
****************************************************************************
Trend Micro Sysclean Package
Trend Micro, Inc.
http://www.trendmicro.com
****************************************************************************

Date: Fri  4/09/04
Time:  4:12:48
Time Zone: (GMT -08:00)


I. Description

    This self-extracting archive is a stand-alone fix package that 
    incorporates the Damage Cleanup Engine and Template. It replaces the 
    traditional fix tool by addressing a wide variety of system infections
    rather than a specific malware infection. 
    

    This tool supports the following features:

    o   Terminate all malware instances in memory
    o   Remove malware registry entries
    o   Remove malware entries from system files
    o   Scan for and delete all malware copies in all local hard drives
    


II. File List

    o   sysclean.com - the main executable module
    o   readme.txt   - this file    
    o   lpt$vpn.XXX  - downloadable component (see Requirements) 



III. Requirements

    1.  Download the latest pattern file lpt$vpn.XXX in ZIP format as 
        lptXXX.ZIP from the following location:

        <http://www.trendmicro.com/download/pattern.asp>
	
        This file must be saved in the same folder where you run 
        this fix package.

    2.  This tool is designed to run under Windows 9x/ME/NT/2000/XP.

    For users running Windows NT 4.0, you need to copy the file, PSAPI.DLL,
    to the Windows system directory, which is usually C:\WINNT\system32. 
    You can find the file in the Windows NT 4.0 Setup CD at the
    following locations:

        \Support\Debug\i386\PSAPI.DLL     



IV. Parameters

    /NOGUI      No GUI (runs the tool in console mode)
    /SILENT     Run in silent mode (no output display)
    <folder>    The folder where the tool begins scanning. If 
                unspecified, this tool scans all local hard drives
    /Y          Automatically answers yes to all prompts
    /?          Displays help information



V. How to Use

    1.  Create a temporary folder and copy SYSCLEAN.COM into this folder.	
	
    NOTE: This temporary folder should be created on a local or mapped drive.	

    2.  Download latest pattern file. Extract the downloaded ZIP pattern 
        file into the created folder. 

    3.  Close all applications running on your system, including any
        antivirus software.

    4.  Run the executable file, SYSCLEAN.COM, by either:

        a.  Double-clicking the tool in Windows Explorer.
        b.  Executing it via command prompt using syntax based on the
            aforementioned parameters.

    4.  Enable any antivirus software that is installed on your system and
        perform a manual scan.

    NOTE: This fix tool generates the log file, SYSCLEAN.LOG, in its
    current folder.
    	


VI. History:

    Version 1.00 - First release



VII. Compatibility

    This tool has been tested under the following platforms:

        Windows 95
        Windows 98
        Windows ME
        Windows NT 4.0 Workstation and Server
        Windows 2000 Professional and Server
        Windows XP Home and Professional



VIII. Known Issues

    None



IX. Additional Resources

    For more information about a specific malware, visit the Trend Micro
    virus advisories Web site at:

    <http://www.trendmicro.com/vinfo/>


    For additional Windows ME/XP cleaning instruction, visit:

    <http://www.trendmicro.com/en/security/advisories/win_me_clean.htm>


    To access Trend Micros SolutionBank, visit:

    <http://kb.trendmicro.com/solutions/>