housecall.trendmicro

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Anyone knows what does step 4 (recovery) actually do? At step 3, you have the
summary and step 4 where you delete the files and at the same time, it does
the recovery.... Anyone care to explain ////
 
From: "robert" <[email protected]>

| Anyone knows what does step 4 (recovery) actually do? At step 3, you have the
| summary and step 4 where you delete the files and at the same time, it does
| the recovery.... Anyone care to explain ////

Instead of using the online version. Try the following tool instead. it uses the Trend
Micro Sysclean utility and uses the same pattern file (signatures) as the web based scanner
but has no dependency upon using a Browser and it can be used in Safe Mode asd well as in
Normal Mode. Additionally, it provides the Command Line Scanners from; McAfee, Sophos and
Kaspersky. Noen of which need to pre-exist on your system.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
 
robert said:
Anyone knows what does step 4 (recovery) actually do? At step 3, you have the
summary and step 4 where you delete the files and at the same time, it does
the recovery.... Anyone care to explain ////
Click to expand...

Tried the web based house call - seems to load a massive amount of files
onto the PC...before even scanning.
 
From: "leegold" <[email protected]>

|
| Tried the web based house call - seems to load a massive amount of files
| onto the PC...before even scanning.
|

The present pattern file (signatures) is ~12MB that's not including the web based scanning
engine.
 
Use Trendmicro Ipt929.zip and Sysclean.package and the scan gives the following
D:\docs and setting\Isass32.dat
D:\winnt\system32\Isass32.exe
and the virus name associated with the above 2 files is WORM.SDBOT.CNI

the first item was clean up while the 2nd item cannot be clean up. my cpu is
showing at 100% at regular intervals (reckon got the same problem with my
friend)
How can I clean this worm? How do I know if my security has been compromised.?
Hope someone can provide some solution.
 
From: "robert" <[email protected]>

| Use Trendmicro Ipt929.zip and Sysclean.package and the scan gives the following
| D:\docs and setting\Isass32.dat
| D:\winnt\system32\Isass32.exe
| and the virus name associated with the above 2 files is WORM.SDBOT.CNI
|
| the first item was clean up while the 2nd item cannot be clean up. my cpu is
| showing at 100% at regular intervals (reckon got the same problem with my
| friend)
| How can I clean this worm? How do I know if my security has been compromised.?
| Hope someone can provide some solution.


You can use the following Multi AV Command Line Scanner front end utility to scan your
computer

After you execute Multi_AV.exe you'll find a folder called; C:\AV-CLS

In the folder C:\AV-CLS you will find the file; killproc.txt [ C:\AV-CLS\killproc.txt ]

Open it in your text editor (double click on the killproc.txt file) and append to the list
Isass32.exe and then save the file.

It should then have the following contents...

iexplore.exe
firefox.exe
Isass32.exe

Then follow the rest of the below instructions...




Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command Line
Scanners to
remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
 
Back
Top