Thai Cyber Police

[PREM-R]

I was looking at the Bangkok Post on line edition today and noticed that one of the advertisments on the right hand side of the page had been replaced by the light green cyber police message. I have just logged on to Thai visa and when I clicked onto the "view new posts' page there was the cyber police banner covering an advetisment at the top of the page. I checked the html code of the Bangkok Post page and the covered item seems to be for a 'freeware' software company - not exactly pornographic.

It is nice to know that even with all the problems facing Thailand at this time the government can find the resources to protect us innocents from harm.

[ProfessorFart]

I can see the ads fine!

Have you got a bit of spyware going on there Prem?

[george]

A screen shot, please!

[PREM-R]

The Cyber banners were in the "google" ads area and have now gone, it must have been a particular add that caused the banners to show. I have checked back onto Bangkok Post online and that too now just has ordinary Google ads.

The computer I am using is at work and is shared so I do not know what spy ware may have been downloaded, but I have been getting a page 'flash up' occasionally which is a file called "about.Brontok.A" It has a rant about prostitution and the rest seems to be in Indonesian (I think). The file always hides itself in 'My Pictures" and after I delete it, it comes back again. Maybe this is connected to my original posting.

[ProfessorFart]

Run Spybot and see what happens.

[PREM-R]

Run Spybot and see what happens.

Just fried half a dozen times to download spybot but each time I try to save the files the computer turns off and restarts, clearly I have a major issue here. ( BTW as I am typing this the blocker page is back again)

[PREM-R]

Here is a screenshot showing what I get on my computer - the cyber police banner covers the Google ads.

[Phil Conners]

You most definitely have a virus, probably about.Brontok.A as you saw it flashing.

The reason you see the sensor banners are probably that the virus intercepts the original banner link and redirect it to another site. This is common virus behavior.

INSTALL A VIRUS SCANNER and KEEP IT RUNNING AND UPDATED.

There are no excuse to not do this these days, and by not doing it you are very likely to be part of the spam problem on the internet!

There are plenty commercial and a few free great ones available from the internet. Search TV or Google for it. It has been discussed often enough before.

[PREM-R]

You most definitely have a virus, probably about.Brontok.A as you saw it flashing.

The reason you see the sensor banners are probably that the virus intercepts the original banner link and redirect it to another site. This is common virus behavior.

INSTALL A VIRUS SCANNER and KEEP IT RUNNING AND UPDATED.

There are no excuse to not do this these days, and by not doing it you are very likely to be part of the spam problem on the internet!

There are plenty commercial and a few free great ones available from the internet. Search TV or Google for it. It has been discussed often enough before.

Thanks for the diagnosis, the problem is that the computer is at work, it is used by many people, and it is part of a LAN at KKU in Khon Kaen.

BTW do you know why the "virus" only messes up the google ads and not the other content of the pages?

[udon]

AVG Anti virus v7.1 FREE.

http://www.freewarefiles.com/program_9_90_1007.html

Do it ASAP.

[tolsti]

if you type about.Brontok.A into Google search a lot of pages come up.... the topmost being in Thai so it would appear to be a local virus. Maybe you should get your IT people to have a look a them. Good luck!...... and get a good antivirus ASAP... you know it makes sense!

Edited May 25, 2006 by tolsti

[stumonster]

bronstab is a nasty piece of work - last time a had a machine brought to me with that infection there was no automatic way to disinfect it .

it will re write your hosts file every 1-10 mins and cause shutdowns if you try and run some exe files.

[PREM-R]

I ran an antivirus program and now everything seems OK ( no more cyber police banners) but I do get this message sometimes:

"ERROR 500 Internal Server Error" could this be related to the earlier infection?

[clokwise]

I can see the ads fine!

What ads? There's ads on the internet????

oh yeah, I forgot, ever since I installed adblock I no longer see any ads.

[John K]

I have found that the yahoo toolbar has a very good anti spyware filter. it's free and it has several other features that make it a good choice.