ITS @ Vanderbilt. Skip to: Content, Search, Navigation, Site Map.

Note: Either your browser is taking a long time to load this page, or you can not see our css files.. possibly because you do not have a standards-compliant browser. Please download a modern browser and come again, or use the links above to try to navigate the site.

Skip to: Content, Search, Navigation, Site Map.
VU » ITS » Support » Emergency Instructions

 

Emergency Instructions

What to do if your computer is compromised by viruses, trojans or other malware.

Complete ALL of the steps in the instructions below.

- Clean your computer and protect yourself now:

1. Turn on your firewall if you are using XP. (Instructions are here.)

2. Run McAfee's AVERT Stinger utility.

3. Download, install and configure AntiVirus Software (or if you already have it, run it's "update") and do a full scan of your computer.

4. Run Windows Update and install all "critical" updates.

5. After you reboot your machine, be sure to RUN WINDOWS UPDATE AGAIN.
(Repeat this step until there are NO more "critical" updates.)

6. Set Windows to auto-update.

- If you are infected, and have lost your network connection:

RESTORE YOUR OWN NETWORK CONNECTION: A ONE-TIME ONLY self-help process for end users is now available:
http://its.vanderbilt.edu/restorenetwork/

 

Links for experienced users and Local Support Providers

Download patches / tools:
- Windows 2000 (large file), Instructions (pdf)
- Windows XP (large file), Instructions (pdf)

Prevention and Advice:
- Secure Your OS (http://its.vanderbilt.edu/security/safe_desktop.php)
- ITS AntiVirus pages (http://www.vanderbilt.edu/its/antivirus/)
- Windows 2000 Firewall instructions: WinNT2KConfig.pdf
- Windows XP Firewall instructions: WinxpFirewallConfig.pdf
- Set up email filters (http://its.vanderbilt.edu/emergency/email_filters.php)

Virus/Worm/Trojan Removal Tools:
- Symantec's Security Response (http://securityresponse.symantec.com/)
- Network Associates' AVERT Tools (http://vil.nai.com/vil/averttools.asp)
- McAfee AVERT Stinger utility (http://vil.nai.com/vil/stinger/)
- Nessus Scanner: used to scan the network for unpatched Windows computers (http://nessus.org/)