Virus, Spyware, Malware or Trojan removal instructions
These instructions are intended to be simple guidelines for personal use and Gustavus Technology Services can not be held responsible for problems encountered with infected machines.
Please note: Beginning in the 2014-2015 academic year, Gustavus Technology Services will no longer offer Symantec Endpoint Protection for installation on personally-owned computers. Campus network users (Windows) will still be required to have a functional antivirus program installed on their computer. These programs include Norton, Kaspersky, etc. On Windows 8 machines, the standard Windows Defender program is recommended.
Running a scan in "Safe Mode"
- Verify that your virus definitions for Symantec Endpoint Protection are current (less than 7 days old).
- Disable System Restore.
- Reboot in Safe Mode.
- Launch the Symantec Endpoint Protection application and run a full scan.
- Delete any quarantined files.
- Reboot in normal mode.
- Turn System Restore back on.
- Run Windows Update and apply all the critical updates.
- Set your machine to automatically get updates from Microsoft.
- Reboot your machine.
1. Verify that your virus definitions for Symantec Endpoint Protection are current (less than 7 days old).
- Launch the Symantec Endpoint Protection Application and verify the virus definitions are less than 7 days old.
2. Disable System Restore.
- Click Start Menu - Control Panels - System. On the System Restore tab - check the Turn Off System Restore box. Click Apply.
3.Reboot in Safe Mode.
- Turn off the computer.
- Restart the computer. The computer begins processing a set of instructions known as the Basic Input/Output System (BIOS). What is displayed depends on the BIOS manufacturer. Some computers display a progress bar that refers to the word BIOS, while others may not display any indication that this process is happening.
- As soon as the BIOS has finished loading, begin tapping the F8 key on your keyboard. Continue to do so until the Windows Advanced Options menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
- Using the arrow keys on the keyboard, scroll to and select the Safe mode menu item, and then press Enter.
4. Launch the Symantec Endpoint Protection application and run a full scan.
- Launch the Symantec Endpoint Protection application. Click on Scan for threats, then click Run Full Scan.
5. Delete any quarantined files.
- Launch the Symantec Endpoint Protection application. Click View Quarantine, select all the files in quarantine, click delete.
- In the delete window click delete.
6. Reboot in normal mode.
7. Turn System Restore back on.
- Click Start Menu - Control Panels - System. On the System Restore tab - un-check the Turn Off System Restore box. Click Apply.
8. Run Windows Update and apply all the critical updates.
- Launch Internet Explorer and visit http:///www.windowsupdate.com.
- A security warning page may appear.
- Click Yes and follow the prompts. You will then see the Windows Update pages:
- Select the Express Install option.
- The Windows Update server will scan your machine for missing updates. After the scan you will see a screen listing the total updates need.
- Click the Install Button.
- After Express Install has finished (this may take some time, depending on the number of updates), you will be promopted to reboot.
- Click Restart Now. Your machine is now updated with current patches.
9. Set your machine to automatically get updates from Microsoft.
- From the Start Menu select Control Panels - Automatic Updates. Make sure Automatic is selected and pick a time and day for the updates to be installed.
10. Reboot your machine.
Additional Virus Removal Tools
- SUPREantispyware http://www.superantispyware.com/
- Malwarebytes http://www.malwarebytes.org/
- CCleaner http://www.ccleaner.com/
- HijackThis http://free.antivirus.com/hijackthis/
- Combofix http://www.combofix.org/