[Home] [History] [Msg Board] [Photo Album] [Irc-Help] [Tips] [Internet Survival]    
[FFALP] [Rules] [Info] [Mp3] [Links] [Downloads] [Guestbook] [Contact] [About]

Welcome to the #DalFriends Web Site!

Back Orifice 2000

BACK ORIFICE strikes again - this time as BO2K!

Over the course of the last few days, a malicious program called "Back Orifice 2000" (BO2K) was released. When installed on a Windows computer, BO2K allows the computer to be remotely controlled by another user (BO2K can infect 95, 98, and NT machines). Unlike legitimate remote control software packages, BO2K is intended for harmful purposes. It includes stealth behavior that makes it difficult to detect. Once installed on a computer, the attacker can do anything that the user at the keyboard could do. This includes running programs, creating or deleting files, sending and receiving data, and so on.

How Do I Fix My PC?

Go to the McAfee Clinic and use VirusScan Online to detect and remove this virus - for FREE.

What Back Orifice 2000 does:

The Back Orifice 2000 virus is software for remote computer control. The virus was released on July 11, 1999. What is BO2K? The BO2K virus consists of two components - a server program and a client program. It copies itself to the local disk under the name ".exe" and installs a reference to that file in the registry. It runs every time the machine restarts. The program hides itself - it is not visible as a task although it is running permanently in the background of your PC. BO2K awaits commands from the client through the network. After the server program is installed on a computer, the person controlling the client has remote control over the machine running the server program. This requires both machines to be connected to the Internet. This control includes recording the keystrokes pressed, restarting or hanging the machine, running, accessing, modifying and transferring files. It can also transmit screenshots. The software also has a program to reconfigure the server application. Filename, TCP/IP port, registry key, password for client-server data exchange and additional DLL can be configured.

How is BO2K different from the original Back Orifice virus?

BO2K is a variant of the original Back Orifice virus (discovered 10/15/98). BO2K can infect Windows 95, 98 and NT systems.

How can my computer get infected?

BO2K can only be installed in one of two ways: An attacker must physically install the virus on to your PC; The “Trojan horse” technique - you may be tricked into installing the software. You might receive an email attachment that claims to be a program but is really Back Orifice 2000.

What if I have BO2K? What do I do?

You can go to the McAfee Clinic and use VirusScan Online to detect and clean BO2K from your PC - for FREE.