Exetel Website virus ?

Malware detection, cleaning and prevention

Exetel Website virus ?

Postby BAM on Sun Jan 10, 2010 7:03 pm

Hi,

Just went to the homepage http://www.exetel.com.au/index.php and my Nortons gave me this warning message - see link below
http://safeweb.norton.com/report/show?url=exetel.com.au

Can anyone explain this please ??

Thanks
Graeme
BAM
 
Posts: 25
Joined: Wed May 04, 2005 7:06 pm

Re: Exetel Website virus ?

Postby Dazzled on Sun Jan 10, 2010 7:13 pm

Below is the actual code found at the Exetel site. It has one attribute wrong. Apart from that can you see what the Norton page complains about? You'd do well to be rid of Norton.

What they are actually worried about is a Windows executable that has been allegedly posted to an inaccessible free webspace.
(PS I can't find smac_1.1.exe on home.exetel, can anyone? It's a MAC address spoofer http://www.klcconsulting.net/smac/ A lot of customers use the space as a file transfer site)
Code: Select all
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>Exetel Pty Ltd</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="Keywords" content="ADSL, ADSL2, VoIP, HSPA, HSDPA, Mobile, Hosting, Value, X Calling Card, Exetel, Residential, Business, Corporate, Agents, Country Broadband, SMS via ADSL, Wireless, Wireline, Voice, Ethernet, SHDSL, Fibre, Business Grade, VPN, VISP, Telephony, Cheap, Telephony" />
<meta name="Description" content="Exetel have been providing a range of Internet and phone services to customers since Feb' 2004. There are now over 100,000 customers using a wide range of different Exetel services in every State and Territory." />
<link href="css/index_alt.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="js/index_alt.js"></script>
</head>
<body>
<div id="container">
   <div id="login">
      <form action="https://www.exetel.com.au/login/redirect.php" method="post" name="loginform">
         <input type="text" name="login_name" accesskey="u" tabindex="1" class="input_text" autocomplete="on" />
         <input type="password" name="password" accesskey="p" tabindex="2" class="input_text" />
         <input name="doLogin" type="hidden" value="1" />
         <input type="image" name="submit" src="images/front_btn_login.gif" class="btn_login" />
      </form>
   </div>
   <div id="button_resi">
      <a class="button_resi" href="res_main.php"><!-- --></a>
   </div>
   <div id="button_busi">
      <a class="button_busi" href="small_main.php"><!-- --></a>
   </div>
   <div id="button_corp">
      <a class="button_corp" href="large_main.php"><!-- --></a>
   </div>
   <div id="button_agen">
      <a class="button_agen" href="agents_main.php"><!-- --></a>
   </div>
   <div id="button_country">
      <a class="button_country" href="http://www.countrybroadband.com.au"><!-- --></a>
   </div>
   <div id="button_wireless">
      <a class="button_wireless" href="residential-hspa-information.php"><!-- --></a>
   </div>
   <div id="bottom_left_logo">
      <a href="http://www.australiangeographic.com.au/society/2009-conservationist-of-the-year-awardee-ray-thomas.htm" target="_blank"><img src="images/ausGeo_web_logo.gif" alt="Australian Geographic" /></a>
   </div>   
   <div id="links">
      <ul>
         <li><a href="https://helpdesk.exetel.com.au/">Helpdesk</a></li>
         <li><a href="http://mirror.exetel.com.au/">Mirror</a></li>
         <li><a href="http://games.exetel.com.au">Games</a></li>
         <li><a href="https://webmail.exetel.com.au/src/login.php">Webmail</a></li>
         <li><a href="http://forum.exetel.com.au/">Forums</a></li>
         <li><a href="news_main.php">About</a></li>
         <li><a href="a_network.php">Network Status</a></li>
         <li><a href="contact.php">Contact</a></li>
      </ul>
   </div>
</div>
<div id="noflash"><a href="index.php">Click here for the <b>Flash</b> version</a></div>
</body>
</html>
User avatar
Dazzled
Volunteer Site Admin
 
Posts: 6525
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Postby sable on Sun Jan 10, 2010 7:37 pm

You'd do well to be rid of Norton.


