...
-- SysClean is already outdated (not sure how long it will still be available)
-- for old hardware tested on winxp/8 32b
-- still works fine with current pattern files
...
https://www.trendmicro.com/vinfo/sg/sec ... n/SysClean
https://success.trendmicro.com/dcx/s/so ... rigin=null
"You are viewing an archived article because the product(s) tagged is no longer supported or the information mentioned is already outdated."
Trend Micro has a scan and cleanup tool called Sysclean that can be executed through Windows Explorer or through command line. This tool is designed to run under Windows NT/2000/XP/2003/VISTA/7 32-bit.
This tool has the following features:
-- Terminate all malware instances in memory
-- Remove malware registry entries
-- Remove malware entries from system files
-- Scan for and delete all malware copies in all local hard drives
Help ...
...\sysclean /?
Switch Description
/? Display Help Information
/NOGUI Run without a GUI (Run in Console Mode)
/<folder> The folder that the tool will scan. If unspecified, it will scan all local drives
/NC Disable Automatic Clean
/NS Disable Spyware Scan Mode
/FULLSILENT Disable All Console Outputs, Enable Automatic Clean
This tool generates the log file SYSCLEAN.LOG and can be found in folder where the tool is located.
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
https://www.trendmicro.com/ftp/products/tsc/readme.txt
File List:
-- sysclean.com - the main executable module, outdated
-- ssapiptn.da5 - spyware pattern file, updated
-- lpt$vpn.XXX - malware pattern fil, updated
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Create a folder
Download the Sysclean tool and extract it into the folder.
Download latest virus pattern file (Business or Home Users). Extract the downloaded ZIP pattern file into the created folder.
Open a command prompt and navigate to the created folder
Execute the command "sysclean".
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Download executable module sysclean.com 5.3MB
https://www.trendmicro.com/ftp/products ... sclean.com
virustotal 3/71
https://www.virustotal.com/gui/file/0e0 ... ?nocache=1
Download Pattern files...
https://www.trendmicro.com/es_mx/busine ... tern-files
Malware pattern file..
-- Conventional Consumer Pattern cvsapi515.zip ..unzip
Spyware pattern file
-- Spyware Pattern (DA6) sspda6_2631.zip ..unzip.. ssapiptn.da6 ..rename.. ssapiptn.da5
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
Execute and don't close the command "sysclean".
... new files will appear in the created folder ... note "vscantm.bin"
... copy all to a new folder ...
... close "sysclean" delete this folder
in the new folder
... delete "sysclean.com"
... now use "sysclean.exe"
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
"sysclean.log"
VSAPI Engine Version : 9.500-1008
VSCANTM Version : 3.00-1018 (Official Build)
VSGetVirusPatternInformation is invoked
Virus Pattern Version : 513 (908260/908260 Patterns) (2023/06/16) (1851350)
Running SSAPI scanner
SSAPI Scanner Version: 1.0.1003
SSAPI Engine Version: 5.2.1032
SSAPI Pattern Version: 3.93
SSAPI Anti-Rootkit Version: <Failed>
Spyware Scan Started
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
"vscantm.bin." will work renaming this file -TmEngDrv.dll- ..rename to.. "BPMNT.dll"
vscantm.bin [/|-option] Drive:[path[filename|@script]] [Drive:[path[filename]] ..]
vscantm.bin -?
VSAPI Engine Version : 9.500-1008
VSAPI32.DLL Version : 9.500-1008 (9,5,0,0)
VSCANTM Version : 3.00-1018 (Official Build) - 276 Function Imported
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
sscan32.bin [options] [FOLDER/FILE/WILDCARD]
sscan32.bin /?
SSAPI Scanner Version: 1.0.1003
SSAPI Engine Version: 5.2.1032
SSAPI Pattern Version: 26.31
SSAPI Anti-Rootkit Version: <Failed>
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
usual commands.. (very similar..VSCANTM.BIN=VSCANTM.EXE=TVScan32.exe)
..\sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LD /LC /LCF /NM /NB /DCEGENCLEAN /HIDEDCECONSOLE /C /ACTIVEACTION=5 /VSBKENC+ /BK /LR %FileToScan%
..\sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.*
..\VSCANTM.BIN /NBPM /S /CLEANALL /DCEGENCLEAN /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.*
..\VSCANTM.BIN /NM /NB /NC[2] %FileToScan%
..\VSCANTM.BIN /S /SSAPTN /VSSPYWARE+ /c /I /LC="Virus-Scan.log" A:\ C:\ D:\ F:\
..
Command Line: C:\Program Files\Trend Micro\Internet Security\TVScan32.exe -S -SSAPTN -VSSPYWARE+ -c -d2 -I -LC=C:\Users\Laura\Desktop\Virus Scan.log C:\ D:\ E:\
Command Line: C:\Program Files\Trend Micro\Internet Security\TVScan32.exe -S -SSAPTN -VSSPYWARE+ -c -d2 -I -LC=C:\Users\Prof.DiBiasi\Desktop\Virus Scan.log A:\ C:\ D:\ E:\ F:\ G:\
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
eicar test ...
.. . .. . .. . .. . .. . .. . .. . .. . .. . .. .
search Detected Items "trendmicro threat-encyclopedia"
https://www.trendmicro.com/vinfo/us/thr ... ertainment
