Printable View
I was recently being retarded. I thought that I was all cool and everything then I tried to put Back Orifice on my friends computer. But that ofcourse did'nt happen because i am an idiot. Instead I think I might have put it on my computer. So pleadse tell me how to I get this crap off. And I promise I wont do it again.
Try Tauscan from www.agnitum.com or TheCleaner from www.moosoft.com
Hahaha! I'm sorry, but this is so typical. I've fortunately never done it to myself but I know I could have easily and I know people that've done it to themselves. It's not that hard to get rid of, just do a search on Back Orifice and you'll actually get more ways to remove it than to install it. That's the way the internet is nowadays, you can find way more info about the removal of virii and such because of all the paranoia. I'd just use Google if I were you and then download some kind of free tool designed specifically for the removal of trojans like BO and Sub7. www.google.com ;)
**edit**
detection http://www.acc-net.com/support/bo/detection.html and removal http://www.acc-net.com/support/bo/removal.html. I sincerely hope this helps you:).
-keezel
Hey thats not fuuny.....I told u I was being a frekin a**...Which sucks. I could'nt even open the darn thing. Infact that happenes to alot of programs I download. Man my system must be crawling with back doors and stuuf.
I think its hilarious. You know you were being an ass and expect no one to laugh? I mean come on man. **** you might as well reformat because by now your prolly getting owned.Quote:
Originally posted here by blue_wolf
Hey thats not fuuny.....I told u I was being a frekin a**...Which sucks. I could'nt even open the darn thing. Infact that happenes to alot of programs I download. Man my system must be crawling with back doors and stuuf.
blue_wolf
I haven't messed with those toolz (note the cool z at the end :-) ) in a while, but I remember that whenver I attempted to execute the server (the BAD part) on a machine with a decent virus scanner, the virus scanner always freaked out and gave me a warning. If you are in fact installing backdoors on your local machine, make sure your virus-scanner is on "Always Protect" and it should catch them before they get installed.
Good luck dude!
--Thanx...I'll do that.Quote:
"Always Protect" and it should catch them before they get installed.
This is frekin wierd.
I have like 7 different scans going on know. Im all freaked out. And for some frekin reason my Virus scanner keeps catching it but will not delete it.
Is it possible to that this is able to re-copie it self?
umm...I said earlier that you should look into getting a program specifically for the removal of this thing because to my knowledge there is no virus scanner that can remove it, just quarantine it. Sub7 (if I remember correctly) is an equal pain in the ass when you're trying to get rid of it because the AV can only detect and quarantine it....and no, I don't think it's capable of copying itself but I could be wrong....
**edit**
It *could* keep popping up if it automatically installs itself and runs when the computer boots up. I think you'd have to actually put it there....or select something when you use the "edit server" thing to make it do that, but keep us informed. If you think it's gone and then it's back after you restart the computer, then you know where it is.
Which firewall are you running, if one at all??
If you don't have a firewall, download Outpost real quick. Outpost will let you do a sorta 'netstat' in real time. This way instead of having to do a netstat -an every two seconds to monitor things you can just open up Outpost and watch the action from there. This way you can be assured whether BO is gone or still active after you've done your scans. Just a thought.
Im running the one that came with XP. But can this thing that i am completly un educated on work if I am not on a network.
The firewall that comes with XP *sucks* because it only blocks incoming stuff, and not outgoing.....so basically any info being broadcast from your computer (or from BO on your computer) isn't being stopped. I agree with FrameWork that you should immediately install Outpost. You can find it here: http://www.agnitum.com/download/.
Haha repeat after me..."Lamer toolz are lame..." :D (Look, I used the cool "z" too!!)
Hey at least you were man enough to get on here and ask for help, even though you had to know you were gonna get **** about it. I really hope you did learn your lesson about this kind of stuff.
And seriously, thanks for the best laugh I've had this evening! :D
Another way to remove it is to just log in and i believe you can shut down the server then delete it. (thought id add that since no one gave that answer) That is if you can log into it. Also, i wouldnt trust just using that, and as many others suggested, just search for something to remove it.
Safest bet would be to reformat your HD, good chance you've been hijacked and then some. Just suck it up, and take it as a lesson learned.....
Honestly, if I were in your position I wouldn't format just yet.... If the removal is successful and it doesn't show up in virus scans anymore, then I'd just install a decent firewall (free of course) and keep it updated. If all of the above^ are done, then I'd feel safe enough. It'd at least give you enough time to make a backup of all your important files/documents/other stuff if you did decide to go ahead and format. If you don't format, then you should definately (at *least*) always keep your AV updated and run seperate programs that specialize in finding Trojans, Virii, Spyware, and whatever else you can think of *and* keep an updated firewall enabled at all times.
All the advice about what you can do now has been covered by the rest of the team, however, one thing that hasn't been mentioned (I suppose because it's just common sense) is to NOT download and/or open any programs that you 'don't know'.Quote:
Originally posted here by blue_wolf
Hey thats not fuuny.....I told u I was being a frekin a**...Which sucks. I could'nt even open the darn thing. Infact that happenes to alot of programs I download. Man my system must be crawling with back doors and stuuf.
I know that may seem a little vague, but a lot of these 'nasties' are silent executeables which means you open the program, nothing happens that you can see but theres some..... ahhmmm.... movement in the background? Anywayz, it does **** to your 'puter.
I'm pretty sure that after this barrage of replies (all helpful, some funny :D), you've learnt your lesson.....maybe.
Goodluck and cheers!!
Try using SwatIt, it's a very solid trojan detector/remover. Get it here:
http://swatit.org/download.html
Good luck
Corn
complete fix is here at this Link. Figure you would need both the manual and the automatic fix just in case you are having problems with either one.Quote:
The Manual Fix:
1. Press the START button.
2. Select RUN , type REGEDIT
3. Using the + to expand the branches, locate the following key :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
4. On the right hand side, double click on the (default) 'key' . It will bring a box up showing the key and it's current value ( Value data ) ,which is ' .exe'. Highlight this and press delete (not backspace make sure the key is empty), then click OK.
5. Close REGEDIT and reboot you machine .
6. Press START
7. RUN , type COMMAND
8. At the DOS prompt type :
del c:\windows\system\exe~1
Guidance...