Exetel Website virus ?

Malware detection, cleaning and prevention
Post Reply
BAM
Posts: 9
Joined: Wed May 04, 2005 6:06 pm

Exetel Website virus ?

Post by BAM » Sun Jan 10, 2010 7:03 pm

Hi,

Just went to the homepage http://www.exetel.com.au/index.php and my Nortons gave me this warning message - see link below
http://safeweb.norton.com/report/show?url=exetel.com.au

Can anyone explain this please ??

Thanks
Graeme

User avatar
Dazzled
Volunteer Site Admin
Posts: 5994
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Post by Dazzled » Sun Jan 10, 2010 7:13 pm

Below is the actual code found at the Exetel site. It has one attribute wrong. Apart from that can you see what the Norton page complains about? You'd do well to be rid of Norton.

What they are actually worried about is a Windows executable that has been allegedly posted to an inaccessible free webspace.
(PS I can't find smac_1.1.exe on home.exetel, can anyone? It's a MAC address spoofer http://www.klcconsulting.net/smac/ A lot of customers use the space as a file transfer site)

Code: Select all

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>Exetel Pty Ltd</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="Keywords" content="ADSL, ADSL2, VoIP, HSPA, HSDPA, Mobile, Hosting, Value, X Calling Card, Exetel, Residential, Business, Corporate, Agents, Country Broadband, SMS via ADSL, Wireless, Wireline, Voice, Ethernet, SHDSL, Fibre, Business Grade, VPN, VISP, Telephony, Cheap, Telephony" />
<meta name="Description" content="Exetel have been providing a range of Internet and phone services to customers since Feb' 2004. There are now over 100,000 customers using a wide range of different Exetel services in every State and Territory." />
<link href="css/index_alt.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="js/index_alt.js"></script>
</head>
<body>
<div id="container">
	<div id="login">
		<form action="https://www.exetel.com.au/login/redirect.php" method="post" name="loginform">
			<input type="text" name="login_name" accesskey="u" tabindex="1" class="input_text" autocomplete="on" />
			<input type="password" name="password" accesskey="p" tabindex="2" class="input_text" />
			<input name="doLogin" type="hidden" value="1" />
			<input type="image" name="submit" src="images/front_btn_login.gif" class="btn_login" />
		</form>
	</div>
	<div id="button_resi">
		<a class="button_resi" href="res_main.php"><!-- --></a>
	</div>
	<div id="button_busi">
		<a class="button_busi" href="small_main.php"><!-- --></a>
	</div>
	<div id="button_corp">
		<a class="button_corp" href="large_main.php"><!-- --></a>
	</div>
	<div id="button_agen">
		<a class="button_agen" href="agents_main.php"><!-- --></a>
	</div>
	<div id="button_country">
		<a class="button_country" href="http://www.countrybroadband.com.au"><!-- --></a>
	</div>
	<div id="button_wireless">
		<a class="button_wireless" href="residential-hspa-information.php"><!-- --></a>
	</div>
	<div id="bottom_left_logo">
		<a href="http://www.australiangeographic.com.au/society/2009-conservationist-of-the-year-awardee-ray-thomas.htm" target="_blank"><img src="images/ausGeo_web_logo.gif" alt="Australian Geographic" /></a>
	</div>	
	<div id="links">
		<ul>
			<li><a href="https://helpdesk.exetel.com.au/">Helpdesk</a></li>
			<li><a href="http://mirror.exetel.com.au/">Mirror</a></li>
			<li><a href="http://games.exetel.com.au">Games</a></li>
			<li><a href="https://webmail.exetel.com.au/src/login.php">Webmail</a></li>
			<li><a href="http://forum.exetel.com.au/">Forums</a></li>
			<li><a href="news_main.php">About</a></li>
			<li><a href="a_network.php">Network Status</a></li>
			<li><a href="contact.php">Contact</a></li>
		</ul>
	</div>
</div>
<div id="noflash"><a href="index.php">Click here for the <b>Flash</b> version</a></div>
</body>
</html>

sable
Posts: 651
Joined: Tue Jan 20, 2004 9:28 am
Location: NSW

Re: Exetel Website virus ?

