TrendMicro SysClean

Trend Micro SysClean (System Cleaner) is a free antivirus program that instantly scans your computer for viruses. Trend Micro SysClean is a portable virus scanner that can be stored on any media devices such as USB flash drive, CD or DVD. You can run a complete virus scan from this device without going through the whole installation process. Another thing that place Trend Micro SysClean as one of the most recommended virus removal tool is its ability to run on Safe Mode of Windows.

You don’t have to be a Trend Micro user to be able to obtain SysClean. It is a stand-alone tool that integrates Trend Micro Anti-Malware and Trend Micro Damage Cleanup Engine.

This tool contains the following functions:

  • Terminates all detected malware instances in system memory
  • Removes malware registry entries
  • Removes malware entries from system files
  • Scans for and deletes all detected malware copies in all local drives

Author: TrendMicro

License: Freeware

Operating System:
Windows 9x/Me/2000/XP/2003/Vista 32-Bit

Download Sysclean Version 4.5:
TrendMicro Sysclean Download

Download Virus Pattern Files:
Download latest Pattern Files (Download the Consumer OPR with file name and when extracted will have the lpt$ file). Where xxx corresponds to version number.

How to Effectively Remove Virus with TrendMicro SysClean

1. Temporarily Disable System Restore.

Note: You must have an Administrator Privilege to be able to disable System Restore. It is advised to enable it after this procedure.

For Windows Vista and Windows 7 Users:

a) On the Desktop, Right Click on My Computer. Select Properties from the drop-down menu. You should be on this location: Control Panel\System and Security\System
b) Select the System Protection on left side bar.
c) Choose Drive C: under ‘Available Drives’ area. Then, click on Configure.
d) Select Turn off system protection and then click OK to apply the settings.
e) The current window will close and you will be back at System Properties window. Click on OK once more to close it.

For Windows 8 Users:

a) Open Power User Tasks Menu by dragging your mouse on the right corner of the scree. Upper right or lower right corner will do.
b) Click or select System. This will open System configuration window.
c) On the left sidebar, click on System Protection. Windows UAC may appear to confirm the access. Please click Yes.
d) Choose Drive C: under ‘Protection Settings’ area. Then, click on Configure.
e) Select Turn off system protection and then click OK to apply the settings.

For Windows ME and Windows XP users, please use the following instructions:

- How to Disable or Enable System Restore on Windows Me
How to Disable or Enable System Restore on Windows XP

2. Download from the link above and save it to a directory on your Desktop. You must create a new Directory for this.

3. Download the latest malware Pattern Files from provided link above and save it to the same location as

4. Extract the contents of and on the same folder.

5.Reboot computer in Safe Mode
a) During BootUp process Press F8 continuously until selection appears
b) Use Arrow Up+Down to select Safe Mode on the selections menu.
c) Press Enter to proceed.

6. If it requires you to login, please use the login name with administrative rights. Without this privilege, Sysclean will not be able to complete the cleaning process.

7. Browse the Sysclean folder on on your Desktop and Double-click Sysclean.exe ( This will extract all essential files to run the scan.


Trend Micro System Cleaner

8. Scanning may take a while. Reboot the computer when scanning is done. Repeat as desired to make sure that all threats are removed.

Change Log:
July 8, 2010: Updated link to Sysclean Version 4.5. Does not require separate SSAPIPTN.DA5 Pattern file.
Sept 24, 2011: Updated links and virus removal procedure.

You might find these helpful:


  1. tomg
    Sep 24, 2007 @ 18:19:36

    Ran this, except everytime I run it, Windows Explorer encounters an error and needs to close.
    I can never complete an entire scan.

  2. redzyker
    Oct 10, 2007 @ 10:45:52

    is this an effective solution for the virus?

  3. webmaster
    Oct 13, 2007 @ 09:54:52

    tomg, have you tried scanning while in safemode?

    redzyker, what kind of virus do you have. This is effective on some and not on some.

