Perfect Keylogger [Removal]

02/29/2008 12:45 SeeK_#1
Since some little shits think they are funny posting stuff with perf keylogger.
I will post a removal of it.
Everyone i advise you to look in system32 and see if you have these files.
If so, then follow the removal instructions.

Removal InStructions:


1. Ctrl+Alt+DeL
2. End Process "bpk.exe"
3. Navigate to C:\windows\system32
4. Delete all files in this image:
[Only registered and activated users can see links. Click Here To Register...]
Also Navigate to: C:\WINDOWS\Prefetch
Delete: BPK.EXE-06BA93D1.pf
C:\WINDOWS\system32
Delete: bpk.DAT
*** You will also notice "hidden files" in C:\ that have extension .sqm
Delete these as well.
5. Go to run
6. Type regedit
7. Navigate to each registry key you see in this list and delete the key.

Code:
[HKEY_CLASSES_ROOT\CLSID\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A}\InprocServer32] 
@="C:\\WINDOWS\\system32\\bpkwb.dll" 
"ThreadingModel"="Apartment" 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0] 
@="BPK IE Plugin Type Library" 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0] 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0\win32] 
@="C:\\WINDOWS\\system32\\bpkwb.dll" 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\FLAGS] 
@="0" 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\HELPDIR] 
@="C:\\WINDOWS\\system32\\" 

[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0\win32] 
@="C:\\WINDOWS\\system32\\bpkwb.dll"

and


Well, here is another key logger removal instructional.
Since some little turd decided he wanted to post one on the site.

Target: Ardamax Key Logger

1. Ctrl + alt + Del
2. Kill the process called "ODKM.exe"
3. Navigate to: C:\Windows\System32
4. *You must turn on an option before you can see the actual folder it is.
a. Click tools > Folder Options.
b. Click the view tab
c. Select "Show hidden files and folders"
5. Now you can go to the folder named "28463"
[Only registered and activated users can see links. Click Here To Register...]
6. Delete everything and that folder.

7. Now you have to go remove a registry entry to complete the removal. *See image below for the location.
[Only registered and activated users can see links. Click Here To Register...]
8. Once you get to the above location in the registry, delete the key shown in this image.
[Only registered and activated users can see links. Click Here To Register...]
9. Close everything and your good to go.

Tipe Thanks if i helped you :D
02/29/2008 13:07 DarkCronicLe#2
Wrong Section, Silkroad Section is completely wrong.
CLose or move pls!
02/29/2008 15:20 SeeK_#3
hey dude i'm new here just dont say to close my threat because im new and try to help some ppl damit xD and btw what's rong whit me threat ??? what's problem ??? move it but don't close because is a good guide and help more ppl
02/29/2008 15:21 DarkCronicLe#4
It's the wrong section, but it in Technical Support but silkroad is wrong.
So, i didn't say close only, I said close or move :rolleyes:
02/29/2008 15:26 neyo_adidas#5
Wow a very good guide

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]
02/29/2008 15:29 DarkCronicLe#6
btw..
tipe thanks if i helped you, ok i type it:
thanks

I think you mean "push" but this is not allowed :)
read the board rules
02/29/2008 15:35 kingsvN#7
anyone tested it ?
02/29/2008 16:03 iW84u#8
yes it works i sow this guide on another site yesterday ^^
02/29/2008 16:58 prikols#9
nice guide :)
02/29/2008 17:13 InvincibleNoOB#10
Your methods are useful,but i'd advice you to get a licence of bpk full version or ardamax 2.9 paid release and test your methods again :p
02/29/2008 17:30 anityo#11
this is great,, thx for the info,, wow,, my PC got like that tho,,
:)
02/29/2008 18:51 H2G#12
Quote:
Originally Posted by DarkCronicLe View Post
Wrong Section, Silkroad Section is completely wrong.
CLose or move pls!
haha its coming out bad for you ?
you probably host all those keylogger and hack them,
He is helping us in a very good way.
if you wanna hack some people read this guide
1. Make an account grind it to lvl 53 [ pure str glavie lightning and call it H2G ]
2. Download an bot call it agBot [ do not scan it ]
3. Log in, you will see that the bot works really fine.
4. Don't log in for 2 days, later on you won't have any gold

i hope i helped you















fuktard
02/29/2008 21:49 SpriGgy#13
Quote:
Originally Posted by H2G View Post
haha its coming out bad for you ?
you probably host all those keylogger and hack them,
He is helping us in a very good way.
if you wanna hack some people read this guide
1. Make an account grind it to lvl 53 [ pure str glavie lightning and call it H2G ]
2. Download an bot call it agBot [ do not scan it ]
3. Log in, you will see that the bot works really fine.
4. Don't log in for 2 days, later on you won't have any gold

i hope i helped you


fuktard
WTH are you posting here.
Maybe you should think about who are you insulting.
#Infraction for it.
02/29/2008 23:14 DarkCronicLe#14
look at my forum status... more than 2.5k posts..i don't post any keyloggers, dude :)
03/17/2008 22:47 H2G#15
Quote:
Originally Posted by DarkCronicLe View Post
look at my forum status... more than 2.5k posts..i don't post any keyloggers, dude :)
Goldhack for jedes gamen

means Goldhack for every game

you mean you really got an hack ?
YEAH RIGHT,