How to remove viruses by using Windows Live OneCare in safe mode

Retired KB Content Disclaimer

This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.



Windows Live OneCare is no longer available for sale

Existing subscribers will continue to be supported throughout the term of their subscriptions. Existing subscribers can reinstall by following the steps to download a trial, and can still add a PC to their existing OneCare circle.

Learn more about end of sale for OneCare.

On September 29th 2009, Microsoft introduced Microsoft Security Essentials, a FREE consumer anti-malware solution for Genuine Windows based PCs.

Learn more about Microsoft Security Essentials or download from Microsoft directly at: http://www.microsoft.com/security_essentials/default.aspx.



INTRODUCTION

Windows Live OneCare provides a command-line tool to remove or to quarantine viruses in safe mode. This article describes how to use this tool.

More Information

You cannot remove some viruses when Microsoft Windows is running in its usual mode. You must remove these viruses in safe mode. Windows Live OneCare provides a tool to remove or to quarantine viruses in safe mode.

Important Use this tool only if a support agent directs you to do this.

To use this tool, follow these steps:
  1. Restart the computer in safe mode.
  2. Click Start, click Run, type cmd, and then press ENTER.
  3. Type the following command, and then press ENTER:
    cd %PROGRAMFILES%\Microsoft Windows OneCare Live
  4. Type SafeModeAVScanner, include the options that are provided by support personnel, and then press ENTER.
If you type SafeModeAVScanner without options, the following help appears:
C:\Program Files\Windows Live OneCare> SafeModeAVScanner 
Windows Live OneCare Safe Mode Virus and Spyware Scanning Tool
Usage: SafeModeAVScanner.exe [–s | –d < directory to scan >] [–b –h]

SafeModeAVScanner options

Usage: SafeModeAVScanner.exe [–s | –d <directory to scan>] [–b –h]
  • -s scans the whole computer.
    Note You cannot use -d together with this option.
  • -d filepath scans a specified file or folder.
  • -b scans the boot sector. When you use this option, memory is not scanned.
  • -h performs a heuristic scan. This kind of scan looks for behavior that may indicate the presence of a virus.
Sample usage
  • SafeModeAVScanner –s –h
    These options use heuristic-based detection to scan the whole computer.
  • SafeModeAVScanner –d c:\Users –h –b
    These options scan the c:\Users folder and all boot sectors.
Properties

Article ID: 925222 - Last Review: Apr 16, 2013 - Revision: 1

Feedback