Browser hijack, spam and e-mail problems – update

China Netcom: finally real progress
In Beijing China Netcom has gone through some serious improvements in its Internet network.
I waited about two weeks to sum up the verdicts to be on the safe side.
The browser hijack did not return so that would clearly indicate the infection was in the network and not in our PC and Mac. That’s at least a big relief.
E-mail download difficulties have basically disappeared too, though in the last week of September the Amcham-Sinofile mails got stuck again in the filter, for no apparent reason. The filter is getting smarter and seems to even filter web-based mails sent to other web-based e-mail addresses. Using the magic backdoor solved (and confirmed) the problem. Subsequent mails went through without any glitch. Weird. Some of the routers might still need some tuning. Our CISCO friends plead ignorance and allege the Chinese are the ones “using” the equipment. Oh well.
Speeds have really picked up. I notice downloads now often go at far over 120KB/s which is here a luxury.
Spam at the China Netcom addresses (“public” e-mail addresses) remains down at 10% levels. Real relief.
Internet security: being paranoid is recommended
Internet security becomes really scary and few people seem to realize the extent of the threat:
– a hacker paralyzed the domain name provider Xinnet (the no. 2 in China), causing the collapse of 600,000 Chinese websites including Shanghai Daily
– botnets: a partial quote from 26 September, SCMP:
Networks of compromised personal computers, called botnets, are becoming entrenched in China’s broadband internet infrastructure, affecting about one in five desktop systems in the country and threatening the security of the government, the financial services sector and other industries, according to a report.
Botnets are remotely controlled by hackers and criminal organisations to perform targeted denial-of-service attacks, spread viruses or mass-mailing worms, send spam and perform phishing scams.
These have also been employed to abuse online advertising programs, install keylogging software to steal usernames and passwords, and sniff data traffic to harvest other confidential information.
Anti-virus software vendor Symantec’s 10th Internet Security Threat Report, released today, said China had the largest number of “zombie” machines – about 20% of the worldwide total of 4.7 million – monitored in the first six months of this year.
China became the second-highest source, after the United States, of internet attacks across Asia and the rest of the world during the period. It accounted for 10% of the attacking internet protocol addresses tracked globally by Symantec.
Beijing was the city with the largest number of active bot computers, accounting for almost 3% worldwide in the first half. Other cities in Greater China ranked in the top 10 most bot-infested sites included Guangzhou, Hangzhou, Shanghai and Taipei.
Attackers use automated techniques to scan specific network ranges and identify vulnerable systems, such as a machine running pirated software with no security patches, to install their bot program. The infected machine then responds to commands, usually via an internet relay chat channel, from so-called “bot herders”- computers tasked to lead and co-ordinate attacks.
Symantec found bot programs made up 22% of the volume of the top 50 malicious codes reported in the first half, compared with 20% in the second half of last year.
Amid its plague of zombie computers, China has only the fourth-highest number of known bot command-and-control servers, Symantec said. The US has the largest number, with 42% of the world’s bot herders.
In the first half, China remained the world’s second-most common country of origin for spam – the junk or unsolicited e-mail that has now become a delivery system of bot herders for phishing attempts, viruses and other malicious programs – accounting for 13% of all spam worldwide, behind the US with 58%.
– SPAM: not enough is done
For me they should treat those hackers and spammers as criminals. Maybe in China they can simply shoot them. Just look at how damage they do and how ineffective the clampdown is. To find those spammers should not be that difficult. They even promote their services, I regularly get their proposals. Some of them are well known.
China fined a known spammer for the first time, a Shenzhen company – US$625, not exactly a killer. At least regulations came out and it is a beginning. Estimates: Chinese netizens receive 50 billion junk mails in a year. The Internet Society of china is to train 1,000 mail service administrators starting in September to fight against spam, according to China Daily on 22 August.
Australia is leading the way and is investigating an Australian accused of sending more than 2 billion mails promoting Viagra in one year, renting 35 servers in the Netherlands, whose authorities are cooperating. According to Australian law, Australians can be prosecuted even if they use servers based outside of the country. Now, that’s a good start. When will the USA and Europe follow?

