Using Trend Micro's SysClean Virus Scanner (USB disk option)

Trend Micro's SysClean utility is a command-line tool that can be used to scan a Windows computer for viruses and malware.  It is self-contained, so it does not need to be installed like a normal program.  It can be used on a USB disk, for quick scanning of multiple computers.  We recommend downloading SysClean using a non-infected computer, so your USB disk is not potentially infected also.

NOTE: SysClean does NOT work on 64-bit versions of Windows.

More information is available from Trend Micro's websiteThis link will open in a new window.  A readme.txtThis link will open in a new window file about SysClean is also available.  Information about command-line switches is also availableThis link will open in a new window.

Because of the complexity of obtaining and using SysClean, we have divided this document into two parts:

 


Obtaining SysClean files

  1. Open your web browser.
  2. Download SysClean from Trend Micro:
    http://www.trendmicro.com/ftp/products/tsc/sysclean.com
  3. Download the latest virus definition pattern from the following page:
    http://www.trendmicro.com/download/viruspattern.asp
    This link will open in a new window
    Locate the entry for Windows (will be a ZIP file).  The filename will be in the form of lptXXX.zip, where XXX is a number.
  4. Download the latest spyware definition pattern from the following page:
    http://www.trendmicro.com/download/spywarepattern.asp
    This link will open in a new window
    Locate the Dectection and Cleanup (Trend Micro Anti-Spyware) pattern, located about half-way down the page (will be a ZIP file).  The filename will be in the form of sspiptnXXX.zip, where XXX is a number.
  5. Take all three files you just downloaded and place them together in one location, such as on your USB disk, or a folder on your Desktop.
  6. Extract the contents of the virus and spyware pattern ZIP files.  Make sure the files extract into the same folder where the SysClean file is stored.  You may have to move them to the proper location.

 


Using SysClean

  1. Make sure you have carefully followed the instructions in the previous section, Obtaining SysClean files.
  2. If you are planning to run SysClean on a virus-infected PC, reboot the computer into Windows Safe Mode.
  3. Open the location where you stored SysClean and the virus/spyware pattern files.
  4. Double-click on the sysclean.com icon to launch SysClean.
    sysclean.com icon
  5. You will receive a Security Warning from Microsoft stating that the publisher cannot be verified.  Click Run.
  6. The Trend Micro System Cleaner window will appear.  Press the Scan button to begin the scan process.
    Trend Micro SysClean window
  7. SysClean will open a series of windows, showing its progress as it thoroughly scans your computer.  You should not use your computer while SysClean is running.
    SysClean scanning for viruses/malware
  8. If SysClean locates any virus-infected files, and is unable to clean them, it will place them in a temporary "quarantine" Backup folder in the same location where you launched SysClean.  The infected files will be stored in encrypted format.  For more information about how to recover a a quarantined file, see our page on How to work with files quarantined by OfficeScan.
  9. When the scan is complete, close SysClean.
  10. If you are in Safe Mode, reboot your computer into normal mode.

 


If you have problems while performing these steps, contact the NC State Help Desk for assistance.

 

Tags: