Skip Navigation
UMass Amherst People Finder

Windows XP Virus Removal Instructions

Operating System: Win XP

The following are directions for removing viruses from your computer and/or closing major security holes in your operating system. Please pay attention to the order in which you perform these steps. Performing steps out of order may cause problems.

If your network connection has been turned off due to virus infection or detected vulnerabilities, please visit or call Software Support (A119 LGRC • 545-9779) when you have finished disinfecting and/or removing vulnerabilities from your computer.

On this page:
Step 1: Download/save all files & Print this document
Step 2: Disconnect Your Computer from the Network
Step 3: Disable System Restore
Step 4: Install Anti-Virus Software
Step 5: Scan for Viruses
Step 6: Update Service Pack
Step 7: Update Windows XP
Step 8: Enable System Restore
Step 9: Reconnect Your Computer to the Network
Step 10: Automatically Update Windows Software

Step 1: Download/save all files & Print this document

Before you can begin fixing your computer, you have to obtain the necessary files (below) and print this document. Your computer will not be connected to the network while you are disinfecting it, so you will not be able to access these files on the Web. To get these files, you can download the files directly from the OIT site:

  1. vscan8x.exe
  2. XPpatch.exe
  3. WindowsXPSP2.exe
  4. AutomaticUpdates.reg (To download this file, right-click the link and click Save Link As... (Firefox) or Save Target As... (MS Internet Explorer) from the drop-down menu.)

You can also get these instructions and software on CD from OIT Software Support by going to A119 LGRC with your UMass ID card. Each CD costs $3 and includes additional malware removal software and Windows updates not available directly from the OIT site. You can also download a free ISO image of the OIT Anti-virus CD from the OIT site and burn it on your computer:

An ISO Image is similar to a zip file in that it groups several files into a single download that is easier to manage. When you burn this image to CD, it produces a full copy of the OIT Anti-virus CD from which you can install the software and updates you need to disinfect your computer. See Burn a CD in OIT Computer Classrooms for more information.

Remember to print or save this document!

[Back to Top]

Step 2: Disconnect Your Computer from the Network

Your computer should not be physically connected to a network (e.g., cable modem, DSL, UMass Ethernet). Unplug your network cable from the Ethernet or phone jack and do not reconnect it until you have finished this process.

[Back to Top]

Step 3: Disable System Restore

  1. Right-click My Computer .
  2. From the drop-down menu, choose Properties . The System Properties window will open.
  3. On the System Properties window, click the System Restore tab.
  4. On the System Properties window, select Turn off System Restore .
  5. Click OK .
[Back to Top]

Step 4: Install Anti-Virus Software

Remove All Previously Installed Anti-Virus Software

To effectively remove viruses, make sure you do not have other anti-virus applications (or previous versions of VirusScan) installed on your computer. See Running More than One Anti-virus Application? page for more information.

Install VirusScan 8

The anti-virus software provided by OIT comes with the latest virus updates and definitions.

  1. Open VirusScan 8.x (vscan8x.exe).
  2. Install the software using the Installation Wizard.
  3. Re-start your computer.
[Back to Top]

Step 5: Scan for Viruses

Start Your Computer in Safe Mode

  1. Re-start your computer.
  2. While the computer is starting, press F8 repeatedly.
  3. On the Windows startup menu, select Safe Mode , and then press Enter .

Scan for Viruses

  1. Go to Programs > Network Associates > VirusScan Console .
  2. On the VirusScan Console window, select Scan All Fixed Disks .
  3. On the VirusScan On-Demand Scan properties screen, select Scan Now . This will take some time, but it is important that you make sure the viruses have been removed.
  4. Take note of the names of any viruses found during your scan . You will need to report this to Software Support when you call later to have your Internet access re-enabled.
[Back to Top]

Step 6: Update Service Pack

Do you already have the Service Pack?

  1. Go to Start > Run...
  2. In the Run... dialog box, type winver and press OK .
  3. In the About Windows window, look for the phrase "Service Pack 3". If this phrase does not appear (or you see a lower service pack number), proceed with the service pack installation process (see below). If the phrase "Service Pack 3" does appear, please do not install it again.

Update Windows XP Service Pack

This update ("SP3") includes significant improvements to the security of the operating system and network software such as Internet Explorer and Outlook Express. You can download this file from the Microsoft Download Center or you can get it automatically through Windows Update (windowsupdate.microsoft.com).

  1. If you chose to download the file, open the Windows XP Service Pack file (WindowsXP-KB936929-SP3-x86-ENU.exe) from where you saved it.
  2. Follow the steps in the installation wizard to complete the update.
  3. When the update, is complete, you will be asked to restart your computer, once your system reboots, Windows XP will be updated.

For more information about Windows XP Service Pack 3, see the Microsoft Help and Support Web site.

Step 7: Update Windows XP

  1. Download and install the latest critical update from Microsoft, below. It is likely that it will resolve any problems you are having and restore you access to the network. You can download the update directly from the OIT site:
  2. Once the download is complete, double-click the files to install the update. Once the installation is complete, restart your computer.
  3. Once your computer has restarted, try to connect to the campus network again. If the issues with your computer have been resolved, you should be able to access the campus network.
[Back to Top]

Step 8: Enable System Restore

  1. Right-click on My Computer .
  2. From the drop-down menu, choose Properties .
  3. Click the System Restore tab.
  4. De-select Turn off System Restore .
  5. Click OK .

Step 9: Reconnect Your Computer to the Network

Step 10: Automatically Update Windows Software

Install Registry Settings

  1. Download OIT Registry settings <AutomaticUpdates.reg>.
  2. When the download is complete, click Open .
  3. A dialog box will open asking you if you want to add this file to your registry, click Yes.
  4. You will be prompted when the file has been successfully added to the registry.

If your network connection has been turned off for virus infection, please visit or call Software Support (A119 LGRC • 545-9779) when you have finished disinfecting your computer.

Need Help?

If you encounter problems, submit an online Help Request.
- or -
Contact the OIT Help Desk at 545-9400.

Last revised September 05, 2006