Skip to content Skip to site navigation Skip to service navigation

How to Install Stanford Anti-Malware for Windows

After January 14, 2020, Microsoft will no longer provide security updates or support for computers running Windows 7. All Windows 7 computers used for Stanford activities should be upgraded to Windows 10 by January 2020. Learn more about upgrading to Windows 10 by January 2020.

Stanford's System Center Endpoint Protection (SCEP) anti-malware installer will automatically uninstall Sophos if this program is installed on your computer.

Stanford's anti-malware service for Windows 7 and 8/8.1 consists of System Center Endpoint Protection (SCEP), Microsoft's enterprise anti-malware solution. In addition to SCEP, University IT also offers the Enhanced Mitigation Experience Toolkit (EMET), a protective Microsoft tool managed by BigFix. While EMET is optional, University IT recommends installing both SCEP and EMET to protect your computer from viruses, adware/spyware, and other malicious software.

For Windows 10 users, your system is already protected with built-in Windows Defender and is compliant with the Stanford Anti-Malware service requirements. You do not have to run the anti-malware installer unless you would like to install EMET for additional protection. If your computer is running BigFix, you will have the option in the anti-malware installer to opt in to EMET.

Install SCEP anti-malware

  1. Download the SCEP installer file. 
  2. When asked if you want to allow the program to make changes to your computer, click Yes

    user account control screen
  3. If you have Windows 10, you are already protected with Windows Defender and are already compliant with the Stanford Anti-Malware service requirements. Click OK. You will later have the option to install EMET, Microsoft's anti-exploit tool (highly recommended).   

    "In Windows 10, Microsoft has re-branded Systems Center Endpoint Protection as Windows Defender. Your system is already protected with Windows Defender and is compliant with the Stanford Anti-Malware service requirements. If your computer is running BigFix you will still have the option in this installer to opt in to Microsoft EMET for additional protection."
  4. For Windows 7 and 8 users, an install window describing SCEP appears. Click Install

    Anti-malware install window
  5. If you already have Microsoft Security Essentials installed on your computer, you will receive a message to uninstall Security Essentials before attempting to install Stanford Anti-Malware. 

    Microsoft Security Essentials is currently installed. Please uninstall Microsoft Security Essentials before attempting to install SCEP.
  6. If you do not have BigFix installed, you are not able to install Microsoft's Enhanced Mitigation Experience Toolkit (EMET), a highly recommended anti-exploit tool. To install BigFix and EMET, click the link to the ESS download site, and then re-run the Anti-Malware installer. 

    "This computer is not running BigFix, so we are unable to offer Microsoft EMET anti-exploit protection. If you would like the protection offered by EMET as well as other iimportant security features, you can download BigFix from the ESS download site and re-run this installer after installing BigFix."
  7. If you have BigFix installed, an install window describing Microsoft's Enhanced Mitigation Experience Toolkit (EMET) appears. Select Yes and then click OK

    "Do you want to install EMET now (highly recommended)?
  8. When the software finishes installing, click OK

    Anti-malware protection has been installed.
  9. For Windows 7 users, you can check that SCEP has been installed by clicking the Start button > All Programs. SCEP icon​ System Center Endpoint Protection should be listed. Windows 8 users can check by making sure SCEP is listed in their Apps. 

Scan your computer

University IT configured SCEP to run a daily quick scan of your computer at 2 a.m. However, you may follow the instructions below to run your own immediate scan.

  1. Click the Start button > All Programs. Then click SCEP icon System Center Endpoint Protection. 
  2. In the Home tab, select whether you want a quick, full, or custom scan, and then click Scan now

    click Scan now from Home tab

Change your scan settings

Stanford anti-malware is set to run a scheduled daily quick scan on your computer at 2 a.m. University IT recommends that your computer be turned on during these scans. If you know that you will turn off your computer before leaving work, you can change the time of your daily quick scan to a time when your computer will be turned on (see instructions below).   

Note: Scans can take a while.

  1. Click the Start button > All Programs. Then click SCEP icon System Center Endpoint Protection. 
  2. The System Center Endpoint Protection window displays. Click the Settings tab. 

    SCEP settings window
  3. In the Settings tab, you can change the type of scan, when the scan occurs, and how much of your computer's CPU time you want to dedicate to the scan. When you are finished adjusting the settings, click Save Changes.  
Last modified November 29, 2016