  4. Kris
    Oct 27, 2007 @ 01:07:53

    The admidistaration privilages says i dont have them but i am the main accoint i cant change it either what do i do?

  5. thina
    Dec 27, 2007 @ 11:56:34

    i need the key for TrendMicro SysClean

  6. blank
    Dec 28, 2007 @ 13:05:02

    I have used this many times before, it is very good. Always make sure you run in safemode. Boot into safemode by pressing f8 or sometimes f11 on startup this gives you boot options for windows.

  7. dan
    Feb 20, 2008 @ 04:19:54

    will this delete all the files stored and programs installed on my computer?

  8. Amab
    Mar 20, 2008 @ 20:44:49

    it will not delete any program or file on the computer , except those which are infected

  9. Teddy
    Apr 15, 2008 @ 06:31:49

    why he say this file TMCOMM.SYS is missing??
    have any body can help me ..pls~~~~

  10. Leandra
    May 06, 2008 @ 19:44:39

    I am looking for antivirus software for a samsung u700 cell phone. Ant ideas where i can find this

  11. Khairul
    May 23, 2008 @ 00:37:12

    TMCOMM.SYS is missing??

    u click on wrong program..
    click on sysclean MS-Dos application..
    not sysclean with red icon… :)

  12. tim
    Aug 12, 2008 @ 00:22:55

    I can not scan missing file “LPT$VPN.*” anyone know what I’am missing?

  13. webmaster
    Aug 12, 2008 @ 10:23:23

    tim, you missed no.3 and 4

  14. Tim
    Aug 12, 2008 @ 21:15:15

    webmaster – I have both files lpt$vpn.467 and defs.ref downloaded into my doc file.
    Neither will run – both get windows saying they can not open because they can not identify who created the program?
    I used Internet Explorer as the creator and got “memory could not be read” on both.
    Can you help.

  15. Jay Jensen
    Sep 29, 2008 @ 05:09:57

    What if I have Vista?…

  16. Jim
    Oct 20, 2008 @ 20:29:42

    Tim you need all the zipped files, and they need to be put into the same folder… then run the sysclean application.

    By the way… I would do this in safe mode… works alot better!

  17. Jim
    Oct 20, 2008 @ 20:30:27

    I have it and it is running on vista home premium right now!

  18. Sladjana
    Nov 11, 2008 @ 11:06:17

    I can not go in safe mode?!

  19. need antivirus
    Nov 21, 2008 @ 23:52:11

    What is doskey.exe? my scanner scanned this file repeatedly, and never moves to next file!

  20. mohammad
    Nov 24, 2008 @ 16:45:19

    how can i restore sysclean backup files. one of my program source code files moved there but that seems sysclean encrypted the file. how can i decrypt that file to its original location?

  21. peter
    Mar 09, 2009 @ 12:09:43

    I can not go in safe mode! It restarts only in normal mode :(

  22. aaa
    Jun 18, 2010 @ 03:36:27

    when evr i run on safe mode my pc always restart.!..what should i do with this…

  23. Mines
    Nov 04, 2010 @ 08:58:24

    Great and powerfull stuff!

  24. Teresa
    Feb 13, 2012 @ 00:14:07

    I need this for Windows 7. Windows 7 is not listed as an operating system. I know this works great for removing trojans on my Windows XP. I can not find a trend micro trojan remover for Windows 7. I need a link please. Thanks.

    May 14, 2012 @ 22:17:12

    I know Sysclean runs in windows 7 x86 and x64 because I am scanning know. but I was wondering Just be cause its not supported, is it still effective to find viruses or am i just wasting a bunch of time scanning 4 Terabytes of data storage with sysclean.

  26. Pitso
    Feb 09, 2013 @ 16:51:55

    I have reached Step 6 but system doesnt require’s me to login but it leaves me with a black screen written “multi(0)disk(0)rdisk(0)partition(1)\windows\system32\ntoskrnl.exe”

    so how do I go forward now?

Leave a Reply