KillBox Overview

From: Subject: KillBox Overview Date: Wed, 18 Apr 2007 18:19:02 -0400 MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0000_01C781E6.0AC60800"; type="text/html" X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 This is a multi-part message in MIME format. ------=_NextPart_000_0000_01C781E6.0AC60800 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Location: http://killbox.net/help.html =EF=BB=BF KillBox Overview

Pocket=20 KillBox=C2=A9 3D"KillBox

Overview=20

Table of=20 Contents
Menu = Functions	File = Menu	Remove Item=20 Menu	Help = Menu	Combobox=20 Buttons
Tools = Menu	Options = Menu	Option=20 Buttons	System=20 Process
Click any of = the items=20 above to go to the appropriate section.=20

If=20 you do not find the answer in this overview, please visit the = Pocket=20 KillBox=C2=A9 forums. =

What is=20 KillBox?
KillBox is a tool to = delete=20 in-use files. If the file is running, KillBox will attempt to end = the=20 process (close the running file) and delete it. For more difficult = files=20 that have loaded .dll's or are services, Delete on Reboot will use = the=20 native Windows function of deleting or replacing in-use files.=20

Ways to add files into KillBox:

=E2=80=A2 Copy = file names one at a=20 time and paste them into the Combobox.
=E2=80=A2 Copy an entire = text file and=20 use the File > Paste from Clipboard function to add all = filenames at=20 once.
=E2=80=A2 Browse for the desired file using the browse = button.
=E2=80=A2 Drag=20 & Drop a file from Windows Explorer to the KillBox = Combobox.=20

Menu=20 Functions

File > Open = !KillBox=20 Backups:
This opens the = backup folder,=20 which strategically named, should be located as the first = directory on the=20 root drive of where Windows is installed, (ie: if Windows is = installed on=20 a C: drive (C:\Windows), the !KillBox backup folder will be place = on C: as=20 well (C:\!KillBox), or if Windows is on a D: (D:\WINNT) then the = !KillBox=20 backup folder will be placed on D: (D:\!KillBox), etc. =

File > Paste from=20 Clipboard:
This reads text = (only) from the=20 clipboard and will add any valid file paths and load the Combobox. = As the=20 data from the clipboard is processed, KillBox checks all pathnames = and=20 verifies that the path exists, and if the path cannot be found, = the entry=20 will not be added to the Combobox.
The Paste from Clipboard = function=20 will work with some options located under the Options = Menu:
=E2=80=A2 Remove=20 Duplicates
=E2=80=A2 Remove Directories
=E2=80=A2 Auto = Parse
=E2=80=A2 8.3=20 names
An explanation of the above functions are listed = under the=20 Options Menu of this helpfile.

File > = Logs:
Logs are saved to = [Root]:\!KillBox\Logs\kb.log

File > Logs > Actions = History=20 Log:
This opens the log of = actions done=20 from the time the user opens KillBox.exe to the time they close = it. Logs=20 are time stamped and dated, for inspection from experts, perhaps, = to see=20 what a user has done - if all files were entered, etc. Logs are = limited to=20 100kb in size. You will be notified if it becomes larger than = 100kb and a=20 new log will be created. Old logs are renamed and saved as=20 C:\!KillBox\Logs\kb.Oct-04-1830.log or = {kb.[Month]-[Day]-[Time].log} the=20 new log will prefix with text pointing to the previous log and = what the=20 filename it was saved as.

File > Logs > Current = items=20 Log:
This opens notepad and = writes all=20 paths presently in the KillBox/Combobox (Check what a user has = pending for=20 delete on reboot, etc).

File > Logs > * Start = New=20 Log:
This starts a new Log. = Otherwise,=20 logs are appended until the 100kb size limit.

File > Cleanup > Delete = all=20 Backups:
This will delete all = files copied=20 to the "[Root]:\!KillBox" directory and delete any old logfiles, = leaving=20 only the current log and the !KillBox directory.

File > Cleanup > Delete = all Dummy=20 Files:
When the "Replace on = Reboot &=20 Use Dummy" option is used, KillBox makes dummy files to use as = replacement=20 for the original files in their installed locations. You may have = several=20 of these in temporary locations so this feature just removes those = files -=20 such as "kbdummy.23", etc.

