quietman7
Oct 30 2007, 09:44 AM
QUOTE
During the process of removing malware from your computer, there are times you may need to use
specialized fix tools. This is especially true if you are receiving help from a member of the HJT Team. Certain embedded files that are part of these specialized fix tools may at times be detected by your anti-virus or anti-malware scanner as a "
RiskTool", "
Hacking tool", "
Potentially unwanted tool", a
virus or a "
Trojan" when that is not the case.
These tools have been carefully created and tested by security experts so if your anti-virus or anti-malware program flags them as malware, the detection is what's known as a "
False Positive". Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically
remove them. In these cases, the removal of these files can have
"unpredictable results" and
unintentional results.
To avoid any problems while using a specialized tool it is
very important that you
temporarily disable your anti-virus and/or anti-malware programs
before using them or when instructed by a member of the HJT Team. You can re-enable these programs after the malware removal process has been completed.
Many folks may not be sure how to do this so the BC Staff has created a list of common anti-virus programs and the relevant steps to disable their
Real-time protection capabilities. When your system has been cleaned or when advised by your helper, it is important that you re-enable your security programs to avoid re-infection. A special thanks to
Yourhighness for the diligent effort in compiling this list.
How to Temporarily Disable your Anti-virusAVASTRight click on the avast! icon in system tray
(looks like this:
) and choose (
Stop On-Access Protection)
AVG 7Please open the
AVG7 Control Center.
- Double-click on the "AVG Resident Shield" component (looks like this:
). - Deselect the "Turn on AVG Resident Shield" checkmark and save the setting.
- When you need to enable the AVG Resident Shield, reopen the AVG Control Center.
- Double-click on the "AVG Resident Shield" component, select the "Turn on AVG Resident Shield" checkmark and save the setting.
AVG 8Please open the
AVG 8 Control Center, by right clicking on the AVG 8 icon on task bar.
- Click on Tools.
- Select Advanced.
- In the left hand pane, scroll down to "Resident Shield".
- In the main pane, deselect the option to "Enable Resident Shield."
- To re-enable AVG 8, please select "Enable Resident Shield" again.
AVG 8.5Please open the AVG 8.5 Control Center, by right clicking on the AVG icon on task bar.
- Click on Open AVG Interface.
- Double click on Resident Shield
- Deselect the option to "Enable Resident Shield."
- Save changes, and exit the application.
- To re-enable AVG 8.5, please select "Enable Resident Shield" again.
AVIRA ANTIVIRPlease navigate to the system tray on the bottom right hand corner and look for an open white umbrella on red background
(looks to this:
)- right click it-> untick the option AntiVir Guard enable.
- You should now see a closed, white umbrella on a red background (looks to this:
)
BITDEFENDER- Double click on the system icon for BitDefender.
- When the Bit Defender window appears, click on the button at the top of the screen labeled Switch to advanced view.
- Click on the Shield tab switch to the Virus shield screen.
- Uncheck the checkbox labeled Real-time protection is enabled.
- When it asks how long you want to disable it, select Permanently.
- BitDefender is now inactive.
- To enable BitDefender, do the same steps except you should put a checkmark in the checkbox labeled Real-time protection is enabled.
ESET NOD32 ANTIVIRUS V4- Double click on the system tray icon:
on the bottom right hand corner. - Select Disable real-time file system protection.
- A popup will ask "Are you sure you want to disable...protection?"
- Click "Yes" to disable the Antivirus guard.
ESET SMART SECURITY- Double click on the system tray icon:
to open the main application window. - Or via Start >> All Programs >> ESET >> ESET Smart Security.
- Click on Setup >> Antivirus and antispyware >> Temporarily disable Antivirus and antispyware protection.
- When prompted to confirm temporarily disable select Yes.
- Note: Protection will be automatically started after a system reboot.
F-SECURE ANTIVIRUSPlease navigate to the system tray on the bottom right hand corner and look for a blue

sign.
- right click it-> select Unload.
- The F-Secure sign should now be surrounded by a red striked through circle (looking like this:
)
KASPERSKY ANTIVIRUSPlease navigate to the system tray on the bottom right hand corner and look for a

