Go Back   Web User Forums > Security > HijackThis logs help and analysis

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 29-10-12, 20:37
John_McKenna's Avatar
John_McKenna John_McKenna is offline
Global Moderator
 
Join Date: Jan 2004
Location: England
Posts: 8,111
Exclamation How to disable your Security programs

To assist the malware removal tools to function correctly, it's essential to disable any "Real-Time Scanning" & "Protection" modules of your security programs. Failure to do so could prevent the tools from making the necessary system changes to disinfect your computer. Programs which need disabling include Antivirus, Anti-spyware, Anti-malware and Firewalls.

Please note that some programs re-enable automatically after reboot so it may be necessary to disable your protection several times during the course of your fix.


Important note for Windows 7 and 8 users:

Many of the instructions below ask you to right click on the relevant program's system tray icon to access certain menus. If you don't see the relevant icon in your system tray, click the arrow near your clock to reveal any hidden icons. The arrow to click is marked in the image below with the red square.




The following list is in alphabetical order so please scroll down until you find your product(s) of which you may have several depending on your setup. If some of your protection software is not listed and you're unsure of how to disable it, please ask your authorised helper before proceeding with any fix instructions.


Adaware 10 Free/Pro Antivirus
  • Open Ad-aware 10
  • Click on "Real-time Protection" in the left panel, and toggle it to OFF
  • Reverse changes to re-enable.

Agnitum Outpost Security Suite / Firewall / Antivirus
  • Right click the Outpost icon in the System Tray by your clock.
  • Select Suspend Protection and select 1 hour when prompted.
  • *Re-enabled after reboot.

Ashampoo Anti-Malware
  • Right Click the Ashampoo icon in the system tray by your clock.
  • Uncheck Activate real-time protection to disable all protection modules.
  • Right Click the Ashampoo icon again and uncheck Always start guard on windows startup.
  • Reverse changes to re-enable.

Avast
  • Right Click on the avast! icon in the system tray by your clock.
  • Select avast! shields control and click 1 hour for the desired time.
  • Reverse to re-enable before time period expiry.

AVG 8.5
  • Right click the AVG icon in the system tray by your clock and select Open AVG Interface.
  • Double click on Resident Shield.
  • Uncheck the option to "Enable Resident Shield."
  • Save the changes, and exit the application.
  • To re-enable AVG 8.5, select "Enable Resident Shield" again.

AVG 9.0
  • Right click the AVG icon in the system tray by your clock and select Open AVG Interface.
  • Double click on Resident Shield
  • Uncheck the Resident Shield active option.
  • Save the changes, and exit the application.
  • To re-enable AVG 9.0, select "Resident Shield active" again.

AVG 2011
  • Right click the AVGicon in the system tray by your clock and select Open AVG Interface.
  • On the Menu Bar, click on Tools, then Advanced Settings.
  • On the next window, scroll down and click to highlight Temporarily disable AVG protection.
  • In the right hand pane, check (tick) the box: Temporarily disable AVG protection then click Apply.
  • In the next window, select 30 minutes from the drop down menu, then click the Disable real time protection button.
  • Click OK
  • To re-enable, check Enable on the main program interface.
  • You may also need to click Fix (enable becomes Fix if all components do not start).

AVG 2013
  • Right click the AVG icon in the system tray by your clock and select Temporarily disable AVG protection.
  • In the next window, select 30 minutes from the drop down menu.
  • Click OK
  • Reverse changes to re-enable

AVG Internet Security
  • Right-click the AVG icon in System tray by your clock and select Open AVG User Interface.
  • Click Overview on the left-hand side.
  • Double-click Resident Shield and uncheck the Resident Shield active box.
  • To disable the Internet Explorer extensions, double-click LinkScanner and uncheck Enable AVG Search-Shield and Enable AVG Active Surf-Shield boxes.
  • Click Save changes.
  • Reverse changes to re-enable

Avira Antivir / Internet Security
  • Right Click on the Antivir open umbrella icon in the system tray by your clock.
  • Uncheck the option "AntiVir Guard enable".
  • The umbrella icon should now look closed!.
  • *Re-enabled after reboot.

