Sophos

Troj/RKProc-Fam and Troj/Stinx disinfection instructions

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

This version of the tool detects and disables the Sony DRM cloaking copy protection technology (which Sophos refers to as Troj/RKProc-Fam) It also detects and disables other Trojans, including the Troj/Stinx variants Troj/Stinx-E and Troj/Stinx-F, which are stealthed by Troj/RKProc-Fam.

Windows 95/98/Me and Windows NT/2000/XP/2003

The Trojans can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

Windows disinfector

RKPRFGUI is a disinfector for standalone Windows computers

If you are disinfecting several computers; download it, save it to floppy disk, write-protect the floppy disk and run it from there.

Command line disinfector

RKPRFSFX.EXE is a self-extracting archive containing RKPRFCLI, a Resolve command line disinfector for use by system administrators on Windows networks. Read the notes enclosed in the self-extractor for details on running this program.

Other platforms

To remove Troj/RKProc-Fam and the above Troj/Stinx variants on other platforms please follow the instructions for removing Trojans.