What to do if a virus is suspected on a computer



Document ID: 97030008

 

Posted Date: 1998-05-01

 

Last Updated: 1998-05-01

 

Distribution: View Public Website

 

Applicable Models
Satellite 100CS
Satellite 110CS
Satellite 110CT
Satellite 200CDS
Satellite 305CDS
Portege 300CT
Portege 610CT
Portege 620CT
Portege 650CT
Portege 660CDT
Tecra 500CDT
Tecra 500CS
Tecra 510CDT
Tecra 520CDT
Tecra 530CDT
Tecra 550CDT
Tecra 700CS
Tecra 700CT
Tecra 710CDT
Tecra 720CDT
Tecra 730CDT
Tecra 730XCDT
Tecra 740CDT
Satellite Pro 400CDT
Satellite Pro 400CS
Satellite Pro 410CDT
Satellite Pro 410CS
Satellite Pro 415CS
Satellite Pro 420CDS
Satellite Pro 420CDT
Satellite Pro 430CDS
Satellite Pro 430CDT
Satellite Pro 440CDT
Satellite Pro 440CDX

 

Issue
What you should do if a virus is suspected
Procedure
QUICK VIRUS CHECK

Windows 95:

Click Start/Shut down/Restart the computer. Hold down the F8 key when you see the "Starting Windows 95..." message. At the menu, choose selection 6, command prompt only. Now run this command.

DOS 6.x & Windows 3.x:

Restart the computer. Hold the F5 key when you see the "Starting MS-DOS..." message. This will bypass the CONFIG.SYS and AUTOEXEC.BAT files. Press ENTER twice to clear the @ signs (if any). At this point the system is waiting at a command prompt (C:\>). Now run this command.

Type the following command:

    chkdsk | find /i "total bytes"

If the line reports anything else than "655,360 total bytes memory" a virus is a possibility.

See the Sample to see what yours should look like. Actual numbers for bytes free and used will vary.

Shareware virus scanners are available on CompuServe from the SYMDOS, SYMWIN, and SYMNEW, for DOS, Win3.X, and Win95 respectively, or you could download the latest McAfee Scanner (GO MCAFEE).

Sources of Anti-Virus software on the internet:

  • McAfee
  • Symantec
  • Other computer virus information may be found from search engines such as Yahoo! by SEARCHing with the keyword VIRUS.

Check all floppies in contact with the computer in question. If a virus is found on the hard disk it is very very likely that every floppy not write protected and inserted into the machine is infected also. These floppies should be scanned and cleaned. One single infected floppy can re-start the viral infection.

Sample CHKDSK report (numbers on your computer will vary )

    Volume MS-DOS_62 created 09/25/1995 2:56

    Volume Serial Number is 0A42-01B3

    261,505,024 bytes total disk space

    10,108,928 bytes in 18 hidden files

    942,080 bytes in 212 directories

    239,472,640 bytes in 4,983 user files

    10,981,376 bytes available on disk

    4,096 bytes in each allocation unit

    63,844 total allocation units on disk

    2,681 available allocation units on disk

    655,360 total bytes memory

    493,456 bytes free

    Instead of using CHKDSK, try using SCANDISK. SCANDISK can reliably detect and fix a     much wider range of disk problems. For more information, type HELP SCANDISK from the     command prompt.

Export Control and EULA
Use of any software made available for download from this system constitutes your acceptance of the Export Control Terms and the terms in the Dynabook end-user license agreement both of which you can view before downloading any such software.