Massage and MUCH more in Beijing: an innocent Belgian learns…

(edited 14 Oct 07 – see “tool” I discovered)
Let’s put it this way – I have been traveling my bit over the world and peeking into local entertainment to continue my human studies. Obviously in Bangkok I obtained my PHD. No comments, right!? But now I feel I have to update my courses.
Since 1980 I have seen here an incredible evolution in the attitude of Chinese regarding “social interacting” and married life. Living next door the biggest club in town, Destination, “to spend your queerer kuai” (sic – China Daily) and “where the crowd is almost exclusively y-chromosome-possessing” (That’s Beijing). OK, if you guys did not get it yet, it’s a big gay club, packed so much on weekends that it spills over to Gongti Xilu. Once going there with my better half, the lady selling the tickets asked her if she realized it was a gay bar. Of course we know, silly you, the maid of our best friend moonlights there in the vestiaire. We landed there on their anniversary party and we promptly got two mugs with their logo. Better not use those in business meetings, might give some hints where to find me in late nights.
So, Beijing as I knew once, changed. But poor Gilbert still had no clue. I do like a good sauna house and massage. We have our own massage ladies across the street (Liuzheng Massage Clinic), excellent professionals and they come to our home to repair my body from the training schedule – preparing for the next Beijing marathon. I find myself in my bedroom alone with not less than 5 ladies. If your imagination goes astray, stop there. Me plus wife plus daughter and three massage ladies, OK!
My preferred sauna house is 5 minutes walk – Pacific Ocean Club. I learned about this entertainment novelty less than two years ago. I just love it. A huge building, huge sauna area (one for ladies and one for men). Families go there sometimes with the kids and everybody meets (in pajama, courtesy of the Club) in the restaurant for a Chinese buffet. You can relax in the large (mixed) relax room for a foot and leg massage, and watch TV on your personal flat screen. Or you go watch the show between 9 and 12 pm (with foot massage if you want). Or rent a room to have a choice of massages. All pretty “clean”. Some Chinese rent a room to play mahjong. The staff, particularly the masseuses are friendly (not yet used to that in Beijing), OK, they don’t speak a word of English and so my Chinese is improving a bit. It’s all is pretty cheap, some clever Chinese just go there for the night instead of a much more expensive hotel room. Yes, breakfast is served too. A unique experience – I see sometimes small tourist groups go there for the experience. Lots of stuff you can do there, too long to list. Real fun.

click to enlarge
The entrance to Pacific Ocean Club

For the inexperienced in Beijing, those clubs are a rather safe choice – never follow the touts who promise “special massage”. At your own risk. And probably much more expensive.
My daughter had to invent some business plan for a summertime course at Beida (Beijing University) and for some reason she chose outsourcing of massage (I know, weird family). So the whole family did a study on massage in Beijing.
Poor Gilbert, naive laowai from Belgium.
OK, the ads in the newspapers look sometimes a bit “appealing” but I really never guessed.
See here some snippets from Beijing and Shanghai ads in reputable magazines and newspapers:
“Lost Paradise – Blossom Baby – Sweet Dream – Charlies Angels – Ardour Touching – young and excellent masseuses and masseurs – royal oil massage by two ladies – buttocks massage – prostate care (or maintenance) – kidney treatment – in your hotel room or at home – 24hrs – sensuous pleasure massage – minority student (needs translation here… nothing to do with China’s Minorities!).
Wait a moment – prostate maintenance? So, I asked what Traditional Chinese Medicine that was. Oops. Says my wife, “don’t you know? That’s ED treatment”. Look, I show you the websites. OK, from here on censorship has to move in. Kids, time to go to bed!
ED, ED, what is that? Wife: no lift-off. Needs exercise. It’s all in the training, you see. You have to maintain all this in good working order. Well, there is of course also ED with flute music. Wife adds: not real flute, you silly. Just think how one plays the flute! Oops. Hey! What about equal opportunities, no discrimination? Wife: well, there is something like picking the lotus. But I don’t find it right here on my web search.

prostate_tool.jpg
I did some “research” in some of the local massage websites and stumbled on this “tool”, apparently made in USA (or at least designed in Silicon Valley). Not sure what it is. Looked up Google for the G-spot, could not find it. Sorry.