sign.
- right click it-> select Pause Protection.
- click on -> By User Request
- a popup will claim that protection is now disabled and a sign like this:
will now be shown.
MCAFEE ANTIVIRUSPlease navigate to the system tray on the bottom right hand corner and look for a

sign.
- Right-click it -> chose "Exit."
- A popup will warn that protection will now be disabled. Click on "Yes" to disable the Antivirus guard.
MCAFEE SECURITY CENTER 7.1Please navigate to the system tray and double-click the taskbar icon to open Security Center.
- Click Advanced Menu (bottom mid-left).
- Click Configure (left).
- Click Computer & Files (top left).
- VirusScan can be disabled in the right-hand module and set when it should resume or you can do that manually later on.
- Do the same via Internet & Network for Firewall Plus.
NORTON ANTIVIRUS (by Symantec)
Please navigate to the system tray on the bottom right hand corner and look for a

sign.
- right-click it -> chose "Disable Auto-Protect."
- select a duration of 5 hours (this assures no interference with the cleanup of your pc)
- click "Ok."
- a popup will warn that protection will now be disabled and the sign will now look like this:

NORTON 360- Right-click the Norton 360 icon in the system tray and select Open Tasks and
Settings Window. - On the right side, under Settings, click on Change advanced settings.
- Next, click on the Virus & Spyware Protection Settings.
- Uncheck Turn on Auto-Protect and select Apply.
- You will be asked to select a time for Norton to reactivate.
- Choose Until I turn it back on.
- You can re-enable after the malware has been removed from your machine.
NORTON INTERNET SECURITY 2008Please refer to these
instructions.
NORTON ANTIVIRUS CORPORATE EDITIONPlease refer to the instructions provided in the
Norton AntiVirus Corporate Edition User's Guide under the section
Turning File System System Protection off temporarily.
PC TOOLS THREATFIRE- Right-click on ThreatFire's icon near the clock (it's an orange flame) and select Suspend.
- When you see that the icon has turned from an orange flame to a blue icon with an orange strip in the middle, ThreatFire has been temporarily disabled.
Sophos Anti-virus-- Please refer to Post #28.
SYMANTEC ENDPOINT PROTECTIONRight click on the icon in the taskbar notification area & select "
Disable Symantec EndPoint Protection".
TREND MICRO INTERNET SECURITY 2008Please refer to these
instructions.
quietman7
Oct 30 2007, 09:46 AM
How to Temporarily Disable your FirewallAntiVir Premium SuitePlease navigate to the system tray on the bottom right hand corner and look for this

sign
- Right click it-> untick the option AntiVir Guard enable.
- You should now see a closed, white umbrella on a red background (like this:
) - You successfully disabled the AntiVir Premium Suite Guard.
AVG Antivirus Plus FirewallPlease navigate to the system tray on the bottom right hand corner and look for this

sign.
- Right click it-> select Quit Control Center.
- A warning will pop up, click "Yes"
- You successfully disabled the AVG Antivirus Plus Firewall Guard.
CA Personal FirewallPlease navigate to the system tray on the bottom right hand corner and look for the following

sign.
- Right click it-> hover (mouse-over) over CA Personal Firewall menue option. A sub-menu will popup.
- Please chose "Disable CA Personal Firewall"
- Unfortunately the system tray icon does not change, so if you want to double-check whether or not you successfully disabled the Firewall, do the above steps again and look for "Enable CA Personal Firewall." If this is the case, then you succesfully disabled the CA Personal Firewall Guard.
Comodo Firewall Pro (free Personal)- Right-click the system tray icon.
- Select Exit.
- On the Pop up window, Click the Yes button.
- You successfully disabled Comodo Firewall.
F-Secure Internet Security SuitePlease navigate to the system tray on the bottom right hand corner and look for a blue

sign.
- Right click it-> select Unload.
- Select: "Unload and allow all network traffic"
- Select Unload to confirm deactivation of F-Secure Internet Security
- You will be asked to enter your Parental Control Password. Please enter it and click "OK."
- The F-Secure sign should now be surrounded by a red striked through circle (looking like this:
) - You successfully disabled the F-Secure Guard.
Jetico Personal FirewallPlease navigate to the system tray on the bottom right hand corner and look for this

