Helpdesk Home Button
Frequently Asked Questions
Windows
Spyware and Virus Information
Browser specific help
Goodies, Freebies and Self-instruction

Virus Fixes

TSC - Trend Micro System Cleaner – tool for cleaning virus infections.  It is important that you disable your resident virus protection before you run this.  This is NOT antivirus software, it is a standalone tool.  You still need to have some type of antivirus software installed.  If you do not already have one, try the link below for Avast Free Edition – TSC is updated frequently

TSC instructions – Instructions for using TSC.  Print for easy reference.

TSC XP/ME additional info – Additional instructions for using TSC on Windows ME or XP machines

Dial up users – to make it easier for dial up users to get the TSC package, we have split the file into several parts.  Simply download all of the parts into the same location, and when all of the files are downloaded, double-click on the file labeled tsc.sfx.part1.exe

Part 1     Part 2     Part 3     Part 4     Part 5     Part 6     Part 7

Avast Free Edition – Link to a free antivirus package.  Select the language you desire (most folks choose English).  Requires free registration, and the key will be emailed to you.  You can run it for 60 days before registering.

Avast Free Edition instructions – Instructions for downloading and installing the Avast antivirus package.  Print for easy reference.

Avast Virus Cleaner – Small removal tool that works on the dozen or so most common viruses

Avast instructions – Instructions for using the Avast! Virus Cleaner.  Print for easy reference.

List – List of viruses cleaned by the Avast! Virus Cleaner

Panda Software Virus Education Course – A free course that will teach you about viruses and offer some tips to protect yourself

Specific virus removal tools

Symantec Dumaru Removal Tool – from Symantec - 19 Feb 2004

Symantec Gaobot/Agobot Removal Tool – from Symantec – 7 Apr 2004

Symantec kakworm.b Removal Tool – from Symantec – 29 Mar 2004

Zotob virus patches

This worm is spreading by email propagation in addition to spreading by scanning for the plug and play vulnerability announced by Microsoft in early August.  It is VITAL that all systems have the proper patch(es) applied to prevent the activation of this worm.

Microsoft Security Bulletin MS05-039: Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588)

Sasser virus patches

This worm may cause LSASS.EXE to stop responding, which forces the operating system to shut down after 60 seconds.  This is NOT the same as the shutdown caused by REMOTE PROCEDURE CALL (RPC), which is a sign that you have a virus that exploits the RPC vulnerability.  Use the RPC patch below for that issue.

Windows XP Sasser patch (MS04-11) from Microsoft – from Microsoft (patches system, does not remove virus) – updated 5 May 2004

Sasser patch instructions – Instructions for the Sasser virus patch.  Print for easy reference.

 Windows 2000 Sasser patch (MS04-11) from Microsoft – from Microsoft (patches system, does not remove virus) – updated 5 May 2004

 Sasser patch instructions – Instructions for the Sasser virus patch.  Print for easy reference.

 RPC patches

Windows XP RPC patch from Microsoft – from Microsoft (patches system, does not remove virus) – updated 11 Sep 2003

 RPC patch instructions – Instructions for the RPC patch.  Print for easy reference.

 Cryptographic Service Fix - If you are getting a “Cryptographic Services” error when trying to install the Windows XP RPC patch, check out this information then apply the patch.

Windows 2000 RPC patch from Microsoft – from Microsoft 
(patches system, does not remove virus) – updated 11 Sep 2003

RPC patch instructions – Instructions for the RPC patch.  Print for easy reference.

|Helpdesk|

|FAQ|

|Windows|

|Malware|

|Browsers|

|Free|