Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Tuesday, June 7, 2011

Remove Trojan-BNK.Win32.Keylogger.gen (Uninstall Guide)

Tell your friends:
Trojan-BNK.Win32.Keylogger.gen is a fake virus warning (a pop-up window that says your PC is infected). It deceives people into downloading/installing various malware voluntarily. Trojan-BNK.Win32.Keylogger.gen is a non-existent virus. It may also prompt users to obtain a full version of fake anti-virus software in order to remove threats which do not even exist. If the Trojan-BNK.Win32.Keylogger.gen keeps popping up on your computer, please use legitimate anti-malware to remove it. You should protect yourself with common sense and legitimate anti-virus software. Don't forget, cyber criminals will use every dirty trick in the book to get their hands on your money. Good luck and be safe online!

XP Internet Security 2011 or XP Antispyware 2012 Firewall Alert saying that your web browser is infected with Trojan-BNK.Win32.Keylogger.gen. The fake warning states that your sensitive information can be stolen.




Trojan-BNK.Win32.Keylogger.gen removal instructions:

1. Use any of the debugged serial keys listed below to register the rogue application in order to stop the fake security alerts. Just click the Registration button and then select "Activate manually". Don't worry, this is completely legal.


9443-077673-5028
3425-814615-3990
2233-298080-3424
1147-175591-6550




Once this is done, you are free to install anti-malware software and remove the rogue anti-virus program from your computer properly.

2. Download recommended anti-malware software (direct download) and run a full system scan to remove this virus from your computer.

To learn more about this malware and to find alternate removal instructions, please read this article:

http://deletemalware.blogspot.com/2011/06/remove-xp-antispyware-2012-xp-internet.html

83 comments:

Anonymous said...

i have this trojan win32 keylooger crap and it wont allow me to open any programs or get on the internet so i can't download and removal programs. now what the heck do u do???????

Anonymous said...

You have to download and run a file called FixExe.reg before you can install one of the programs listed above.

etim said...

So far so good--had to run FixExe.reg to get my already installed MWB to run. After MWB found and fixed(?)and after reboot I found that my FFox had been hijacked too.Tried to install superanitspyware but couldn't so I ran Rkill. Restarting FFox now seems to have fixed it. Am running MWB again to be sure. Won't know for sure till I reboot again, though.

etim said...

Post#2--2nd run of MWB found 3 more critters, 2 in FFox. Bogus alert balloons reappeared so I ran rkill again and am rerunning MWB

etim said...

Post#3--3rd run of MWB (after running Rkill 1st)gave a clean bill of health.
Whew! Thanks!

If these c+++suckers get payments through these scams then why can't we trace them and do a little enhanced interrogation on them just for fun? And why can't I help?

Anonymous said...

Thank you so much. This thing drove me crazy. I am so glad I found this information on my cell phone. Thanks again.

Anonymous said...

I need to buy a Mac!

Anonymous said...

Another victim here. I followed these directions and it worked! But it came back and so I redid the above steps. And it worked again.

I have run every antivirus program there is and it is finding nothing. But how does one protect their system from this reoccurring? Is there a update for Windows Firewall? What else should we do? Thanks so much for all the info!

Anonymous said...

Wonderful!! It really helped me to come out of the crazy virus. Thank you very much. Great.

fffffffffffff said...

Thank you thank you berry much I was worried to tell my parents now I'm safe

Anonymous said...

I just had to deal with this on a PC this morning. I had to do a forced (turn power off) shutdown and was able to reboot into safe mode and log on as Administrator. Then I was able to run MalwareBytes from Safe Mode and it found the virus entries and removed them. But, after that, I could only get the computer to work when logged on as the system administrator account -- when looged on as any User (including Users with admin privileges) I couldn't get programs to run. For example, I would click on the Internet Explorer icon to run it and a window would pop up asking me what program I wantedt to use to run iexplore.exe etc. Finally, I did System Restore as Administrator while in Safe Mode and restored the system to a few days ago before the fake virus warning first appeared. That worked and the system is working fine.

Anonymous said...

