www.security.vt.edu | computing.vt.edu
you are here: Anti-Virus Home >

Symantec Endpoint Protection Guide

To ensure that your computer is safeguarded against viruses, 4HELP recommends that you download the latest version of Symantec Endpoint Protection from the Virginia Tech antivirus web page. It is also important that you download the latest virus definitions and run regular updates for the most complete protection. If you have any further problems or questions regarding computer viruses or Symantec Endpoint Protection, call 4Help Computer Consulting at 540/231-HELP (4357). On-campus, dial 4-HELP (4357).

Note: 4Help recommends installing Symantec Endpoint Protection 11 because it features the newest virus scanning engine and the free virus updates last indefinitely. Version 11 works on Windows 2000/XP/Vista.

Avoiding Computer Viruses

There are many ways to avoid getting a computer virus, such as:

  • DO NOT click on links in AIM profiles.
  • DO NOT install software from "unknown sources". Places we know you can trust are Virginia Tech, Microsoft, and Symantec other than these you need to be careful.
  • Scan all downloads and files you receive. If you do not have Symantec Endpoint Protection, see the download section on this page.
  • Don't open any attachments that have extensions such as:
    .exe
    .vbs
    .scr
    .chm
    .pif
  • For the best and most complete protection, open NO attachments. However, at the least, don't open e-mail attachments from anyone you don't know.

If you suspect an e-mail has a virus:

  1. Do not open the attachment.
  2. Delete the message from your inbox. Make sure to empty the trash or deleted messages box.
  3. If you are using your Virginia Tech address, go to https://webmail.vt.edu to ensure that the infected e-mail has been deleted from the server.

Downloading Symantec Endpoint Protection

Windows Instructions

Macintosh OS 10.3 and 10.4 Instructions

Norton AntiVirus 9 for Macintosh OS 9 and 10.2

Using LiveUpdate

LiveUpdate is a Symantec Endpoint Protection tool that allows you to update your virus definitions. When used on a regular basis, this will keep the software up-to-date on the latest strains of viruses. LiveUpdate is defined to run automatically each day for Windows machines and once a month for Macintoshes. To run LiveUpdate manually:

Symantec Endpoint Protection 11 for Windows

Symantec AntiVirus 10 for Macintosh

  1. Open Symantec AntiVirus.
  2. Click 'LiveUpdate'.
  3. Click 'Update Everything Now'.
Changing scheduled updates:

Scanning for Viruses

Scanning a Floppy Disk| Scanning a Computer| Scanning Individual Files| Scans will not run

  • Scanning a floppy disk

    • Symantec Endpoint Protection 11:
      1. Insert disk into the floppy drive.
      2. From the Start menu, select 'All Programs', select 'Symantec Endpoint Protection', and then select 'Symantec Endpoint Protection'.
      3. Click 'Scan for threats' on the left hand menu.
      4. Click on 'Create a New Scan'.
      5. Select 'Custom Scan' and click the 'Next>' button.
      6. Select the floppy drive with the disk in it from the menu and click 'Next>'.
      7. Ensure that 'All Types' is selected under File Types, then hit 'Next>'.
      8. Select 'On Demand' and hit 'Next>'
      9. Enter a name for your scan, and click 'Finish'
      10. The new scan will be under Scans. Right click ont the name of the new scan and choose 'Scan Now'.
      11. Close the scan after it completes.

    • Norton Antivirus 10.0 for Mac OS X
      1. Insert disk into floppy drive.
      2. Open Symantec AntiVirus.
      3. Under 'Disk View' click on the floppy disk.
      4. Click 'Scan/Repair'.
      5. When the scan is complete, click 'Close'.

  • Scanning a Computer

    • Symantec Endpoint Protection 11
      1. From the Start menu, select 'All Programs', select 'Symantec Endpoint Protection', and then select 'Symantec Endpoint Protection'.
      2. Click 'Scan for threats' on the left hand menu.
      3. Click 'Full Scan'.
      4. When the scan is complete, close all windows.

    • Norton AntiVirus 10.0 for Mac OS X
      1. Open Norton AntiVirus.
      2. Under 'Disk View' click on the hard drive.
      3. Click 'Scan/Repair'.
      4. When the scan is complete, click 'Close'.

