Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
During the process of removing malware from your computer, there are times you may need to use specialized fix tools. This is especially true if you are receiving help from a member of the Malware Removal Team. Certain embedded files that are part of these specialized fix tools may at times be detected by your anti-virus or anti-malware scanner as a "RiskTool", "Hacking tool", "Potentially unwanted tool", a virus or a "Trojan" when that is not the case.
These tools have been carefully created and tested by security experts so if your anti-virus or anti-malware program flags them as malware, the detection is what's known as a "False Positive". Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them. In these cases, the removal of these files can have "unpredictable results" and unintentional results.
To avoid any problems while using a specialized tool it is very important that you temporarily disable your anti-virus and/or anti-malware programs before using them or when instructed by a member of the HJT Team. You can re-enable these programs after the malware removal process has been completed.
Many folks may not be sure how to do this so the BC Staff has created a list of common anti-virus programs and the relevant steps to disable their Real-time protection capabilities. When your system has been cleaned or when advised by your helper, it is important that you re-enable your security programs to avoid re-infection. A special thanks to Yourhighness for the diligent effort in compiling this list.[/quote]
How to Temporarily Disable your Anti-virus
AVAST
Right- click on the avast! icon in system tray (looks like this:
but orange in color starting with v5). Select avast! shields control and there will be options to disable avast for 10 minutes, 1 hour, until the computer is restarted or permanently.AVG 8
Open the AVG 8 Control Center, by right-clicking on the AVG 8 icon on task bar.
- Click on Tools.
- Select Advanced.
- In the left hand pane, scroll down to "Resident Shield".
- In the main pane, deselect the option to "Enable Resident Shield."
- To re-enable AVG 8, please select "Enable Resident Shield" again.
Please open the AVG 8.5 Control Center, by right clicking on the AVG icon on task bar.
- Click on Open AVG Interface.
- Double click on Resident Shield
- Deselect the option to "Enable Resident Shield."
- Save changes, and exit the application.
- To re-enable AVG 8.5, please select "Enable Resident Shield" again.
- Also see AVG FAQ 1209: How to temporarily disable AVG Free Edition 8.5
Please refer to the instructions provided in AVG FAQ 2429: How to temporarily disable AVG Free Edition 9.0.
AVG 2011
Open the AVG 2011 Control Center, by right-clicking on the AVG icon on task bar.
- Click on Open AVG User Interface.
- On the Menu Bar, click on Tools, then click Advanced Settings.
- In the screen which opens, scroll down to Temporarily disable AVG protection.
- Click on it to highlight and in the right hand pane, check the box for Temporarily disable AVG protection.
- Click Apply.
- In the next screen which opens, select 15 minutes from the drop down menu, then click the Disable real time protection button and click OK.
- To re-enable, just check Enable on the main GUI interface. You may also need to click Fix (enable becomes Fix if all components do not start).
AVG FAQ 3902: Disabling Specific AVG components
AVIRA ANTIVIR
Please navigate to the system tray on the bottom right hand corner and look for an open white umbrella on red background (looks to this:
)- right click it-> untick the option AntiVir Guard enable.
- You should now see a closed, white umbrella on a red background (looks to this:
)
- Double click on the system icon for Bit Defender.
- When the Bit Defender window appears, move mouse arrow to the left side and click >> Virus Shield.
- Move mouse arrow to the black check by Virus Shield is enabled and click.
- The black works will change to red, >> Virus Shield is disabled.
- Move mouse arrow to the top right corner and click the down arrows.
- Bit Defender is now inactive.
- To enable Bit Defender, do the same steps except click to enable.
- To turn off the Firewall, right-click on the CA Shield icon in the system tray, click My Internet, then click Disable Firewall.
- To turn it back on, right click system tray icon, click My Internet, then click Enable Firewall.
- To temporarily disable the Antivirus, right-click the CA Shield icon in the system tray, click My Computer, then click Enable Snooze.
- Enter the snooze time in minutes (up to 999, approx 16 2/3 hours) in the box and click Snooze.
- To end snooze, follow the same procedure and click Wake Now on the page for entering snooze time.
- To disable Antivirus on a longer basis, double-click the CA Shield icon in the system tray.
- When Security Center comes up, click Update Settings in the My Computer tab.
- Then click the red X next to Auto Scan.
- To re-enable, follow the same procedure and click the green checkmark.
- Double click on the system tray icon:
on the bottom right hand corner. - Select Disable real-time file system protection.
- A popup will ask "Are you sure you want to disable...protection?"
- Click "Yes" to disable the Antivirus guard.
- Double click on the system tray icon: to open the main application window.
- Or via Start >> All Programs >> ESET >> ESET Smart Security.
- Click on Setup >> Antivirus and antispyware >> Temporarily disable Antivirus and antispyware protection.
- When prompted to confirm temporarily disable select Yes.
- Note: Protection will be automatically started after a system reboot.
Please navigate to the system tray on the bottom right hand corner and look for a blue
sign.- right click it-> select Unload.
- The F-Secure sign should now be surrounded by a red striked through circle (looking like this:
)
Please refer to this User Guide (page 67, Real-time scanning settings}
KASPERSKY ANTIVIRUS
Please navigate to the system tray on the bottom right hand corner and look for a
sign.- right click it-> select Pause Protection.
- click on -> By User Request
- a popup will claim that protection is now disabled and a sign like this:
will now be shown.
Please navigate to the system tray on the bottom right hand corner and look for a
sign.- Right-click it -> chose "Exit."
- A popup will warn that protection will now be disabled. Click on "Yes" to disable the Antivirus guard.
Please navigate to the system tray and double-click the taskbar icon to open Security Center.
- Click Advanced Menu (bottom mid-left).
- Click Configure (left).
- Click Computer & Files (top left).
- VirusScan can be disabled in the right-hand module and set when it should resume or you can do that manually later on.
- Do the same via Internet & Network for Firewall Plus.
MICROSOFT SECURITY ESSENTIALS
- Open MSE and go to Settings > Real Time Protection.
- Then uncheck "Turn on real time protection".
- Exit MSE when done.
Please navigate to the system tray on the bottom right hand corner and look for a
sign.- right-click it -> chose "Disable Auto-Protect."
- select a duration of 5 hours (this assures no interference with the cleanup of your pc)
- click "Ok."
- a popup will warn that protection will now be disabled and the sign will now look like this:
- Right-click the Norton 360 Premier Edition icon in the system tray and select Disable Antivirus Automatic-Protect.
- You will get a new dialog box with five options: 15 minutes, 1 hour, 5 hours, Until system restart, Permanently.
- Choose 5 hours.
Please refer to these instructions.
NORTON ANTIVIRUS CORPORATE EDITION
Please refer to the instructions provided in the Norton AntiVirus Corporate Edition User's Guide under the section Turning File System System Protection off temporarily.
PC TOOLS THREATFIRE
- Right-click on ThreatFire's icon near the clock (it's an orange flame) and select Suspend.
- When you see that the icon has turned from an orange flame to a blue icon with an orange strip in the middle, ThreatFire has been temporarily disabled.
Please refer to these Post #28 instructions.
SYMANTEC ENDPOINT PROTECTION
Right click on the icon in the taskbar notification area & select "Disable Symantec EndPoint Protection".
TREND MICRO PRODUCTS
Please refer to these instructions.
Edited by CatByte, 17 February 2012 - 04:56 PM.
Updated 02-17-2012
