Backorifice...m.m...hjælp...!

Backorrifice:
To clean a user’s system from BO2k, you must use a Windows Registry Editor such as REGEDIT.

Take note of all the detected files
Search for the keys containing any of the detected files on your list.
By default this would be the \"UMGR32.EXE\" key and is located at -

When running Windows 95/98 –

\\\\HKEY_LOCAL_MACHINE\\SOFTWARE\\MICROSOFT\\WINDOWS\\
CURRENT VERSION\\RUNSERVICES\\UMGR32.EXE

When running Windows NT –

\\\\HKEY_LOCAL_MACHINE\\SOFTWARE\\MICROSOFT\\WINDOWS\\
CURRENT VERSION\\RUN\\UMGR32.EXE

Delete the key entries in the registry
Shutdown to DOS and manually delete the listed files (by default UMGR32~1.EXE) in the <root>\\WINDOWS\\SYSTEM directory and reboot your system afterwards
For Windows NT you must reboot first to remove the process in memory and then delete the file UMGR32.EXE from the <root>\\WINNT\\SYSTEM32
Scan your system once more to make sure you have removed all installed BO2k variants installed on your system. If ever you will have to return to Step 1.

NanoQ

(brug 95/98 metoden)

IRC Trojan kan Norton antivirus fjerne HVIS du sørger for at opdatere :)

Du opdaterer herfra: http://securityresponse.symantec.com/avcenter/download.html

NanoQ

Hos kriminalitet.dk finder du nogle gode programmer til at fjerne trojanske heste
http://www.kriminalitet.dk/trojdow.shtml
men prøv lige www.housecall.antivirus.com først. Ind imellem fjerner den noget andre ikke fjerner. Det er min erfaring.

Takker mange gange, det lykkedes at få bugt med dem, takket være nanoq.

MVH
Anders :o)

Velbekomme - og selv tak :)