Good thinking. I think the best way to "fix" this is to remove the authenticator from the account, you are given a 5 minute timeout and must put in another cod

Good thinking. I think the best way to "fix" this is to remove the authenticator from the account, you are given a 5 minute timeout and must put in another code generated by the token after that period. That way, the original code stolen by the keylogger is no longer valid.