sign
(the arrows could also be filled with green color instead of grey, indicating that the Firewall currently detects traffic).
- Right click it->click on the option Shutdown Firewall.
- You successfully disabled the Jetico Personal Firewall Guard.
Kaspersky Internet SuitePlease navigate to the system tray on the bottom right hand corner and look for a

sign.
- Right click it-> select Pause Protection.
- Click on -> By User Request
- A popup will claim that protection is now disabled and a sign like this:
will now be shown. - You successfully disabled the Kaspersky Internet Suite Guard.
Lavasoft Personal FirewallPlease navigate to the system tray on the bottom right hand corner and look for either one of the following three
(the sign varies depending on the settings you chose on your PC) 
/

/

signs.
- Right click it-> select Exit.
- You will be confronted with a popup saying that you are no longer protected and will disable the Firewall. Click on "Yes."
- You successfully disabled the Lavasoft Personal Firewall Guard.
Norton Internet Security or Norton Personal FirewallPlease refer to these
instructionsNorton decided to install in German for me, although it never asked. According to the help file, you can also do it the following way (translated into English):- Please open Norton Internet Security Center by clicking the system tray icon and chosing the appropriate option.
- Now click on the tab "Norton Internet Security" and click on "Settings."
- Click the Internet Usage option "Personal Firewall."
- Click "deactivate"
After a tortorous and never seeming to end install of this crapware, I would appreciate if you either agree to use the first option, or to double check for me. I am not really fond of tricking Norton to think I am not a silly German and allowing me to download a proper installer....Agnitum Outpost Firewall ProPlease navigate to the system tray on the bottom right hand corner and look for either one of the following three
(the sign varies depending on the settings you chose on your PC) 
/

/

signs.
- Right click it-> select "Firewall Policy...".
- Chose "Disable."
- You will now see a sign like this
in the systemtray. - You successfully disabled the Agnitum Outpost Firewall Pro Guard.
Panda Internet Security SuitePlease navigate to the system tray on the bottom right hand corner and look for a sign that looks like a Pandabear head.
- Right click it-> select "Close automatic protection.".
- A message will pop up and warn you about disabling the protection. Chose "Yes."
- The above sign in the systemtray will now disapear.
- You successfully disabled the Panda Internet Security Guard.
PC Tools Firewall PlusPlease navigate to the system tray on the bottom right hand corner and look for this

sign
- Right click it->click on the option Disable Firewall.
- You should now see a sign like this:

- You successfully disabled the PC Tools Firewall Plus Guard.
Radialpoint Security ServicesPlease navigate to the system tray on the bottom right hand corner and look for the following

sign.
- Right click it-> select "Exit.".
- A message will pop up and warn you about disabling the protection. Chose "Yes."
- The above sign in the systemtray will now disapear.
- You successfully disabled the Radialpoint Security Services Guard.
Sygate Personal FirewallPlease navigate to the system tray on the bottom right hand corner and look for the following

