NETA Logo
ProductsServicesDownloadsAbout NAI
ContactSite MapVarBuySearch
 

System Utility Program
Version 1.0

Disclosure

This program has not been approved by Quality Assurance and could cause false alarms as well as crashes on your machine(s). It has  been designed to help you address various issues and should be used as recommended by your McAfee representative. Please take the time to read our Non-Disclosure Agreement before downloading it.

Overview

The System Utility Program is designed to clean system files, which may have been corrupted after infection by a word Macro Virus (See the end of this document for complete list of Macro Viruses this program has knowledge of.). Currently these system files are:

  • Autoexec.bat
  • Win.ini
  • WinWord6.ini
  • Window’s System Registry
  • Control.ini
  • Systems.ini

Pre - requisites for running Program

You have already used the most current version of VirusScan to clean word macro infections, and noted the exact name(s) of the viruses, which have infected your system.

Installation Instructions

Download SYSU.ZIP from the McAfee web site, unzip in temporary directory and start setup.exe. Follow the instructions on your screen to install the program.

Operating Instructions

Overview

This utility has two screens. The main screen provides you with a list of Viruses, which the program has the capability of dealing with. The second screen, the cleaning screen, provides you with the option to initiate the clean procedure, or return to the main screen. Before completion of the clean process you are also given  the option to save your old Autoexec.bat if it has been changed by the program.

To remove the effect of a virus from system files

To remove the alterations introduced by a particular virus do the following:

  • From the main screen, make a selection by clicking on the appropriate Virus in the list. The selected Virus will be highlighted in the list.
  • Click on the CLEAN button. The cleaning screen will be displayed.
  • Click on the CLEAN button to initiate the clean routine.
    •

The program will display messages indicating the changes that are being applied to every files. If your Autoexec.bat file has been edited, it will be automatically displayed at the end of the cleaning. If you need to clean the effects of more than one virus, you must repeat the above procedure for every one of them.

The Autoexec.bat File

Some viruses might edit your Autoexec.bat file. To review your current Autoexec.bat file follow this procedure:

  • From the main screen, click on the appropriate virus from the given list.
  • Click on the CLEAN button. The cleaning screen will be displayed
  • Click on the DISPLAY button. Your Autoexec.bat file will be displayed.
    •

Canceling updates to the Autoexec.bat file

You still have the option to cancel the clean routine, and recover the original version of your Autoexec.bat only, by doing the following:

  • At the Cleaning screen, click on the cancel button.

 

Any other system file changes are not reversed.

Once the clean routine has been completed. Return to the main screen by clicking on the BACK button.

To exit the program
  • At the main screen, click on the EXIT button.

 

Error messages

  • If the program is unable to open any system file for editing, an error message will be issued.
  • If the clean routine for a specific virus cannot be executed, a message will be issued.
  • If the relevant key in the Windows system Registry, cannot be accessed a message will be issued.

 

List of Viruses addressed by the program

  • APPDER.A
  • BEEPER.B
  • CONCEPT.F
  • CONCEPT.G
  • CONCEPT.Z
  • COLORS
  • COLORS.A
  • COLORS.F/P
  • DARK.E
  • DUB.A
  • ERASER.C:TW
  • FUTURENOT.A
  • IRISH
  • MDMA
  • MDMA.F
  • MDMA.U
  • MDMA.C/D
  • MONDAY.A:TW
  • MACARONI.A:DE
  • NOMVIR.A:DE
  • NPAD
  • SMILEY.A:DE
  • SMILEY.B:DE
  • SCHUMANN.A
  • SCHUMANN.B
  • SAM.A:TW
  • SWITCHES.A
  • SURABAYA.A
  • TWNO.B:TW
  • TWNO.C:TW
  • TWNO.D:TW
  • TELE.A:DE
  • VENENO.A:SP
  • VICINITY.A:DE
  • VARMINT.A:TW
  • WIEDEROE
  • WALLPAPER.A
  • XENIXOS.A:DE
  • XENIXOS.B:DE
  • ZOOLOG.A

 

 

Contact

For any further questions please contact Sunita Mathur at smathur@CCMcafee.com

 

 

© 1998, Network Associates, Inc. and its affiliated Companies. All Rights Reserved.