My dad is getting a new box popping up when he goes to log into his barclays bank account online.

I've copied what it says:

Due to security updates in our on-line system, you are required to enter your details for identification purposes.
Please accept our apologies for any inconvenience caused



First Name:
Surname:
Account Number:
Sort code:
Membership number:
Date of birth:
Post code:
Password:
Mother's maiden name:
Telephone banking password:

He is worried this may be something trying to get his details. I've told him to ask Barclays which he's going to do today but I just wondered if anyone else has encountered this.

Thanks

Under no circumstances should he enter any information into that box. It is a phish. How is he trying to get to the Barclays web site? I suggest he type their web site address into the address bar from scratch and not click on any links or favourites he may have set up.

Sounds very suspect, do not enter anything, if need be do it the old fashioned way, as you have already suggested to your dad.

There is no way the bank would ask for those details online.

Thanks guys he didn't enter anything into the box

by typing the address in the bar. I told him he has something on his pc because he can't go to any antivirus websites, update his virus scanner and stuff. On my laptop which is clean that box doesn't come up.

I wouldn't enter any of those details - it looks distinctly dodgy to me. I've never experienced it but I'd definitely get onto Barclays about it, and do a virus scan on his computer as soon as possible.

Wanting all that information at once seems highly suspicious. Bank logins usually only want a username, a few characters from a password, and the answer to one security question.

Get him to clear his browser using Ccleaner and download and run Malwarebytes to check for any virus. Both are free and clean.


CCleaner.

Malwarebytes

Thanks, we've got a guy coming to look at the computer tomorrow because he can't use his virus scan or update it or anything. All antivirus websites are blocked. I realised this the other day and that's why I said to him be careful and don't useonline banking but he went to do it today and that box came up.

On my laptop it's normal, no box. He's gone down to the bank now.

Thanks but he has malawarebytes and other things and he cannot open them due to whatever is on hiis comp. He can't download them either.

We have got a man coming round tomorrow to have a look. We found him in the paper.

Does this include when having started the PC in "Safe Mode" - assuming a Windows OS.

He must be a small chap.

Barclays did update their system this weekend but you don't need to enter any personal information. The only item is that you have enter your 16 digit card number and a password. This will be used in the event you don't have your card reader.

I'd add TDSSKiller to that list.

http://support.kaspersky.com/faq/?qid=208283363

If you cannot visit any antivirus websites, then I suggest booting PC in safe mode by pressing F8. Then once in safe mode run Malwarebytes and after that run TDSSKiller.

I've tried all that and more, I managed to get it out and everything worked fine then the thing came right back again!!! One thing that came up was:

trojan agent gen nullo short. I've tried so many things but the computer is still the same.

I saw the other thread in computing, I thought that was your computer.

The combo of programs I use are Avast, Malwarebytes and TDSSKiller which to this day have never let me down, one or the other has always managed to detect and remove whatever trojan/rootkit was on my PC.

The trojan you mention could be some sort of new one. Do you boot the PC in safe mode before you run them, and are the programs up to date?

I see Barclays is offering free Kaspersky security software to its online banking customers:

http://www.barclays.co.uk/Helpsuppor...P1242557966961

Maybe in this instance it might be locking the stable door after the horse has bolted, but the software might be worth having for protection in the future.

Tried to but the blue screen just comes up

No it's my dads but I couldn't be bothered explaining all that at the time.

I would recommend that you visit a forum that specialises in malware removal.
(There is a link in my profile but not sure if it is against forum rules to post it directly).

What they will do if have you download and run several programs.
Usually they start with HiJackThis.
This detects what is starting/running on your PC. Malware gets into the startup process so that everytime you start the PC is replicates iself so keeps coming back.

Then they may get you to run GMER. This scans for rootkits and startup malware.

Then they may get you to run ComboFix which will scan and remove known/detected malware & rootkit entries.


It may be as simple as that. You may just have to do a few scans, click a couple of buttons and have your PC cleaned up.
Or it could be a lot more involved.

That's why I recommend communication online with a malware tech specialist.

The site has recently been updated. It's been the new style for over a month for me.

Nice. I've recently downloaded the trial for it. There's £15 saved.

I've posted on geeksgo but had no reply but read old threads on similar problems and ran everything including combofix. It worked but then the thing came back!!! Now we've arranged for someone to come round and fix it.

How do these things manage to get in your pc? My dad has exactly the same sceurity as me. Mcafee Firewall, Microsoft Security Essential, Malawarebyts. His computer has something on it but my laptop is fine.

I download on my laptop but he never does on hi pc. I wonder how he managed to get this.

Yeah I just looked at that but you have to login and I'm not gonna risk that on this pc yet. But we'll defo get it when it's all fixed

Looks like he will need to do a fresh install, not difficult. Google that trojan and it seems a difficult one to remove.

It's worth backing up your docs etc once a week.