how to delete BO2KGUI.exe without using anti virus in my windoze?
can it be deleted by using DOS??
Printable View
how to delete BO2KGUI.exe without using anti virus in my windoze?
can it be deleted by using DOS??
To remove the server from your system you need to open your registry (after backing it up) and remove the key that BO2K uses to start itself. The keys to check are
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\
HKEY_LOCAL_USER\Software\Microsoft\Windows\CurrentVersion\Run\
Remember that by default the value that starts up BO2K is UMGR32.EXE, but this can easily be changed, so if this key is not present then try looking for anything that looks out of place. When you find the entry that looks like it may be the Back Orifice Server then make sure that you record the name of the file. Open windows explorer, and locate the file in your windows\system folder, look at the files properties, the majority of the files that are supposed to be there have a version tag in the properties (there are no files that are not supposed to be there that have version tags to my knowledge), the BO2K server does not. Then go back , and delete the registry entry, and close the registry. Now reboot your computer to MSDOS mode, and change to the directory C:\WINDOWS\SYSTEM (use cd C:\WINDOWS\SYSTEM, or whatever your windows system directory is), and then move the file to a different directory, where it will not be run, for example use the following commands if these directories exist, substitute the name of the suspected server for UMGR32.EXE
COPY UMGR32.EXE C:\TEMP (or C:\WINDOWS\TEMP)
DEL UMGR32.EXE
Then restart your computer, make sure that everything is working OK, and then delete the file in the temporary folder. If there is a problem, copy the file back to the windows\system folder.