Bank website shows as Harmful on one PC, not on another

Rourke

https://www.anz.com/INETBANK/bankmain.asp (ANZ Internet Banking) is being blocked as harmful on my main PC, but not on my laptop under the same subscription. They both have the same latest version of Internet Security (F-Secure 1.99 build 192; Computer Security 14.99 build 103; Online Safety 2.99.2293). The main PC is running Windows 7, the laptop Win8.1, the browser is Chrome.

 

Please let me know what is going on. Is it safe to use the banking website on my PC? I am not seeing alerts for any other websites.

 

The exact message is: 

Harmful web site blocked

https://www.anz.com/INETBANK/bankmain.asp

This web site has been reported as harmful. 
We recommend that you do not visit this web site.

Blackcat

This web-site is clean as judged by;

 

VirusTotal https://www.virustotal.com/ ; SAS; https://analysis.f-secure.com/portal/login.html and URL Void; http://urlvoid.com/

 

On your PC, where is the error message coming from? F-Secure or Chrome?

Ukko

Hello,

 

Also.. be sure.. that one of your systems.. without troubles. And it not goes to re-direct or "re-change" by DNS/hosts...

for something around that:

 

https://www.virustotal.com/en/url/654f372787f6b9e279ec6e6d3f94b8c28508e1dc20a20385bc92de7e92a7f26b/analysis/

 

Also if you system - OK.

Maybe just current URL triggered as harmful by mistake from "any other" malicious tries to trick users (like example from virustotal).

But current one.. not explain.. why other your system without that situation. Just if... your other system have troubles with any features about Online Safety (I mean - not work something or some of features - turned off).

Rourke

It is an F-Secure branded "page replacement" that appears in the Chrome tab. To be clear, it does not happen on the bank's main website, just when I click on the link to the page where I normally log in to internet banking (or choose it from browser history)

Rourke

I've checked and as far as I can tell all settings are identical on the two machines, and a scan found no viruses or trojans. It seems curious that the message would be "this website has been reported as harmful". I'm an IT Professional with 20 years' experience so usually know what to look for. Next step might be a packet sniffer

Ville

Hi Rourke,

 

If you right-click on F-Secure tray icon, select "Open Common Settings", go to "Connection" tab and see the status of Real-time Protection Network, does it say "Connected"? The rating for web site comes through Real-time Protection Network, so any disruption there would put the computer out of sync with latest ratings.

 

Ville

(F-Secure R&D)

 

Rourke

It seems to have sorted itself out today, after about three days of saying it was Harmful. Very odd. Banking Protection banner is working as usual