Bit Defender Antivirus Plus 2013 / Internet Secuirty / Total Security
  • Double click the Bit Defender system tray icon by your clock.
  • In the Antivirus panel of the program window, toggle the Autoscan option to OFF
  • If the Bit Defender firewall is installed, toggle the Firewall option to OFF
  • Bit Defender is now inactive.
  • Reverse changes to re-enable.

Bullguard Antivirus 2013 / Internet Security 2013
  • Click the BullGuard icon in the system tray by your clock to open the program window.
  • Click Settings from the menu at the top.
  • Click Real-Time Antivirus from the left menu and toggle to OFF.
  • Click the Firewall section (Internet Security 2013 users) from the left menu and toggle to OFF.
  • Click Save and exit the Bullguard console.
  • Reboot to re-enable.
  • To disable for longer, click Settings > General and uncheck the Run at Windows Startup box.
  • Reverse change to re-enable Bullguard at Startup.

CA Antivirus / Internet Security
  • Right click the CA icon in the System Tray by your clock.
  • Mouse over the My Computer menu option, click Enable Snooze and type in 60 minutes.
  • Click the Snooze button to confirm.
  • If using the Internet Security package, right click the CA icon again.
  • Mouse over the My Internet menu option and click Disable Firewall.
  • Reverse changes to re-enable.

Comodo Internet Security
  • Right click the Comodo icon in the System Tray by your clock (on 3 consecutive occasions).
  • On each occasion, hover your mouse over Antivirus, then Firewall & Defence+, setting each to Disabled.
  • Reverse changes to re-enable.

Comodo Firewall (standalone)
  • Right click the Comodo icon in the System Tray by your clock.
  • Hover your mouse over Firewall and set to Disabled.
  • Reverse changes to re-enable.

Emisoft Anti-Malware 7.0
  • Right-click the Emisoft icon in the system tray by your clock.
  • Click on Guard state.
  • Click Disable all guards.
  • Reverse changes to re-enable.

Emisoft Mamutu
  • Double click the Mamutu icon in the System Tray by your clock.
  • Click Settings from the menu on the left.
  • Click the General tab and [u]uncheck
  • Enable Mamutu Guard on system startup
  • Click the Permissions tab and uncheck Start/stop behaviour blocker
  • Reverse changes to re-enable.

eScan Antivirus / Internet Security Suite
  • Right-click the eScan icon in the system tray by your clock.
  • Select Pause Protection and choose 60 minutes.
  • Enter the Administrator password if one is set.
  • Click OK
  • Reverse changes to re-enable before time elapse.

ESET NOD32 Antivirus V4
  • Double click on the Eset icon in the system tray by your clock.
  • Select Disable real-time file system protection.
  • A popup will ask "Are you sure you want to disable...protection?"
  • Click "Yes" to disable the Antivirus guard.
  • Re-enabled after reboot.

ESET Smart Security:
  • Double click on the Eset icon in the system tray by your clock.
  • Click on Setup > Antivirus and antispyware > Temporarily disable Antivirus and antispyware protection.
  • Click Yes when prompted to confirm this action.
  • Re-enabled after reboot.

ESET Smart Security Version 4.x
  • Double click on the Eset icon in the system tray by your clock.
  • Click on Setup > Antivirus and antispyware > Temporarily disable Antivirus and antispyware protection.
  • Click Yes when prompted to confirm this action.
  • In the Temporarily disable protection window, use the drop down menu to select the time interval 1 hr.
  • Click OK to continue.
  • Reverse changes to re-enable before time elapse.

ESET Smart Security Version 5.x
  • Double click on the Eset icon in the system tray by your clock.
  • Click the Protection status icon.
  • Select Temporarily disable protection.
  • Click Yes when prompted to confirm this action.
  • In the Temporarily disable protection window, use the drop down menu to select 1 hr).
  • Click OK to continue.
  • Reverse changes to re-enable before time elapse.