THANK YOU THANK YOU THANK YOU. I been having everything break down and the thought of me taking the computer in and being charged made me nervous. Your post was simple and easy for me to follow. Thanks for people like you that can help us. I appreciate it so much. I am back up and running and don't have to spend christmas money at computer shop.
Thanks again

Anonymous said...

THANK YOU SOOOOO MUCH! THIS VIRUS WAS MISERABLE!
MERRY X-MAS!!!!!

Anonymous said...

Best buy g_squad, wanted 199.99 to format my computer and with your help I am running free and secure. Thank you Very Helpful !

Anonymous said...

Just used this info to save my wife's laptop. You guys are genius. Merry X-mas.

Anonymous said...

this did not work for me at all. I have even been on with norton for two hours and cant acces the internet or CMD prompts be careful. It acts like it works then when you reboot a few times I do not have internet explorer and my whole computer is jacked up.

Anonymous said...

The seriously key number worked, SWEET!!!

Anonymous said...

the makers of the virus seem to have updated the damned thing so there is no place to put the debugged serial number. -_-u So annoying.

Anonymous said...

Thanks so much for putting this on here. Saved me a migraine!!!! Merry CHRISTmas!!!

Anonymous said...

I did everything mentioned above - and it worked!!!!!! Now 3 days later it F*kin came back?????? Doing the steps above again and hoping it will work again. Any ideas to get NOT get this virus again???!!!

Anonymous said...

OMG....I have been going crazy and seriously thought I might have to kill my grandkids, they were on the internet and WHAM....next thing I knew, I had this problem. I'm anxious to perform these steps on my computer as soon as I get home. I'll keep you posted. Merry Christmas to one and all.

Anonymous said...

this code is not working for me today like it did the other day. any ideas?

Anonymous said...

This also worked for me. I was caught ones and regocnized this as a fake when it popped up.
Bravo for letting us not having migraines anymore. ADVISE run McAfee Internet Security and save a lot of frustration.

Anonymous said...

I tried the key registration and right now it is "updating", but I don't understand how removing their fake key registration and entering the one given above would clear it? So far so good, but I don't get the logic? Anyway, like the others, I really do appreciate the help as this is with my young daughter's computer and she thought she had lost it all.
Gracias! May the Lord be with your spirit!

Anonymous said...

Worked ty

Anonymous said...

it worked for me to remove this. I wasn't about to give my cc info to this and get burned. TY for the great info. Have a great Christmas.

Anonymous said...

thanks bro. Merry Xmas from canada

me said...

boo

Anonymous said...

Thank u so much..it worked..

Nick said...

Thanks for the info, they key worked for me and i just closed out've the updats and was able to get onto the internet and download malwarebytes, which i am currently running.. Hopefully this gets rid of the problem

Anonymous said...

I hate computers..

Anonymous said...

thanks the code worked great job!!

Anonymous said...

man good looking! You guys just saved Christmas.

Anonymous said...

This grinch almost stole my Christmas. Thanks for the key and allowing me to have a merry one. Then went over to bleepingcomputer.com to rip 'win 7 antivirus 2012' out permanently.

Anonymous said...

am i supposed to download the spyware doctor? if not, oops D: but.. i hope this works! im only 12 and im really stupid with everything but computers. i got rid of my last trojan, hope i can get rid of this crap.

Anonymous said...

thank you!!!!!!!! now im not gonna get my ass beat!!!

Anonymous said...

Thank you so much, managed to get in to be able to put back to a restore point. Looking forward to a Happy New Year.

Anonymous said...

Thanks for all the info. Working my way through it now. The 'debugged' registration key did not work for me. 'error' msg said it was invalid. I suspect the virus makers caught on to that. Plugged in FixExe.reg to block, so I could initiate Malware Bytes (already installed). Scrubbing is in process....

Anonymous said...

Key worked, thanks guys.

Anonymous said...

