How do I Scan for Viruses in DOS?

Download and Extract the SDAT Files

1. Click on the following link or type the URL into an Internet browser address bar:
http://www.mcafee.com/apps/downloads/security_updates/superdat.asp?region=us&segment=ente
rprise
2. Click the I Agree button (if needed) to verify you have a current support agreement with McAfee.
3. English users, please click the link named sdatxxxx.exe (where 'xxxx' replaces the current SDAT
version number) and save the file to your C:\ Drive.
4. All others please select the appropriate localized language from the drop-down list, click the link
named sdatxxxx.exe (where 'xxxx' replaces the current SDAT version number) and save it to your
C:\ Drive.
5. From the Taskbar, select Start and then Run.
6. In the Open field, type command and click OK. A DOS command window will open.
7. Type CD\ and press Enter. You should now be at a C:\ prompt.
8. Type SDATXXXX.EXE /E C:\SDAT and press Enter. (Note: The 'x's should be replaced with the
appropriate numbers of the file that was downloaded above.)
This will create an SDAT folder on the C:\ drive and extract the SDAT files to this folder.
Note: Windows XP Users with Service Pack 2 installed will be presented with a security warning
when attempting to extract the file. Please click Run to continue the extraction process.
9. Once the C:\ prompt is displayed again, please type exit and press Enter.

Disable Windows System Restore

Windows XP utilize a restore utility that backs up and protects selected files automatically to the
C:\_Restore folder. This means that an infected file could be stored there as a backup and VirusScan would
be unable to delete these files. The System Restore utility must be disabled to remove any infected files
from the C:\_Restore folder.

Windows XP

1. Right-click the My Computer icon on the Desktop and click Properties.

2. Click on the System Restore tab.
3. Put a check mark in the box next to Turn off System Restore.
4. Click the OK button.
5. You may be prompted to restart the computer. Click Yes to restart.

Note: To re-enable the System Restore utility, repeat the steps above and in step 3 remove the check mark
from the box next to Turn off System Restore.

Boot the Computer to DOS

Windows 2000/XP

1. If the computer is on: From the Taskbar, click Start, then Shutdown and choose Restart.
2. If the computer is off, turn the computer on.
 3. When the opening splash screen appears, begin tapping the F8 key every second.
Note: On some computers, if you press F8 too soon you will get a keyboard error. If this happens,
press the F1 key to continue.
4. The Windows 2000 (or XP) Advanced Options Menu will appear. Use the arrow keys to choose
Safe Mode with Command Prompt.
5. Login to your computer (if necessary).
6. When the computer is finished booting, the c:\> prompt will appear on the screen.
Note: If there is anything typed after c:\>, type cd\ and press Enter.
7. Continue with the scan instructions below.

Scan the Computer

Windows 2000/XP

1. At the c:\> prompt, type in cd sdat and press Enter.

2. Then type scan /adl /clean /all /secure /program /streams /mime /mailbox /allole /rpterr /rptcor
/report report.txt and press Enter.

This will perform a virus scan on your computer, which will clean and delete any viruses you may have on
your computer.

Multiple Infections

After the scan has run, a summary report of the scan will be created in the sdat folder on the C:\ drive. If
this summary reports that your computer had multiple infections, it is recommended that you run the scan
again to make sure the computer has been completely cleaned. To determine if this is needed please
complete the following steps:

Review the Scan Report

1. Restart the computer into Normal Mode.

2. Double-click the My Computer icon.
3. Double-click the C:\ drive
4. Double click the sdat folder.
5. Locate the file named report.txt and double-click to open.
6. The report contains several lines that look similar to this:

If the top line named Possibly Infected has a number greater that 5, it is recommended that you
run the scan in DOS again.
7. If you need to run the scan again, repeat the instructions for Boot the Computer to DOS and
Scan the Computer above.