IE7 Phishing problem

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Terry - 18 Jun 2008 20:46 GMT

I recently encountered a phishing problem with IE7. At www.citicards.com, if
I use IE7 to log in, the next web page to come up is not my account but a
site asking for a credit card #, and the 4 digit code on the back. CITI says
that is a phishing site. Using Firefox, I can log in at www.citicards.com and
go to my account with no problem. Talked with McAfee and could not resolve.
Final suggestion was to re-install IE7. I did this and the problem is still
there. Anybody have and good ideas. I did try a couple of free spyware
programs that identified threats not found by McAfee, but wanted McAfee to
fix (with no luck) since I am subscribed with them.

Signature

TDS at Home

Reply to this Message

PA Bear [MS MVP] - 19 Jun 2008 00:06 GMT

Assuming WinXP, open Windows Explorer to C:\WINDOWS\SYSTEM32\DRIVERS\ETC
<=this folder | Rename the file HOSTS (no extension; not LMHOSTS) to
OLDHOSTS or delete it | Reboot | If the behavior persists, you've got a
hijackware problem that affects IE but not FF.

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

Signature

~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

> I recently encountered a phishing problem with IE7. At www.citicards.com,
> if
[quoted text clipped - 8 lines]
> spyware programs that identified threats not found by McAfee, but wanted
> McAfee to fix (with no luck) since I am subscribed with them.

Reply to this Message