KillBox  Overview



What is KillBox?
KillBox is a tool to delete in-use files. If the file is running, KillBox will attempt to end the process (close the running file) and delete it. For more difficult files that have loaded .dll's or are services, Delete on Reboot will use the native Windows function of deleting or replacing in-use files.

Ways to add files into KillBox:

• Copy file names one at a time and paste them into the Combobox.
• Copy an entire text file and use the File > Paste from Clipboard function to add all filenames at once.
• Browse for the desired file using the browse button.
• Drag & Drop a file from Windows Explorer to the KillBox Combobox.

Menu Functions
File > Open !KillBox Backups:
This opens the backup folder, which strategically named, should be located as the first directory on the root drive of where Windows is installed, (ie: if Windows is installed on a C: drive (C:\Windows), the !KillBox backup folder will be place on C: as well (C:\!KillBox), or if Windows is on a D: (D:\WINNT) then the !KillBox backup folder will be placed on D: (D:\!KillBox), etc.
File > Paste from Clipboard:
This reads text (only) from the clipboard and will add any valid file paths and load the Combobox. As the data from the clipboard is processed, KillBox checks all pathnames and verifies that the path exists, and if the path cannot be found, the entry will not be added to the Combobox.
The Paste from Clipboard function will work with some options located under the Options Menu:
• Remove Duplicates
• Remove Directories
• Auto Parse
• 8.3 names
An explanation of the above functions are listed under the Options Menu of this helpfile.
File > Logs:
Logs are saved to [Root]:\!KillBox\Logs\kb.log
File > Logs > Actions History Log:
This opens the log of actions done from the time the user opens KillBox.exe to the time they close it. Logs are time stamped and dated, for inspection from experts, perhaps, to see what a user has done - if all files were entered, etc. Logs are limited to 100kb in size. You will be notified if it becomes larger than 100kb and a new log will be created. Old logs are renamed and saved as C:\!KillBox\Logs\kb.Oct-04-1830.log or {kb.[Month]-[Day]-[Time].log} the new log will prefix with text pointing to the previous log and what the filename it was saved as.
File > Logs > Current items Log:
This opens notepad and writes all paths presently in the KillBox/Combobox (Check what a user has pending for delete on reboot, etc).
File > Logs > * Start New Log:
This starts a new Log. Otherwise, logs are appended until the 100kb size limit.
File > Cleanup > Delete all Backups:
This will delete all files copied to the "[Root]:\!KillBox" directory and delete any old logfiles, leaving only the current log and the !KillBox directory.
File > Cleanup > Delete all Dummy Files:
When the "Replace on Reboot & Use Dummy" option is used, KillBox makes dummy files to use as replacement for the original files in their installed locations. You may have several of these in temporary locations so this feature just removes those files - such as "kbdummy.23", etc.


Tools > File Find:
When this option is checked, the text above the Combobox will read "Type something to Search for". You can type a full or partial filename into the Combobox, then either press the "File Find Button" or hit the [Enter] key, and all filenames found will be entered into the Combobox. FileFind resets after every search. If multiple searches are done sequentially, Killbox adds the new found files to the Combobox and preserves the current filenames.(i.e. searching for "nastyfile.exe", then doing a new search for "nasty*.*") If "nastyfile.exe" is found and added to the Combobox, then several files matching the nasty criteria - "nastyfolder", "nastyfile.dll", "nastyfile.ini", etc. will also be added without removing the previous search results. To clear results of a search, use the "Clear all items" under the "Remove Item" menu.
Tools > Start Explorer Shell:
Sometimes when ending task on explorer.exe, the desktop may fail to return leaving you with a blank screen. Use this function to restore your desktop.
Tools > Delete Temp Files:
This will display the temp locations menu with options to delete files in the specified locations. The paths are disabled if Killbox cannot find the location - meaning it most likely does not exist.
Tools > Go to SessionManager:
On NT based systems, this will open regedit to view "Delete/Replace on Reboot" data (or the key can be deleted, incase an error was made and the system has not rebooted yet). Data is entered under:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager and "PendingFileRenameOperations"
Killbox now has the option to "Remove PendingFileRenameOperations" rather than enter the registry. This is under the "Remove Item" menu.
Tools > Open Wininit.ini:
On 9x based systems, this will open the wininit.ini in Notepad to view "Delete/Replace on Reboot" (or to manually edit to remove entries that have been entered in error).
Tools > Hosts File:
This will open the HOSTS file in Notepad for manually editing, or if it doesn't exist, this will create a default HOSTS file.
Tools > Open Services:
On NT based systems, this opens the services.msc (shortcut only).


