Home > Computer > How to Uninstall REFOG Keylogger Without Knowing Master Password
Donation Goal
Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

How to Uninstall REFOG Keylogger Without Knowing Master Password

Posted By Raymond In Category: Computer

Sep
8
2009

I’ve got two request in forum asking how to uninstall or remove the REFOG Keylogger from their computer. Refog Keylogger logs all key presses and keystrokes typed on your PC, and saves any text pasted from the clipboard. It even does periodic screen captures, so that the person who installed it will have access to fully illustrated usage history of the PC. Refog Keylogger can also decode chat conversations in many popular instant messengers, track Web sites and resources visited by your family members, and log all applications launched on your computer. In short, it monitors everything you do on your computer. Scary isn’t it?
uninstall refog keylogger
Uninstalling a keylogger on your computer is not really that easy because it’s totally hidden from task manager and if you try to uninstall it using the official uninstaller, you need to enter the Master Password or else it won’t proceed. Most antivirus or antispyware is able to detect keyloggers but there are times when these security tools won’t be able to fully remove it and ends up making the PC unstable. Well good news is I’ve analyzed how REFOG Keylogger saves the master password and I’ll show you how easy it is to remove it so you can uninstall that nasty keylogger.


First of all, to know if you have REFOG Keylogger installed on your computer, all you need to do is simultaneously press WIN+R key to bring up the Run window, type runrefog and hit enter. If you get a message saying “Windows cannot find runrefog”, then you are safe but if you get a window that asks for password, then you’re being MONITORED! Not to worry because I will show you how to easily uninstall it from your computer even if REFOD Keylogger is password protected.

1. First, bring up the Run window by simultaneously pressing WIN+R key.
For Windows XP users:
Type %allusersprofile%\Application Data\MPK and click OK.
For Windows Vista and Windows 7 users:
Type %allusersprofile%\MPK and click OK.
runrefog

2. Delete the file S0000.
reset keylogger password

3. Again launch the Run window by pressing WIN+R key, type runrefog and click OK.

4. Go to Tools from the menu bar and select Uninstall.
uninstall refog keylogger
Follow the instructions to fully remove REFOG Keylogger from your computer. In Windows 7, the BETA version of REFOG Keylog Uninstall menu doesn’t work. If nothing appears when you select Uninstall, then launch the Run window, type %WINDIR%\System32\MPK\unins000.exe. That should launch the REFOG Keylogger uninstaller.

How did I discovered this? It is pretty simple if you have read this article on tracking registry and file changes when installing software in Windows.


Related posts:
  • Password to Uninstall Symantec Antivirus Client
  • Change XP Administrator Password WITHOUT KNOWING IT
  • Uninstall Microsoft Office 2007 in Vista and XP
  • How To Uninstall or Remove Bonjour mDNSResponder.exe
  • Login to Windows Administrator and Linux Root Account Without Knowing or Changing Current Password
    • f1tzy

      nice :)

    • Ex

      ray, thankz for this. very good article!!

    • David

      Thanks for another one of your tips Raymond.

    • Dedy Ardiansyah

      great… very usefull.

    • Qduc

      Thank you for share information. Very usefull

    • vikas jain

      Hi Ray. Do you read about usb over network. It is quite a useful program specially for big enterprises or institutes. Please take a look at this software.. And give your feed back..I want to know more about port forwarding, internal ip address, external ip address, dynamic ip address, static ip address etc to use this software. Will you help me to find out all these terms..waiting for you reply

    • shubh

      nice

    • shubh

      nice dude

    • Ed

      I like this kind of research.

    • ByteCode

      very nice

    • Merlin_Magii

      It’s quality diagnostics and reporting like this that illustrates why you ARE the best of the best Raymond. Thank you.

    • http://www.google.com.tw Google-TCW

      Hi from google Google-TCW

    • surfriot

      When I type the line for XP in run, I get “cannot find C Documents”
      Is this the same as not finding the keylogger?

    • ershivank

      oh thanx it’s really gr888…..will u tell me more about this
      %allusersprofile%\Application Data\MPK
      what s it????

    • Stanley Lu

      Hello Raymond,

      The link to “Regshot 2.0.1.61 unicode” doesn’t seems to work anymore~~

      Thank you

    • http://www.sizlopedia.in/ ravi

      great… very usefull.

    • Charles McMahon

      I am running Window 7 64-bit and the command %WINDIR%\System32\MPK\unins000.exe does not work!