sign.
- Right click it-> select "Exit Firewall".
- A message will pop up and warn you about disabling the protection. Chose "Yes."
- The above sign in the systemtray will now disapear.
- You successfully disabled the Sygate Personal Firewall Guard.
quietman7
Oct 30 2007, 09:50 AM
How to Temporarily Disable your Anti-malware ScannersAD-AWARE AD-WATCH in Ad-Aware Anniversary Edition (and Pro version)
- Start Ad-Aware
- Click the Ad-Watch tab
- Click the Settings button
- Ensure all highlighted options bellow are unchecked:(some settings may be used or changed only in the Pro version)
Under the General tab- Processes Protection
- Registry Protection
- Network Protection
Under the Detection Layers tab:- Spyware heuristics
- AntiVirus engine
- OK your way out, and close the main Ad-Aware window.
- Shut down Ad-Aware and Ad-Watch Live! by right clicking on the system tray icon, and selecting Exit Ad-Aware.
- OK the change.
AVG ANTI-SPYWARE- Launch AVG Anti-Spyware.
- From the "Status" menu, select "Change state" to inactivate 'Resident Shield' and 'Automatic Updates'.
- Then right click on AVG Anti-Spyware in the system tray and uncheck "Start with Windows".
COMODO BO CLEAN- Right-click the system tray icon.
- Select Shut down BO Clean button.
- Restarts on reboot or open from Program Menu.
COUNTERSPY- Right-click on the running CounterSpy icon in the sytem tray.
- Hover your mouse over "Active protection".
- A menu will slide out and then you need to left click on "Disable Active Protection".
- Disabling CS Active Protection should cause the systray icon to turn orange/red and hovering your mousing over the icon will then state "Active protection is disabled".
(When we are done, re-enable Counterspy by launching the program from Start > Programs, click on the Active Protection. It will either say Active Protection enabled or disabled. On the right side, you can select each of the tasks (scroll down to see all of them) individually, then either enable or disable them on the bottom right, individually. If you have a problem doing that then click on help, choose run setup wizard, click next 2 times, make sure automatic updates is set to yes, click next, make sure enable active protection is set to yes, click next, then click finish, then exit. Then open CounterSpy to make sure that the active protection has been enabled.)PREVX- Right click on the Prevx icon in your system tray and choose Show Management Console.
- On the Management Console click the Protection Level drop-down menu.
- You will see three levels:
- To disable all protection set the level to Off.
- You will receive a prompt asking "You are about to change your security settings. Do you wish to continue?" Click Yes.
- Click the X on the upper right hand corner to exit the Management console.
PROCESS GUARD- Right-click the blue lock ProcessGuard icon located in the system tray.
- Uncheck 'protection enabled'.
- Click yes.
REG DEFENDRight click the icon for RegDefend in the systray and select Exit.
SPYBOT TEATIMER- Launch Spybot S&D, go to the Mode menu and make sure "Advanced Mode" is selected.
- On the left hand side, click on Tools, then click on the Resident Icon in the list.
- Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active." box.
- Click on the "System Startup" icon in the List
- Uncheck the "TeaTimer" box and "OK" any prompts.
- If Teatimer gives you a warning that changes were made, click the "Allow Change" box when prompted.
- Exit Spybot S&D when done and reboot your computer.
(When we are done, you can re-enable Teatimer using the same steps but this time place a check next to "Resident TeaTimer" and check the "TeaTimer" box in System Startup.]
Please download
ResetTeaTimer.zip and save to your Desktop. Extract (unzip) the file and double-click
ResetTeaTimer.bat to run the script. This will remove all entries set by TeaTimer and it from restoring them upon reactivation).
SPY SWEEPER- Open Spy Sweeper and click on Options > Program Options and uncheck "load at windows startup".
- On the left click "shields" and then uncheck everything there.
- Uncheck "home page shield".
- Uncheck "automatically restore default without notification".
- Exit the program.
- (When we are done, you can re-enable it using the same steps but this time reverse them.)
SPYWARE DOCTOR- Click the Spyware Doctor icon in the System Tray.