F-PROT Anti-virus
  • Right click the F-Prot icon in the system tray by your clock.
  • Select Open F-Prot Antivirus to open the program interface.
  • Click the Virus scanners menu.
  • Under "Virus scanners" (left side), select File system.
  • In the File system window, uncheck "Enable automatic file protection".
  • Click Save.
  • Again, under "Virus scanners" (left side), select Internet/E-mail.
  • In the Internet/E-mail window, uncheck "Enable Internet Explorer protection"
  • Click Save
  • Reverse changes to re-enable.

G Data Internet Security 2013
  • Right click the G Data icon in the system tray by your clock.
  • Click Disable Firewall and select 1 Hour when prompted, then OK.
  • Right click the G Data icon again.
  • Click Disable Monitor and select 1 Hour when prompted, then OK.
  • Reverse changes to re-enable before time elapse.

Jetico Personal Firewall
  • Right click the Jettico icon in the system tray by your clock.
  • Select Shutdown Firewall
  • Re-enabled on reboot.

K7 Antivirus Plus / Total Security / Ultimate Security
  • Right click the K7 icon in the system tray by your clock.
  • Select Disable Product Protection, choose 1 Hour when prompted and click Yes.
  • Reverse changes to re-enable before time elapse.

Kaspersky AntiVirus 2009-2013
  • Right click on Kaspersky icon in the system tray by your clock and select Pause protection....
  • Select 30 minutes and then click Resume protection in..
  • You will receive a warning that Kaspersky Antivirus is disabled.

Kaspersky Internet Secuirty 2013
  • Right click the Kaspersky icon in the system tray by your clock and select Pause protection....
  • Select 30 minutes and then click Pause for the specified time
  • You will receive a warning window in red that Kaspersky Internet Secuirty is disabled.
  • Re-enable by clicking Resume protection on the red warning window.

Malwarebytes Anti-Malware Pro (Registered version only)
  • Right-click the MBAM icon in the System Tray by your clock and uncheck "Enable Protection".
  • When asked, "Are you sure you want to disable the MBAM Protection Module?", click Yes.
  • Right-click the MBAM icon again and then uncheck "Start with Windows".
  • The Protection Module is now disabled and will not restart.
  • Reverse changes to re-enable.

McAfee Antivirus Plus 2013 / Internet Security / Total Security
  • Double click the McAfee system tray icon by your clock.
  • On the right hand side click Real-Time Scanning Settings.
  • In the next window click the Turn Off button.
  • Select Never from the drop down menu and click the Turn Off button again.
  • Click Done.
  • On the left hand side, click Firewall and then Settings
  • In the next window click the Turn Off button.
  • Select Never from the drop down menu and click the Turn Off button again.
  • Click Done
  • Reverse changes to re-enable.

Microsoft Security Essentials
  • Right click on the MSE system tray icon by your clock, and select "Open"
  • Click the "Settings" tab.
  • On the left side of the screen, click on "Real-time protection"
  • Uncheck "Turn on Real-time protection"
  • Click on "Save Changes"
  • Reverse changes to re-enable.

Norman Antivirus / Security Suite
  • Right click the Norman icon in the system tray by your clock.
  • Select Stop Automatic Scanner to disable the protection.
  • If using Norman Security Suite, right click the Norman icon again and select Disable Personal Firewall.
  • Re-enabled on reboot.

Norman Ad-Aware Pro
  • Right click the NOrman icon in the system tray by your clock.
  • Select Disable Ad-Watch Live
  • Re-enabled on reboot.

Norton Internet Security 2010-2012
  • Right click on the Norton icon in your system tray by the clock.
  • Select Disable Antivirus Auto-Protect and then 1 hr when prompted for a time frame.
  • Click Firewall Protection Settings.
  • Under Firewall, click Off and then click Apply.
  • Select 1 hr when prompted for a time frame.
  • Click Close
  • Reverse changes to re-enable.