First of all thank you for your help and information.
I tried several spyware software but only 2 actually detected this virus. One is mentioned above (spyware doctor), the other is Malwarebytes. You can install a trial version of Malwarebytes for 14 days. This virus might prevent to install recent updates on Malwarebytes thus making it useless. If that happens click on the below link and follow the instructions.
I scanned my pc with Spyware Doctor right after and it was free of any virus. So it worked well for me without buying any software so far. Especially I didn't feel comfortable entering any credit card number on my keybord with a virus like this on my pc.
You need to remove this virus from your computer after you use the serial key provided on this website. That will give you some control back on your computer but it will not eliminate the virus which eventually will slow down your computer and stop some programs to function properly, beside other security threats to your computer.

http://www.bleepingcomputer.com/forums/topic302533.html

Anonymous said...

I did everything above, and now my pc starts up, but goes to a blank screen after saying starting Windows 7...

Biketrp said...

I went to my company's IT guys for help, and was told my computer was a gonner! Thanks a million for the 411! I don't have to go out and buy a new lap-top! Downloaded Spyware Doc and keeping my fingers crossed it does not come back!

Anonymous said...

Thanks for the excellent information and advice. I downloaded the removal software, followed the instructions and rebooted. As an added precaution, I ran a Windows command "scannow" since rebooting still showed some Windows files missing. Lastly, I did a restore to a point before this "intrusion". Fortunately, my laptop is less than a month old so I didn't really lose anything ... but a couple hours and some gray hairs from aggravation! Hope this problem doesn't reappear.
Happy New Year!

Anonymous said...

Thanks for the excellent information & advice. Downloaded the software, followed instructions & rebooted. Still got a message that some Windows\System32 files were missing so ran a Windows command "scannow". As added precaution, restored to a point just before this problem appear. Fortunately, laptop is less than a month old so I didn't lose too much...just time & a few gray hairs! Happy New Year.

Anonymous said...

May God bless you my friend for you good work

Anonymous said...

my question is if i have a virus portection program, like kaspersky, should that remove the virus?

Anonymous said...

Thanks for the info , all worked great !! only a couple of things not working windows update and microsoft works any ideas?

Anonymous said...

Does this fix work for Windows7?

Anonymous said...

THANK YOU!!!!!!!!!!!!!!!!!!!!!!!!!!!!! OMG THANK YOU!!! lol i had this problem and called about 4 dif. places and finally someone helped me for free over the phone but now its back lol and this worked, THANKS!! page bookmarked xD

Anonymous said...

Omg, thank you so much for this piece of information T_T

Anonymous said...

dude you are awesome....

Anonymous said...

Thank you so very much!!!! Worked like a charm :) Happy New Year!

Anonymous said...

I did as suggested, but I cannot access my anti-virus program I already have (AVG). I restarted my laptop, only to find all my icons and background are still gone, and I'm still getting a "windows-delayed write failed" error popping up like 20 times in a row. Am I really infected with a virus, or is it still this hoax?

Anonymous said...

Hello! The ALERT that I get Is from "Vista Home Securtiy" not "XP Internet Security" or "XP Home Security". Would you still use the same Reg Key # ? Please advise. Kind of Scary for just a Grandma, not an IT Tech, but somebody's gotta do it! Thanks so much for any help giving me a little self confidence!!! =O)

Anonymous said...

Had this on my laptop, I followed the instructions above and it appears to be gone. Thank You!!!!

Anonymous said...

Have done all the above, but can't get Internet Explorer back....help!

Anonymous said...

Effectivement, le problème semble être résolu. Merci pour les infos.

Anonymous said...

Thanks it helped me a lot....it worked

Anonymous said...

This stressed me out. Your instructions worked perfectly. Thank you.

Anonymous said...

ohmygod. thank you, thank you so much for the help!

Anonymous said...

Well when I got this message from my Win 7 home security 2012 it popped up so many times (ok it was 3am and I was a bit over tired) I went into the properties of it and checked all deny access boxes, also-windows had downloaded new updates at that time to soooo...then windows shut down. This morning I can turn laptop on but, cannot access any program as it says: Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item. FOR everything I try to open!
Help!

Julia said...

THANK U THANK U!!! Wow... I abt freaked out on this "virus" ..My whole pics, files, programs.. everything flashed b4 my eyes! Lucky to have gotten this info.... Thanks again!

Anonymous said...