- Click Settings.
- Click Startup Settings under Pick a Category.
- Uncheck "Run at Windows startup".
- Click Apply and Exit Spyware Doctor.
- From within Spyware Doctor, click the "OnGuard" button on the left side.
- Uncheck "Activate OnGuard".
- (When we are done, you can reenable Spyware Doctor)
SPYWARE GUARD- Right click the running icon of Spywareguard in the system tray to open the program.
- Then go to Menu, File, and choose Exit.
TROJAN HUNTER- Go to TrojanHunter Guard in the the system tray. It is a light blue icon with a magnifying glass and red handle.
- Right click on it and select settings.
- Uncheck "Load at startup" and "Enabled". Make sure that the program, TrojanHunter itself, is also closed/not running.
WINDOWS DEFENDER- Click Start > Programs > Windows Defender or launch from the system tray icon.
- Click on Tools & Settings > Options.
- Under Real-time protection options, uncheck the "Real-time protection" check box.
- Click Save.
- Go to Start > Control Panel > Security > Windows Defender, at the bottom of the Window Defenders page uncheck under Administrator Options "use Windows Defender" and then Save.
- (When we are done, you can re-enable Defender using the same steps but this time place a check next to "Turn on real-time protection" check box.)
WINDOWS ONECARE- To Disable Antivirus: Open the Windows OneCare user interface.
- Click View or Change Settings > Antivirus Tab.
- Click the radio button to turn the anti-virus off.
- To Disable Firewall: Open the Windows OneCare user interface.
- Click View or Change Settings > Firewall Tab.
- Drag down the slider to turn the firewall off.
WINDOWS LIVE ONECARETo
Disable AntiVirus and AntiSpyware protection- Right click the system tray icon and select Open Windows Live OneCare.
- On the main page click Change Settings > click Viruses and Spyware Tab.
- Tick "Off" radio button > Apply and OK.
To
Disable Firewall protection- Right click the system tray icon and select Open Windows Live OneCare.
- On the main page click Change Settings > click Firewall Tab
- Tick "Off" radio button > Apply and OK.
WINPATROLRight-click the running icon of Winpatrol in the sytem tray and choose exit.
fossowat
May 7 2008, 04:42 AM
Hi, nutnworks referred me to your instructions for disabling anti-malware so that I could run a utility of theirs. The instructions say that I should disable Norton via the system tray. But in my case, the malware has disabled my system tray. Do you know another way to disable Norton?
DASOS
May 7 2008, 03:02 PM
orionstar
Jun 12 2008, 01:23 PM
Hello,
I have McAfee SecurityCenter running, and I have no idea how to disable it.
There is no "Exit" when I right click on the icon in the taskbar.
DK32
Dec 1 2008, 08:49 AM
Hello. Where do I find information on what kind of firewall I have on my computer?
quietman7
Dec 1 2008, 09:32 AM
The
Windows XP firewall and
Windows Vista Firewall are built in. A third party firewall like ZoneAlarm, Comodo, etc are installed separately so there should be an entry in Start > Settings > Control Panel >
Add/Remove Programs.
However, some security suites with integrated protection like AVG Anti-Virus plus Firewall include it as part of the combined package.
To check if the Windows Firewall is turned on or off, go to Start > Run and type:
firewall.cplpress Ok
Reach4Sky
Dec 10 2008, 03:38 PM
Hi, I also am having trouble trying to figure out how to disable McAfee SecurityCenter.
garmanma
Dec 10 2008, 05:09 PM
QUOTE
Double-click the taskbar icon to open the Security Center
Click Advanced Menu (lower left)
Click Configure (left)
Click Computer & Files (upper left)
VirusScan can be disabled on the right.
Do the same via Internet & Network for Firewall Plus.
Animal
Dec 10 2008, 05:10 PM
Reach4Sky
I see you have a HJT log properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.
From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.
SySo
Dec 30 2008, 06:43 PM
Could you please tell me how to disable Symantec Antivirus 10.1?
Jat90
Dec 30 2008, 07:34 PM
excellent guide, quietman7. Could I ask if it is possible for you to repost this in our canned speech forum? It would definitely come in useful when asking users to use certain tools which require disabling of AV, Firewall or other programs such as Teatimer.
Thanks.
quietman7
Dec 30 2008, 11:25 PM
QUOTE(Jat90 @ Dec 30 2008, 07:34 PM)

