McAfee AVDCDE-AA-AA User Guide - Page 80

Removing Infections From Your System 3. Type this line at the command prompt: format a: /s If your system hangs as it tries to format the disk, remove the disk from your floppy drive. Next, label the disk "Damaged during infected format as boot disk," then set it aside. 4. Insert a new, formatted floppy disk into your floppy drive. 5. Copy your current system files to that disk. For most DOS versions, those files will include: • IO.SYS • MSDOS.SYS • COMMAND.COM For Windows systems, copy these files to the same preformatted disk: • GDI.EXE • KRNL286.EXE or KRNL386.EXE • PROGMAN.EXE 6. Label the diskette "Contains infected files," then set it aside. Capturing file-infecting or macro viruses If you suspect you have a file-infecting virus or a macro virus that has infected any of your Microsoft Word, Excel, or PowerPoint files, send these files to McAfee anti-virus researchers, either with the SENDVIR.EXE utility, via e-mail as floppy disk images, or through the mail on floppy disk: • If you suspect that a virus has infected executable files on your system, copy COMMAND.COM to a formatted floppy disk, then change its file extension to a non-executable extension. • If you suspected that a macro virus has infected your Microsoft Word files, copy NORMAL.DOT and all files from the Microsoft Office Startup folder to the floppy disk. You'll find the Microsoft Office startup files here, if you installed Office to its default location: C:\Program Files\Microsoft Office\Office\Startup • If you suspect that a macro virus has infected your Microsoft Excel files, copy all files from C:\Program Files\Microsoft Office\Office\XLSTART to the disk. Include all files you have installed in alternative startup file locations. 80 McAfee VirusScan Anti-Virus Software