Trend Micro System Cleaner

Submit command line tools that you find here.
Post Reply
Message
Author
User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Trend Micro System Cleaner

#1 Post by Hangar0 »

Trend Micro System Cleaner "sysclean"
...
-- SysClean is already outdated (not sure how long it will still be available) :oops:
-- for old hardware tested on winxp/8 32b
-- still works fine with current pattern files :idea:
...
https://www.trendmicro.com/vinfo/sg/sec ... n/SysClean
https://success.trendmicro.com/dcx/s/so ... rigin=null
"You are viewing an archived article because the product(s) tagged is no longer supported or the information mentioned is already outdated."

Trend Micro has a scan and cleanup tool called Sysclean that can be executed through Windows Explorer or through command line. This tool is designed to run under Windows NT/2000/XP/2003/VISTA/7 32-bit.
This tool has the following features:
-- Terminate all malware instances in memory
-- Remove malware registry entries
-- Remove malware entries from system files
-- Scan for and delete all malware copies in all local hard drives

Help ...
...\sysclean /?
Switch Description
/? Display Help Information
/NOGUI Run without a GUI (Run in Console Mode)
/<folder> The folder that the tool will scan. If unspecified, it will scan all local drives
/NC Disable Automatic Clean
/NS Disable Spyware Scan Mode
/FULLSILENT Disable All Console Outputs, Enable Automatic Clean

This tool generates the log file SYSCLEAN.LOG and can be found in folder where the tool is located.

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
https://www.trendmicro.com/ftp/products/tsc/readme.txt
File List:
-- sysclean.com - the main executable module, outdated
-- ssapiptn.da5 - spyware pattern file, updated
-- lpt$vpn.XXX - malware pattern fil, updated

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Create a folder
Download the Sysclean tool and extract it into the folder.
Download latest virus pattern file (Business or Home Users). Extract the downloaded ZIP pattern file into the created folder.
Open a command prompt and navigate to the created folder
Execute the command "sysclean".

Image

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Download executable module sysclean.com 5.3MB
https://www.trendmicro.com/ftp/products ... sclean.com
virustotal 3/71
https://www.virustotal.com/gui/file/0e0 ... ?nocache=1

Download Pattern files...
https://www.trendmicro.com/es_mx/busine ... tern-files
Malware pattern file..
-- Conventional Consumer Pattern cvsapi515.zip ..unzip
Spyware pattern file
-- Spyware Pattern (DA6) sspda6_2631.zip ..unzip.. ssapiptn.da6 ..rename.. ssapiptn.da5

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Execute and don't close the command "sysclean".
... new files will appear in the created folder ... note "vscantm.bin"
... copy all to a new folder ...
... close "sysclean" delete this folder
in the new folder
... delete "sysclean.com"
... now use "sysclean.exe"

Image

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
"sysclean.log"
VSAPI Engine Version : 9.500-1008
VSCANTM Version : 3.00-1018 (Official Build)
VSGetVirusPatternInformation is invoked
Virus Pattern Version : 513 (908260/908260 Patterns) (2023/06/16) (1851350)
Running SSAPI scanner
SSAPI Scanner Version: 1.0.1003
SSAPI Engine Version: 5.2.1032
SSAPI Pattern Version: 3.93
SSAPI Anti-Rootkit Version: <Failed>
Spyware Scan Started

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .

"vscantm.bin." will work renaming this file -TmEngDrv.dll- ..rename to.. "BPMNT.dll"
vscantm.bin [/|-option] Drive:[path[filename|@script]] [Drive:[path[filename]] ..]
vscantm.bin -?
VSAPI Engine Version : 9.500-1008
VSAPI32.DLL Version : 9.500-1008 (9,5,0,0)
VSCANTM Version : 3.00-1018 (Official Build) - 276 Function Imported
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
sscan32.bin [options] [FOLDER/FILE/WILDCARD]
sscan32.bin /?
SSAPI Scanner Version: 1.0.1003
SSAPI Engine Version: 5.2.1032
SSAPI Pattern Version: 26.31
SSAPI Anti-Rootkit Version: <Failed>

Image

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
usual commands.. (very similar..VSCANTM.BIN=VSCANTM.EXE=TVScan32.exe)
..\sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LD /LC /LCF /NM /NB /DCEGENCLEAN /HIDEDCECONSOLE /C /ACTIVEACTION=5 /VSBKENC+ /BK /LR %FileToScan%

..\sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.*

..\VSCANTM.BIN /NBPM /S /CLEANALL /DCEGENCLEAN /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.*

..\VSCANTM.BIN /NM /NB /NC[2] %FileToScan%

..\VSCANTM.BIN /S /SSAPTN /VSSPYWARE+ /c /I /LC="Virus-Scan.log" A:\ C:\ D:\ F:\
..