excellent guide, quietman7. Could I ask if it is possible for you to repost this in our canned speech forum?
This topic was deliberately created here for that very purpose; so the BC could direct members to it when such tools need to be temporarily disabled.
SySo we will have to investigate. I did a quick search of Symantec's site and did not come across any specific instructions. As soon as we come across them, they will be added.
Jat90
Dec 31 2008, 05:55 AM
Yeah providing the url would be easier, actually.
Wh4T
Jan 6 2009, 12:08 AM
I found out how to stop the Auto-Protect Symantec AntiVirus. This one is simple. You right click on the icon and uncheck the Auto-Protect button.
Wh4T
Jan 9 2009, 07:39 PM
Can someone please verify my disabling because all my disabling does is stop the auto protect. I'm not sure if that means it is disabling it completely. Someone please help.
garmanma
Jan 9 2009, 08:38 PM
Did you read this in the very first post?
QUOTE
NORTON ANTIVIRUS
Please navigate to the system tray on the bottom right hand corner and look for a sign.
* right-click it -> chose "Disable Auto-Protect."
* select a duration of 5 hours (this assures no interference with the cleanup of your pc)
* click "Ok."
* a popup will warn that protection will now be disabled and the sign will now look like this:
MrPositive
Jan 16 2009, 02:03 PM
I'm having a problem with disabling my Norton AntiVirus in the fact that according to combofix, I have it running but I can't open it from my start menu and there's no icon showing that it's enabled in my system tray. Any help would be greatly appreciated.
garmanma
Jan 16 2009, 04:58 PM
QUOTE
I'm having a problem with disabling my Norton AntiVirus
If it's not in the System tray, it's disabled
I
strongly recommend not to use Combfix by yourself. Be sure to read the disclaimer and be prepared if something goes wrong
twwo
Jan 21 2009, 12:18 AM
Hi, I was wondering if anyone knows how to disable Malwarebytes Anti-malware.
Thanks for your time.
quietman7
Jan 21 2009, 08:18 AM
There are several ways to disable MBAM's real-time protection (registered version only).
- Right-click on the MBAM icon in the systray and uncheck Enable Protection.
- When asked, "Are you sure you want to disable the MBAM Protection Module?", click Yes.
- Right-click on the MBAM icon again and then uncheck Start with Windows.
- The Protection Module is now disabled and will not restart.
Alternatively, you can right-click on the MBAM icon in the systray, chose
Exit and then click
Yes at the prompt asking "
Are you sure you want to disable the MBAM Protection Module?"
Another way to keep MBAM from loading at startup is to launch MBAM, click the Protection Tab and
uncheck Start with Windows under General Settings.
To re-enable, right-click on the MBAM icon in the systray and select
Enable Protection. Right-click again and select
Start with Windows.
hamajang
Apr 20 2009, 12:24 PM
I have AVG 8. I disabled the resident sheild... but my anti-virus and anti-spyware still has the green active checkmark next to it, is this ok to run combofix or am I suppose to disable that too some how? I can't seem to figure out how to disable it separately, there's no option.
tejas115
Apr 30 2009, 08:04 AM
How do I turn off Panda for file servers permanent protection? When I right click on it, there are only three options - scan all my computer, scan all hard discks and scan floppy drives?
techi_fli28
May 8 2009, 06:48 PM
Hi!
Someone posted this question in the thread for How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
as post #23, "I have AVG 8. I disabled the resident sheild... but my anti-virus and anti-spyware still has the green active checkmark next to it, is this ok to run combofix or am I suppose to disable that too some how? I can't seem to figure out how to disable it separately, there's no option."
I am having the exact same problem and decided I would ask again because I did not see a reply.
Please help.
-Thank You!
Hakrim
May 24 2009, 04:28 PM
QUOTE(MrPositive @ Jan 16 2009, 02:03 PM)

