ITS Helpdesk

Phone: 810.762.3123 opt. 1 - Email: ITSHelpdesk@umflint.edu

Mac Virus Removal with Sophos and SCEP

Last Updated: Apr 11, 2018 03:03PM EDT

For anti-virus protection on personal computers, the University of Michigan Flint currently recommends Sophos Anti-Virus for Mac; for university-owned computers, the University of Michigan Flint currently recommends System Center Endpoint Protection (SCEP).

Intended Audience

This Quicknote is for the benefit of faculty, staff, and students who own Mac computers.

Requirements

To install Sophos, you must have a Mac with OSX 10.8.x (Mountain Lion) or newer. SCEP requires OSX 10.6 - 10.11. To check what version of OSX you have to follow the directions below:

  1. Click the Apple Menu button at the top left.
  2. Click About This Mac.
  3. Under OS X it says the version number of the operating system.

Installing Sophos (Personal devices)

*Note it is recommended to uninstall all other anti-virus programs prior to installing Sophos. Directions for removing an older version of Sophos can be found here: https://www.macexpertguide.com/how-to-uninstall-sophos-mac-antivirus/

  1. To download Sophos, go to https://www.safecomputing.umich.edu/be-aware/viruses/
  2. Click Download Sophos Anti-Virus for free
  3. Login using uniqname and UMICH password
    1. If you get an error, please contact the ITS Helpdesk (810-762-3123 or ITS-HelpDesk@umflint.edu) and a work ticket will be placed to assist you with this problem.
    2. Ann Arbor still provides a free version of Sophos for personal-use machines.

Installing SCEP for Mac (University-Owned only)

*Note before installation: Any previous anti-viruses should be removed first. You will need local admin credentials, to be domain-joined, and be on OSX update 10.6 - 10.11. Please contact the Helpdesk if you have difficulty installing this software.

  1. Verify the Mac is connected to the UMFlint network. If you are off-campus, install Pulse Secure for Mac via vpn.umflint.edu
  2. Connect to //deptdrive/PCpub/ITS Recommended Applications/SCEP for OSX
    • In the top bar, click Go -> Connect to Server… -> and then type in: 'smb://deptdrive/PCpub/ITS Recommended Applications/SCEP for OSX' for Server name (no quotes and capitalization does matter)
  3. Open “SW_DVD5_Sys_Ctr_Endpnt_Prtctn_1511_MultiLang_EptProt_Lin_Mac_MLF_X20_81124.iso” with Disk Utility. By default Disk Utility should open .iso files like this, so you should be able to just double-click it and it will open, but if not:
    • In Finder, click Go -> Utilities -> Disk Utility
    • In Disk Utility: File -> Open Disk Image… -> Navigate to the Server location above -> Open
  4. Within the .iso, navigate to Mac -> 4.5.23.2, then run “scep.i386-x86_64.en.dmg”. You should be able to run this from the network, but feel free to copy it to the desktop first
  5. After the installer has run:
    1. Click Install when it opens up
    2. Click Continue if it prompts to run a scan to see if it’s compatible.
    3. Uninstall any other security/anti-virus software prior to installation.
    4. Click Continue each of the 3 times, agree to terms of service.
    5. Click Continue again, run a Typical installation, then enable Detection of potentially unwanted applications.
    6. Log in as admin if prompted.
  6. During the installation, it may mention the installer is blocked by security settings:
    • Click Go -> Applications -> Security & Privacy -> Click the lock in the bottom left to make changes -> Allow SCEP to run
      • You may also select "Allow apps downloaded from: Anywhere" and this will work; if so, please be sure to disable this after installing SCEP for your own security

Additional Information

For additional information about how to protect your computer, see our Protecting Your Computer Quicknote at the following link:

https://helpdesk.umflint.edu/customer/portal/articles/1630500-protecting-my-computer

Troubleshooting

If you have any questions or experience any issues with this Quicknote, please visit or contact the ITS Helpdesk for assistance.

Locations: 206 Murchie Science Building or 3174 William S. White Building
Phone#: (810)-762-3123 (option 1)
Email: its-helpdesk@umflint.edu

0438193a176e19372b65cb7b8916ea64@umflint-its.desk-mail.com
https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete