resolved
Resolve 1.0
Windows Version of NSLOOKUP. Tells host name given theIP address or host name from IP address. more>>
ENUM Resolver 1.0
ENUM Resolver is an advanced program which satisfies you with a Electronic NUmber Mapping (ENUM) Lookup utility. more>>
ENUM Resolver 1.0 is an advanced program which satisfies you with a Electronic NUmber Mapping (ENUM) Lookup utility. ENUM Resolver is freeware. ENUM Resolver has a very simple, easy to use interface and no configuration needed. You can copy resolved SIP endpoint address by clicking GUI button.
IpDnsResolver 1.2
IpDnsResolver lets you find your IP address, resolve hostnames to IP addresses using the DNS more>>
Resolve for Dloader 1.07
A tool that removes Dloader trojan more>> A tool that removes Dloader trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Dloader-ML is a downloading Trojan for the Windows platform.
Once executed Troj/Dloader-ML copies itself to the Windows system folder with a random filename and runs the copy.
Troj/Dloader-ML injects code into new hidden instances of explorer.exe, winlogon.exe and packager.exe.
These processes prevent each other from being terminated.
Troj/Dloader can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DLOADGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open DLOADGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
DLOADSFX.EXE is a self-extracting archive containing DLOADCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Digi-Link Resolve 1.1
automatically browse web sites offline, use links in Outlook email more>> Resolve will let users click on email links and browse web sites offline, automatically. Resolve handles links in Outlook emails, even unread emails. Resolve works with Web sites, web documents, PDFs, word etc. resolve works with Microsoft SharePoint.
Users get newsletters, maps, documents, company info in emails. Now you can browse the web site on a plane, train or anywhere.
fast full text search of email and attachments with no adware. There are no links back in this fast full text search product.
Choose to see just web sites from your contacts or download everything.<<less
Resolve for Daoser-C 1.07
A tool that removes Daoser-C trojan more>> A tool that removes Daoser-C trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Daoser-C is a Trojan for the Windows platform.
Troj/Daoser-C will modify the start page for Internet Explorer.
Troj/Daoser-C may display popups and spy on web searches and browsing habits. Troj/Daoser-C is a Trojan for the Windows platform.
Troj/Daoser-C will modify the start page for Internet Explorer.
Troj/Daoser-C may display popups and spy on web searches and browsing habits.
When the Trojan is installed the following files are created:
ServicesSVCHOST32.DLL
Servicessecurity.exe
Servicessvchost.dll
Servicessvchost.exe
where is a string of letters and numbers.
The following registry entry is created to run svchost.exe on startup:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
Service Host
ServicesSVCHOST.EXE
The Trojan changes the Start Page for Microsoft Internet Explorer by altering the registry entry:
HKCUSoftwareMicrosoftInternet ExplorerMainStart Page
Troj/Daoser-C can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DAOSRGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open DAOSRGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
DAOSRSFX.EXE is a self-extracting archive containing DAOSRCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for Delf-ALI 1.07
A tool that removes Delf-ALI trojan more>> A tool that removes Delf-ALI trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Delf-ALI is a worm and IRC backdoor Trojan for the Windows platform.
Troj/Delf-ALI spreads to other network computers by exploiting common buffer overflow vulnerabilities, including RPC-DCOM (MS04-012).
Troj/Delf-ALI runs continuously in the background, providing a backdoor server which allows a remote intruder to gain access and control over the computer via IRC channels.
Troj/Delf-ALI includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Delf-ALI is installed it creates the clean text file msguid32.dll.
The following registry entry is created to run Troj/Delf-ALI on startup:
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
Microsoft IIS
Troj/Delf-ALI attempts to log details from banking applications related to the following sites:
www.halifax-online.co.uk
ibank.barclays.co.uk
online.lloydstsb.co.uk
online-business.lloydstsb.co.uk
www.ukpersonal.hsbc.co.uk
banesnet.banesto.es
extranet.banesto.es
ebanking.bccbrescia.it
www.bankofscotlandhalifax-online.co.uk
oi.cajamadrid.es
bancae.caixapenedes.com
banking.postbank.de
meine.deutsche-bank.de
myonlineaccounts2.abbeynational.co.uk
ibank.cahoot.com
webbank.openplan.co.uk
bancopostaonline.poste.it
mybank.bybank.it
ibank.internationalbanking.barclays.com
welcome7.co-operativebank.co.uk
welcome11.co-operativebankonline.co.uk
Troj/Delf-ALI modifies the HOSTS file in order to redirect access to the above sites.
