General Removal Instructions

Scan & Disinfect with F-Secure products

If you have an F-Secure product installed, perform a complete scan and disinfection by following these steps:

  1. If the computer is running on Windows 7, first disable System Restore.
  2. Launch the antivirus program and update the definition database.
  3. Run a full system scan.
  4. Once completed, follow the disinfection instructions from the program.
  5. Re-enable System Restore.


For more details on each step:

  • Disabling System Restore

    Disabling the System Restore feature in Windows 7 before disinfection is recommended to prevent possible re-infection. System Restore may unintentionally save a backup copy of the infected file, which may then be reinstalled after disinfection is completed. Check the Microsoft Support site for more information about the System Restore feature in Windows 7 and Windows 10.

    Once disinfection is complete, re-enabling the System Restore feature is recommended. This will allow the user to restore the system to a stable configuration in the event that a crash or incompatibility issue occurs in the future.

  • Updating the Definition Database

    It is important to keep the antivirus program continually up-to-date with the latest definition databases to ensure the system is protected against the latest threats. Find specific instructions on various ways to download the databases at Instructions for Updating Definition Databases.

  • Running a Full System Scan

    For instructions on performing a scan with specific versions of F-Secure product, please consult our product documentations on the Help Center.

Scan & Disinfect: Alternatives

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, you can try using the trial version of F-Secure Anti-Virus:

  1. Download a Trial version of F-Secure Anti-Virus.
  2. Install and update with the latest database update.
  3. Perform a full system scan.
  4. Once completed, follow the disinfection instructions from the program.


Or try our our Online Scanner, a web-based antivirus scanner intended to find and remove malware and rootkits:

  1. Go to Online Scanner page 
  2. Click Run now 

NOTE: The Online Scanner is not a replacement for a full Internet Security suite.

Manual Disinfection

CAUTION: Manual disinfection is a risky process; it is recommended only for advanced users. 

To manually disinfect standalone malware (backdoors, worms, trojans, etc.) it is usually enough to delete all infected files from a computer and to restart it. Active malware files are usually locked by operating system; different disinfection approaches are required for different operating systems.

Specific malware infections may have unique manual disinfection instructions; please see the relevant Threat Description for more specifics.

Special Disinfection/Removal Tools

In special cases, disinfection may be best performed using special utility programs (tools) specifically written for a particular malware. The tools can be downloaded from our Removal Tools page. 

Submitting a Sample to F-Secure Labs

If you suspect a file is malicious or has been falsely identified as malicious (a False Positive), please submit a sample of the file to our Labs for analysis via Submit A Sample (SAS)