Command Line: C:\Program Files\Trend Micro\Internet Security\TVScan32.exe -S -SSAPTN -VSSPYWARE+ -c -d2 -I -LC=C:\Users\Laura\Desktop\Virus Scan.log C:\ D:\ E:\

Command Line: C:\Program Files\Trend Micro\Internet Security\TVScan32.exe -S -SSAPTN -VSSPYWARE+ -c -d2 -I -LC=C:\Users\Prof.DiBiasi\Desktop\Virus Scan.log A:\ C:\ D:\ E:\ F:\ G:\

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
eicar test ...
Image

.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
search Detected Items "trendmicro threat-encyclopedia"
https://www.trendmicro.com/vinfo/us/thr ... ertainment
Image

User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Re: Trend Micro System Cleaner

#2 Post by Hangar0 »

New .. Download Pattern files ... :wink:

malware file
Conventional Consumer Pattern 18.719.50 2023-09-25 20:35:02 70.15 MB
https://www.trendmicro.com/ftp/products ... api719.zip ... lpt$vpn.719

spyware file
Spyware Pattern 2.659.00 2023-09-20 06:00:17 6.03 MB
https://www.trendmicro.com/ftp/products ... ptn659.zip ... ssaptn.659

Image

VSCANTM.log ... :idea:
---------*---------*---------*---------*---------*---------*---------*---------*
Copyright (c) 1990 - 2006 Trend Micro Inc.
Report Date : 9/26/2023 19:18:17
VSAPI Engine Version : 9.500-1008
VSCANTM Version : 3.00-1018 (Official Build)

VSGetVirusPatternInformation is invoked

Virus Pattern Version : 719 (910680/978694 Patterns) (2023/09/25) (1871950)

VSGetVirusPatternInformation is invoked

Virus Pattern Version : 659 (68014/978694 Patterns) (2023/09/20) (265900)

Command Line: VSCANTM.BIN /NM /NB /NC[2] /VSSPYWARE+ /SSAPTN /LCF=VSCANTM.log C:\Users\HanHanX\Downloads

Can not Clean [ Eicar_test_file]( 1) from C:\Users\HanHanX\Downloads\eicar_com.zip,(eicar.com)
32 files have been read.
32 files have been checked.
32 files have been scanned.
4008 files have been scanned. (including files in archived)
1 files containing viruses.
Found 1 viruses totally.
Maybe 0 viruses totally.
Stop At: 9/26/2023 19:18:57 38 seconds (38.15 seconds) has elapsed.(1192.031 msec/file)
---------*---------*---------*---------*---------*---------*---------*---------*

User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Re: Trend Micro System Cleaner

#3 Post by Hangar0 »

I'm sorry; the link changes too fast... :shock:
Apparently the links are unusable when new versions come out .. :oops:
The following link is to locate the updated versions of Pattern files .. :mrgreen:
...
malware file . Conventional Consumer Pattern
http://downloadcenter.trendmicro.com/in ... 33&regs=uk
cvsapiXXX.zip ... lpt$vpn.XXX
...
spyware file . Spyware Pattern
http://downloadcenter.trendmicro.com/in ... 31&regs=uk
ssaptnXXX.zip ... ssaptn.XXX
...
the updated versions of Pattern files :idea:
Conventional Consumer Pattern 18.723.50 cvsapi723.zip
Spyware Pattern 2.661.00 ssaptn661.zip
...

User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Re: Trend Micro System Cleaner

#4 Post by Hangar0 »

How to get the new scan-engine :idea:
...
https://www.trendmicro.com/en_us/busine ... an-engines
VSAPI-NT-DLL-21.600-1007.ZIP
Platform: Windows 32-bit
Version: 21.600-1005
Release date: 2022-06-28
https://downloadcenter.trendmicro.com/i ... &regs=nabu
VSAPI-NT-DLL-21.600-1007.ZIP 1.4MB
...
unzip to the folder where "vscantm.bin" is located

...
your folder should have the following files
BPMNT.dll
vsapi32.dll ... scan-engine
vscantm.bin ... scanner command line
lpt$vpn.XXX ... malware Pattern file
ssaptn.XXX ... Spyware Pattern file
...
Display the version information. :wink:
VSCANTM.BIN /VER
Image

User avatar
Midas
Posts: 6697
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: Trend Micro System Cleaner

#5 Post by Midas »

Hangar0 wrote: How to get the new scan-engine :idea:
Nice. 8)

BokTS
Posts: 2
Joined: Thu Dec 07, 2023 4:46 am

Re: Trend Micro System Cleaner

#6 Post by BokTS »

@Hangar0

Where did you get the vsapi32.dll 22.610-1017 (22,6,1,0)

I only found the VSAPI32.DLL version: 21.600-1007 (21.6,0,0)

Can you make them available to me? Thanks

On the page https://www.trendmicro.com/en_us/busine ... an-engines

only the scan engines VSAPI-NT-DLL-21.600-1007.ZIP is available!!!

User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Re: Trend Micro System Cleaner

#7 Post by Hangar0 »

BokTS wrote: Sat Dec 09, 2023 2:19 pm Where did you get the vsapi32.dll 22.610-1017
.........................
:wink:
How to get the new scan-engine from "housecall" :idea:
donwload "housecall"..
https://www.trendmicro.com/es_mx/forHom ... ecall.html
run "HousecallLauncher.exe"
and close..
search in :..
.. C:\Users\ --user-- \AppData\Local\Temp\HouseCall
vsapi32.dll ... scan-engine
Image

User avatar
Hangar0
Posts: 59
Joined: Thu Mar 10, 2016 11:05 am

Re: Trend Micro System Cleaner

#8 Post by Hangar0 »

CLI .. VSCANTM Version : 3.00-1018 (Official Build)

Download pattern files :arrow:
https://www.trendmicro.com/en_gb/busine ... tern-files

1.- :idea: ... Conventional Consumer Pattern .. now is :
Conventional Enterprise OPR Version: 19.145.00 :roll:
Release date: 2024-02-07 20:30:02 (UTC) .. File size: 72.28 MB

2.- Spyware Pattern Version: 2.699.00
Release date: 2024-02-07 06:00:18 (UTC) .. File size: 6.08 MB

Post Reply