Back to top of=20 document

Tools > = File=20 Find:
When this option is = checked, the=20 text above the Combobox will read "Type something to Search for". = You can=20 type a full or partial filename into the Combobox, then either = press the=20 "File Find Button" or hit the [Enter] key, and all filenames found = will be=20 entered into the Combobox. FileFind resets after every search. If = multiple=20 searches are done sequentially, Killbox adds the new found files = to the=20 Combobox and preserves the current filenames.(i.e. searching for=20 "nastyfile.exe", then doing a new search for "nasty*.*") If=20 "nastyfile.exe" is found and added to the Combobox, then several = files=20 matching the nasty criteria - "nastyfolder", "nastyfile.dll",=20 "nastyfile.ini", etc. will also be added without removing the = previous=20 search results. To clear results of a search, use the "Clear all = items"=20 under the "Remove Item" menu.

Tools > Start Explorer=20 Shell:
Sometimes when ending = task on=20 explorer.exe, the desktop may fail to return leaving you with a = blank=20 screen. Use this function to restore your desktop. =

Tools > Delete Temp=20 Files:
This will display the = temp=20 locations menu with options to delete files in the specified = locations.=20 The paths are disabled if Killbox cannot find the location - = meaning it=20 most likely does not exist.

Tools > Go to=20 SessionManager:
On NT based = systems, this=20 will open regedit to view "Delete/Replace on Reboot" data (or the = key can=20 be deleted, incase an error was made and the system has not = rebooted yet).=20 Data is entered=20 = under:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session = Manager and "PendingFileRenameOperations"
Killbox = now has=20 the option to "Remove PendingFileRenameOperations" rather than = enter the=20 registry. This is under the "Remove Item" menu.

Tools > Open=20 Wininit.ini:
On 9x based = systems, this=20 will open the wininit.ini in Notepad to view "Delete/Replace on = Reboot"=20 (or to manually edit to remove entries that have been entered in=20 error).

Tools > Hosts=20 File:
This will open the HOSTS = file in=20 Notepad for manually editing, or if it doesn't exist, this will = create a=20 default HOSTS file.

Tools > Open=20 Services:
On NT based systems, = this opens=20 the services.msc (shortcut only). =

Back to top of=20 document

Remove Item = > Clear=20 Text:
This does not remove = any=20 filesnames added to the Combobox - it will only clear the text in = the=20 box.

Remove Item > Remove=20 Selected:
This removes the = selected item=20 from the list, also removing it from the Combobox. =

Remove Item > Clear All=20 Items:
This removes/resests all = entries=20 from the Combobox leaving it blank.

Remove Item > Remove=20 PendingFileRenameOperations:
This deletes=20 registry key containing Delete/Replace on Reboot data. =

Remove Item > Delete=20 Wininit.ini:
This deletes=20 C:\Windows\wininit.ini in Win9x systems. This is the Windows file=20 responsible for deleting or renaming files onreboot.=20

Back to top of=20 document

Options > = Remove=20 Duplicates:
When checked, = this will=20 compare incoming filenames with what has already been added to the = combobox and leave only one instance of each filename. It is = possible to=20 have duplicate instances of filepaths if one is in 8.3 format, and = the=20 other in long format(ie: "C:\Docume~1\Admini~1\filename.exe" and=20 "C:\Documents and Settings\Administrator\filename.exe", are not = considered=20 duplicated). The default Option which filenames will be added to = the=20 combobox, is the format they are pasted as. Toggling between 8.3,=20 longname, and original format can be done under the Options > = 8.3=20 names.

Options > Remove=20 Directories:
When checked, it = will remove=20 all directories from the Combobox list leaving files only. =

Options > Auto=20 Parse:
when checked, will read = the=20 clipboard text line by line and attempt to find any valid path and = add it=20 to the combobox. (ie: With AutoParse checked,a string of text like = :=20 "0122C:\Windows\system32\Winlogon.exedhsewjbcjewcjcebc232" would = parse out=20 the file "C:\Windows\system32\Winlogon.exe" and add it to the = combobox,=20 providing this file did exist on the users drive. without Auto = Parse this=20 line would be ignored and skipped as it is not a valid path to the = filename. (for instance, you could paste an entire ActiveScan - or = similar=20 - log into KillBox and it would find only valid file paths in the = log and=20 ignore everything else.)