This is the most annoying virus you will get, i swear thsi sh** sucks! This virus always pops up on our computer....hint, do not go on Demonoid.me. They ALWAYS have Trojan virus's. Well i am going to try this out, hope it works!!!!

Anonymous said...

not sure what to do once I put the Reg Key number in, then what?

Anonymous said...

tells me it is an invalid reg key

sillyhead1966 said...

My sister is having this same problem But on the screen you see above where the activate now key is... there is no place to hit activate manually on that screen is on the screen before you key in the Reg Number. So how can you key in the number before you hit the activate manully key... it dont ask ofr the key until after you hit actiivate Manually you key in the number hit activate now.. and it says.. invalid key.. Suck help.

Anonymous said...

the serial Key number doesnt work on my computer. it says it is invalid

Anonymous said...

Not sure if I am doing what supposed to do after entering the Reg Key number as if I click on Purchase full version button it takes me to the page to purchase if I click on the "Activate Now" button I get an error message pop up that shows "Invalid registration key"....please advise..

Admin said...

Try this code 9443-077673-5028

Admin said...

Try this code 9443-077673-5028

Anonymous said...

that code isnt working :( & u keep nputting try this code as if its different but its not, I NEED TO GET RID OF THIS THING!!! stupid virus, please help

Anonymous said...

OMG your awesome!!! thanks it worked like a charm, also i did a system restore after just incase so it doesnt pop up in again:)

Anonymous said...

I've got this annoying trojan too on my netbook. I can't access the internet. I downloaded Trojankiller2116 from my PC onto a flash drive. (Gridinsoft) It scanned my netbook but since I cannot get on the internet I am stuck. What now? Should I go ahead and do this code (which I am not feeling too comfortable about since at this point I don't trust no one) I also found ways to delete the files manually but also found that you really need to know what you are doing so it goes back to trusting the source.

I may have to phone Trend-Micro tomorrow and have them help me. I will come back and update. Thanks for this forum.

Anonymous said...

I had the same problem! worked perfectly thanks for the help

Anonymous said...

Just did this and I swear it's part of the virus-- now my McAfee will not even stay turned on once I did this..... I'm definitely buying a Mac after all this BS

Anonymous said...

update: CURRENTLY "the little Trojan popup" is no longer popping up when I start my computer. Is it laying dormant? So if it doesn't pop up, I can no longer the code key. My issue is still that I am unable to connect to the internet. (limited or no connectivity) Spent $90 for Trend Micro professional help - spent 2 hours and they can't get me online, to even fix the connection problem. We did a win sock reset to no avail. The cable company says to contact Windows, they say to contact my Virus protection. Trend needs to get into my laptop through my desktop's internet connection but we cannot even do this. It's not looking too good right now.

Maybe I should of just done the code when my Trojan first appeared.

Anonymous said...

I want to say thank you to everyone for posting the reg key...the key worked perfectly..

Anonymous said...

I got this just less than an hr ago & found a way to repair it on another blog. So damn annoying that ppl have nothing better to do than hack. I have Windows 7 btw. Restart ur system & click/hold F8 as Windows is starting up. Then select the first option "Restore ur cpu" and then System Restore will pop up, then select "system restore to an earlier date" & click one of the dates provided. Click Yes to confirm ur choice, let it restore and restart & voila :)

Anonymous said...

Omg this was a life saver and this virus was ruining my computer. Thanks for this.

Luke BENNETT said...

Download spybot search and destroy it is fantastic you can also keep your existing anti virus this is free and doesnt conflict my dad got the virus and i also know how to turn off the virus without downloading anything , go into internet explorer click tools then clcik manage add ons disable all adons the download spybot search and destroy safer networking 1 then run a scan on it remove all red and green things if any then turn all of the add ons on again :) Hope this works it worked for me (running windows vista ) p.s. spybot works on windows based OS'S only

Anonymous said...

Alan27
Thank you very much for yours informations.The first key is not running but the second is running well.

Anonymous said...

Thank you so much this helps a lot and the serial codes worked perfectly the second one worked for me. Your a savior.

Kiran Patil said...

Try This,

http://www.bleepingcomputer.com/download/combofix/