Trend Micro House call

[Trevor Appleton]

Trend seem to have changed the system. I used to scan a PC and remove any
virus/spyware with this tool.

It's now asking me to get a ticket, but won't let me get one - just come up
with a retry or abort button. How do I get this ticket?

 

[David H. Lipman]

From: "Trevor Appleton" <[email protected]>

| Trend seem to have changed the system. I used to scan a PC and remove any
| virus/spyware with this tool.
|
| It's now asking me to get a ticket, but won't let me get one - just come up
| with a retry or abort button. How do I get this ticket?
|

Online scanners are good, up t a point. Their dependence upon a web Browser limits their
functionality and removal capability.

Local software is a better way to go. For one, there is no Browser dependence and for
another. Another reason is that the utilities can be executed in Safe Mode which have a
better removal efficacy.

I suggest the following three tools for adware/spyware...

SpyBot Search & Destroy v1,4 -- http://www.safer-networking.org

Ad-aware SE v1.06 -- http://www.lavasoftusa.com

BHODemon -- http://www.definitivesolutions.com/bhodemon.htm

For anti virus Trend Micro has the Trend Sysclean utility. The following Multi AV scanning
tool includes the Trend Sysclean utility butr also adds command line scanners from McAfee
and Sophos.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus Command Line Scanners to
remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode. This
way all the components can be downloaded from each AV vendor’s web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *

 

[Trevor Appleton]

From: "Trevor Appleton" <[email protected]>

| Trend seem to have changed the system. I used to scan a PC and remove
any
| virus/spyware with this tool.
|
| It's now asking me to get a ticket, but won't let me get one - just come
up
| with a retry or abort button. How do I get this ticket?
|

Online scanners are good, up t a point. Their dependence upon a web
Browser limits their
functionality and removal capability.

Local software is a better way to go. For one, there is no Browser
dependence and for
another. Another reason is that the utilities can be executed in Safe
Mode which have a
better removal efficacy.

I suggest the following three tools for adware/spyware...

SpyBot Search & Destroy v1,4 -- http://www.safer-networking.org

Ad-aware SE v1.06 -- http://www.lavasoftusa.com

BHODemon -- http://www.definitivesolutions.com/bhodemon.htm

For anti virus Trend Micro has the Trend Sysclean utility. The following
Multi AV scanning
tool includes the Trend Sysclean utility butr also adds command line
scanners from McAfee
and Sophos.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script
Interpreter {
http://kixtart.org Kixtart is CareWare } three batch files, five Kixtart
scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and
WGET.EXE. It will
simplify the process of using; Sophos, Trend and McAfee Anti Virus
Command Line Scanners to
remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode. This
way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Exit the menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files
or you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into
Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want
to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to
go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *

Yes I'd noticed your earlier posting of this:

http://www.ik-cs.com/programs/virtools/Multi_AV.exe

but it won't work on the PC that has the trojan. None of the differnet tools
will work.

It says 'bad file description' on Trend and error zero on another.

 

[Trevor Appleton]

I checked Windows FW it was switched off, so switched it on. Didn't think I
had Zonealarm runnning on this PC after upgrading to XP, but launched
Zonealarm then closed it, then tried again, and the pattern files etc
downloaded, so will give them a run, many thanks for your help.

 

[David H. Lipman]

From: "Trevor Appleton" <[email protected]>

| I checked Windows FW it was switched off, so switched it on. Didn't think I
| had Zonealarm runnning on this PC after upgrading to XP, but launched
| Zonealarm then closed it, then tried again, and the pattern files etc
| downloaded, so will give them a run, many thanks for your help.
|

If you have probelms, I want to hear what they are so I can improve the utility as needed.