Saint Mary's College recommends using Malwarebytes' Anti-Malware, a free malware removal program for Windows, for removing a majority of the infections seen on computers at Saint Mary's College.

Individuals are encouraged to try the instructions below to remove malware on their own.

Some malware cannot be removed easily. Computers that are infected and cannot access the Internet, cannot launch programs (especially malware removal programs such as Malwarebytes' Anti-Malware and McAfee VirusScan), or will not allow you to delete infected files may require professional assistance. The ResNet Office is available to assist students with personally-owned computers infected with such malware.

Students are welcome to bring their computers to the ResNet Office. The ResNet Office provides technical support, including malware removal, free of charge to all Saint Mary's students. Students must be present in the ResNet Office while the staff works on their computers. The hours for the ResNet Office are available on the ResNet website (http://www.saintmarys.edu/resnet).

Faculty and staff may contact the Helpdesk for assistance with their College-owned computers. The Helpdesk and ResNet Office are unable to provide assistance for faculty and staff personally-owned computers.

Please note that you are welcome to follow these steps to clean your infected computer while you are connected to the network. However, if your computer's network access has been blocked because the infection was attempting to spread, your computer will not be re-enabled until an RCC verifies that it is clean.

• Follow the ResNet FAQ instructions for Malwarebytes' Anti-Malware (http://www.saintmarys.edu/resnet/resnetfaq/antimalware.html). Make sure to complete every section.

• If you are unable to access the Internet from your computer, you can use another computer to obtain the Malwarebytes' Anti-Malware installer, place the file on a flash drive, and transfer it to the infected computer.

• Install the latest version on McAfee VirusScan on your computer. Instructions are available at http://www.saintmarys.edu/virus.

• Make sure you install the latest available version of McAfee VirusScan that your computer can support. McAfee VirusScan 8.7i is the most current version at the time this FAQ was written, and can be installed on Windows XP, WIndows Vista, and WIndows 7.

• If you already have McAfee VirusScan installed on your computer, you should uninstall the software, reboot your computer, and then begin the installation process.

• Some malware will change your Internet settings. To access the Internet, you will need to change them back.

1. Open Internet Explorer.*
2. Go to Tools => Internet Options => Connections Tab => LAN Settings.
3. Uncheck "Use a proxy server."
4. Recheck "Automatically detect settings."

• This is a list of all settings that you should check to prevent future infections. These are general directions - if students need assistance with these items, please contact the ResNet Office.

• Make sure you have a password set for all accounts on your computer. The Guest account should be disabled if you are not using it. (Start -> Control Panel -> User Accounts. All active accounts should be noted as password protected.)
• Make sure all critical and important Windows Updates have been installed. (Start -> Control Panel -> Windows Update.)
• Make sure the WIndows Firewall is enabled for all connections - wired and wireless. If the firewall cannot be enabled, there is likely residual malware on the computer.
• Make sure that any peer-to-peer (P2P) file sharing software that may have been on the computer is uninstalled.
• Confirm that the computer has been connected to the network following all of the instructions in ResNet's Purple Packet. To obtain a copy of the current Purple Packet, please visit the ResNet website at http://www.saintmarys.edu/resnet or visit the ResNet Office.

• Instructions are available at http://www.saintmarys.edu/virus for using McAfee VirusScan. You will want to run an On Demand Scan.

• Using the Malwarebytes' Anti-Malware software from Step 1, rescan your computer with a Quick Scan. If malware is detected after the quick scan, it is recommend that you obtain professional assistance with the malware removal.
• If this step is taken on a different day from Step 1, please remember to update the database (Check for Updates) before running the scan.

• Students are welcome to bring their computers to the ResNet Office. The ResNet Office provides technical support, including malware removal, free of charge to all Saint Mary's students. Students must be present in the ResNet Office while the staff works on their computers. The hours for the ResNet Office are available on the ResNet website (http://www.saintmarys.edu/resnet).

• Faculty and staff may contact the Helpdesk for assistance with their College-owned computers. The Helpdesk and ResNet Office are unable to provide assistance for faculty and staff personally-owned computers.