OK… I really have to stop here.
So it seems those places are all advertised on the web and also contribute to the torrent of sex spam we get every day. Wife: well, if you go there you need to see an ID to get into the nice apartments (pictures available on the web). Matter of being sure who comes there, you see what I mean. Wife: look, handsome boys too. Big muscle. Here he shows auto-ED-treatment.
Oh boy. Beijing 2006. Wife: I think Beijing is getting more “choices” than Bangkok. Anyway, same 5 minutes walk I can have genuine Thai ladies giving oil massage (Bodhi Massage House – very nice place). Bangkok is coming to Beijing.
Well, I’ll keep it simple. I prefer my 5 ladies in the bedroom or the girls of Pacific Ocean torturing my feet while they smile, chat with me and I drink my Yanjing Pijiu (15 non-queer kuai).
Cheers. Welcome to Beijing!

Are SME really welcome in China?

China has a fascination with big companies and famous people. Conferences, articles and surveys love to talk about the Fortune 500 companies and stars like Bill Gates. Even in the foreign chambers of commerce over here I sometimes feel there is a bias in favor of the big MNC (multi national companies). Some chambers such as the European Chamber (EUCCC) are starting to pay more attention to the plight of SME (small and medium enterprises). The Amcham meanwhile considers SME are just interested in visiting panda resorts or something (did not get that one!), never mind the daily problems that affect poor us SME. Except for the Britcham and the UK Embassy, nobody cared about our e-mail problems (see earlier posts).
In the past months – by “coincidence” during the vacation period when many expats are gone – the government came with some troubling new regulations. At least the EUCCC looked into the matter and will organize a seminar about it on 26 September – to discuss about the new regulations for offices in so-called residential buildings and for restrictions on foreigners to buy real estate. Few foreigners realize what is going on and how it could have a dramatic impact on their operations. The main issue is – nobody knows for sure what will happen next year.
So, what is going on?
1. Purchasing apartments
In short: foreigners are no longer allowed to buy apartments or villas, except for their own use and if they have been here for one year. They only can buy one. Questions remain: what happens if they want a larger one, or in another location, what if they leave the city? There are some partial indications but it does not answer all doubts. Before, one would say: if you are so positive about China, why don’t you prove it and buy your own place? Well, we did, we actually bought two. OK, we don’t have enough money to buy one more but…
The reason behind it: the government wants to cool real estate speculation. Actually it will have little or no effect on the market because large foreign companies still have a way to continue investing in the hot real estate market. Who will be left out: the small guys, the SME and individuals who want to fully commit to China. Like the ones who want to buy their place to live and work, investing for the future in their modest SME operations.
Yes, some foreigners (Hong Kong & Macau people and overseas Chinese in particular) are speculating. But their impact is minor according to real estate specialists.
2. Licenses for offices in residential buildings: no more
Now comes the best part. Offices are no longer allowed in “residential buildings”. While that may make sense in a normal country, keeping in mind the high rentals here, many SME opt for SOHO solutions or simply having a small office in a residential compound – cheaper than in an office building. The other advantage for SME: they can work 24/24 and 7/7 what is not possible in most office buildings – no more aircon after office hours and in weekends. SME tend to work hard to survive and many are in consulting or similar services. Their clients ignore weekends. We can for sure acknowledge that…
According to some figures, about 60% of the existing offices in Chaoyang District – the most sought after part of Beijing for offices – are located in such buildings. Oops.
Worse, not to say perplexing: also restaurants are also banned in those “residential buildings”. Now that is going to be a problem. Most restaurants and similar are in the lower floors of residential buildings. A lot of Macdos will have to worry.
Now, the totally vague regulations say – who is already there can stay – but – there might be a “review”. On what grounds the “reviews” will be carried out, nobody has a clue.
As for now, new registrations are refused. But what will happen next? Anyway, the rules again penalize the SME – here both Chinese and foreign. They will have to spend exorbitant rental rates – they cannot spend USD 2,000 per month for a small office of medium standard. To give an indication: office rentals are something like 20 USD/month per GROSS square meter for a reasonable location and quality.
China loves the Microsoft and alike. SME: think again before setting up operation in China.
For more details, courtesy of the law firm ADAMAS, see the (edited) brief.