Norton Script Blocking
  • Open Norton Antivirus/Norton SystemWorks/Norton Internet Security Suite.
  • Click on Options. If you see a menu, click on Norton Antivirus.
  • On your left hand side, click on Script Blocking.
  • On your right hand side, uncheck (untick) the "Enable Script Blocking (recommended)" box.
  • Click OK to save the settings.
  • Reverse changes to re-enable.

Norton 360
  • Right click the Norton icon in the system tray by your clock.
  • View the Norton 360 Control Panel that displays.
  • Uncheck the Firewall enabled and Auto Protect enabled menu options.
  • Select 1 hour when prompted to choose a time frame.
  • Reverse changes to re-enable before time elapse.

Online Armor Firewall
  • Right click the Online Armor icon in the system tray by your clock.
  • Click on Close and Shutdown Online Armor.
  • Click Yes when prompted.
  • Right click the Online Armour icon again and select Deactivate HIPS features.
  • Click Yes when prompted.
  • Click Yes when prompted to restart the computer.
  • Reverse changes to re-enable.

Panda Antivirus 2013 (inc.Firewall) / Internet Security 2013
  • Right click the Panda system tray icon by your clock.
  • Select Close Automatic Protection.
  • Click Yes to confirm when prompted.
  • Re-enabled on reboot.

Panda Cloud Antivirus Pro (inc.Firewall)
  • Double click the Panda icon in the system tray by your clock.
  • Click the blue Shield and then the Disable button in the next window.
  • Click the Back button (Shield now red/stopped)
  • Click the yellow Firewall panel and then the Disable button in the next window.
  • Click the Back button (Wall now grey/stopped)
  • Reverse changes to re-enable.

Panda Cloud Antivirus Free
  • Right click on the Panda icon in the system tray by your clock.
  • Select Stop antivirus.
  • Reverse changes to re-enable.

PC Tools Spyware Doctor with Antivirus
  • Right click the Spyware Doctor icon in the system tray by your clock.
  • Select Disable IntelliGuard and choose 60 minutes for the time frame.
  • Click OK
  • Reverse changes to re-enable.

PC Tools Internet Security 2013
  • Double click the PC Tools icon in the System Tray by your clock.
  • On the Home tab, toggle Intelliguard Protection to OF
  • Toggle Firewall Protection to OFF
  • Reverse changes to re-enable.

PrevX 3.0
  • Right click the PrevX icon in the System Tray by your clock and select Stop Protection.
  • Choose 60 minutes when prompted for the time frame.
  • Reverse changes to re-enable.

Private Firewall
  • Right click the Prviate Firewall icon in the System Tray by your clock.
  • Click Exit and confirm the action when prompted.
  • Re-enabled upon reboot.

Process Guard
  • Right click the blue lock ProcessGuard icon in the System Tray by your clock.
  • Uncheck 'Protection enabled' and click Yes.
  • Reverse changes to re-enable.

Spybot's TeaTimer
  • Open Spybot Search & Destroy.
  • In the Mode menu click "Advanced mode" if not already selected.
  • Choose "Yes" at the Warning prompt.
  • Expand the "Tools" menu and click "Resident".
  • Uncheck the "Resident "TeaTimer" box.
  • If TeaTimer gives you a warning that changes were made, click the "Allow Change" box when prompted.
  • In the File menu click "Exit" to exit Spybot Search & Destroy.
  • Reboot the computer[/b]
  • Reverse changes to re-enable.

SpywareGuard
  • Double click the Spywareguard icon in the system tray by your clock.
  • Then go to Menu > File and choose Exit.

SuperAntiSpyware Professional Edition
  • Open SUPERAntiSpyware and click on the Preferences bar.
  • Click the Real-Time Protection tab and Uncheck Real-Time protection.
  • Click on the Hi-Jack Protection tab.
  • Uncheck "Protect Home Page from being changed.
  • Close SUPERAntiSpyware.
  • Reverse changes to re-enable.

