Posted: 12/1/2010 9:19:51 AM EDT
|
Wells Fargo phone support thinks that we have a virus on our computer. Scans show nothing.
When logging into our account we are then taken to a page with a Wachoiva logo and asking for an RSA key be entered. Phone support says that this is a malware produced page. It is still an HTTPS page, and I am leaning towards they have changed their system as opposed to a virus. This has happened several times in the recent past with their website. Is it possible for an HTTPS session to get hijacked? |
|
Quoted:
Wells Fargo phone support thinks that we have a virus on our computer. Scans show nothing. When logging into our account we are then taken to a page with a Wachoiva logo and asking for an RSA key be entered. Phone support says that this is a malware produced page. It is still an HTTPS page, and I am leaning towards they have changed their system as opposed to a virus. This has happened several times in the recent past with their website. Is it possible for an HTTPS session to get hijacked? No, but it possible for a redirect to happen prior to that. |
|
http://en.wikipedia.org/wiki/Man_in_the_Browser Back up your important docs, format/reinstall, and don't fuck up again  |
|
download, install, and update malwarebytes, disconnect the internet, run the full scan with malwarebytes. if it comes up clean but the issues continues try tdsskiller from kaspersky labs, if that comes up clean then try combofix from bleepingcomputer.com. Also if you are using AVG Free....... STOP THAT! there are other free ones that work better, I prefer Avast if you have to use a freebie. I am a computer technician and 50-75% of the issues I work on month to month are cause by malware/fraudware/trojans. I have not had to reformat a machine to fix one of those issues in years. Occasionally it turns out that formatting might have even been faster but no matter what lengths I go to to back everything up the customer often complaigns that they can't find something (even if I backed up the entire hard drive and put it in a folder after the reformat). |