Printable View
Hi All,
yesterday I went to my bank's wbsite to access my account online.
I saw that it was asking all the details (including security details) at the first page and
being suspicious I called bank they told me that I'm diverted to a cloned website.
I access the site from my friend's PC it works perfectly fine.
Could anyone pleae tell me how can I fix this issue on my laptop so that I go to the correct website.
Darknite
How up2date is your system? And what OS is it?
Any anti-virus? Which one? Is that up2date?
Have a look at your hosts file (c:\windows\system32\drivers\etc\hosts.). Review your TCP/IP settings, most notably the DNS settings.
Run something like malwarebytes.
also download and run combofix, and maybe give spybot search and destroy a run.
im thinking maybe some DNS poisoning has taken place.
i agree with teabags.
If the DNS and default gateway settings look OK on your machine, check the router's settings. I've seen cases where the workstation DNS gets changes to the routers address and the routers DNS is poisoned.
Also, if the router was compromised, reset it and change the admin password. Cant tell you how many times I go to fix a problem only to find out the router password is still set to the default.
Speaking of routers, do make sure you haven't been hit by Psyb0t..
http://www.dronebl.org/blog/8
http://www.adam.com.au/bogaurd/PSYB0T.pdf
Thanks for the advice SirDice, I've checked my AV, and found them up2date.Quote:
Originally Posted by SirDice
hosts file was fine. TCP/IP and DNS settings I've checked, but not an expert to find anything
wrong there.
Then I tried malwarebytes, ran a quick scan, It picked up and delete the files, then I access my bank site and Voila, problem was fixed. I was accessing the real site rather than cloned site.
Cheers.
Darknite