Eitex IT Support

Virus Removal

Below are instructions for removing viruses from your computer using the Sophos SAV32 Virus Removal Tool.

The document assumes that you have Sophos installed on a Server based Network. If this is not the case you can download the removal tool from the Software Download section of this site.

Instructions:

• Log onto the suspected infected PC.
• Go to Start and then Run
  
  Enter \\<SERVERNAME>\SAV32CLI in the Open field and click OK.
  
  In the screen that appears right click on the SAV32CLI folder and select Copy from the context menu.
• Go into My Computer, go into the C: drive, select Edit ? Paste in the menu, the SAV32CLI folder will copy across.
• Once the files have finished copying across, reboot the PC.
  
  After the POST screen (the bit at the beginning with the logos but before the Windows Logo – usually signified by a short beep) press the F8 key, you should get a Windows Advanced Options Menu, using the arrow keys highlight the Safe Mode option and press enter. If prompted to select the operating system select the one that starts with Microsoft Windows …
• When you get to the login screen press CTRL + ALT + DELETE and login with the local Administrator user account for this particular PC (not the Domain Administrator account).
• Go to Start and then Run
  
  Enter C:\SAV32CLI\_RUN.BAT in the Open field and click OK.
  
  The virus scanner will now run in a Command Prompt, if any viruses are found it will prompt you; “Proceed with removal of …”, click Y to remove the virus.
  
  Once the scan has finished the Command Prompt will close.
  
  Repeat the above steps again, this time it should not find any viruses.
• Reboot the PC and use as normal.