Troj/Delf-ALI stores logged information to the following clean text files in the Windows system folder:
abbey.dll
bane.dll
bankofscot.dll
barc.dll
barc3.dll
bccbrescia.dll
bybank.dll
cahoot.dll
caixapenedes.dll
cajamadrid.dll
coo11.dll
coo7.dll
deutchebank.dll
halif.dll
hsbc.dll
lloy.dll
posta.dll
postbank.dll
wool.dll
Troj/Delf-ALI can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DELFAGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open DELFAGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
- After removing the worm you should install the Microsoft patch MS04-012 or, on single computers, update with all relevant security patches from Windows update.
Command line disinfector
DELFASFX.EXE is a self-extracting archive containing DELFACLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for Enfal 1.07
A tool that removes Enfal trojan more>> A tool that removes Enfal trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Enfal-A is a Trojan for the Windows platform.
Troj/Enfal-A includes functionality to:
- inject multiple threads into the process EXPLORER.EXE
- download code from the internet
When run Troj/Enfal-A copies itself to dismgnt.exe and winkrnl.exe.
Troj/Enfal-A modifies the following registry entry to run itself on Windows Logon:
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon
Userinit
userinit.exe,DisMgnt.exe
Troj/Enfal-B is a backdoor Trojan for the Windows platform.
Troj/Enfal-B includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Enfal-B is installed the following files are created:
DisMgnt.exe
NtApi.exe
Winkrnl.exe
acetempkb791024.l0g
where NtApi.exe is an archiver application.
Troj/Enfal-B injects multiple threads into the process EXPLORER.EXE.
The files DisMgnt.exe and Winkrnl.exe are detected as Troj/Enfal-A.
Registry entries are set as follows:
HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
ShowSuperHidden
0
HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogon
Shell
Explorer.exe,
Windows disinfector
BDLAAGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open BDLAAGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
ENFALSFX.EXE is a self-extracting archive containing ENFALCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for CodeRed-II 1.0
A tool that removes CodeRed-II trojan more>> A tool that removes CodeRed-II trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms.
They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
W32/CodeRed-II is a Trojan horse dropped by the CodeRed II worm. It affects
Windows NT and Windows 2000 computers running Microsoft Internet Information
Services (IIS) versions 4 and 5. IIS is installed by default on Windows 2000
Server and is easily installed on Windows 2000 Professional.
The files explorer.exe and root.exe take advantage of registry modifications
to allow remote access.
Troj/CodeRed-II can be removed from Windows computers automatically with the following tool:
rmred.bat is the name of the file users have to use in order to disinfect. After downloading this file please copy its content on a floppy disk and write-protect it.
Go to the infected computer. Log on as Administrator.
Close all programs leaving only the Windows Desktop. Place the floppy disk in
the A: drive.
At the Windows taskbar, select Start|Run. Type
A:RMRED and press .
Messages will tell you if your computer is infected, Infection Active! or if
there is a further problem. You will also be told if you need to install the
Microsoft security patch.
Press a key to close the program, then close the program box if necessary.
If your computer is uninfected but you have not got the patch, go here and install the patch.
If your computer is uninfected and you have got the patch, ensure that your
anti-virus software is up-to-date.
Resolve for Stinx 1.07
A tool that removes Stinx trojan more>> A tool that removes Stinx trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed.
Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Stinx-Q is an IRC backdoor Trojan for the Windows platform.
The Trojan may arrive as an email attachment with the filename "Photo+Article.zip".
When first run Troj/Stinx-Q copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan. Troj/Stinx-Q is an IRC backdoor Trojan for the Windows platform.
The Trojan may arrive as an email attachment with the filename "Photo+Article.zip". Typically the email has characteristics similar to the following:
Subject line:
Photo and Article
Message text:
Hello,
Your photograph has reached editing stage as part of an article we are publishing for our February edition of Traders World Monthly. Can you check over the format and get back to us with your approval or any changes?
If the picture is not to your liking then please send a preferred one. Weve attached the photo with the article here.
Troj/Stinx-Q connects to an IRC channel and listens for backdoor commands from a remote user. Backdoor functionality includes the ability to run arbitrary commands.
