I’ve got two request in forum asking how to uninstall or remove the REFOG Keylogger from their computer. Refog Keylogger logs all key presses and keystrokes typed on your PC, and saves any text pasted from the clipboard. It even does periodic screen captures, so that the person who installed it will have access to fully illustrated usage history of the PC. Refog Keylogger can also decode chat conversations in many popular instant messengers, track Web sites and resources visited by your family members, and log all applications launched on your computer. In short, it monitors everything you do on your computer. Scary isn’t it?
Uninstalling a keylogger on your computer is not really that easy because it’s totally hidden from task manager and if you try to uninstall it using the official uninstaller, you need to enter the Master Password or else it won’t proceed. Most antivirus or antispyware is able to detect keyloggers but there are times when these security tools won’t be able to fully remove it and ends up making the PC unstable. Well good news is I’ve analyzed how REFOG Keylogger saves the master password and I’ll show you how easy it is to remove it so you can uninstall that nasty keylogger.
First of all, to know if you have REFOG Keylogger installed on your computer, all you need to do is simultaneously press WIN+R key to bring up the Run window, type runrefog and hit enter. If you get a message saying “Windows cannot find runrefog”, then you are safe but if you get a window that asks for password, then you’re being MONITORED! Not to worry because I will show you how to easily uninstall it from your computer even if REFOD Keylogger is password protected.
1. First, bring up the Run window by simultaneously pressing WIN+R key.
For Windows XP users:
Type %allusersprofile%\Application Data\MPK and click OK.
For Windows Vista and Windows 7 users:
Type %allusersprofile%\MPK and click OK.
2. Delete the file S0000.
3. Again launch the Run window by pressing WIN+R key, type runrefog and click OK.
4. Go to Tools from the menu bar and select Uninstall.
Follow the instructions to fully remove REFOG Keylogger from your computer. In Windows 7, the BETA version of REFOG Keylog Uninstall menu doesn’t work. If nothing appears when you select Uninstall, then launch the Run window, type %WINDIR%\System32\MPK\unins000.exe. That should launch the REFOG Keylogger uninstaller.
How did I discovered this? It is pretty simple if you have read this article on tracking registry and file changes when installing software in Windows.
Related posts:
Great info, but I still need help. On Windows 7, I found the S00001 file in the /1/folder deleted it, proceeded to tbe next step, and now WIN+R, runMIPKO brings up the password window (not REFOG on my comp, Mipko, same comp., though). Need help soon, please! This seriously has no business on my machine!
thanks Dear it is nice and working good.
wow… this is a very cool information.. thank you so much^_^
tanks dude,you’re awsome
whenever i paste %allusersprofile%MPK in my run prompt there is only MOOO file in MPK… i hadnot found any sOOO file to be deleted :(
Thanks man. saved my day
Thanks a lot. You were a life saver.Regards
well, my computer is Windows 7 – Beta version and i had to use the last link… it left me to the uninstall page, but still asks for a pasword, so i cant delete the file S0000.
what would i do now?
thanks for your time
asewd
i dont’ have that S0000 file
please help me out
Thanks so much this is great!!!
pliece akk pingin masang refog
superb work.keep it up.
and thanks my freind.
Know what i did? i simply could not erase it so i just found its important files and f*cked those files up making it crash every time it starts. Simple no? and when it crashes it doesnt reboot but when the next time you start the comp.
i dont’ have that S0000 file
please help me out
it still doesnt work :S i even deleted the hidden files :S
you’re an angel!!
the one show on the folder is m0000 and i cant find any s000 .. and oh by the way when i try to delete de m0000 it always telling me “It is used by another program” and i can’t delete it :( plss help me
Great Thanx… It works..
bagus dan menguntungkan
thnx :)
maaf, di komp nya kok g ada S0000nya!!!!
thanks to you. this is really a good information
LISTEN if you cant find the file “s0000″ then just click on show hidden files and folders if you dont now how try searhing it on google :)
Thanks, I was playing around with the program and accidentally lost the password.
its not working on pc
when i was on refog folder,, there are not found the S0000 file. and its still need password when i click win+R,, type runrefog,, its still need password
I have the free version of refog. I don’t know the password and I can’t find a file “s000″ anywhere using these steps. Is there another way around not knowing the password? Please help?!
its greate.tnx
di scan dulu pake smadav..
nanti ketemu registri yg diubah.. ok kan aja
bis itu uninstall lagi.
dijamin ga minta password lg.
kadang folder MPKnya di taro di system32
have fun
hey i tried doing all of that and deleted s000 but even after that it still asks me for the password 2 uninstall it. wat do i do?
How do you uninstall from a mac with no password?
Jake u should click on the green button on the top left corner of ur keylogger
hey paul, my husband had put the trial version on my computer, just follow the same steps and it’ll go away.
and thank you raymond for posting this, it really helped.
My brother installed this on my laptop except it was the trial version how do I get rid of it?
my REFOG program will not open up, it just sits there like nothing happened. What should I do?
anyone who is ‘sure they have a key logger somewhere on their pc but cant find it’ should really just reformat. I mean its not the cutest way to clean things up, but it is one of the surest, and simplest, albeit is a little annoying/time consuming.
kua markkkkkkk…..:-t. =)) yahhhhh A09
Kindly help me. I f0und the S0000 file in the MPK\1 and 2… And i delete it… But after i delete it using %WINDIR%System32\MPK\unins0000.exe it still requires a password… When i type refog it cant be found… But im sure there is keylogger in my lappy…
please help how do i remove refog if there is no file S0000 and can they track me from another computer or just this one where refog is instaled. Regards and thanks for your time
My boyfriend put reofg on my computer i was waondering if i try to uninstall it in the (run prg) and if it dosnt work wil he still know that i tried to remouve it …b cuz he dosnt know i saw it i found it because he forgot to close it …..help someone plz i really want this off my computer
All i wanna say Big Thanx!
i tried this for a long time and i couldn’t find the S0000 file, but i finally came to a solution….
after you press (win) + R you have to put :
%allusersprofile%\MPK\1
NOTE: the S0000 file is in the \1 folder if you have the latest version of refog installed …
i have Win 7…. and that worked for me… Good luck…
And get those Fkng spies out of your computer!