+1

I agree and so do many many others
sable
 
Posts: 753
Joined: Tue Jan 20, 2004 9:28 am
Location: NSW

Re: Exetel Website virus ?

Postby Dazzled on Sun Jan 10, 2010 8:40 pm

Sable what makes Norton laughable for going on about a MAC spoofer executable for Windows, is that it's a built-in system function!
On Linux/BSD systems - ifconfig; on Windows, use regedit.
User avatar
Dazzled
Volunteer Site Admin
 
Posts: 6525
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Postby Rex Nebular on Mon Jan 11, 2010 8:21 pm

I was hosting that file. I really doubt it was a virus, probably just a false positive. The official website doesn't host the free version anymore, so I was just keeping it alive. It's not important and I host it on other servers. I even got Norton to scan an accessible version of the file and it said it was fine but maybe they updated their definitions.

Whoever deleted my web space also removed my access to the member page. I've emailed support about this already.
Last edited by Rex Nebular on Mon Jan 11, 2010 10:00 pm, edited 2 times in total.
Rex Nebular
 
Posts: 72
Joined: Sat Sep 03, 2005 4:07 pm
Location: Melbourne

Re: Exetel Website virus ?

Postby Dazzled on Mon Jan 11, 2010 8:33 pm

Rex, Norton has become a sad joke. Why does it complain about a file that can't hurt anybody, and then put a warning on the site? It's not even a dreaded black hat tool, as anyone can change the broadcast MAC address.
User avatar
Dazzled
Volunteer Site Admin
 
Posts: 6525
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Postby BAM on Tue Jan 12, 2010 12:22 pm

Hi,

I'm not a power user and dont know all the technical details but from my (an ordinary users) point of view, I dont understand why all the fuss with Nortons is - now
I know people had issues with it on less powerfull computers in earlier versions but I've always run it on decent systems and had no issues what so ever
Above is a seperate issue (should be a seperate thread) and to get back on topic :-
Basically I trust Nortons and am happy using it - it's picked up the odd issue here and there and I particularly like the tick and cross system saying if a website is safe or not.
I was surprised to see the Exetel homepage saying it wasnt safe
I wondered if someone hacked the site, but as I trusted Exetel. I continued to what info I was after in my account and then to post here in the forums asking why it showed as a cross.
I see whatever the issue was has been resolved and the site now gets a green tick once again :)

Cheers
BAM
 
Posts: 25
Joined: Wed May 04, 2005 7:06 pm

Re: Exetel Website virus ?

Postby CoreyPlover on Fri Jan 22, 2010 8:39 pm

It might be slightly off-topic, but since the original issue is now resolved...

I also fall into the category of Norton-haters. On a decent system, Norton can operate adequately, and it does place relatively high in terms of effectiveness (finding and blocking viruses, spyware, etc). But, what I and others continually notice is just how many *problems* are caused by Norton, especially their older versions. This case is a particular example of a false positive but the number of forum threads citing outgoing email issue where Norton is the culprit is phenomenal. I think the crux of the argument is that while you can do a lot worse than Norton, if you are going to pay for an antivirus / internet security software you can definitely do a lot better and I encourage readers to visit http://www.av-comparatives.org/ as it has some very comprehensive and regularly revised publications comparing these products.
I am a volunteer moderator and not an Exetel staff member. As with all forum posts, mine do not constitute any "official" Exetel position. Support tickets may be logged via https://helpdesk.exetel.com.au or residentialsupport@exetel.com.au
User avatar
CoreyPlover
Volunteer Site Admin
 
Posts: 7075
Joined: Sat Nov 04, 2006 2:24 pm
Location: Melbourne, VIC

Re: Exetel Website virus ?

Postby vk3xem on Sat Jan 23, 2010 12:24 am

I now use Microsoft Security Essentials. It appears to work well, I haven't had an issue and best of all it is the right price!
The views I present are that of my own and NOT of any organisation I may belong to.

73 de Simon, VK3XEM
User avatar
vk3xem
 
Posts: 1145
Joined: Wed Apr 23, 2008 7:45 pm
Location: HEALESVILLE


Return to Virus / spam / spyware issues

Who is online

Users browsing this forum: No registered users and 1 guest

cron