It's a silver box running Windows CE. It has not been chipped or modified in anyway.
So this must mean a modified box is required to get tv2remotekeys.exe running and ready to accept commands on port 8082.
No, it depends, some providers have tv2remotekeys.exe enabled on their STBs... some not...
If tv2remotekeys is not enabled on your STB, you can enable it, but you'll need to patch the MS(err... now Ericsson...) bootloader...
The only other way I can think of to get tv2remotekeys.exe running on an unmodified box is to make use of the Windows CE Autorun facility and have an .exe on a usb stick that is set to run "C:\Windows\tv2remotekeys.exe". When I plug a usb stick into the BT Vision box, its light flashes, so Windows CE is reading it looking for an autorun. In fact, one of my USB sticks makes the BT Vision box freeze until I remove it.
LOL

Easy, Cowboy... That will not not work

I'm not even sure WinCE implements Autorun...
Or if I could get back into the secret menu and run the Ajax/CSS test and make it load a specially crafted gif/jpg to execute custom code.
You don't need that Secret Menu, just use Wireshark then load some interative tv app from your provider... You will see tons of PNG/JPEGs...
Now, you can just set some form of dns spoofing and the STB will load your images...