Sygate Personal Firewall
  • Right click the Sygate icon in your system tray by the clock.
  • Select "Exit Firewall".
  • Click "Yes" when prompted to confirm the action.
  • *Re-enabled on reboot

Total Defence Antivirus / Internet Security
  • Right click the Total Defence icon in the System Tray by your clock.
  • Mouse over the My Computer menu option, click Enable Snooze and type in 60 minutes.
  • Click the Snooze button to confirm.
  • if using the Internet Security package, right click the Total Defence icon again.
  • Mouse over the My Internet menu option and click Disable Firewall.
  • Reverse changes to re-enable.

Trend Micro 2008-2010
(Trend Micro AntiVirus plus AntiSpyware - 2008, 2009, 2010;
Trend Micro Internet Security - 2008, 2009, 2010,
Trend Micro Internet Security for Dell - 16.6;
Trend Micro Internet Security Pro - 2008, 2009, 2010;
Trend Micro Internet Security Pro for Dell - 2009)
  • Right click the Trend Micro icon in System Tray by your clock.
  • From the menu that appears, click Exit.
  • Click Yes when prompted if you want to disable the program.
  • Note: If Exit not available, please follow the steps here.
  • *Re-enabled after restart.

Trend Micro Titanium 2011 onwards
  • Right click the Trend Micro icon in the System Tray by your clock.
  • Click ?Protection Against Viruses and Spyware?.
  • Click OK on the Protection disabled screen.
  • *Will auto-enable after 30 minutes!

Trojan Hunter
  • Right click on the Trojan Hunter icon in the System Tray by your clock.
  • Click Settings and uncheck "Load on startup" and "Enabled" in the TrojanHunter Guard window.
  • Exit TrojanHunter
  • Reverse changes to re-enable.

Vipre Antivirus 2012 / Internet Security 2012
  • Right click the VIPRE icon in the system tray by your clock.
  • Select Active Protection and then Disable Active Protection.
  • Choose 60 minutes when prompted for the time frame.
  • *Vipre can be relaunched from the Start menu if necessary.

Webroot SecureAnywhere Antivirus 2012 / Internet Security / Complete
  • Double click the Webroot SecureAnywhere icon in the system tray by your clock.
  • Click the PC Security tab and then Shields in the left pane.
  • Click on Real Time Shield and toggle it to OFF.
  • Click on Firewall and toggle it to OFF.
  • Reverse changes to re-enable.

Windows Defender
  • Right click the Windows Defender icon in the System Tray by your clock.
  • Click on Tools > Options.
  • Uncheck "Use real-time protection (recommended)".
  • Uncheck "Use Windows Defender"
  • Click on the Save button, approve the UAC prompt, and close Windows Defender.
  • Reverse changes to re-enable.

WinPatrol
  • Right Click the 'Scotty Dog' icon in the system tray by your clock.
    [b]Click Options and Uncheck "Automatically Run WinPatrol When Computer Starts"
  • Click the X in the upper right corner to close the window.
  • Right Click the 'Scotty Dog' icon in the system tray again.
  • Click Exit Program.
  • Reverse changes to re-enable.

Zone Alarm Antivirus (with Firewall) / Internet Security
  • Double click the Zonealarm icon in the system tray by your clock.
  • On the Antivirus panel click View Details.
  • Beside Real-time Protection click the Enabled button.
  • Uncheck the box "Enable On-Access Scanning (recommended)" and then OK
  • Now click the Firewall menu.
  • Toggle the Basic Firewall and Application Control buttons to OFF
  • Exit the program.
  • Reverse changes to re-enable


**Credit to malware fighters all over the web who provided some of these instructions.

Last edited by John_McKenna; 02-11-12 at 23:26.
Reply With Quote
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


Search the forum

Search

© Dennis Publishing Limited Licensed by Felden





All times are GMT. The time now is 21:32.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright Dennis Publishing 2010, All rights reserved