Internet banking issues - virus?

runmichellerun

I think I may have accidentally downloaded a virus to my pc and, although it has been removed by my anti virus, things have not been right with my internet banking ever since. I use various systems due to work, and the following is happening:

• Santander won't let me log in with my normal details. It says I have not entered a company ID when I have.
• Lloyds main login page shows as text only, and it locked me out using my usual details and they said I had a fraudulent transaction. I have now got this one working again, but only my pc at work, not my one at home
• Barclays main login page shows as text only
• Halifax seems fine

These are all on chrome but it's happening on IE too when I try it.

Any help would be gratefully received.

pendragon_arther

Try resetting your Host file.

runmichellerun

Thank you for the reply. I have absolutely no idea what a host file is, but will google it.

AndyPix

Hi. Click on the little "cog" symbol on the top right of your internet explorer.
Click internet options.
click the advanced tab along the top of the resulting window
click "restore advanced settings"
then click "reset" and check the "delete personal settings" box.

This will return internet explorer to its default state and that should fix your issue.

However I would be careful, it sounds to me like you are getting spoofed versions of your banking sites and I would deffinately not put any details in them until you do the following :-

Download malwarebytes from here :- https://www.malwarebytes.org/mwb-download/

Download the free version, and when installing, be sure to UNTICK the "free trial of malwarebytes pro" option.

Scan your computer using this and then let it quarantine/delete anything it finds.

You should then be a happy safe surfer once again .

PS change your passwords for your online banking AFTER you have done this .

Andy

runmichellerun

Thank you very much Andy

Strider590

To me this sounds like a corrupt Java or Flash install OR some sort of script blocking addon within the browser.

Some sort of "man in the middle attack" could be possible if someone had somehow set your PC to divert these websites through their own server (which would be failing to work as intended) and into a framed redirect, but on so many sites i'd say it's unlikely.

AndyPix

Strider590 wrote: »

To me this sounds like a corrupt Java or Flash install OR some sort of script blocking addon within the browser.

Some sort of "man in the middle attack" could be possible if someone had somehow set your PC to divert these websites through their own server (which would be failing to work as intended) and into a framed redirect, but on so many sites i'd say it's unlikely.

OP, don't be afraid of all these buzz words ..
Doing what I said will fix them.

Andy

AndyPix

And yes strider , I agree ..
That's exactly how a poorly configured MITM attack would present its-self using the default page spoof option on SETK in Kali Linux ..

Browser reset will remove any rogue proxy settings
And malwarebytes should remove the instigator.

Andy

Laz123

I had a virus hit and one of the areas affected was in fact the host file.