Check for and remove viruses on your Bowdoin computer

Explains what to do if you suspect your Bowdoin computer has a virus or malware. Covers CrowdStrike Falcon for faculty and staff computers, and Microsoft Defender for Endpoint plus Apple's built-in XProtect for student MacBooks. Includes steps for running a manual scan using Microsoft Defender on macOS.

Issues

• What should I do if I think my Bowdoin computer has a virus?
• How can I tell if my laptop is infected with malware or another security threat?
• Does Bowdoin provide antivirus protection for faculty, staff, and students?
• What is the difference between CrowdStrike and Microsoft Defender?
• How do I run a manual virus scan on my student MacBook?
• My computer is running slowly and showing pop-ups — could it be a virus?
• How do I check whether CrowdStrike is protecting my computer?

Environment

This article applies to all Bowdoin faculty, staff, and students. Faculty and staff Bowdoin-issued computers are protected by CrowdStrike Falcon. Student Bowdoin-issued MacBooks are protected by Microsoft Defender for Endpoint, alongside Apple's built-in XProtect malware detection. Applies to macOS Sequoia (15.x) and macOS Tahoe (26.x).

Resolution

If your computer is showing signs of infection — such as slow performance, unexpected pop-ups, or files opening on their own — save your work and stay connected to the internet so antivirus software can update its protection definitions.

Faculty and staff — CrowdStrike Falcon

CrowdStrike Falcon is installed automatically on all Bowdoin-issued faculty and staff computers. It runs continuously in the background and does not require you to start scans manually.

• If CrowdStrike detects a threat, follow any on-screen prompts to Quarantine or Remove the item.
• Most detections are handled automatically and reported silently to IT. If action is required on your part, the on-screen prompt will guide you.
• If you are seeing repeated warnings or unusual behavior that does not resolve, contact the Service Desk.

---

Students — Microsoft Defender for Endpoint on macOS

All Bowdoin-issued student MacBooks have Microsoft Defender for Endpoint installed and managed by Bowdoin IT. Defender runs in real time alongside Apple's built-in XProtect, providing continuous protection without any action needed from you. If you suspect an issue, you can also run a manual scan at any time.

Run a scan using the menu bar

1. Look for the Microsoft Defender shield icon in the menu bar at the top-right corner of your screen.
2. Click the shield icon and choose Open Microsoft Defender.
3. In the Microsoft Defender window, click Quick Scan to start an immediate scan.
4. For a more thorough check, click Scan options and select Full Scan.
5. Follow any prompts to quarantine or remove detected threats.

Run a scan using Terminal

1. Open Terminal (search for it in Launchpad or Spotlight).
2. To run a quick scan, type the following command and press Return:
   sudo mdatp scan quick
3. Enter your Mac password when prompted. The scan will run and report any findings in the Terminal window.
4. For a full scan, use this command instead:
   sudo mdatp scan full

---

Keeping your device protected

• Keep your operating system and apps up to date — software updates include the latest security protections.
• Use Jamf Self Service to install any updates pushed by Bowdoin IT.
• If issues persist after scanning and updating, restart your computer and contact the Service Desk.

Additional Help

If you need further assistance, you have several options:

• Bowdoin Bot: Chat with Bowdoin Bot directly from any KB page for instant answers.
• Phone: Call the Bowdoin College Service Desk at (207) 725-3030.
• In person: Visit the Tech Hub in Smith Union during business hours.
• Submit a ticket: Request assistance through the Service Catalog.

Additional Resources

• Microsoft Defender for Endpoint on macOS — Microsoft Learn