Trojan-BNK.Win32.Keylogger.gen removal

Bogtrotter

Ok when you start regedit click on the My Computer at the top of the left hand pane then select File-Export to backup entire registry.

If you then open all folders on the left hand pane as in H-KEY-CLASSES_ROOT\exefile\shell\open\command there should be only one key in the right hand pane called default containing data "%1" %* if it contains any other data modify the key and if there are any other keys delete them.

Reboot and see if that helps

lesley2004

Have done as you said and all seems to be running ok. Amazing.

Just running malaware at the moment it has found one threat so far

One thing I have noticed is that a red security message at the bottom comes up saying automatic updates are turned off. When I click on it to open security centre and try to enable automatic updates it wont let me. However if I go to control panel and open automatic updates there it is set to automatic updates being switched on. Any ideas what this means?

Hijack log works now would it be worth posting a log.

Also when i have checked system restore it will allow me to go back to 12.6.11 when virus took hold but not before, does this mean the virus could be lurking, should i turn off system restore

Thanks for your help

Bogtrotter

lesley2004 wrote: »

One thing I have noticed is that a red security message at the bottom comes up saying automatic updates are turned off. When I click on it to open security centre and try to enable automatic updates it wont let me. However if I go to control panel and open automatic updates there it is set to automatic updates being switched on. Any ideas what this means?

Getting rid of the threats with malwarebytes and/or combofix may fix this.

If not we can look at it later.

Virus would most likely deleted old restore points to prevent you removing it using System Restore. I would switch off restore until you believe all malware is gone.

lesley2004

Malaware picked up one trojan - fake threat and deleted it.

Combofix when running says i have to uninstall AVG as it will conflict with combofix....what should i do

Bogtrotter

I usually uninstall all antivirus when I want to run combofix.

I know its a bit of a pain uninstall/reinstall. You could remove AVG and install Avira then you just have to disable virus guard while you run combofix.

lesley2004

having difficulty uninstalling avg. error comes up saying HKLM/SOFTWARE/Microsoft/WindowsNT/Current version/Access denied

Any suggestions what to do now

Also what is combifix??

lesley2004

windows updates will not work the following Error number: 0x80070424 comes up. I have googled it and there is a fix but it has not worked.

Any advice on what to try now

Bogtrotter

lesley2004 wrote:

having difficulty uninstalling avg.

Google AVG removal tool and download it from the AVG website. If this fails to work try a fresh install of AVG over the old one and then try an uninstall.

lesley2004 wrote: »

windows updates will not work the following Error number: 0x80070424 comes up. I have googled it and there is a fix but it has not worked.

Any advice on what to try now

What is the fix that you tried?

First thing I'd try... I would run services.msc and find "Background Intelligent Transfer Service" in the list make sure that the service is started. If it isn't double click on the service, click the start button and select Startup Type to Automatic

lesley2004

Have managed to get updates working. Ecverything seems to be working now.

Many thanks for your help. It never ceases to amaze me how keen people are to help on this forum.