The Trojan may also download further malicious code.
Troj/Stinx-Q attempts to terminate a number of processes, including some belonging to anti-virus applications.
When first run Troj/Stinx-Q copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan.
The following registry entries are created to run csrnvrt.exe on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe
Troj/Stinx-R is a backdoor Trojan for the Windows platform.
The Trojan connects to an IRC server and joins a predetermined channel. The Trojan then accepts commands from remote attackers. Troj/Stinx-R is a backdoor Trojan for the Windows platform.
When first run Troj/Stinx-R copies itself to csrnvrt.exe and creates two randomly named BAT files in the Temp folder. One of these files is used to attempt to bypass the Windows firewall. The other is used to delete the original copy of the Trojan.
The following registry entries are created to run csrnvrt.exe on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
DriverModule
csrnvrt.exe
The Trojan connects to an IRC server and joins a predetermined channel. The Trojan then accepts commands from remote attackers.
The Trojan may also download further malicious code.
Troj/Stinx-R attempts to terminate a number of processes, including some belonging to anti-virus applications.
Troj/Stinx-S is a backdoor Trojan for the Windows platform.
Troj/Stinx-S connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.
When first run Troj/Stinx-S copies itself to lsadst.exe and creates the following registry entries to run this file on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
WindowsProtocolLog
lsadst.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
WindowsProtocolLog
lsadst.exe
Troj/Stinx-S may drop and run files called .bat in order to bypass the Windows firewall using "netsh" or in order to delete itself.
Troj/Stinx-S attempts to terminate a number of processes related to anti-virus and security programs.
Troj/Stinx-S may download and execute files from a remote website.
Troj/Stinx-U is a backdoor Trojan for the Windows platform.
Troj/Stinx-U connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.
Troj/Stinx-U attempts to terminate a number of processes related to anti-virus and security programs.
Troj/Stinx-U may download and execute files from a remote website. Troj/Stinx-U is a backdoor Trojan for the Windows platform.
Troj/Stinx-U connects to a number of remote ip addresses on port 8080, providing a backdoor server which allows a remote intruder to gain access and control over the computer.
When first run Troj/Stinx-U copies itself to lsadst.exe and creates the following registry entries to run this file on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
WindowsDiskEvt
svcsvh32.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
WindowsDiskEvt
svcsvh32.exe
Troj/Stinx-U may drop and run files called .bat in order to bypass the Windows firewall using "netsh" or in order to delete itself.
Troj/Stinx-U attempts to terminate a number of processes related to anti-virus and security programs.
Troj/Stinx-U may download and execute files from a remote website.
Troj/Stinx-Q, Troj/Stinx-R, Troj/Stinx-S and Troj/Stinx-U can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
STINXGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open STINXGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
STINXSFX.EXE is a self-extracting archive containing STINXCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for Dloadr-AKL 1.07
A tool that removes Dloadr-AKL trojan more>> A tool that removes Dloadr-AKL trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/Dloadr-AKL is a downloader Trojan for the Windows platform.
Troj/Dloadr-AKL may attempt to download a file to "C:28348177711.exe" and execute it. The downloaded file is detected as Troj/FireSpy-A.
Troj/Dloadr-AKL also attempts to inject itself into "explorer.exe" to avoid detection.
Troj/Dloadr-AKL can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DLAKLGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open DLAKLGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
DLAKLSFX.EXE is a self-extracting archive containing DLAKLCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for DownLd-AAP 1.07
A tool that removes DownLd-AAP trojan more>> A tool that removes DownLd-AAP trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/DownLd-AAP is a downloading Trojan for the Windows platform.
Troj/DownLd-AAP downloads a file from a preconfigured website and executes it.
Troj/DownLd-AAP also includes functionality to spread via removable drives by copying itself with the filename Setup.pif. The file autorun.inf may be created to run Troj/DownLd-AAP once the removable drive is connected.
When first run Troj/DownLd-AAP copies itself to moviemk.exe and creates the file .txt.
The file moviemk.exe is registered as a new system driver service named "Medie Sariel Number Services", with a display name of "Medie Sariel Number Services" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLMSYSTEMCurrentControlSetServicesMedie Sariel Number Services
Troj/DownLd-AAP can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DLAPPGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open DLAPPGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
DLAPPSFX.EXE is a self-extracting archive containing DLAPPCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for BagleDl-AB 1.07
A tool that removes BagleDl-AB trojan more>> A tool that removes BagleDl-AB trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms.
