Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.
Troj/DownLd-AAP is a downloading Trojan for the Windows platform.
Troj/DownLd-AAP downloads a file from a preconfigured website and executes it.
Troj/DownLd-AAP also includes functionality to spread via removable drives by copying itself with the filename Setup.pif. The file autorun.inf may be created to run Troj/DownLd-AAP once the removable drive is connected.
When first run Troj/DownLd-AAP copies itself to moviemk.exe and creates the file .txt.
The file moviemk.exe is registered as a new system driver service named "Medie Sariel Number Services", with a display name of "Medie Sariel Number Services" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLMSYSTEMCurrentControlSetServicesMedie Sariel Number Services
Troj/DownLd-AAP can be removed from Windows computers automatically with the following Resolve tools:
Windows disinfector
DLAPPGUI is a disinfector for standalone Windows computers. To use it you have to do the following:
· Open DLAPPGUI.com file from your desktop after downloading it.
· Click on the Start Scan Button.
· Wait for the process to complete.
Command line disinfector
DLAPPSFX.EXE is a self-extracting archive containing DLAPPCLI, a Resolve command line disinfector for use by system administrators on Windows networks.
Find us on Google+
