Suspicious Popups whilst banking

Page may contain affiliate links. Please see terms for details.
camerafodder

camerafodder

MB Enthusiast
Joined
Jul 15, 2007
Messages
2,530
Location
South Lakes (UK) and Colorado
Car
VW Touareg R-line Tech, Toyota IQ2
Hi Guys
our PC at home is 'protected' by an up to date copy of Norton 360 and Microsoft Security Essentials. However when on our bank website a popup appears asking for addtional info ie full security number. This seemed suspicious so we logged off without filling in the box. Mrs Camerafodder reported the incident to the bank and they have confirmed that it is suspicious. I have scanned our PC to within inches of its life and a few minor cookies etc.. and a couple of Trojans were found. However I now have a nice array of green ticks in boxes where they should be but the box still appears. :crazy: Any help or advice greatly appreciated.
 
If you have the time and inclination, I'd go for a complete reinstall of the operating system wiping the HD - it will be a load of aggro but the PC will run smoother for it and it will get rid of everything.

Just back up first :D


Ade
 
i dont rate Norton and have had similar experiences. AVG is what im using at the moment, and seems to be good and doesnt slow the machine down. I run regular scans to check for trojans keyloggers etc for this very reason, after what you found id change all my passwords as well.
 
I use Norton 360 and haven't had any problems at all on on-line banking.

Are you sure it is not the Microsoft Security Essentials asking the question as a security check. I would disconnect Microsoft Security Essentials and try again, as Norton is enough security IMO.
 
Brian WH said:
I use Norton 360 and haven't had any problems at all on on-line banking.

Are you sure it is not the Microsoft Security Essentials asking the question as a security check. I would disconnect Microsoft Security Essentials and try again, as Norton is enough security IMO.
Click to expand...
Thanks Brian, the popup is disguised as a bank window and is asking for full bank code details, something that the bank would never do and they have confirmed that it is malware of somekind.:(
 
Do your bank recommend or offer a free virus software package? Mine, Barclays, offer KAspersky free for 3 PCs and 1 Mac.

I also thought that it was bad advice to run more than one anti virus program at the same time as they clash. I know if you want to install Kaspersky you have to totally remove Norton..
.
Give your bank a call and see if they offer a recommended anti virus program
 
camerafodder said:
Thanks Brian, the popup is disguised as a bank window and is asking for full bank code details, something that the bank would never do and they have confirmed that it is malware of somekind.:(
Click to expand...

Sounds like the same type of Trojan that tried to get into my Nationwide account a year or two ago. Exact same MO: asked for a full security code instead of a few characters.

I got in touch with Nationwide, and they confirmed it, said (back then) that it was a particularly nasty one that was difficult to remove. I was about to upgrade the PC anyway, so I did that. Bit drastic, but a new PC was so cheap anyway. :)

There's more info about another similar Trojan here (Feb '09): News and alerts - Further information - Security - Nationwide Building Society

I'd start hassling Norton (hah - good luck with that!) and asking why its software can't sort this Trojan out.
 
Out of interest are the symptoms that of a virus or malware, or are the two words interchangeable?
 
Thanks Manalishi

The 18 feb 09 article is very close to what is happening. I'm going to try their recommended scan and see what happens. Who knows? Maybe I'll be able to earn enough brownie points with Mrs CF to allow me to buy a nice tube amp kit! ;)
 
Last edited:
You may be unlucky enough to have been targetted by a man-in-the-middle attack, in which case it wouldn't be any software on your machine at fault.

Either way; does your bank support trusteer? Home | Trusteer Most larger UK banks have now signed up to trusteer, and it's services are pretty good. Last report I saw was on the lines of, "no client with trusteer installed has fallen victim to online fraud".

M.
 
manalishi said:
I was about to upgrade the PC anyway, so I did that. Bit drastic, but a new PC was so cheap anyway. :)
Click to expand...

Was a bit drastic wasn't it?

Perhaps a hard drive reformat followed by operating system re-install then restore of back-ups could have saved you some money.
 
Slight difference:

Malware, short for malicious software, is software designed to infiltrate or damage a computer system without the owner's informed consent.

A virus is capable of duplicating itself and being transmitted to other computers and is not always intended as malicious.
 
NormanC said:
Was a bit drastic wasn't it?

Perhaps a hard drive reformat followed by operating system re-install then restore of back-ups could have saved you some money.
Click to expand...

Agreed, but at the time I was cash-rich and time-poor, so I took the path of least resistance. :)
 
By the way you could have tried this method, when the window popped up right click on it and view Properties, in the middle of the properties window is the Address (url).

Next follow these steps and block that address:

This action will require you to edit your Host file. Your host file is a computer file used to store information on where to find a node on a computer network. For more a more detailed description. Check out this link Host File Description Link
In Windows XP
1. Click Start->All Programs->Accessories->Command Prompt.
2. Click Command Prompt This will open a DOS command window.
3. Type: notepad C:/Windows/System32/drivers/etc/hosts
4. Locate the line 127.0.0.1 localhost
5. To block the website google.com for example, just add this text under 127.0.0.1 localhost:


127.0.0.1 <insert popup address here>

You can add as many sites any site, However you will need to prefix it with "127.0.0.1".

6. Save the file
The site will now be blocked in all web browsers. This is an advanced but easy method on how to block a website.
 
You must log in or register to reply here.

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)
Back
Top Bottom