I'm having a problem with disabling my Norton AntiVirus in the fact that according to combofix, I have it running but I can't open it from my start menu and there's no icon showing that it's enabled in my system tray. Any help would be greatly appreciated.
I'm having the exact same problem. I have been instructed to use combofix, but I can't disable Norton because no icon for it appears in my system tray. I can't even access it(which is due to the malware/virus I'm trying to delete). Is there anyway to disable Norton with out being able to access it?
creighs
Jun 12 2009, 08:30 PM
Hello!
I'm very sorry if this AV has already been discussed and I've managed to miss it - I don't think I did - but my apologies just in case. Does anyone happen to know how to disable Sophos Antivirus protection? Do I only need to stop the on-access real time protection? Or is it best to just shut down/exit the AV software altogether? (I suppose these same two questions would apply to ANY anti-malware programs...)
If nobody here happens to know then I'll look into it later on and post anything helpful I find. Someone else would have to verify it though, as I'm a bit of a rookie (but I want to learn!!!

)
Cheers,
S.
creighs
Jun 15 2009, 01:51 PM
Here is the information for disabling Sophos AV (at least for non-business version):
Checking protection is onThe computer is protected by on-access scanning.
On-access scanning intercepts files as they are accessed, and grants access to only those that do
not pose a threat to your computer or are
authorized for use.
When on-access scanning is
active, a
blue shield is displayed in the system tray.

When on-access scanning is
inactive, the shield is
gray.
Note: The status of on-access scanning is also indicated in the
Sophos Anti-Virus window under
Status.
If your computer is on a network, on-access scanning has probably already been configured. However, if you want to change the settings, refer to
Configuring scanning.Turning protection on or off for the computerCAUTION:
If you turn protection
off, Sophos Anti-Virus does
not scan files that you access for threats.
Note: You need to be a member of the SophosAdministrator group to turn protection on or off for a computer.
On the
Configure menu, click
On-access scanning. In the
On-access scan settings for this computer dialog box, click the
Scanning tab.
To turn on-access scanning
on for the computer, select
Enable on-access scanning for this computer, and click
OK. The Sophos Anti-Virus system tray icon turns
blue.

To turn on-access scanning
off for the computer,
deselect Enable on-access scanning for this computer, and click
OK. The Sophos Anti-Virus system tray icon turns
gray.

In the
Sophos Anti-Virus window, the
Status menu is updated.
Note: Sophos Anti-Virus retains the settings you make here, even after you restart the computer. If you have turned on-access scanning off, it remains
inactive until you turn it on again.
Note: If you turn on-access protection
off, you can still run on-demand scans of your computer.
Disclaimer: The images in this post were obtained through Google Images search, and their respective website locations should show up in the image text of this post. If not, I can provide you with the link. (Just covering my bum)
Ray911
Jun 25 2009, 08:43 PM
I have a dell vostro 200 running on xp sp2. I installed bitdefender total security 2009 but didn't work well; didn't even appear in the taskbar and could only run manual scan and that too was screwed up and used to delete all exe files including games and everything good. I was told by a HJT team member to run combofix for which i had to disable the firewall of bitdefender but i couldn't as it wasnt there in the taskbar so i uninstalled it and rebooted my PC but still combofix tells me Bitdefender firewall is active . I checked in the C:\Program files for the bitdefender folder but it was deleted, tell me what shall i do as Combofix has to be run to remove malware but tells me it will run on my own risk.
krara1
Jun 26 2009, 07:09 PM
I'm trying to disable PREVX (3.0). WHen I right click on the Prevx icon, Show Management Console is not an option. There is an option to "Stop Monitoring." Is that what I should choose?
I also have the Norton Antivirus Corporate Edition that I need to disable. I tried to find directions on how to do this via the link on the page, but got stuck since "status & settings" is not in my left nav. Can you help?
quietman7
Jun 27 2009, 06:39 AM
Instructions to disable Norton Antivirus Corporate Edition are provided in the
Norton AntiVirus Corporate Edition User's Guide under the section
Turning File System System Protection off temporarily.
amatechture
Jul 2 2009, 11:17 PM
I am running Windows in Safe mode (the malware on my computer blocks my control when I go into full Windows) and the above disabling directions don't seem to apply for AVG and Spybot--the controls for the software seem to run differently in Safe Mode. Adaware looks similar though so should be ok with that. Please help with disabling in Safe Mode!
Thanks,
I am running
AVG 8.5
Adaware
Spybot
garmanma
Jul 3 2009, 11:19 AM
Basically, what you should be concerned with are real time scanners
AdAware is On Demand. So is Spybot, for the most part. You just need to be concerned with the Teatimer function, which is covered in this thread
For AVG, just right-click on the icon in the system Tray and select Exit
Daddys_Jewel
Jul 5 2009, 12:18 AM
I read through the instructions and previous posts, but I still can't figure out how to disable McAfee's real time scanner, Total Protection Service, so I can uninstall ComboFix, per a helper's instructions. When I started the uninstall, I got a warning window that TPS was running and not to proceed until it was disabled. But there is no option to exit. (I hope it's okay to link an image.)