      I found that this does work: %WINDIR%\SysWOW64\MPK\unins000.exe

      Thanks

      Charlie

    • nadeem

      Hi,

      I installed runrefog in my pc to check how this works
      when i did this i found a notepad file located in

      C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures
      which read as follows…

      “Some files on your machine are encrypted and your private informations were collected and sent to us.
      To decrypt files so you could use them again, you have to buy our decryptor.
      After you buy decryptor, your files will be decrypted, and we will destroy your private informations from our system, and help you remove malicious software from your system.
      To buy decryptor, contact us at: bredo077@gmail.com AND bredo077@yahoo.com
      If you dont contact us, your private informations will be shared and you will loose all your data.
      Its best NOT TO USE YOUR PC until you buy decryptor, otherwise all your data could be lost forever”

      any idea about this?

    • lara

      Oi. eu fiz tudo que estava descrito acima, realmente tem um keylogger instalado no meu comp, porem quando digitei o tipo não consegui mais.
      Poderia me ajudar por favor?

    • amor

      raymond help please
      my ex put refog on my laptop. tried to uninstall it ur way but when i enter %allusersprofile%\Application Data\MPK there is no file S000!!! so program still asks for password!! :(
      pls pls help

    • bloody mary

      Cannot uninstall the trial version
      Message:
      File “C:\Program Files\MPK\unins000.dat” does not exist. Cannot uninstall.

      Please HEPL

    • mia

      great suggestions ! Thank you !

    • lia

      Hi. Pls, pls help. My boyfriend installed refog on my laptop to spy on me, and i want to get rid of it. :@ I tried to delete the (in my case) M0000 file but it says it’s used by another program so can’t be deleted. when i tried to uninstall it by %WINDIR%\System32\MPK\unins000.exe it asks for a password. how can i uninstall the program without it? and does it save the information only on my laptop or all of information can be sent to some e-mail adress,so can be seen from everywhere else not just my pc? :(

    • iTED

      Wonderful Post .
      I Installed It Manually And Didnt Know How The Hell To Get Rid Of It .

      Haha . Thanks For Your Wonderful Article .

      Hope To Hear More From You :)

      With Due Respect ,
      Ted .

    • SIMIC

      Well, this was very helpful. Thanks..

      Could someone tell me what location is all spy data saved??? Does the data still can be reopen after uninstallation? Can I see the location of the source folder?

    • Smennt

      Jeg har instalert REFOG med vilje for å teste det litt ut, men nå som jeg vil avinstalere lar den meg ikke gjøre det enda jeg har passordet. Jeg kommer helt fint inn på programmet, men det klikker hver gang jeg trykker på avinnstaler. Noen forslag ?

    • daniele

      so ke ho refog..perke l ho messo io…ma nn riesco a fare come dici tu….quando metto…
      %% Tipo ALLUSERSPROFILE \ Application Data \ MPK
      su esegui mi dice imposibile trovare il file %% verificare che il percorso o il nome del file siano corretti

      ke devo fare???

    • daniele

      è ke nn mi ricordo la password

    • anu

      Thank You very much!!!!!!!!!!!!!!!!!!!!!!!!!!!

    • ndie

      berguna bagmn,,,nggak ada yg berhasil….semuan ya masihminta password..untuk win xp

    • martin

      great! worked like a charm..thanks a bunch

    • wadan

      i need this password

    • http://ineedthisidPassword wadan

      Hello Dear sir
      Hope your Happy and doing well
      i need the pasword of this id sayedagha_666@yahoo.com

    • joker

      ga bisa di uninstal di windows xp…
      dah ku coba terus,,,, tetap aja dia minta password…………!!!!!!!!
      gimana dong,,,, ada yg masang refog di pc ak,,,,!!!!!
      please help me……!!!!!!!!

    • rakesh(huchun)

      i like refog, i got how to save/protect S0000 file from delete now onwards no one can delete or detect whether refog is installed or not, no body no software can detect

    • rakesh(huchun)

      i like refog, i got how to save/protect S0000 file from delete now onwards no one can not delete or detect whether refog is installed or not, no body no software can detect
      if anybody wanna know including reymond that how to do just post a comments with email id, i send him/her the details

    • nick

      cant uninstall becuase forgot password need help please

    • JustMe

      I appreciate your help! Thank you so much! It worked for me! Yay!

