Resolve for Delf-ALI 1.07 Description:

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

Troj/Delf-ALI is a worm and IRC backdoor Trojan for the Windows platform.

Troj/Delf-ALI spreads to other network computers by exploiting common buffer overflow vulnerabilities, including RPC-DCOM (MS04-012).

Troj/Delf-ALI runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.

Troj/Delf-ALI includes functionality to access the internet and communicate with a remote server via HTTP.

When Troj/Delf-ALI is installed it creates the clean text file msguid32.dll.

The following registry entry is created to run Troj/Delf-ALI on startup:

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
Microsoft IIS


Troj/Delf-ALI attempts to log details from banking applications related to the following sites:

www.halifax-online.co.uk
ibank.barclays.co.uk
online.lloydstsb.co.uk
online-business.lloydstsb.co.uk
www.ukpersonal.hsbc.co.uk
banesnet.banesto.es
extranet.banesto.es
ebanking.bccbrescia.it
www.bankofscotlandhalifax-online.co.uk
oi.cajamadrid.es
bancae.caixapenedes.com
banking.postbank.de
meine.deutsche-bank.de
myonlineaccounts2.abbeynational.co.uk
ibank.cahoot.com
webbank.openplan.co.uk
bancopostaonline.poste.it
mybank.bybank.it
ibank.internationalbanking.barclays.com
welcome7.co-operativebank.co.uk
welcome11.co-operativebankonline.co.uk

Troj/Delf-ALI modifies the HOSTS file in order to redirect access to the above sites.

Troj/Delf-ALI stores logged information to the following clean text files in the Windows system folder:

abbey.dll
bane.dll
bankofscot.dll
barc.dll
barc3.dll
bccbrescia.dll
bybank.dll
cahoot.dll
caixapenedes.dll
cajamadrid.dll
coo11.dll
coo7.dll
deutchebank.dll
halif.dll
hsbc.dll
lloy.dll
posta.dll
postbank.dll
wool.dll

Troj/Delf-ALI can be removed from Windows computers automatically with the following Resolve tools:

Windows disinfector
DELFAGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
· Open DELFAGUI.com file from your desktop after downloading it.
· Click on the Start Scan Button.
· Wait for the process to complete.
· After removing the worm you should install the Microsoft patch MS04-012 or, on single computers, update with all relevant security patches from Windows update.

Command line disinfector
DELFASFX.EXE is a self-extracting archive containing DELFACLI, a Resolve command line disinfector for use by system administrators on Windows networks.

Resolve for Delf-ALI security information

You cannot download any crack or serial number for Resolve for Delf-ALI on this page. Every software that you are able to download on our site is legal. There is no crack, serial number, hack or activation key for Resolve for Delf-ALI present here. Our collection also doesn't contain any keygens, because keygen programs are being used in illegal ways which we do not support. All software that you can find here is freely downloadable and legal.

Resolve for Delf-ALI installation package is prepared to be downloaded from our fast download servers. It is checked for possible viruses and is proven to be 100% clean and safe. Various leading antiviruses have been used to test Resolve for Delf-ALI, if it contains any viruses. No infections have been found and downloading Resolve for Delf-ALI is completelly problem free because of that reason. Our experts on malware detection tested Resolve for Delf-ALI with various spyware and malware detection programs, including fyxm.net custom malware and spyware detection, and absolutelly no malware or spyware was found in Resolve for Delf-ALI.

All software that you can find on our servers, including Resolve for Delf-ALI, is either freeware, shareware or open-source, some of the software packages are demo, trial or patch versions and if possible (public domain licence), we also host official full versions of software.

Because we want to be one of the fastest download sites on the web, we host all the software including Resolve for Delf-ALI on our servers. You cannot find here any torrents or download links that would lead you to dangerous sites.

Fyxm.net does support free software, however we do not support warez or illegal downloads. Warez is harming producers of the software.

Enjoy!