Removal Instructions

General Removal Instructions


Scan & Disinfect with F-Secure Anti-Virus

If you have an F-Secure Anti-Virus program installed, perform a complete scan and disinfection by the following steps:

  1. If running on Windows XP, Vista or 7, first disable System Restore.
  2. Launch the antivirus program and update the definition database.
  3. Run a full system scan.
  4. Once completed, follow the disinfection instructions from the program.
  5. Reenable System Restore.

For more details on each step:

  • Disabling System Restore

    Disabling the System Restore feature in Windows 7, Vista, XP or ME operating systems before disinfection is recommended to prevent possible re-infection. System Restore may unintentionally save a backup copy of the infected file, which may then be reinstalled after disinfection is completed. Check the Microsoft Support site for the latest applicable instructions on Disabling System Restore on your operating system.

    Once disinfection is complete, re-enabling the System Restore feature is recommended. This will allow the user to restore the system to a stable configuration in the event that a crash or incompatibility issue occurs in the future.

  • Updating the Definition Database

    It is important to keep the antivirus program continually up-to-date with the latest definition databases to ensure the system is protected against the latest threats. Find specific instructions on various ways to download the databases at Instructions for Updating Definition Databases.

  • Running a Full System Scan

    For instructions on performing a scan with specific versions of F-Secure Anti-Virus, please see Support.

Scan & Disinfect: Alternatives

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, you can try using the trial version of F-Secure Anti-Virus:

  1. Download a Trial version of F-Secure Anti-Virus.
  2. Install and update with the latest database update.
  3. Perform a full system scan.
  4. Once completed, follow the disinfection instructions from the program.

Or try our our Online Scanner, a web-based antivirus scanner intended to find and remove malware and rootkits:

Note: The Online Scanner is not a replacement for a full Internet Security suite.

Manual Disinfection

CAUTION: Manual disinfection is a risky process; it is recommended only for advanced users.

To manually disinfect standalone malware (backdoors, worms, trojans, etc.) it is usually enough to delete all infected files from a computer and to restart it. Active malware files are usually locked by operating system; different disinfection approaches are required for different operating systems.

Specific malware infections may have unique manual disinfection instructions; please see the relevant Threat Description for more specifics.

Special Disinfection/Removal Tools

In special cases, disinfection may be best performed using special utility programs (tools) specifically written for a particular malware. The tools can be downloaded from:

Submitting A Sample to F-Secure Labs

If you suspect a file is malicious or has been falsely identified as malicious (a False Positive), please submit a sample of the file to our Labs for analysis via Submit A Sample (SAS).

Get Support

For documentation and product support, visit our support site.

Go Support

F-Secure Community

Give advice. Get advice. Share the knowledge on our free discussion forum.

Go Community