    • http://hectorhernandez.net Hector

      i tried this for a long time and i couldn’t find the S0000 file, but i finally came to a solution….

      after you press (win) + R you have to put :

      %allusersprofile%\MPK\1

      NOTE: the S0000 file is in the \1 folder if you have the latest version of refog installed …

      i have Win 7…. and that worked for me… Good luck…

      And get those Fkng spies out of your computer!

    • Ali

      All i wanna say Big Thanx!

    • sabrina

      My boyfriend put reofg on my computer i was waondering if i try to uninstall it in the (run prg) and if it dosnt work wil he still know that i tried to remouve it …b cuz he dosnt know i saw it i found it because he forgot to close it …..help someone plz i really want this off my computer

    • nik

      please help how do i remove refog if there is no file S0000 and can they track me from another computer or just this one where refog is instaled. Regards and thanks for your time

    • Unable

      Kindly help me. I f0und the S0000 file in the MPK\1 and 2… And i delete it… But after i delete it using %WINDIR%System32\MPK\unins0000.exe it still requires a password… When i type refog it cant be found… But im sure there is keylogger in my lappy…

    • xaikix

      kua markkkkkkk…..:-t. =)) yahhhhh A09

    • Mark

      anyone who is ‘sure they have a key logger somewhere on their pc but cant find it’ should really just reformat. I mean its not the cutest way to clean things up, but it is one of the surest, and simplest, albeit is a little annoying/time consuming.

    • Jake

      my REFOG program will not open up, it just sits there like nothing happened. What should I do?

    • Paul

      My brother installed this on my laptop except it was the trial version how do I get rid of it?

    • Jessica

      hey paul, my husband had put the trial version on my computer, just follow the same steps and it’ll go away.

      and thank you raymond for posting this, it really helped.

    • Abdul

      Jake u should click on the green button on the top left corner of ur keylogger

    • rob

      How do you uninstall from a mac with no password?

    • mary

      hey i tried doing all of that and deleted s000 but even after that it still asks me for the password 2 uninstall it. wat do i do?

    • kuya sipil

      di scan dulu pake smadav..
      nanti ketemu registri yg diubah.. ok kan aja
      bis itu uninstall lagi.
      dijamin ga minta password lg.

      kadang folder MPKnya di taro di system32

      have fun

    • http://hi ravindi

      its greate.tnx

    • Jessica

      I have the free version of refog. I don’t know the password and I can’t find a file “s000″ anywhere using these steps. Is there another way around not knowing the password? Please help?!

    • smallville boy

      its not working on pc
      when i was on refog folder,, there are not found the S0000 file. and its still need password when i click win+R,, type runrefog,, its still need password

    • Aaron

      Thanks, I was playing around with the program and accidentally lost the password.

    • luuk

      LISTEN if you cant find the file “s0000″ then just click on show hidden files and folders if you dont now how try searhing it on google :)

    • http://www.spyreveal.com spyreveal

      thanks to you. this is really a good information

    • taufik

      maaf, di komp nya kok g ada S0000nya!!!!

    • http://asd erion

      thnx :)

    • wew

      bagus dan menguntungkan

    • Tiger

      Great Thanx… It works..

    • Achi

      the one show on the folder is m0000 and i cant find any s000 .. and oh by the way when i try to delete de m0000 it always telling me “It is used by another program” and i can’t delete it :( plss help me

    • Karoline

      you’re an angel!!

    • jew

      it still doesnt work :S i even deleted the hidden files :S

    • Arun Karthik

      i dont’ have that S0000 file
      please help me out

    • a guy who experienced a trouble with REFOG keylogger

      Know what i did? i simply could not erase it so i just found its important files and f*cked those files up making it crash every time it starts. Simple no? and when it crashes it doesnt reboot but when the next time you start the comp.

    • priyesh gupta

      superb work.keep it up.
      and thanks my freind.

    • http://smp asep

      pliece akk pingin masang refog

    • cr

      Thanks so much this is great!!!

    • http://lostpassword hajar sas

      i dont’ have that S0000 file
      please help me out

    • ahmad

      asewd

    • isabela

      well, my computer is Windows 7 – Beta version and i had to use the last link… it left me to the uninstall page, but still asks for a pasword, so i cant delete the file S0000.
      what would i do now?

      thanks for your time

    • Amjad

      Thanks a lot. You were a life saver.Regards

    Copyright © 2005-2012 - Raymond.CC Blog