Trend Micro SysClean
<![CDATA[
Trend Micro Sysclean Package
Trend Micro, Inc.
http://www.trendmicro.com/
Date: Tue 3/21/2006
http://www.trendmicro.com/ftp/products/tsc/sysclean.com
Notes:
Sysclean is a damage cleanup service for virus damage.
It is free and only requires downloading recent pattern
files from Trend-Micro. It can be run in safe-mode also.
Brief Usage Description:
Download latest pattern file and unzip in same directory
as sysclean.com. Pattern file naming format: "LPT$VPN.*"
Run sysclean.com.
http://www.trendmicro.com/download/pattern.asp
http://www.trendmicro.com/download/viruspattern.asp
I. Description
This self-extracting archive is a stand-alone fix package that
incorporates the Damage Cleanup Engine and Template. It replaces the
traditional fix tool by addressing a wide variety of system infections
rather than a specific malware infection.
This tool supports the following features:
o Terminate all malware instances in memory
o Remove malware registry entries
o Remove malware entries from system files
o Scan for and delete all malware copies in all local hard drives
II. File List
o sysclean.com - the main executable module
o readme.txt - this file
o lpt$vpn.XXX - downloadable component (see Requirements)
III. Requirements
1. Download the latest pattern file lpt$vpn.XXX in ZIP format as
lptXXX.ZIP from the following location:
<http://www.trendmicro.com/download/pattern.asp>
This file must be saved in the same folder where you run
this fix package.
2. This tool is designed to run under Windows 9x/ME/NT/2000/XP.
For users running Windows NT 4.0, you need to copy the file, PSAPI.DLL,
to the Windows system directory, which is usually C:\WINNT\system32.
You can find the file in the Windows NT 4.0 Setup CD at the
following locations:
\Support\Debug\i386\PSAPI.DLL
IV. Parameters
/NOGUI No GUI (runs the tool in console mode)
/SILENT Run in silent mode (no output display)
<folder> The folder where the tool begins scanning. If
unspecified, this tool scans all local hard drives
/Y Automatically answers yes to all prompts
/? Displays help information
V. How to Use
1. Create a temporary folder and copy SYSCLEAN.COM into this folder.
NOTE: This temporary folder should be created on a local or mapped drive.
2. Download latest pattern file. Extract the downloaded ZIP pattern
file into the created folder.
3. Close all applications running on your system, including any
antivirus software.
4. Run the executable file, SYSCLEAN.COM, by either:
a. Double-clicking the tool in Windows Explorer.
b. Executing it via command prompt using syntax based on the
aforementioned parameters.
4. Enable any antivirus software that is installed on your system and
perform a manual scan.
NOTE: This fix tool generates the log file, SYSCLEAN.LOG, in its
current folder.
VI. History:
Version 1.00 - First release
VII. Compatibility
This tool has been tested under the following platforms:
Windows 95
Windows 98
Windows ME
Windows NT 4.0 Workstation and Server
Windows 2000 Professional and Server
Windows XP Home and Professional
VIII. Known Issues
None
IX. Additional Resources
For more information about a specific malware, visit the Trend Micro
virus advisories Web site at:
<http://www.trendmicro.com/vinfo/>
For additional Windows ME/XP cleaning instruction, visit:
<http://www.trendmicro.com/en/security/advisories/win_me_clean.htm>
To access Trend Micro’s SolutionBank, visit:
<http://kb.trendmicro.com/solutions/>
]]>