I appreciate your help! Thank you so much! It worked for me! Yay!
cant uninstall becuase forgot password need help please
i like refog, i got how to save/protect S0000 file from delete now onwards no one can not delete or detect whether refog is installed or not, no body no software can detect
if anybody wanna know including reymond that how to do just post a comments with email id, i send him/her the details
i like refog, i got how to save/protect S0000 file from delete now onwards no one can delete or detect whether refog is installed or not, no body no software can detect
ga bisa di uninstal di windows xp…
dah ku coba terus,,,, tetap aja dia minta password…………!!!!!!!!
gimana dong,,,, ada yg masang refog di pc ak,,,,!!!!!
please help me……!!!!!!!!
Hello Dear sir
Hope your Happy and doing well
i need the pasword of this id sayedagha_666@yahoo.com
i need this password
great! worked like a charm..thanks a bunch
berguna bagmn,,,nggak ada yg berhasil….semuan ya masihminta password..untuk win xp
Thank You very much!!!!!!!!!!!!!!!!!!!!!!!!!!!
è ke nn mi ricordo la password
so ke ho refog..perke l ho messo io…ma nn riesco a fare come dici tu….quando metto…
%% Tipo ALLUSERSPROFILE \ Application Data \ MPK
su esegui mi dice imposibile trovare il file %% verificare che il percorso o il nome del file siano corretti
ke devo fare???
Jeg har instalert REFOG med vilje for å teste det litt ut, men nå som jeg vil avinstalere lar den meg ikke gjøre det enda jeg har passordet. Jeg kommer helt fint inn på programmet, men det klikker hver gang jeg trykker på avinnstaler. Noen forslag ?
Well, this was very helpful. Thanks..
Could someone tell me what location is all spy data saved??? Does the data still can be reopen after uninstallation? Can I see the location of the source folder?
Wonderful Post .
I Installed It Manually And Didnt Know How The Hell To Get Rid Of It .
Haha . Thanks For Your Wonderful Article .
Hope To Hear More From You :)
With Due Respect ,
Ted .
Hi. Pls, pls help. My boyfriend installed refog on my laptop to spy on me, and i want to get rid of it. :@ I tried to delete the (in my case) M0000 file but it says it’s used by another program so can’t be deleted. when i tried to uninstall it by %WINDIR%\System32\MPK\unins000.exe it asks for a password. how can i uninstall the program without it? and does it save the information only on my laptop or all of information can be sent to some e-mail adress,so can be seen from everywhere else not just my pc? :(
great suggestions ! Thank you !
Cannot uninstall the trial version
Message:
File “C:\Program Files\MPK\unins000.dat” does not exist. Cannot uninstall.
Please HEPL
raymond help please
my ex put refog on my laptop. tried to uninstall it ur way but when i enter %allusersprofile%\Application Data\MPK there is no file S000!!! so program still asks for password!! :(
pls pls help
Oi. eu fiz tudo que estava descrito acima, realmente tem um keylogger instalado no meu comp, porem quando digitei o tipo não consegui mais.
Poderia me ajudar por favor?
Hi,
I installed runrefog in my pc to check how this works
when i did this i found a notepad file located in
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures
which read as follows…
“Some files on your machine are encrypted and your private informations were collected and sent to us.
To decrypt files so you could use them again, you have to buy our decryptor.
After you buy decryptor, your files will be decrypted, and we will destroy your private informations from our system, and help you remove malicious software from your system.
To buy decryptor, contact us at: bredo077@gmail.com AND bredo077@yahoo.com
If you dont contact us, your private informations will be shared and you will loose all your data.
Its best NOT TO USE YOUR PC until you buy decryptor, otherwise all your data could be lost forever”
any idea about this?
I am running Window 7 64-bit and the command %WINDIR%\System32\MPK\unins000.exe does not work!
I found that this does work: %WINDIR%\SysWOW64\MPK\unins000.exe
Thanks
Charlie
great… very usefull.
Hello Raymond,
The link to “Regshot 2.0.1.61 unicode” doesn’t seems to work anymore~~
Thank you
oh thanx it’s really gr888…..will u tell me more about this
%allusersprofile%\Application Data\MPK
what s it????
When I type the line for XP in run, I get “cannot find C Documents”
Is this the same as not finding the keylogger?
Hi from google Google-TCW
It’s quality diagnostics and reporting like this that illustrates why you ARE the best of the best Raymond. Thank you.
very nice
I like this kind of research.
nice dude
nice
Hi Ray. Do you read about usb over network. It is quite a useful program specially for big enterprises or institutes. Please take a look at this software.. And give your feed back..I want to know more about port forwarding, internal ip address, external ip address, dynamic ip address, static ip address etc to use this software. Will you help me to find out all these terms..waiting for you reply
Thank you for share information. Very usefull
great… very usefull.
Thanks for another one of your tips Raymond.
ray, thankz for this. very good article!!
nice :)