When I go to my programs menu to open TPS, nothing happens. It doesn't open, so there is nothing to turn off. Any ideas on how to turn it off? Thank you!
Daddys_Jewel
Jul 5 2009, 12:28 AM
I went to McAfee and read the online manual. There is supposed to be another icon in my tray, but it's not there. It's a white M in a red square box. Is there another way to disable it? Thank you.
williamkidd
Jul 6 2009, 07:24 PM
QUOTE(garmanma @ Jul 3 2009, 12:19 PM)

Basically, what you should be concerned with are real time scanners
AdAware is On Demand.
Hi garmanma,
Would Ad-Aware's Ad-Watch Live! be considered a real-time scanner? The
product description shows it as being "Basic integrated real-time protection" but I'm not sure if that qualifies as a scanner.
If it is then then disabling it is easy. Right-click on the Ad-Aware icon in the system tray and choose
Disable Ad-Watch Live!.
bolzano_1989
Jul 10 2009, 06:33 AM
Coud someone give me the proper instructions to Temporarily Disable these Antivirus from Vietnam :
CMC Antivirus :
http://cmcinfosec.com/download/setupCMCIS.exe ( FROM
http://cmcinfosec.com/download.php )
BkavHome Antivirus (BKAV ) :
http://middle.bkav.com.vn/BkavHomeSetup.exe and the update file :
http://middle.bkav.com.vn/BkavHomeUpdate.exeQUOTE
During the process of removing malware from your computer, there are times you may need to use
specialized fix tools. This is especially true if you are receiving help from a member of the HJT Team. Certain embedded files that are part of these specialized fix tools may at times be detected by your anti-virus or anti-malware scanner as a "
RiskTool", "
Hacking tool", "
Potentially unwanted tool", a
virus or a "
Trojan" when that is not the case.
These tools have been carefully created and tested by security experts so if your anti-virus or anti-malware program flags them as malware, the detection is what's known as a "
False Positive". Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically
remove them. In these cases, the removal of these files can have
"unpredictable results" and
unintentional results.
To avoid any problems while using a specialized tool it is
very important that you
temporarily disable your anti-virus and/or anti-malware programs
before using them or when instructed by a member of the HJT Team. You can re-enable these programs after the malware removal process has been completed.
Many folks may not be sure how to do this so the BC Staff has created a list of common anti-virus programs and the relevant steps to disable their
Real-time protection capabilities. When your system has been cleaned or when advised by your helper, it is important that you re-enable your security programs to avoid re-infection. A special thanks to
Yourhighness for the diligent effort in compiling this list.
FriscoGirl
Aug 11 2009, 05:01 AM
How do you disable Spybot and Teatimer when you cannot get the program to load - the applications are shown as running the the Windows Task Manager - but the process cannot be stopped.
robertav8
Aug 23 2009, 12:38 PM
None of this will work, I have to contact AVG
richsale
Sep 1 2009, 09:09 PM
In Avast I right clicked on the avast! icon in system tray and chose (Stop On-Access Protection). When I start combo fix I get Avast anti virus running, how do I shut this off?
DaChew
Sep 2 2009, 08:55 AM
QUOTE(richsale @ Sep 1 2009, 10:09 PM)

In Avast I right clicked on the avast! icon in system tray and chose (Stop On-Access Protection). When I start combo fix I get Avast anti virus running, how do I shut this off?
It can be quite dangerous running CF on your own, that's why the author and Bleepin put all the warnings and disclaimers up.
However back to disabling Avast, after some googling I found out Avast was purposely designed not to be disabled at bootup, which is what you would want if you were making sure that avast did not intefer with malware removal that required a reboot.
We see this with McAfee and Norton products where people have to uninstall the program to truly disable it. Seems Avast is going that way.
That catch 22 issue, damned if you do(install rsident av protection and then get infected) damned if you don't(not install AV resident protection)
princess_sophia
Sep 23 2009, 04:26 PM
How to disable McAfee® Total Protection™ Service 5.0.0.604
Right click the M shield

and click on Open Console
Click on action menu and then click on Product Details
Under virus and spyware protection click Disable.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.