Resolve for Stinx 1.07 Description:

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed.

Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

Troj/Stinx-Q is an IRC backdoor Trojan for the Windows platform.

The Trojan may arrive as an email attachment with the filename "Photo+Article.zip".

When first run Troj/Stinx-Q copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan. Troj/Stinx-Q is an IRC backdoor Trojan for the Windows platform.

The Trojan may arrive as an email attachment with the filename "Photo+Article.zip". Typically the email has characteristics similar to the following:

Subject line:
Photo and Article

Message text:

Hello,

Your photograph has reached editing stage as part of an article we are publishing for our February edition of Traders World Monthly. Can you check over the format and get back to us with your approval or any changes?
If the picture is not to your liking then please send a preferred one. We've attached the photo with the article here.


Troj/Stinx-Q connects to an IRC channel and listens for backdoor commands from a remote user. Backdoor functionality includes the ability to run arbitrary commands.

The Trojan may also download further malicious code.

Troj/Stinx-Q attempts to terminate a number of processes, including some belonging to anti-virus applications.

When first run Troj/Stinx-Q copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan.

The following registry entries are created to run csrnvrt.exe on startup:

HKCUSoftwareMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe

Troj/Stinx-R is a backdoor Trojan for the Windows platform.

The Trojan connects to an IRC server and joins a predetermined channel. The Trojan then accepts commands from remote attackers. Troj/Stinx-R is a backdoor Trojan for the Windows platform.

When first run Troj/Stinx-R copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan.

The following registry entries are created to run csrnvrt.exe on startup:

HKCUSoftwareMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe

The Trojan connects to an IRC server and joins a predetermined channel. The Trojan then accepts commands from remote attackers.

The Trojan may also download further malicious code.

Troj/Stinx-R attempts to terminate a number of processes, including some belonging to anti-virus applications.

Troj/Stinx-S is a backdoor Trojan for the Windows platform.

Troj/Stinx-S connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

When first run Troj/Stinx-S copies itself to lsadst.exe and creates the following registry entries to run this file on startup:

HKCUSoftwareMicrosoftWindowsCurrentVersionRun
WindowsProtocolLog
lsadst.exe

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
WindowsProtocolLog
lsadst.exe

Troj/Stinx-S may drop and run files called .bat in order to bypass the Windows firewall using "netsh" or in order to delete itself.

Troj/Stinx-S attempts to terminate a number of processes related to anti-virus and security programs.

Troj/Stinx-S may download and execute files from a remote website.

Troj/Stinx-U is a backdoor Trojan for the Windows platform.

Troj/Stinx-U connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

Troj/Stinx-U attempts to terminate a number of processes related to anti-virus and security programs.

Troj/Stinx-U may download and execute files from a remote website. Troj/Stinx-U is a backdoor Trojan for the Windows platform.

Troj/Stinx-U connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.

When first run Troj/Stinx-U copies itself to lsadst.exe and creates the following registry entries to run this file on startup:

HKCUSoftwareMicrosoftWindowsCurrentVersionRun
WindowsDiskEvt
svcsvh32.exe

HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
WindowsDiskEvt
svcsvh32.exe

Troj/Stinx-U may drop and run files called .bat in order to bypass the Windows firewall using "netsh" or in order to delete itself.

Troj/Stinx-U attempts to terminate a number of processes related to anti-virus and security programs.

Troj/Stinx-U may download and execute files from a remote website.

Troj/Stinx-Q, Troj/Stinx-R, Troj/Stinx-S and Troj/Stinx-U can be removed from Windows computers automatically with the following Resolve tools:

Windows disinfector
STINXGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
· Open STINXGUI.com file from your desktop after downloading it.
· Click on the Start Scan Button.
· Wait for the process to complete.

Command line disinfector
STINXSFX.EXE is a self-extracting archive containing STINXCLI, a Resolve command line disinfector for use by system administrators on Windows networks.

Resolve for Stinx security information

You cannot download any crack or serial number for Resolve for Stinx on this page. Every software that you are able to download on our site is legal. There is no crack, serial number, hack or activation key for Resolve for Stinx present here. Our collection also doesn't contain any keygens, because keygen programs are being used in illegal ways which we do not support. All software that you can find here is freely downloadable and legal.

Resolve for Stinx installation package is prepared to be downloaded from our fast download servers. It is checked for possible viruses and is proven to be 100% clean and safe. Various leading antiviruses have been used to test Resolve for Stinx, if it contains any viruses. No infections have been found and downloading Resolve for Stinx is completelly problem free because of that reason. Our experts on malware detection tested Resolve for Stinx with various spyware and malware detection programs, including fyxm.net custom malware and spyware detection, and absolutelly no malware or spyware was found in Resolve for Stinx.

All software that you can find on our servers, including Resolve for Stinx, is either freeware, shareware or open-source, some of the software packages are demo, trial or patch versions and if possible (public domain licence), we also host official full versions of software.

Because we want to be one of the fastest download sites on the web, we host all the software including Resolve for Stinx on our servers. You cannot find here any torrents or download links that would lead you to dangerous sites.

Fyxm.net does support free software, however we do not support warez or illegal downloads. Warez is harming producers of the software.

Enjoy!