Resolve for Dloader

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

Troj/Dloader-ML is a downloading Trojan for the Windows platform.

Once executed Troj/Dloader-ML copies itself to the Windows system folder with a random filename and runs the copy.

Troj/Dloader-ML injects code into new hidden instances of explorer.exe, winlogon.exe and packager.exe.

These processes prevent each other from being terminated.

Troj/Dloader can be removed from Windows computers automatically with the following Resolve tools:

DLOADGUI is a disinfector for standalone Windows computers. To use it you have to do the following: ￭ Open DLOADGUI.com file from your desktop after downloading it. ￭ Click on the Start Scan Button. ￭ Wait for the process to complete.

DLOADSFX.EXE is a self-extracting archive containing DLOADCLI, a Resolve command line disinfector for use by system administrators on Windows networks.