RBot Worm removal

  • Thread starter Thread starter David K
  • Start date Start date
From: "David K" <[email protected]>


| As I said Box with error message:
|
| " Trend pattern was file was not found . Computer shutting down to allow
| Sysclean.fe to
| obtain the pattern file".
| Computer then re boots back to Windows.
| David.
|

David:

I don't know what that message is. I wrote the process and that error is not part of my
coding.
The part "Sysclean.fe to obtain the pattern file". Is nonsense. Sysclean_FE.EXE is a slef
extracting ZIP file that extracts files to c:\sysclean and as I have noted, it is hard coded
to c:\sysclean. Syclean_FE.bat runs a Kix Script which uses WGET to "http get" the utility
SYSCLEAN.COM and and the latest Pattern File.

I am not there looking over your shoulder. I need you to tell me what's going on. When I
asked you to use the McAafee CLS process Front End you didn't follow the directions and you
had problems. From what you have posted I must infer that you are NOT following the
directions here too with the Sysclean Front End and thus you are having problems.

Please download the LATEST version of Sysclean_FE.EXE and please follow the below
instructions.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

2) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

4) Reboot your PC into Safe Mode and shutdown as many applications as possible.

5) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.

6) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.

7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),

8) Reboot your PC.

9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *
 
Thanks for all of your suggestions. I think that I will take an easier
approach by formatting that drive and loading my most recent backup.
David
David H. Lipman said:
From: "David K" <[email protected]>


| As I said Box with error message:
|
| " Trend pattern was file was not found . Computer shutting down to
allow
| Sysclean.fe to
| obtain the pattern file".
| Computer then re boots back to Windows.
| David.
|

David:

I don't know what that message is. I wrote the process and that error is
not part of my
coding.
The part "Sysclean.fe to obtain the pattern file". Is nonsense.
Sysclean_FE.EXE is a slef
extracting ZIP file that extracts files to c:\sysclean and as I have
noted, it is hard coded
to c:\sysclean. Syclean_FE.bat runs a Kix Script which uses WGET to "http
get" the utility
SYSCLEAN.COM and and the latest Pattern File.

I am not there looking over your shoulder. I need you to tell me what's
going on. When I
asked you to use the McAafee CLS process Front End you didn't follow the
directions and you
had problems. From what you have posted I must infer that you are NOT
following the
directions here too with the Sysclean Front End and thus you are having
problems.

Please download the LATEST version of Sysclean_FE.EXE and please follow
the below
instructions.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend
Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe

2) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

4) Reboot your PC into Safe Mode and shutdown as many applications as
possible.

5) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.

6) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.

7) If you are using WinME or WinXP,Re-enable System Restore and
re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~
600MB),

8) Reboot your PC.

9) If you are using WinME or WinXP, create a new Restore point

* * * Please report back your results * * *
 
From: "David K" <[email protected]>

| Thanks for all of your suggestions. I think that I will take an easier
| approach by formatting that drive and loading my most recent backup.
| David

That's your decision. Either way -- Good Luck !
 
Back
Top