Beijing: tourist traps and zero help from the authorities

Scams and tourist traps multiply in Beijing. Black taxis at the airport, so-called sexy bars where Sanlitun touts dry to drag you to and the infamous tea house rip-offs.
The tea house scams are well known in Beijing, the Chinese and local English press has reported them several times. The trick is simple: “friendly” Chinese boys and/or girls target tourists, mostly in the Tiananmen area, start a conversation and suggest to chat more in a traditional tea house, like in Dazhalan Street south of Qianmen. Sounds oh so cool for those innocent tourists. The victims then get a spicy bill for some cups of tea, like RMB 2,600 (260 euro). Failure to pay results in physical threats and abuse, lock-up in the tea house or worse. Of course, no receipt is given. The tea houses are well known and come up with fake reasons like, “expensive tea”, “shows” and alike.
The latest victim was the son of my friend Serge Janssens de Varebeke, no less than the President of the European Chamber of Commerce in China (EUCCC). Poor Serge called several police departments who all had one reply in common: “not our concern”. They just came with the lamest of excuses while the whole Chinese press is aware of the crooks. One may wonder – the police is useless, or is too close to the scam operators, or simply don’t care about tourists and the image of Beijing. Or all of them. What a nice publicity for Beijing! The Chinese are sooooooo friendly, right? Welcome to Beijing 2008! And the mayor asks all Pekinese to smile? Better clean up the streets of touts, pick-pockets, crooks, drug dealers and alike. But as we all know, Tiananmen security services are toooooo busy looking for those dangerous religious extremists. Now, that’s a priority. Who cares about criminals?
As Serge said, those things do not happen at the same rate in Shanghai. There the authorities seem to care a bit more about their image.
Serge is not giving up, once he is back from his trip to Europe he intends to call all possible foreign journalists and invite them to have a look at the tea house in Dazhalan. I will be happy to join.
No wonder the same authorities are clamping down more and more on the press who could expose the scams. It might have adverse economic consequences for all those friendly Chinese youngsters wandering around on Tiananmen. Who would want that? They would not be able to afford their Chivas with green tea in Babyface or alike, or their private karaoke room. We westerners are so selfish. Shame on us.
Well, I am ashamed for Beijing. People come to me “as advisor for the Olympic Economy” with the Beijing Government. What can I tell them?
Well, at least there has been a crackdown on the drugs. All club and disco owners have been warned not to allow any drug users on their premises – fines are serious, the venues can even be closed.
But more has to be done.

Browser hijack: the sequel

After trying out everything, I got a nice tip from Australia: a discussion group on Apple’s website. I am not the only one to have the problem – it also happened in North America. In short, it seems very likely it is our local Chinese ISP who has problem, their servers could have the malicious software, explaining why we could not find anything in both the MAC and the PC connected through our router to the same ADSL line. Indeed, a PC on the same network got exactly the same problem. Deleting cookies, history, cache and all did not help.
The hijack occurs with all browsers.
The problem still comes back – occasionally. When activating tor the hijacking is disabled instantaneously – no need even to restart Firefox. Seems very much to prove the problem is with the ISP.
Interesting to note, today the ISP (public.bta.net.cn) announced they will do a serious “overhaul” to stem the flood of spam. Maybe they don’t want to mention the hacker’s success?