University of Wisconsin Knowledgebase


 ADVANCED

Symantec Antivirus 10 - Detecting and Removing Spyware

This document describes what to do if Symantec Antivirus Corporate Edition (SAVCE) 10 detects spyware.

Symantec Antivirus 10 now includes the ability to scan for, detect, and remove spyware. This feature is included in File System Auto-Protect, and is enabled by default. When Auto-Protect detects spyware, you will see a pop-up message:

Auto-Protect finds spyware

You can read Symantec's information on each Risk item by clicking the name of the risk.

To remove the risks:

  1. Highlight each risk to remove (you can highlight multiple risks by clicking the first risk, then holding the shift key while you click the last risk)

  2. Click Remove Risk

    Removing risks

  3. If you are prompted about terminating processes or applications, click Yes

    yes to terminate processes

  4. If any risks have the Action set to Reboot Required, click Reboot

    Click reboot

  5. Click Yes

Once the system reboots, you will need to delete items in Quarantine.

  1. Open Symantec Antivirus by double-clicking the yellow shield icon in the system tray or by clicking Start|Programs (or All Programs)|Symantec Client Security|Symantec Antivirus
  2. Click the plus sign next to View
  3. Click Quarantine
  4. Highlight all items in Quarantine. You can highlight multiple risks by clicking the first risk, then holding the shift key while you click the last risk.
  5. Click the red 'X' to delete the items

    quarantine window

  6. Click Start Delete

    start delete

  7. Click Close

You will also want to run a full system scan to verify that all spyware files were detected and properly removed.

  1. Open Symantec Antivirus by double-clicking the yellow shield icon in the system tray or by clicking Start|Programs (or All Programs)|Symantec Client Security|Symantec Antivirus

  2. Click Full Scan

  3. Click Scan

    full scan window

If any Risks are detected, you will want to check Quarantine again.

Some ad sponsored applications will attempt to reinstall their spyware components automatically on reboot. You may need to uninstall some applications and repeat the above steps to permanently remove the spyware.

See Also:



Keywords: symantec antivirus spyware detect remove pop up auto protect autoprotect norton malware adware Doc ID: 3756
Owner: Eric J.Group: Help Desk
Created: 2005-06-01Updated: 2009-08-04

Did this document help you to answer your question?