AhnLab Online Security - FAQ

  Symptoms

Error Description: "Installation failed due to an error. Click Yes to resolve this problem."

  Cause
  • The site you are currently accessing can't be trusted.
  • The address of the site could have been changed, or it could be a phishing or pharming site.
    		•

      Phishing and Pharming
    1
    What Is Phishing?
    • The term "phishing" is a combination of "private data" and "fishing."
    • It's a new type of security invasion that lures the user to access a spoofed website and enter sensitive information in order to take money.
    2
    What Is Pharming?
    • Pharming, a mutated form of phishing, is a tactic employed to rob the user of legitimately owned domains or send the user who is trying to
      reach a legitimate site to a phony site without the user's knowledge.
    3
    Recognizing Phishing/Pharming Sites
    • A phishing/pharming site prompts you to enter several different types of personal information on a single page.
    • When you try to transfer money to another account, a phishing/pharming site asks you to enter your account number.
    • When you enter the address, the login page is skipped and you're directly presented with the Internet banking pages.
    • When you enter the password for your bank security card, the site prompts you to enter the main window directly instead of a separate popup window.
    • You are asked to enter your public key infrastructure certificate more than once.
    • You find something different or unfamiliar in the graphic layout of your bank's website.
    4
    How to Protect Yourself from Phishing/Pharming
    • Apply the latest Windows security patches on a regular basis, and keep your anti-virus program updated.
    • Do not open suspicious e-mail messages.
    • Avoid using Internet banking services from a computer in a public place such as Internet cafe.
    • Avoid installing freeware, including P2P programs.
    • Be sure to keep your public key infrastructure certificate in a separate storage device.
      Solution
    1
    Install the latest version of the anti-virus/anti-spyware software, and run viruses/spyware scan.
    2
    Determine whether the HOSTS file has been altered.
    • Be sure to determine whether the HOSTS file has been altered by a malicious program in order to keep the system from being redirected to a phishing site.
    3
    How to Check the HOSTS File - Windows 2000/XP

      1) Go to Start > Run, enter the path to the HOSTS file and click OK.

      2) Windows XP: C:\windows\system32\drivers\etc\hosts
      Windows 2000/NT: C:\WINNT\system32\drivers\etc\hosts
      Windows 98/me: C:\windows\hosts



      3) When the Open With window opens, select Notepad and click OK.



      4) See if there are website addresses to be accessed.



      5) If there are, delete them.

    4
    How to Check the HOSTS File - Windows Vista/7
    • Go to Start > All Programs > Accesories, right-click Notepad and select Run as administrator.

    • Click File > Open, change file type to All Files, and enter C:\windows\system32\drivers\etc in Locations.
    • Select hosts, and click open.

    • See if there are website addresses to be accessed.

    • If there are, delete them.

    5
    Install the latest version of the anti-phishing/anti-pharming software, and run a scan.