They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/BagleDl-AB is a Trojan for the Windows platform.
When first run Troj/BagleDl-AB copies itself to hloader_exe.exe and creates the file hleader_dll.dll. Both these files are detected as Troj/BagleDl-AB. Troj/BagleDl-AB is a Trojan for the Windows platform.
When first run Troj/BagleDl-AB copies itself to hloader_exe.exe and creates the file hleader_dll.dll. Both these files are detected as Troj/BagleDl-AB.
Troj/BagleDl-AB attempts to inject the dropped file hleader_dll.dll into the process explorer.exe.
The following registry entries are created to run hloader_exe.exe on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
auto__hloader__key
hloader_exe.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
auto__hloader__key
hloader_exe.exe
Troj/BagleDl-AB attempts to download and execute files from a number of remote websites.
Troj/BagleDl-AB can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
BAGDLGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open BAGDLGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
BAGDLSFX.EXE is a self-extracting archive containing BDLAACLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for BagleDl-AA 1.07
A tool that removes BagleDl-AA trojan more>> A tool that removes BagleDl-AA trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms.
They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/BagleDl-AA is a Trojan for the Windows platform.
Troj/BagleDl-AA attempts to terminate processes and services, delete files and registry entries, and block access to URLs related to anti-virus and security programs. Troj/BagleDl-AA is a Trojan for the Windows platform.
When first run Troj/BagleDl-AA copies itself to antiav_exe.exe and creates the file antiav_dll.dll. Both these files are detected as Troj/BagleDl-AA.
Troj/BagleDl-AA attempts to inject the dropped file antiav_dll.dll into the process explorer.exe.
The following registry entries are created to run antiav_exe.exe on startup:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
auto__antiav__key
antiav_exe.exe
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
auto__antiav__key
antiav_exe.exe
Troj/BagleDl-AA attempts to terminate several processes and services related to anti-virus and security programs, to delete related files, to modify C:boot.ini to delete related files on system startup, to block access to related websites, to delete related registry entries, and to delete registry entries at the following location to stop related files from running on system startup:
HKLMSOFTWAREMicrosoftWindowsCurrentVersion
Run
HKCUSoftwareMicrosoftWindowsCurrentVersion
Run
Troj/BagleDl-AA can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
ENFALGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open ENFALGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
BDLAASFX.EXE is a self-extracting archive containing BDLAACLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Resolve for CoreFloo-D 1.05
A tool that removes CoreFloo-D trojan more>> A tool that removes CoreFloo-D trojan
Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/CoreFloo-D is a backdoor Trojan which allows a remote intruder to access and control the computer from a remote location.
The Trojan arrives as an executable with a random filename consisting of 7 characters A-Z with an EXE extension.
When the installation executable is run on Windows 95, 98 or ME it drops a DLL to the Windows System folder with a filename consisting of 7 random characters A-Z with a DLL extension.
When the installation executable is run on Windows NT, 2000 or XP it drops the DLL as an ADS stream associated with the Windows System folder (typically System32). The new ADS stream will also have a random 7 character name with an extension of DLL.
The installation executable then launches the DLL component which adds its pathname to the following registry entry, so that it is run automatically each time Windows is started:
HKLMSoftwareMicrosoftWindowsCurrentVersionRunOnce
= rundll32 %SYSTEM% .dll,Init 1
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
= rundll32 %SYSTEM% ,Init 1
The DLL component injects itself into the EXPLORER process making it invisible in the Task Manager process list.
The DLL queries a hosts from a list in the Trojan body in order to receive parameters for further processing usinf HTTP POST request and a CGI script on the remote host. The HTTP response contains various parameters for the backdoor built into the DLL such as listening ports and other information.
Troj/CoreFloo-D also has anti-delete functionality which restarts viral processes that have been terminated and resets the above registry entries if they are removed.
Troj/CoreFloo-D can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
CORFDGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
- Open CORFDGUI.com file from your desktop after downloading it.
- Click on the Start Scan Button.
- Wait for the process to complete.
Command line disinfector
CORFDSFX.EXE is a self-extracting archive containing CORFDCLI, a Resolve command line disinfector for use on Windows networks.