Options > 8.3=20 Names:
This will convert both to = and from=20 long and short windows names, with the default option of leaving = the=20 filenames as they were obtained from text sources. =

Options >=20 Shutdown:
This Options is = visible on NT=20 systems only.

Options > Shutdown > = Forced=20 Shutdown:
This will force a = system=20 shutdown, whether a user is logged in or not.

Options > Shutdown > = Forced=20 Reboot:
This will force a system = restart,=20 whether a user is logged in or not. =

Back to top of=20 document

Help > = Killbox=20 Description and Usage:
You're here, so=20 I guess you have figured out what this item does. :) =

Help > Donate with=20 PayPal:
This displays how to = make a PayPal=20 donation if you have found KillBox a helpful application. =

Help > About=20 KillBox:
This displays the = current KillBox=20 version information.

Help > Check for=20 Updates:
This checks the KillBox = version=20 and notifies whether a newer version is available.=20

Back to top of=20 document

Option=20 Buttons

=E2=80=A2 Standard File=20 Kill:
For use with single files, = for=20 ".exe" it will attempt to stop them if they are running and delete = them.=20 The process takes about 6 seconds per file so a delay after = pressing the=20 Kill button is normal.

=E2=80=A2 Delete on=20 Reboot:
This is used to que one = or more=20 files to be deleted on system reboot.

=E2=80=A2 Replace on=20 Reboot:
This is used to que one = or more=20 files to be replaced (swap places) with a file of your choice. Or = by=20 checking the "Use Dummy" function, Killbox will generate a = dummyfile to=20 use as a replacement.

=E2=80=A2 End Explorer = Shell While Killing=20 File:
This will end task on = "explorer.exe"=20 if the offending file is hooked with Windows explorer. The desktop = will go=20 away and may come back by itself. If not, the option in the menu = under=20 "Tools > Start Explorer Shell" will restore the desktop. =

=E2=80=A2 Unregister .dll = Before=20 Deleting:
Self = explanitory.

=E2=80=A2 Single File and = ALL Files=20 buttons:
This is for = Delete/Replace On=20 Reboot. It will either process the first file in the list only = (Single=20 File) or process all the files in the list with one click (ALL=20 Files).

Back to top of=20 document

Combobox=20 Buttons

=E2=80=A2 Browse for=20 file:
This will open a small = Window to=20 navigate to the file to select. It will also remember last folder=20 opened.

=E2=80=A2 File = Find:
This is visible only when Tools > File Find is = enabled. It=20 performs the same function as pressing Enter on keyboard. =

=E2=80=A2 Display File=20 Properties:
This Will show a = Windows based=20 file information box.

=E2=80=A2 Kill Button = (Red=20 X):
This is used to Kill/delete = the file=20 currently displayed in the Combobox. =

Back to top of=20 document

System=20 Process

Select a item from the dropdown = box and=20 click the Yellow [!] button to end the task only. The file = is not=20 deleted.

If=20 you do not find the answer in this overview, please visit the = Pocket=20 KillBox=C2=A9 forums. =

------=_NextPart_000_0000_01C781E6.0AC60800 Content-Type: image/gif Content-Transfer-Encoding: base64 Content-Location: http://www.killbox.net/images/kbicon.gif R0lGODdhIAAgALMPAAAAAIAAAACAAICAAAAAgIAAgACAgMDAwICAgP8AAAD/AP//AAAA//8A/wD/ /////yH5BAEAAAAALAAAAAAgACAAAASwEMhJQbj41s0nTmAIYl0ZiCgalNWVvqHGnnA9mnaerByt wwHExhd62IwqoSf1aMKaSBFPQkxAnahrdKS0MK8ibSoorBbBVvS4XNOKgey2e7tGmLPvGvkezsPt R3M2e3JzdFIIgC9vfohxfVCQWI6PII1pkZReeIeWkzGJS1lHdV2bPy9koaKopUOtSatDfECqphWK Ora3G3YuqReJwiwUiRkZwsPEuMnNycslzrIdEQA7 ------=_NextPart_000_0000_01C781E6.0AC60800--