Resolve: virus disinfection tools

Resolve is the name for a set of small, downloadable Sophos utilities designed to remove and undo the changes made by certain viruses, Trojans and worms. They terminate any virus processes and reset any registry keys that the virus changed. Existing infections can be cleaned up quickly and easily, both on individual workstations and over networks with large numbers of computers.

Resolve tools for numerous virus families are linked to from the table below.

Note: When disinfecting variants not listed below, use the recovery instructions in the appropriate virus analysis.

Resolve tools come in two versions, a Windows disinfector and a command line disinfector. The first few letters of the tool name indicate the family of viruses it disinfects (replaced below by *****).

Windows disinfector

The Windows disinfector, *****GUI is for standalone Windows computers. To use it:

• open the tool
• run it
• then click GO.

To disinfect several computers: download the tool, save it to floppy disk, write-protect the floppy disk and run it from there.

Command line disinfector

The command line tool *****SFX.EXE is a self-extracting archive containing *****CLI, a Resolve command line disinfector for use by system administrators on Windows networks. The self-extracting file includes notes on running the program, and on using it for disinfecting a network.

Resolve tools

Tools (including Resolve tools) and disinfection instructions for some other viruses are linked to from the virus disinfection instructions page.