Detecting a Windows Virus
Unless you are seeing specific, recognizable symptoms that can only be a computer virus, always suspect a regular software or hardware issue first. However, here are the steps you should follow if you suspect a machine under your supervision has a Windows virus.
Unplug the PC from the Network
If you suspect a PC is
infected with a computer virus, or any type of malicious mobile code,
the first thing you want to do is unplug the PC from the network
and/or Internet. This will minimize the chances that the PC will be
used to spread the virus beyond its own local drives. Alternatively,
in Windows 2000 you can temporarily disable network connections by
right-clicking My Network Places
, and then choosing
Properties
→
right-click
Local
Area
Connections
→
Disable.
Then you can repeat the process and enable access after the threat is
gone.
Use an Antivirus Scanner
An antivirus scanner is an excellent tool to do a preliminary positive identification of the virus. If the antivirus scanner recognizes the virus, follow its directions, and allow it to clean the file(s) or boot area. Today’s Windows scanners are designed to be installed before a virus hits. They start a preliminary scan during bootup by looking at the core files, but the main program is made to be run after Windows has fully loaded.
Tip
Unlike the search for viruses on a DOS computer, Windows virus scanners can be run without booting with a clean, write-protected diskette, if installed ahead of the infection. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access