Resolve for CoreFloo-D 1.05 Description:

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

Troj/CoreFloo-D is a backdoor Trojan which allows a remote intruder to access and control the computer from a remote location.

The Trojan arrives as an executable with a random filename consisting of 7 characters A-Z with an EXE extension.

When the installation executable is run on Windows 95, 98 or ME it drops a DLL to the Windows System folder with a filename consisting of 7 random characters A-Z with a DLL extension.

When the installation executable is run on Windows NT, 2000 or XP it drops the DLL as an ADS stream associated with the Windows System folder (typically System32). The new ADS stream will also have a random 7 character name with an extension of DLL.

The installation executable then launches the DLL component which adds its pathname to the following registry entry, so that it is run automatically each time Windows is started:

HKLMSoftwareMicrosoftWindowsCurrentVersionRunOnce
= rundll32 %SYSTEM% .dll,Init 1

HKLMSoftwareMicrosoftWindowsCurrentVersionRun
= rundll32 %SYSTEM% ,Init 1

The DLL component injects itself into the EXPLORER process making it invisible in the Task Manager process list.

The DLL queries a hosts from a list in the Trojan body in order to receive parameters for further processing usinf HTTP POST request and a CGI script on the remote host. The HTTP response contains various parameters for the backdoor built into the DLL such as listening ports and other information.

Troj/CoreFloo-D also has anti-delete functionality which restarts viral processes that have been terminated and resets the above registry entries if they are removed.

Troj/CoreFloo-D can be removed from Windows computers automatically with the following Resolve tools:

Windows disinfector
CORFDGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
· Open CORFDGUI.com file from your desktop after downloading it.
· Click on the Start Scan Button.
· Wait for the process to complete.

Command line disinfector
CORFDSFX.EXE is a self-extracting archive containing CORFDCLI, a Resolve command line disinfector for use on Windows networks.

Resolve for CoreFloo-D security information

You cannot download any crack or serial number for Resolve for CoreFloo-D on this page. Every software that you are able to download on our site is legal. There is no crack, serial number, hack or activation key for Resolve for CoreFloo-D present here. Our collection also doesn't contain any keygens, because keygen programs are being used in illegal ways which we do not support. All software that you can find here is freely downloadable and legal.

Resolve for CoreFloo-D installation package is prepared to be downloaded from our fast download servers. It is checked for possible viruses and is proven to be 100% clean and safe. Various leading antiviruses have been used to test Resolve for CoreFloo-D, if it contains any viruses. No infections have been found and downloading Resolve for CoreFloo-D is completelly problem free because of that reason. Our experts on malware detection tested Resolve for CoreFloo-D with various spyware and malware detection programs, including fyxm.net custom malware and spyware detection, and absolutelly no malware or spyware was found in Resolve for CoreFloo-D.

All software that you can find on our servers, including Resolve for CoreFloo-D, is either freeware, shareware or open-source, some of the software packages are demo, trial or patch versions and if possible (public domain licence), we also host official full versions of software.

Because we want to be one of the fastest download sites on the web, we host all the software including Resolve for CoreFloo-D on our servers. You cannot find here any torrents or download links that would lead you to dangerous sites.

Fyxm.net does support free software, however we do not support warez or illegal downloads. Warez is harming producers of the software.

Enjoy!