.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I check if I have Back Orifice 2000 installed?
John Savill
June 17, 2000
1 Min Read
A. Back Orifice 2000 is not a virus as such but a programthat is usually maliciously installed on a machine and it allows it to beremotely controlled.
To check if its installed on your system for Windows 9x:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunService
Check for Umgr32.exe entry, if its there it will equate to something like 'C:\Windows\System\Umgr32.exe e' however the image name can be changed
To remove consult with you anti-virus maker but you could delete theRunService entry to stop at once.
For Windows NT/2000 start the Service Control panel applet (for 2000 startthe Computer Management MMC - Services and Applications - Services) and checkfor 'Remote Administrator Service. Again if its there consult your anti-virusvendor but stop the service and set to disabled.
About the Author
You May Also Like
.png?width=700&auto=webp&quality=80&disable=upscale)