Post by sable » Sun Jan 10, 2010 7:37 pm

You'd do well to be rid of Norton.
+1

I agree and so do many many others

User avatar
Dazzled
Volunteer Site Admin
Posts: 5994
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Post by Dazzled » Sun Jan 10, 2010 8:40 pm

Sable what makes Norton laughable for going on about a MAC spoofer executable for Windows, is that it's a built-in system function!
On Linux/BSD systems - ifconfig; on Windows, use regedit.

Rex Nebular
Posts: 48
Joined: Sat Sep 03, 2005 3:07 pm
Location: Melbourne

Re: Exetel Website virus ?

Post by Rex Nebular » Mon Jan 11, 2010 8:21 pm

I was hosting that file. I really doubt it was a virus, probably just a false positive. The official website doesn't host the free version anymore, so I was just keeping it alive. It's not important and I host it on other servers. I even got Norton to scan an accessible version of the file and it said it was fine but maybe they updated their definitions.

Whoever deleted my web space also removed my access to the member page. I've emailed support about this already.
Last edited by Rex Nebular on Mon Jan 11, 2010 10:00 pm, edited 2 times in total.

User avatar
Dazzled
Volunteer Site Admin
Posts: 5994
Joined: Mon Nov 13, 2006 1:16 pm
Location: Sydney

Re: Exetel Website virus ?

Post by Dazzled » Mon Jan 11, 2010 8:33 pm

Rex, Norton has become a sad joke. Why does it complain about a file that can't hurt anybody, and then put a warning on the site? It's not even a dreaded black hat tool, as anyone can change the broadcast MAC address.

BAM
Posts: 9
Joined: Wed May 04, 2005 6:06 pm

Re: Exetel Website virus ?

Post by BAM » Tue Jan 12, 2010 12:22 pm

Hi,

I'm not a power user and dont know all the technical details but from my (an ordinary users) point of view, I dont understand why all the fuss with Nortons is - now
I know people had issues with it on less powerfull computers in earlier versions but I've always run it on decent systems and had no issues what so ever
Above is a seperate issue (should be a seperate thread) and to get back on topic :-
Basically I trust Nortons and am happy using it - it's picked up the odd issue here and there and I particularly like the tick and cross system saying if a website is safe or not.
I was surprised to see the Exetel homepage saying it wasnt safe
I wondered if someone hacked the site, but as I trusted Exetel. I continued to what info I was after in my account and then to post here in the forums asking why it showed as a cross.
I see whatever the issue was has been resolved and the site now gets a green tick once again :)

Cheers

User avatar
CoreyPlover
Volunteer Site Admin
Posts: 5922
Joined: Sat Nov 04, 2006 2:24 pm
Location: Melbourne, VIC

Re: Exetel Website virus ?

Post by CoreyPlover » Fri Jan 22, 2010 8:39 pm

It might be slightly off-topic, but since the original issue is now resolved...

I also fall into the category of Norton-haters. On a decent system, Norton can operate adequately, and it does place relatively high in terms of effectiveness (finding and blocking viruses, spyware, etc). But, what I and others continually notice is just how many *problems* are caused by Norton, especially their older versions. This case is a particular example of a false positive but the number of forum threads citing outgoing email issue where Norton is the culprit is phenomenal. I think the crux of the argument is that while you can do a lot worse than Norton, if you are going to pay for an antivirus / internet security software you can definitely do a lot better and I encourage readers to visit http://www.av-comparatives.org/ as it has some very comprehensive and regularly revised publications comparing these products.
I am a volunteer moderator and not an Exetel staff member. As with all forum posts, mine do not constitute any "official" Exetel position. Support tickets may be logged via https://helpdesk.exetel.com.au or residentialsupport@exetel.com.au

User avatar
vk3xem
Posts: 910
Joined: Wed Apr 23, 2008 6:45 pm
Location: HEALESVILLE
Contact:

Re: Exetel Website virus ?

Post by vk3xem » Sat Jan 23, 2010 12:24 am

I now use Microsoft Security Essentials. It appears to work well, I haven't had an issue and best of all it is the right price!
The views I present are that of my own and NOT of any organisation I may belong to.

73 de Simon, VK3XEM

Post Reply