  • Scanning individual files

    • Symantec AntiVirus Endpoint Protection
      1. From the Start menu, select 'All Programs', select 'Symantec Endpoint Protection', and then select 'Symantec Endpoint Protection'.
      2. Click 'Scan for threats' on the left hand menu.
      3. Click on 'Create a New Scan'.
      4. Select 'Custom Scan' and click the 'Next>' button.
      5. There are plus signs next to the different drives. Click on the '+' next to the drive that the file you want to scan is located on.
      6. Click the '+' next to the folder in which the file is located. You may have to repeat this step until you get to the file you need to scan.
      7. Check the box next to the file(s) you want to scan.
      8. Ensure that 'All Types' is selected under File Types, then hit 'Next>'.
      9. Select 'On Demand' and hit 'Next>'
      10. Enter a name for your scan, and click 'Finish'
      11. The new scan will be under Scans. Right click on the name of the new scan and choose 'Scan Now'.
      12. Close the scan after it completes.

      You can change which file(s) are scanned by right clicking on the scan, going into 'Edit...' and then the 'What to Scan' tab to choose new files to scan.

    • Norton AntiVirus 10.0 for Mac OS X
      1. Open Symantec AntiVirus.
      2. Under 'File View' navigate to the folder or file you would like to scan.
      3. Click 'Scan/Repair'.
      4. When the scan is complete, click 'Close'.

  • Scans will not run

Sometimes if your computer has a really bad virus, the virus stops Symantec from running. To get past this problem try running a scan from "Safe Mode". Safe Mode is a special way for Windows to load when there is a system-critical problem that interferes with the normal operation of Windows. The purpose of Safe Mode is to allow you to troubleshoot Windows and try to determine what is causing it to not function correctly. Once you have corrected the problem, then you can reboot and Windows will load normally. Please see the follow article from Symantec on how to start your computer in safe mode: Safe Mode document

Deleting Quarantined Items

What does it mean when Symantec places a file in 'Quarantine'?

When Symantec AntiVirus detects an infected file, it tries to do two things with it. First, it tries to clean the file and restore it to the original state. If that fails, Symantec will 'Quarantine' the file. This basically means that it moves the file into a protected area where it won't cause any more harm. At this point you can choose to either delete the file from Quarantine or restore it. For more information see: http://www.antivirus.vt.edu/help/quarantine.asp Note: The Macintosh version does not have quarantine capability. Mac users should see the next section, 'Deleting Infected Items from Macintosh Computers'.

  • Symantec Endpoint Protection:
    1. From the Start menu, select 'All Programs', select 'Symantec Endpoint Protection', and then select 'Symantec Endpoint Protection'.
    2. Click 'View quarantine' on the right hand side .
    3. Select any Risk file and press the Delete button.

Deleting Infected Items from Macintosh Computers

  • Symantec AntiVirus 10.0 for Macintosh:

    • This version of Symantec AntiVirus does not have a quarantine. Instead you can set your preferences to have your computer scan a floppy disk, programs, files and e-mail attachments automatically. If a virus is detected, an alarm will sound and a warning will appear with further instructions on how to delete the file or program. To set your preferences:
    1. Open Symantec AntiVirus.
    2. Select 'Preferences/General Preferences...' from the menu bar.
    3. Select 'Automatically repair infected files'.
    4. Close the window by clicking in the red circle in the title bar.

Getting Rid of a Virus

If your computer gets a virus:

  1. Go to http://www.antivirus.vt.edu.
  2. Follow the instruction under the 'Clean it up' section. Which briefly are:
    1. Identify the virus by using by using Symantec Endpoint Protection.
    2. Once you have identified the virus, return to the 'antivirus.vt.edu' homepage and find the virus that has infected your computer.
    3. Click on that name and follow all instructions for fixing the virus.
  3. If you do not see the virus listed, go to Symantec's site. For further information, contact 4Help at 540/231-HELP (4357). On-campus, dial 4-HELP (4357).

  4. If none of the above helps, you may need to start over by reinstalling the operating system and all your other programs. See Format and Reinstall
For further help with Symantec AntiVirus and viruses in general, you may also search the 4Answer KnowledgeBase found at http://www.answers.vt.edu.

 

last modified: 9/28/2005 10:29:08 AM Feedback | Privacy Statement | Acceptable Use Standard

©2001 Virginia Tech University Computing Support.