Page 1 of 1

Exetel Website virus ?

Posted: Sun Jan 10, 2010 7:03 pm
by BAM
Hi,

Just went to the homepage http://www.exetel.com.au/index.php and my Nortons gave me this warning message - see link below
http://safeweb.norton.com/report/show?url=exetel.com.au

Can anyone explain this please ??

Thanks
Graeme

Re: Exetel Website virus ?

Posted: Sun Jan 10, 2010 7:13 pm
by Dazzled
Below is the actual code found at the Exetel site. It has one attribute wrong. Apart from that can you see what the Norton page complains about? You'd do well to be rid of Norton.

What they are actually worried about is a Windows executable that has been allegedly posted to an inaccessible free webspace.
(PS I can't find smac_1.1.exe on home.exetel, can anyone? It's a MAC address spoofer http://www.klcconsulting.net/smac/ A lot of customers use the space as a file transfer site)

Code: Select all

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>Exetel Pty Ltd</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="Keywords" content="ADSL, ADSL2, VoIP, HSPA, HSDPA, Mobile, Hosting, Value, X Calling Card, Exetel, Residential, Business, Corporate, Agents, Country Broadband, SMS via ADSL, Wireless, Wireline, Voice, Ethernet, SHDSL, Fibre, Business Grade, VPN, VISP, Telephony, Cheap, Telephony" />
<meta name="Description" content="Exetel have been providing a range of Internet and phone services to customers since Feb' 2004. There are now over 100,000 customers using a wide range of different Exetel services in every State and Territory." />
<link href="css/index_alt.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="js/index_alt.js"></script>
</head>
<body>
<div id="container">
	<div id="login">
		<form action="https://www.exetel.com.au/login/redirect.php" method="post" name="loginform">
			<input type="text" name="login_name" accesskey="u" tabindex="1" class="input_text" autocomplete="on" />
			<input type="password" name="password" accesskey="p" tabindex="2" class="input_text" />
			<input name="doLogin" type="hidden" value="1" />
			<input type="image" name="submit" src="images/front_btn_login.gif" class="btn_login" />
		</form>
	</div>
	<div id="button_resi">
		<a class="button_resi" href="res_main.php"><!-- --></a>
	</div>
	<div id="button_busi">
		<a class="button_busi" href="small_main.php"><!-- --></a>
	</div>
	<div id="button_corp">
		<a class="button_corp" href="large_main.php"><!-- --></a>
	</div>
	<div id="button_agen">
		<a class="button_agen" href="agents_main.php"><!-- --></a>
	</div>
	<div id="button_country">
		<a class="button_country" href="http://www.countrybroadband.com.au"><!-- --></a>
	</div>
	<div id="button_wireless">
		<a class="button_wireless" href="residential-hspa-information.php"><!-- --></a>
	</div>
	<div id="bottom_left_logo">
		<a href="http://www.australiangeographic.com.au/society/2009-conservationist-of-the-year-awardee-ray-thomas.htm" target="_blank"><img src="images/ausGeo_web_logo.gif" alt="Australian Geographic" /></a>
	</div>	
	<div id="links">
		<ul>
			<li><a href="https://helpdesk.exetel.com.au/">Helpdesk</a></li>
			<li><a href="http://mirror.exetel.com.au/">Mirror</a></li>
			<li><a href="http://games.exetel.com.au">Games</a></li>
			<li><a href="https://webmail.exetel.com.au/src/login.php">Webmail</a></li>
			<li><a href="http://forum.exetel.com.au/">Forums</a></li>
			<li><a href="news_main.php">About</a></li>
			<li><a href="a_network.php">Network Status</a></li>
			<li><a href="contact.php">Contact</a></li>
		</ul>
	</div>
</div>
<div id="noflash"><a href="index.php">Click here for the <b>Flash</b> version</a></div>
</body>
</html>

Re: Exetel Website virus ?

Posted: Sun Jan 10, 2010 7:37 pm
by sable
You'd do well to be rid of Norton.
+1

I agree and so do many many others

Re: Exetel Website virus ?

Posted: Sun Jan 10, 2010 8:40 pm
by Dazzled
Sable what makes Norton laughable for going on about a MAC spoofer executable for Windows, is that it's a built-in system function!
On Linux/BSD systems - ifconfig; on Windows, use regedit.

Re: Exetel Website virus ?

Posted: Mon Jan 11, 2010 8:21 pm
by Rex Nebular
I was hosting that file. I really doubt it was a virus, probably just a false positive. The official website doesn't host the free version anymore, so I was just keeping it alive. It's not important and I host it on other servers. I even got Norton to scan an accessible version of the file and it said it was fine but maybe they updated their definitions.

Whoever deleted my web space also removed my access to the member page. I've emailed support about this already.

Re: Exetel Website virus ?

Posted: Mon Jan 11, 2010 8:33 pm
by Dazzled
Rex, Norton has become a sad joke. Why does it complain about a file that can't hurt anybody, and then put a warning on the site? It's not even a dreaded black hat tool, as anyone can change the broadcast MAC address.

Re: Exetel Website virus ?

Posted: Tue Jan 12, 2010 12:22 pm
by BAM
Hi,

I'm not a power user and dont know all the technical details but from my (an ordinary users) point of view, I dont understand why all the fuss with Nortons is - now
I know people had issues with it on less powerfull computers in earlier versions but I've always run it on decent systems and had no issues what so ever
Above is a seperate issue (should be a seperate thread) and to get back on topic :-
Basically I trust Nortons and am happy using it - it's picked up the odd issue here and there and I particularly like the tick and cross system saying if a website is safe or not.
I was surprised to see the Exetel homepage saying it wasnt safe
I wondered if someone hacked the site, but as I trusted Exetel. I continued to what info I was after in my account and then to post here in the forums asking why it showed as a cross.
I see whatever the issue was has been resolved and the site now gets a green tick once again :)

Cheers

Re: Exetel Website virus ?

Posted: Fri Jan 22, 2010 8:39 pm
by CoreyPlover
It might be slightly off-topic, but since the original issue is now resolved...

I also fall into the category of Norton-haters. On a decent system, Norton can operate adequately, and it does place relatively high in terms of effectiveness (finding and blocking viruses, spyware, etc). But, what I and others continually notice is just how many *problems* are caused by Norton, especially their older versions. This case is a particular example of a false positive but the number of forum threads citing outgoing email issue where Norton is the culprit is phenomenal. I think the crux of the argument is that while you can do a lot worse than Norton, if you are going to pay for an antivirus / internet security software you can definitely do a lot better and I encourage readers to visit http://www.av-comparatives.org/ as it has some very comprehensive and regularly revised publications comparing these products.

Re: Exetel Website virus ?

Posted: Sat Jan 23, 2010 12:24 am
by vk3xem
I now use Microsoft Security Essentials. It appears to work well, I haven't had an issue and best of all it is the right price!