Windows Safe Mode

Before we discuss scanning for viruses, there is one important skill we need: Booting into Safe Mode. This is quite useful because a well written virus will startup when Windows XP starts up, and some actively prevent anti-virus software from functioning. Safe Mode starts up Windows XP without running any applications or services besides those required for Windows XP to function. To start Windows XP in Safe Mode, hold down F8 after you see your computer manufacturer's name, and before you see the Windows XP Logo. The timing is tricky, and this can take a few tries to perfect.

If you are having problems timing the F8 key there is another way.  First open your Start Menu, now go to run, type in "msconfig" into the textbox without the quotes, you will see the screen below.

With this screen open choose diagnostic startup, this does the same thing as a safe boot and only starts up with the required application.

McAfee Virus Scan: the Permanent Solution

The UWICK (UW Internet Connectivity Kit), available to all UW Students either for purchase on CD for $1 or for free download contains a copy of McAfee VirusScan 7.1 for Windows XP and access to updates for as long as you are a UW Student. While most new computers come with some kind of anti-virus program, most only come with a 1-year or shorter subscription allowing you to access updates. Without updating your software to detect the latest viruses, it is mostly useless, so it might be a good idea to replace what is currently on your machine with VirusScan. (This is, of course, up to you.) Be aware, however, that you should only have one anti-virus program on your computer at a time - software suites from competing companies might not work well together.

Once you have obtained the software, run the installer and follow the directions on screen to install VirusScan. When you are finished, it is a good time to do your first check for updates - and the installer will even prompt you to check for updates - do it! Notice that VirusScan is already configured to connect to the UW for updates.

Now that VirusScan is installed, let's spend some time configuring the software. These instructions are specific to McAfee VirusScan, but the same method should be applied to any anti-virus software you have installed.

All of the configuration options can be accessed from the VirusScan Console. To open the VirusScan Console, right click on the VirusScan logo in the system tray (it looks like a shield with a V) and select VirusScan Console. You should see a window similar to the one below:

Quick Reference: System Tray → VirusScan → VirusScan Console

There is a list of actions that VirusScan can perform, such as AutoUpdate and Scan All Fixed Disks. To do either of these manually, select the action and click the green "Play" button in the toolbar. To stop it, click the red "Stop" button.

First, lets configure VirusScan to get updates automatically, so it has the latest virus definitions and will be the most effective. In the VirusScan Console, right-click on AutoUpdate, select Properties, then choose the Schedule button. Make sure the Enable check box is checked, and then choose the Schedule tab. You should see a window similar to the one below:

Quick Reference: AutoUpdate → Properties → Schedule → Schedule

Similar to Windows Update, choose an update scheme that works for you. Regardless of what you choose, make sure your computer will be turned on and connected to the Internet when it checks for updates. Schedule it so it checks for updates at least once a week. Again, you might want to set this time during a time when your away from your computer, as it can take some time.

VirusScan also needs to be configured to scan automatically. Right click on Scan All Fixed Disks, select Properties, choose the Schedule button, and make sure the Enable checkbox is checked. Then, select the Schedule tab. You should see a window similar to the one below.

Quick Reference: Scan All Fixed Discs → Properties → Schedule → Schedule

Choose a time to scan your computer for viruses that works well for you. Make sure you scan all fixed disks at least once a week. If you are choosing a time to do a scan, make sure your computer will be turned on during the time you choose. It's also a good idea to select a time when you aren't doing any heavy computing, since scanning can slow your system down quite a bit.

If at any time your computer crashes during a scan, or encounters a strange error message, reboot into Safe Mode and scan again. Since a failed scan can be a symptom of a virus interfering with a scan, booting into Safe Mode should disable the virus and allow VirusScan to remove it.

Stinger: Emergency Virus Removal

If you are having trouble installing VirusScan or are looking for a quick fix to a virus problem, a second anti-virus program, Stinger, is included in the UWICK. This is a program that scans for around 40 of the most common viruses circulating, which is by no means an exhaustive list. No installation is required, and Stinger is free to download from the UWICK website or from the Network Associates website. Stinger is a great application for a quick fix, or for scanning friends and parents computers, but since it doesn't scan for all viruses, and you cannot schedule scans or updates, it should be used for emergency virus removal only.

Once you have downloaded Stinger, run the application. You should see a window similar to the one below.

Click the "Scan Now" button and you're on your way. If Stinger crashes, or you receive error messages during the scan, reboot into Safe Mode and attempt to scan from there.