Resolve for W32/Apribot-C 1.06 Description:

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms.

They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

W32/Apribot-C is an IRC backdoor with spreading capability.

Each time the worm is run it tries to connect to a remote IRC server and join a specific channel. The backdoor component then runs in the background as a server process, listening for commands to execute. The infected computer can be used to perform several functions: W32/Apribot-C is an IRC backdoor with spreading capability.

Each time the worm is run it tries to connect to a remote IRC server and join a specific channel. The backdoor component then runs in the background as a server process, listening for commands to execute. The infected computer can be used to perform any of the following functions:

Proxy server (SOCKS4)
FTP server
SMTP server
File system Manipulation
Port scanner
DDoS floods (TCP,UDP,SYN)
Remote shell (RLOGIN)
Key logger

When first run the worm copies itself to the Windows System folder under a randomly generated name. The copy may have some random data appended to it. In order for the copy to be run on startup, registry entries are created under random names in the following locations:

HKLMSoftwareMicrosoftWindowsCurrentVersionRun
HKLMSoftwareMicrosoftWindowsCurrentVersionRunServices
HKCUSoftwareMicrosoftWindowsCurrentVersionRun

The worm chooses from one or two of the following strings to form the filename:

SERV
DISK
STAT
LOAD
INI
SCAN
INIT
SRV
DSK
CONF
CFG
MON
DLL
VXD
CHK
REG
DRV
WIN
SYS
Stat
Load
Scan
Init
Service
Disk
Config
Monitor
Check
Reg
Drive
Win
System

The following entry is also created:
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon
Shell = "Explorer.exe,[filename] -shell"

Many additional registry entries may be created, changed or deleted. In particular, many entries are created in the following registry locations:

HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
DisallowRun
HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem
DisableRegistryTools
HKLMSOFTWAREMicrosoftConnect

The following entries are set:

HKLMSYSTEMControlSet001ControlLsarestrictanonymous = 1
HKLMSYSTEMCurrentControlSetControlLsarestrictanonymous = 1

W32/Apribot-C may also attempt to disable debugging and firewall software.

The worm appends several lines to the HOSTS file, found in the driversetc subfolder of the Windows System folder. Each line consists of a randomly chosen IP address beginning with "127" and a web address. The worm appends this data in order to prevent access to a number of anti-virus and Microsoft web sites.

W32/Apribot-C can be removed from Windows computers automatically with the following Resolve tools:

Windows disinfector
APRIBGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
· Open APRIBGUI.com file from your desktop after downloading it.
· Click on the Start Scan Button.
· Wait for the process to complete.

Command line disinfector
APRIBSFX.EXE is a self-extracting archive containing APRIBCLI, a Resolve command line disinfector for use on Windows networks.

Resolve for W32/Apribot-C security information

You cannot download any crack or serial number for Resolve for W32/Apribot-C on this page. Every software that you are able to download on our site is legal. There is no crack, serial number, hack or activation key for Resolve for W32/Apribot-C present here. Our collection also doesn't contain any keygens, because keygen programs are being used in illegal ways which we do not support. All software that you can find here is freely downloadable and legal.

Resolve for W32/Apribot-C installation package is prepared to be downloaded from our fast download servers. It is checked for possible viruses and is proven to be 100% clean and safe. Various leading antiviruses have been used to test Resolve for W32/Apribot-C, if it contains any viruses. No infections have been found and downloading Resolve for W32/Apribot-C is completelly problem free because of that reason. Our experts on malware detection tested Resolve for W32/Apribot-C with various spyware and malware detection programs, including fyxm.net custom malware and spyware detection, and absolutelly no malware or spyware was found in Resolve for W32/Apribot-C.

All software that you can find on our servers, including Resolve for W32/Apribot-C, is either freeware, shareware or open-source, some of the software packages are demo, trial or patch versions and if possible (public domain licence), we also host official full versions of software.

Because we want to be one of the fastest download sites on the web, we host all the software including Resolve for W32/Apribot-C on our servers. You cannot find here any torrents or download links that would lead you to dangerous sites.

Fyxm.net does support free software, however we do not support warez or illegal downloads. Warez is harming producers of the software.

Enjoy!