So today I’ve received the pop-up after my FireFox browser crashed stating that I have a Trojan-BNK.Win32-Keylogger.gen that is infecting my FireFox browser.
Trojan-BNK.Win32.Keylogger.gen
I recognized it immediately to one of those fake- “you need to click here to remove your virus” aka ScareWare aka rouge anti-virus trojans/malware.
I’ve had Malwarebytes already installed, however the virus was keeping me from opening the program. I probably could have ran it under safe mode… but here is the solution:
Step 1.
Click Start, Run (or Windows Key + R). Type command and press Enter. Type “notepad” and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
“Save As” fix.reg to your Desktop.
Double Click fix.reg and click YES for confirm.
Reboot your computer.
Step 2.
Download, update,and run MalwareBytes (if you don’t already have it)*download link is from CNETs download.com
After the “Quick Scan” is complete – Remove Selected. Prompt: Reboot your computer.
Step 3.
Well, your done. But if others have this issue, know that you have the knowledge and you should be willing to share. Let them know that MalwareBytes is one of the best solutions for rouge/fake anti-virus trojans. It’s the best tool out there to fight these specific annoyances.
I’ve been getting some hits on this page… PLEASE comment below of this has worked for you!
Click Start, Run. Type command and press Enter. Type notepad and press Enter.
Notepad opens. Copy all the text below into Notepad.
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Classes\.exe]
[-HKEY_CURRENT_USER\Software\Classes\secfile]
[-HKEY_CLASSES_ROOT\secfile]
[-HKEY_CLASSES_ROOT\.exe\shell\open\command]
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
[HKEY_CLASSES_ROOT\.exe]
@="exefile"
"Content Type"="application/x-msdownload"
Save this as fix.reg to your Desktop (remember to select Save as file type: All files in Notepad.)
Double Click fix.reg and click YES for confirm.
Reboot your computer.
