How to remove viruses by using Windows Live OneCare in safe mode (925222)

MORE INFORMATION

You cannot remove some viruses when Microsoft Windows is running in its usual mode. You must remove these viruses in safe mode. Windows Live OneCare provides a tool to remove or to quarantine viruses in safe mode.

Important Use this tool only if a support agent directs you to do this.

To use this tool, follow these steps:

1. Restart the computer in safe mode.
2. Click Start, click Run, type cmd, and then press ENTER.
3. Type the following command, and then press ENTER:

   cd %PROGRAM_FILES%\Windows Live OneCare

4. Type SafeModeAVScanner, include the options that are provided by support personnel, and then press ENTER.

If you type SafeModeAVScanner without options, the following help appears:

C:\Program Files\Windows Live OneCare> SafeModeAVScanner 

Windows Live OneCare Safe Mode Virus and Spyware Scanning Tool

Usage: SafeModeAVScanner.exe [-s | -d <directory to scan>] [-b -h]

SafeModeAVScanner options

• -s scans the whole computer.

  Note You cannot use -d together with this option.

• -d filepath scans a specified file or folder.
• -b scans the boot sector. When you use this option, memory is not scanned.
• -h performs a heuristic scan. This kind of scan looks for behavior that may indicate the presence of a virus.

Sample usage

• SafeModeAVScanner -s -h
  These options use heuristic-based detection to scan the whole computer.
• SafeModeAVScanner -d c:\Users -h -b
  These options scan the c:\Users folder and all boot sectors.