PostPosted: Tue Jan 29, 2008 12:08 pm Post subject: Perfect Keylogger [Removal] This post has 2 review(s) Reply with quote
Since some little shits think they are funny posting stuff with perf keylogger.
I will post a removal of it.
Everyone i advise you to look in system32 and see if you have these files.
If so, then follow the removal instructions.
Removal InStructions:
1. Ctrl+Alt+DeL
2. End Process "bpk.exe"
3. Navigate to C:\windows\system32
4. Delete all files in this image:
[IMG]https://i52.photobucke*****m/albums/g36/deerlease/perflogger.png[/IMG]
Also Navigate to: C:\WINDOWS\Prefetch
Delete: BPK.EXE-06BA93D1.pf
C:\WINDOWS\system32
Delete: bpk.DAT
*** You will also notice "hidden files" in C:\ that have extension .sqm
Delete these as well.
5. Go to run
6. Type regedit
7. Navigate to each registry key you see in this list and delete the key.
Code:
Code:
[HKEY_CLASSES_ROOT\CLSID\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A}\InprocServer32]
@="C:\\WINDOWS\\system32\\bpkwb.dll"
"ThreadingModel"="Apartment"
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0]
@="BPK IE Plugin Type Library"
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0]
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0\win32]
@="C:\\WINDOWS\\system32\\bpkwb.dll"
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\FLAGS]
@="0"
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\HELPDIR]
@="C:\\WINDOWS\\system32\\"
[HKEY_CLASSES_ROOT\TypeLib\{1E1B286C-88FF-11D3-8D96-D7ACAC95951A}\1.0\0\win32]
@="C:\\WINDOWS\\system32\\bpkwb.dll"
this is not my i leeched it from other site ... so if this can help any1 i ll be glad i helped