McAfee VIRUSSCAN 4.5 Administrator's Manual page 92

Removing Infections From Your System
3. Type this line at the command prompt:
4. Insert a new, formatted floppy disk into your floppy drive.
5. Copy your current system files to that disk. For most DOS versions, those
6. Label the diskette "Contains infected files," then set it aside.
Capturing file-infecting or macro viruses
If you suspect you have a file-infecting virus or a macro virus that has infected
any of your Microsoft Word, Excel, or PowerPoint files, send these files to
McAfee anti-virus researchers, either with the SENDVIR.EXE utility, via
e-mail as floppy disk images, or through the mail on floppy disk:
• If you suspect that a virus has infected executable files on your system,
copy COMMAND.COM to a formatted floppy disk, then change its file
extension to a non-executable extension.
• If you suspected that a macro virus has infected your Microsoft Word files,
copy NORMAL.DOT and all files from the Microsoft Office Startup folder
to the floppy disk. You'll find the Microsoft Office startup files here, if you
installed Office to its default location:
C:\Program Files\Microsoft Office\Office\Startup
• If you suspect that a macro virus has infected your Microsoft Excel files,
copy all files from C:\Program Files\Microsoft Office\Office\XLSTART
to the disk. Include all files you have installed in alternative startup file
locations.
92 McAfee VirusScan Anti-Virus Software
format a: /s
If your system hangs as it tries to format the disk, remove the disk from
your floppy drive. Next, label the disk "Damaged during infected format
as boot disk," then set it aside.
files will include:
• IO.SYS
• MSDOS.SYS
• COMMAND.COM
For Windows systems, copy these files to the same preformatted disk:
• GDI.EXE
• KRNL286.EXE or KRNL386.EXE
• PROGMAN.EXE