etfg.bmp
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\WINDOWS\system32\drivers\54c70b2e.sys
c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU\RunOnce
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM\RunOnce
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuAllUsers
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuCurrentUser
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\BrowserObjects
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Packages

Associated CNN.com Daily Top 10 Windows Registry Information:

Some of these entries are random:

HKEY_CURRENT_USER\Software\Sysinternals\Bluescreen Screen Saver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CBEVTSVC
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\54c70b2e
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CbEvtSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CBEVTSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\54c70b2e
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CbEvtSvc
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “NoDispBackgroundPage”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System “NoDispScrSavPage”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “lphcjkrj0etfg”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run “SMrhcnkrj0etfg”

I posted this to serve as a reminder to always check who the email is from before clicking on the links included, even if they are from a reputable source.

A note from one of the users:

The subject lines of these e-mails vary, but some examples
include “CNN Top Ten”, “Beijing Olympic Videos”, and other
subject lines referencing the Olympics. The e-mail prompts readers to
update their “flash player” or software that will allow the viewing
of videos. Please delete these e-mails immediately and refrain from
clicking on anything that asks you to update “flash player” or any
other software. These malicious attempts can result in the download of
what is referred to as malware, which can shut down the functioning of
your computer.

UPDATE: Removal instructions if you are infected with the virus, click here.

You normally think of people out doing nature videos as people that are adding to the overall quality of life, at least certainly not subtracting. They work hard physically as well as mentally, climbing mountains, going where no man has gone before, and capturing natural scenery in an enticing, educational, and artistic manner. They then make these films available for others to see. Of course they make a living out of it, but you also think of these people, in much the same way we think of teachers, as people that are NOT “in it for the money”. They do it because they love their art, and they love nature. It’s a natural marriage for the wildlife videographer.

Enter the federal government, and in more particular, the Department of the Interior. In May of 2006, the feds put into effect a new fee for filmmakers, charging them at least $150 per day for filming in the park. Prior to that date, they only had to pay $200 per year, plus fees for any park services or assistance they require. I think very reasonable, by anyones book. “It won’t just be the filmmakers and photographers affected by this, it’ll be the whole country,” said Jeff Hogan, a documentary filmmaker in Jackson, Wyo., who has shot wildlife programs for National Geographic and the BBC. Bob Landis, an Emmy-winning filmmaker for his 2004 documentary “Wolf Pack,” said the National Park Service probably needs to charge filmmakers more for filming than it currently does, but not as much as the new fee structure. Under the new schedule, Landis — who said he shoots at least 300 days a year in Yellowstone — would have to pay at least $45,000 a year. The problem, Landis said, is that the Park Service is treating large production companies that come into parks to film commercials or movies the same way it treats small, independent wildlife documentary filmmakers. “The philosophy seems to be one size fits all,” Landis said. “If they can come up with a category that fits us — documentary and education filmmakers — then I think they’ll benefit all the way around.”

Rock on Feds, you’ve done it again: one more step driving us to bad TV and WalMarts of the world, both figuratively and literally. Maybe the Feds figure we can get our “nature kicks” from watching survival shows on the Tube? Anyway, I know a few once excellent and dedicated wildlife videographers who have had to turn to other professions, (and in a few unfortunate cases, even the porn industry!) to make a living. Yet another blow to us Americans leading to an overall down slide in our quality of life. Our national park system is/was one of the last great resources originally set aside for “the people”. Now this seems to be under serious attack by a government too quick to take money from such resources in order to fill our evidently bottomless war coffers . Smokey, its time to “bear” arms and invade Iraq in the name of oil (err, I mean “democracy”).

I stood there for about a minute trying to figure out why it was trying to charge me $4.30 when the sign said $3.72, until I discovered there are two different prices for how you pay.

This Valero gas station in West Covina, CA thinks they can charge an additional $0.58 per gallon on top of the normal gas price, and still charge a Debit card fee. I thought this was crazy and drove across the street where it was only $0.04 more per gallon with no fee to use credit card.

But this brings up a interesting point, do you think you should have to pay more for merchandise when you use a credit card VS cash?

I think that a merchant needs to plan on the cost of credit card fees into their business plan and not pass it on to the consumer just because they use a credit card.

With the gas prices getting so high I’m starting to wonder who really is cashing in on the high prices; we all know that Exxon Mobile earned $40.61 billion in 2007 setting a new U.S. record for profits.

Using a credit card costs merchants (Gas Stations) on average of 1 - 3% of the total transaction plus a $0.30 fee. So you can see that it costs the gas stations a little of there profit to accept credit cards, but is it right to jack up the price $0.58 a gallon just for using a credit card? An average customer, pumping say 20 gallons, would pay an exorbitant $10.00 just because he/she wishes to use a credit card.

Do you think merchants should be allowed to charge a premium for the convenience of swiping a piece of plastic?

Are you wondering why your grocery dollars aren’t stretching quite as far? In Mexico City, a barely publicized riot, called “The Tortilla Riots”, break out in protest of escalating corn prices (http://news.bbc.co.uk/2/hi/americas/6319093.stm) and sharply rising flour prices destabilize Pakistan. In Sudan, a grocer that supplies the countries needy is chocked that the price of white beans has increased by a factor of 5 in two years. Humans just might be embarking on one of the worst ideas yet: using the earth’s food croplands to grow crops that will be converted to Biofuel. According to a recent article in Times Magazine and the Los Angeles Times, food prices are increasing rapidly. LA Times sites two reasons for this: the devaluation of the dollar, and the use of crops for biofuels. Global hunger is now expected to increase instead of decrease, from early estimates of 625 million (a decrease from today’s 800 million) to 1.2 billion starving-humans by 2025. Many scientists and economists now blame this on increased food prices caused by increased demand (and hence profit) for biofuel crops.

So, it’s finally come to this. Our dependence on oil and energy competes head-to-head with our food. Not only is this obvious madness, but many scientists now also believe that this new turn to biofuel is increasing, not decreasing the factors that effect global warming. Ethanol, says Times Magazine, “increases global warming, destroys forests, and inflates food prices”.

The grain it takes to fill an SUV tank with ethanol could feed a person for a year.We like our SUV’s, so kiss the Amazon goodbye. And guess what, we, you and me as tax payers, subsidize this madness. Last year, our country produced 7 billion gallons of biofuel, which cost taxpayers at least $8 billion in subsidies. Worse yet, our backwards-and-out-of-touch-as-always Bush Administration signed in an energy bill will mandate production of 36 billion gallons of biofuel by 2022, up from 7 billion today. “Fuel of the future”, he says. Now there’s a built in profit-making insurance policy for the biofuel industry if I ever saw one, directly guaranteed by the President of the United States.

What can you do? Well, I think we are still a democracy, so write your Congressperson and demand a halt to the biofuel madness. If you are thinking of buying an SUV, don’t! If you are thinking of buying a new car at all in the near future, wait for the hydrogen technology to mature. We will be reporting on this technology soon.