Probably trojan asking for TANs

Discussion in 'Malware Help (A Specialist Will Reply)' started by Ischtan, Nov 2, 2010.

  1. Ischtan

    Ischtan Private E-2

    Hello,

    this time I have problems with my fathers PC. Hopefully you can help:
    It is a Win7 64bit system, and when he logs into his bank account, a popup occurs, asking for several TANs. This only occurs on his account. I followed the steps in the removal guide and attached are the logs. Hopefully someone can help.
     

    Attached Files:

    Ischtan, Nov 2, 2010
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    What do you mean by "TAN's"?

    MBAM found some issues and fixed them, but I would still suggest that you contact your back an alert them to a possible intrusion. Then use a different computer to change the passwords on his online bank accounts.
     
    TimW, Nov 3, 2010
    #2
  3. Ischtan

    Ischtan Private E-2

    Sorry, a TAN is a identification number (we use in germany), to verify a transaction made via online banking. Normally a user has a list of about 100 TANS, the the online banking web page is asking for the TAN at position XY to verify the transaction. What happens at my fathers PC is proably a phishing attempt.

    The bank was informed, but had no solution, but reinstalling windows (what is probably the best solution, but maybe there is another way)
     
    Ischtan, Nov 3, 2010
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Are you typing in the bank address or using the saved drop down menu?
     
    TimW, Nov 3, 2010
    #4
  5. Ischtan

    Ischtan Private E-2

    The adress is typed in, the login and password are typed in afterwards, too. When inside the account, after some seconds the popup comes up and cannot be closed. And this only oocirs in one account.
     
    Ischtan, Nov 3, 2010
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    One bank account or one user account? Have you changed the passwords?
     
    TimW, Nov 3, 2010
    #6
  7. Ischtan

    Ischtan Private E-2

    Sorry for the late answer:

    The popup occurs when logging into the bank account. This occurs only when inside one of the user accounts. When logging into the same bank account from another user account, no popup appears.

    And the password for the bank account was changed.
     
    Ischtan, Nov 7, 2010
    #7
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Were the scans run on that user account? Have you tried creating a new account and seeing if that one works? You may need to do that and then delete the corrupt account.
     
    TimW, Nov 7, 2010
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I would warn that when it comes to financial related issues like this, extreme caution needs to be taken especially since you have already had passwords and your account compromised. A total clean reinstall would be highly recommended and you need to use a totally different clean PC or call your bank to have all passwords, credit card info....etc changed. You should read the below links:

    How to report ID theft, fraud, drive-by installs, hijacking and malware?

    When should I re-format? How should I reinstall?


    Yes we could work thru trying to clean your PC but cannot guarantee security once compromised like this.
     
    chaslang, Nov 7, 2010
    #9
  10. Ischtan

    Ischtan Private E-2

    Thanks a lot.
    Then I am going to reinstall! Better be safe :)

    Have a nice day all of you!
     
    Ischtan, Nov 8, 2010
    #10
  11. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome. Safe surfing. :)
     
    TimW, Nov 8, 2010
    #11

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds