Warning, PcCare must have been installed prior to the malware infection in order for this procedure to be successfull.

Boot the infected workstation from it's operating system cdrom and open a command line window Boot from cdrom. The XP command prompt does not permit sufficient functionality required to run pccare, for xp us a Vista cdrom or create a custom PE environment Boot from cdrom.

Note, c: represents system drive of workstation when booted normally, when booted from cdrom the system drive is x:, and is not the correct location for pccare to run sysinternals utilities on. If run from x: drive, the utilites will report file information from your cdrom drive instead of you system drive.

Set currrent directory to pccare: cd c:\Program Files\TechnoChill Incorporated\PcCare or cd c:\Program Files (x86)\TechnoChill Incorporated\PcCare on 64 bit workstations.

Set log directory to Pccares: set temp=xxx:\windows\temp