India Broadband Forum

ghostbuster

Recently this happened to me. while trying to browse the internet bsnl kept redirecting me to another page that said "Since you have reached/exceeded your free usage of 150MB, you are redirected to this page". it wanted me to log in and after i did that i could continue browsing the internet. can anyone tell me what really happened? and what does usage of 150MB mean??
and by the way my BB plan is home 500.

Venugopal L

This happened to me also. I got redirected to 172.30.19.134:8080/ssssportal.war/exceedlimit.jsp. This is not a BSNL site but a private network. I think we should not type our login and password. If you had already done it, please change your password.
Can anyone give us a solution? I saw in the forum that these things happened last year also, but the solution was not clearly mentioned.

essbebe

1.
Limit 150MB( download/upload) for home plan 125.

2.
Did the message , shown any link to BSNL ?)
Could be Like Yahoo Mail confirming password.
( which is unlikely ) or a test message. Doubtful.

3.
Be careful next time POP up messages appear,when it does not seem to
be from the web site you are surfing.

4.
This could be a spam message trying to get your USERID and password.Next time note more
details and report to CC. and here.

5.
Specially Anti virus programs claiming your computeris Infected and asking you
to click for free scan.

Venugopal L

Currently I am unable to browse any site. For every URL I type, it is redirecting me to this look -alike BSNL site and asking for BSNL login and password. I can see that it is not a genuine BSNL site. I switched off my modem an drebooted my system, but nothing changes. Happening like this for the past 2 days. Any solution?

essbebe

172.30.19.134 not BSNL web site.. Says Private LAN address.

RUN Anttivirus program.
probaly infected with conficker worm.
Wait getting info & links.

panchabhut

do u have a firewall. if yes, check the programs that are acessing the net. u might locate the unwanted one.

Venugopal L

I have zonealarm. I did not find any alien / suspicious program in the list. I used Malwarebytes to clean up any malware on the system. It did not find any. I used Microsoft Malicious code removal tool to scan the system. It also did not find any malware.

essbebe

1
Conficker Eye Chart
2. add to Bookmarks.
http://www.indiabroadband.net/attach...cker-patch.zip
3 Even if (1) negative
Use OPenDNS 208.67.220.220 and 208.67.222.222
4.
Report the present DNS you are using. .

Venugopal L

Thanks. Currently I am working from a different location and not on the infected PC. Anyway my infected system cannot access the eye chart since it will redirect any command to the BSNL web site.
But are you sure that this is due to malware/virus, or is this some problem related to BSNL?

essbebe

@Venugopal _L
Test in your present system too !
The threat from this "Conficker" is still there.

Unless details of the web site you were surfing
the pop up message ( screenshot ) etc
are given ,

I cannot take it up with BSNL Chennai CC ( tech)
who normally reply to my rare complaints.
( I say I need info as Forum contributer )

REF:http://www.microsoft.com/security/po...32/Conficker.E

meetdilip

Confirmed presence of a virus/malware. Is your antivirus updated? then try a full system scan.

BSNL will never inform you even if your usage limit is exceeded (personal experience). The sites you are redirected was meant to steal your information. Please do not fall into the trap. If you have already entered, change the password at the earliest.

Check the site you were redirected to here Norton Safe Web, from Symantec

Even if that site statistics are not present at the moment, Norton will schedule it and you can check later.

Do you use WOT add on in Firefox. If not, please start using it.

You can find more details about conficker from the following link. But conficker blocks only security/ antivirus sites. May be a new variant.

meetdilip

May be a Browser Hijack, try this (attached).

Attached Files

HJTInstall.zip (489.8 KB, 1 views)

essbebe

@meetdilip
1.....Please avoid ZIP attachments.
( even mail clients reject /remove zip attachments )

2......If you are posting your own instructions
....... post as a PDF or word document.

3......... If this is an application/program
........... ref to web site or link may be given.

http://download.cnet.com/Trend-Micro...-10227353.html 793.3 KB 2.0.2
( with details )
http://majorgeeks.com/download3155.html
old version 243 KB.
latest version: version 2.0.2
http://www.filehippo.com/download_hijackthis/ 793KB.

Venugopal L

Thanks guys for your help. Will check this and let you know.

ghostbuster

i did type in my password and user ID and am able to browse the net now. i changed the password as you people suggested. I tried the conficker eye chart link above and got everything positive. nothing odd happening right now. will keep you posted.
thanx

meetdilip

Nice to hear that.

Perform a full system scan after updating your antivirus. And please patch your system with the Patch provided in the How to - Identify, ......... thread

ghostbuster

altough this did stop me from browsing but did not stop me from downloading torrents. did not effect the speed there. it just blocked port 80 i guess

@ meetdilip
i tried the kaspersky link u gave in the your how to link. nothing there too. nothing negative i mean

itsmemad

I had been a victim of this problem last yr...

I reset my modem & reconfigured it... It worked normal after that... Don't know what it is... But I guess it affects your modem... Not computer!

meetdilip

Patch makes your pc secure forever. ie, conficker, which is spreading at an alarming rate, through USB & P2P these days exploits a bug in windows cannot infect your pc any more. The patch is from Microsoft and it fixes the bug. That is why i suggested the patch

eruptionjoojo

I too had faced the same phenomenon some-time back and it alerted me of me exceeding my usage limit for that particular month but while at that time i had entered my username and password and then after i could use the internet without any problem ..........

thus i would like to add a point to this that i had read somewhere (or heard) that BSNL would implement some alert policy that would alert the users while they were to cross their usage limit for a specified month but it was sometime back ...............

the same is what i had done some-time back .............. and i didn't had faced any problem either .................