User Guide

User’s Guide 91
Removing Infections From Your System
3. Type this line at the command prompt:
format a: /s
If your system hangs as it tries to format the disk, remove the disk from
yourfloppydrive. Next,labelthe disk“Damaged duringinfectedformat
as boot disk,” then set it aside.
4. Insert a new, formatted floppy disk into your floppy drive.
5. Copyyourcurrentsystemfilestothat disk.FormostDOSversions,those
files will include:
•IO.SYS
•MSDOS.SYS
•COMMAND.COM
For Windows systems, copy these files to the same preformatted disk:
•GDI.EXE
• KRNL286.EXE or KRNL386.EXE
•PROGMAN.EXE
6. Label the diskette “Contains infected files,” then set it aside.
Capturing file-infecting or macro viruses
Ifyou suspectyou have a file-infectingvirusoramacro virus that has infected
any of your Microsoft Word, Excel, or PowerPoint files, send these files to Dr
Solomon’s anti-virus researchers, either with the SENDVIR.EXE utility, via
e-mail as floppy disk images, or through the mail on floppy disk:
• If you suspect that a virus has infected executable files on your system,
copy COMMAND.COM to a formatted floppy disk, then change its file
extension to a non-executable extension.
• Ifyou suspected that amacro virus hasinfected your MicrosoftWordfiles,
copy NORMAL.DOT and all files from the Microsoft Office Startup folder
to thefloppy disk. You’ll find the Microsoft Office startup files here,if you
installed Office to its default location:
C:\Program Files\Microsoft Office\Office\Startup
• If you suspect that a macro virus has infected your Microsoft Excel files,
copy all files from C:\Program Files\Microsoft Office\Office\XLSTART
to the disk. Include all files you have installed in alternative startup file
locations.