AVAYA IT SECURITY – VIRUS SCAN PROCESS

1. Windows 7 then Click Start >> Right-Click “Computer” and select “properties”

6:23 pm, Apr 23, 2018

2. Windows 7, please see note at the end of this document in how to disable System Restore.

Click Start >> Right-Click “Computer” and select “properties”. (as in step 1 above)
In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide
confirmation.
To turn OFF System Protection for a hard disk, Double Click the “Configure” box and then in the new window select “Turn off System Protection”.
Click on Apply and then click YES and you may need to respond to YES again

Verify McAfee VirusScan Enterprise version of your system: Right Click the McAfee ICON in the system tray. Click on “About”. Scroll Down on the
about window until you reach the McAfee VirusScan Enterprise + Antispyware tab as below:
Do make sure you have for virus scan engine version 5700 and not an early version (e.g., 5400, etc.) in the event of not having this version
“5600” you will need to go to ITSS.avaya.com and under Download Software look for McAfee VirusScan Antivirus Definitions (download it and
install it) this will upgrade your scan engine and your virus definition.

If you performed the step before for Scan Engine upgrade you will not need to do this step, and skip the next step (skip virus definition).

Virus definitions or DAT file can be verified with DAT version and DAT Created date. It is not to be more than a day old from current date.

NOTE: if your McAfee version is older than 8.8 we need to collect the log files from your machine prior to installing the newest version, please
send all log files to Acert@avaya.com. Also Note 8.0 is version of McAfee HIPS hence scroll below to reach McAfee VirusScan Enterprise +
Antispyware tab.

(Refer Note 1 below to find location of Log Files)

McAfee Virus Scan software can be downloaded from ITSS.AVAYA.COM site (make sure you have the latest version) SEE NOTE 2 for more info at
the bottom of this document.
Recommendation: Download the Virus Definition and VirusScan Enterprise 8.8 if needed using another computer to avoid spreading the virus
from the infected machine.

3. In Bottom right hand corner of your screen find the McAfee shield icon, right click, and select “On-Demand Scan.”

Or right click, and select “Scan Computer for” then on “threats” (depending on the windows Version of your machine).
4. Select the “Scan Locations” tab and assure it looks as the picture below

You will need to add (Registered Files) use the Add… button for that.

5. Select “Scan Items” tab and assure it look as below

6. Select the “Exclusions” tab and assure it looks as below – note there shod be NO exclusions

7. Select the “Performance” tab and assure all is selected a shown (select HIGH for Sensitivity level)
8. Select “Actions” tab and assure all is configured a shown

9. Select “Reports” tab and assure ALL boxes are ticked (*** please note that the “Limit the size of log file” is set to 1, change it to 2)

Note: Do not change the name of the files or alter the content of them (it is required for the analysis of your computer to keep them as they are.
10. Once configured select “save as default” and select “yes”

11. To start the scan select “START”

12. Keep your system connected to Internet (can be ON or OFF VPN and Office network). Internet access is required for the scan to be effective.
You can minimize the scan window and continue with your work. System response will be slow hence please make judicious use of system
resources. The scan time can be from less than an hour to 3 or 4 hours however some scans can run for 8 or 9 hours due to large volume of data
stored on disk, CPU speed and other such factors. It is mandatory to send us ALL the log files for review even if the scan shows zero detections or
nothing found.
After the scan is completed, you will be prompt to REBOOT the computer, if not prompted please do REBOOT the computer.
Log back on to the computer and RUN the steps (3 to 11) as showed here in this document.
Reboot the computer once again after the last SCAN.
Send the log files to ( germanm@avaya.com, rpnawase@avaya.com,) and copy acert@avaya.com
See about location of the log files in NOTE 1
Our team will review the logs and may contact you for a remote session of your system to run additional scans.
For any queries or issues do ping/email us and we will get back to you. German Martinez (germanm@avaya.com EST
Time-zone) Rohit Nawase (rpnawase@avaya.com APAC-IST time-zone)
You may contact our supervisor jcookson@avaya.com and copy acert@avaya.com for urgent responses.
================================================================================================

NOTE 1: TO FIND THE LOG FILES

From Step 9 under Reports Tab, click on Browse…
For Some Server OS types logs are found @ C:\ProgramData\McAfee\DesktopProtection
(Note that folders are hidden hence copy paste the address directly in windows explorer window to open the destination folder)
Send ALL the log files to the email addresses provided.

==========================================================================================================

NOTE 2: To download the most recent version of McAfee and the Virus definition follow these steps.
From the ITSS.avaya.com site
Click on Download (from the left side column under links) and type in the “McAfee” or “McAfee VirusScan Enterprise” and click on Search

Download and install McAfee VirusScan Enterprise 8.8 and McAfee VirusScan Antivirus Definitions
Note – Refer the Supported OS Section when downloading the installation package.

Do please keep in mind that the scanning of any computer could be impacted due to the following things:
- Health of your computer / performance issues.
- Amount of data to go over while scanning,
- Number of applications on it in addition to the standard ones by the Avaya image.
- Speed of the network where you are located)
- And if you are using the computer at the time of scanning that will also add up to your scanning time.