Remove Item > Clear Text:
This does not remove any filesnames added to the Combobox - it will only clear the text in the box.
Remove Item > Remove Selected:
This removes the selected item from the list, also removing it from the Combobox.
Remove Item > Clear All Items:
This removes/resests all entries from the Combobox leaving it blank.
Remove Item > Remove PendingFileRenameOperations:
This deletes registry key containing Delete/Replace on Reboot data.
Remove Item > Delete Wininit.ini:
This deletes C:\Windows\wininit.ini in Win9x systems. This is the Windows file responsible for deleting or renaming files onreboot.


Options > Remove Duplicates:
When checked, this will compare incoming filenames with what has already been added to the combobox and leave only one instance of each filename. It is possible to have duplicate instances of filepaths if one is in 8.3 format, and the other in long format(ie: "C:\Docume~1\Admini~1\filename.exe" and "C:\Documents and Settings\Administrator\filename.exe", are not considered duplicated). The default Option which filenames will be added to the combobox, is the format they are pasted as. Toggling between 8.3, longname, and original format can be done under the Options > 8.3 names.
Options > Remove Directories:
When checked, it will remove all directories from the Combobox list leaving files only.
Options > Auto Parse:
when checked, will read the clipboard text line by line and attempt to find any valid path and add it to the combobox. (ie: With AutoParse checked,a string of text like : "0122C:\Windows\system32\Winlogon.exedhsewjbcjewcjcebc232" would parse out the file "C:\Windows\system32\Winlogon.exe" and add it to the combobox, providing this file did exist on the users drive. without Auto Parse this line would be ignored and skipped as it is not a valid path to the filename. (for instance, you could paste an entire ActiveScan - or similar - log into KillBox and it would find only valid file paths in the log and ignore everything else.)
Options > 8.3 Names:
This will convert both to and from long and short windows names, with the default option of leaving the filenames as they were obtained from text sources.
Options > Shutdown:
This Options is visible on NT systems only.
Options > Shutdown > Forced Shutdown:
This will force a system shutdown, whether a user is logged in or not.
Options > Shutdown > Forced Reboot:
This will force a system restart, whether a user is logged in or not.


Help > Killbox Description and Usage:
You're here, so I guess you have figured out what this item does. :)
Help > Donate with PayPal:
This displays how to make a PayPal donation if you have found KillBox a helpful application.
Help > About KillBox:
This displays the current KillBox version information.
Help > Check for Updates:
This checks the KillBox version and notifies whether a newer version is available.


Option Buttons
• Standard File Kill:
For use with single files, for ".exe" it will attempt to stop them if they are running and delete them. The process takes about 6 seconds per file so a delay after pressing the Kill button is normal.
• Delete on Reboot:
This is used to que one or more files to be deleted on system reboot.
• Replace on Reboot:
This is used to que one or more files to be replaced (swap places) with a file of your choice. Or by checking the "Use Dummy" function, Killbox will generate a dummyfile to use as a replacement.
• End Explorer Shell While Killing File:
This will end task on "explorer.exe" if the offending file is hooked with Windows explorer. The desktop will go away and may come back by itself. If not, the option in the menu under "Tools > Start Explorer Shell" will restore the desktop.
• Unregister .dll Before Deleting:
Self explanitory.
• Single File and ALL Files buttons:
This is for Delete/Replace On Reboot. It will either process the first file in the list only (Single File) or process all the files in the list with one click (ALL Files).


Combobox Buttons
• Browse for file:
This will open a small Window to navigate to the file to select. It will also remember last folder opened.
• File Find:
This is visible only when Tools > File Find is enabled. It performs the same function as pressing Enter on keyboard.
• Display File Properties:
This Will show a Windows based file information box.
• Kill Button (Red X):
This is used to Kill/delete the file currently displayed in the Combobox.


System Process
Select a item from the dropdown box and click the Yellow [!] button to end the task only. The file is not deleted.