Results 1 to 1 of 1

Thread: Malware Clean-up Guidance

  1. #1
    Join Date
    Nov 2004

    Exclamation Malware Clean-up Guidance

    NOTE: the steps below works only if you are on the latest retail versions of ZA (Version 13 / ZA 2015 onwards). If you are not, please update.
    Try to perform a full Antivirus/Antispyware scan but in SAFE MODE WITH NETWORKING**.

    1. Set ZA Antivirus/antispyware to "Full Scan" under the computer tab --> Antivirus & Antispyware section (settings) --> "Scan mode is set to...."
    3. Manual run ZA (ZA firewall will be OFF but Antivirus/Antispyware will be functional);
    4. Run a full ZA AV/AS scan;
    5. Reboot in Normal Mode
    6. Set ZA Antivirus/Antispyware back to default Quick scan


    If the above fails try to clean your system with:

    A. Download update and scan with MBAM
    WARNING: Some malware will block the running of this software, if this is the case run "chameleon.chm" from (...\Program Files\Malwarebytes’ Anti-Malware\Chameleon).
    B. Use the superantispyware online cleaning tool --> Here or download, update and scan with superantispyware FREE
    WARNING: Some malware will block the download of this software, rename the installer to a random name before saving and running.
    C. Download, update and scan with Emsisoft Emergency Kit --> HERE

    Still Problems? Try the ZA Rescue Disk or a bootable CD fromDrWeb

    For a final check that your PC is clean run Hitman Pro cloud scanning (the scanner is free not the cleaning)

    if ALL the above fails please post your Hijackthis log to Bleepingcomputer or SpywareHammer

    Once you have cleaned the system please remember to purge the windows system restore points. You may be reinfected otherwise.
    - Disable system restore (How to disable windows SYSTEM RESTORE);
    - Reboot the PC
    - Re-ensable system restore


    ** Scan in SAFE MODE with networking may not work in most recent versions of ZA (14.0.X.X). Just skip this step if it is the case.
    ** If you use a DNS service other then your ISP (e.g OpenDNS / DNSCrypt) you may need to disable it to be able to update the virus definitions in ZA while in SAFE MODE with Networking.
    Last edited by fax; 3 Weeks Ago at 06:24 AM. Reason: Updated 09.2015 - Updated disclaimer for booting in SAFE MODE

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Clean-up after uninstalling ZA
    By jrosenfeld in forum Helpful Hints & Links
    Replies: 0
    Last Post: September 10th, 2009, 01:24 PM
  2. Malware Clean-up Guidance
    By fax in forum Helpful Hints & Links
    Replies: 0
    Last Post: September 7th, 2009, 08:09 AM
  3. Replies: 0
    Last Post: September 6th, 2008, 07:06 AM


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts