====================================================================
 		      TROJ_SHOCKWAVE Version 1.0
			 Trend Micro, Inc.
		     http://www.antivirus.com
====================================================================

DESCRIPTION:

This tool is designed to clean a system infected by  TROJ_SHOCKWAVE.A.  This program must be run in the DOS prompt.

The tool will delete the trojan file. the dropped file and restore all files that was moved by the trojan.

The restoration of files are based on the Log File. "Messageforu.txt"


FUNCTIONS:

I. File Deletion
The trojan program executed will be deleted physically.  It will delete the CREATIVE.EXE found in the root directory.

II. StartUp cleaning
This tool will delete the entry in the windows startup folder, which is usually found at C:\WINDOWS\Start Menu\Programs\StartUp

III. Restore moved files
This tool will restore the original filename of the JPG and ZIP files transferred and move it back to the original directory. 

IV. Log file deletion
The log file (c:\messageforu.txt) will be deleted after the files are successfully restored.


Version:
This version supports the WinNT, Win2k & Win9x platform.

USAGE:
In the command prompt, simply type "FIX_SHOCKWAVE.EXE"


For the details of this virus, visit http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_SHOCKWAVE.A