How to remove malware with CESAM Anti-Malware

Brief overview:

• Disable the malicious object.
• Reboot your computer.
• Delete the disabled file from your hard disk.
• Remove the disabled entry from the CESAM Anti-Malware ("Delete from storage" function).

Detailed tutorial:

1. Start the CESAM and wait until the scanning process is finished.

The list of the files that are automatically loaded by your system will be displayed.

2. You will be suggested to scan all autoruns for viruses (read more about the Online scanner). This will simplify the detection of malware, because most of files will get Trusted () status, that will allow to remove them from the list of suspicious objects.

After that you can also press the Filters button (the 6-th button at the top tooolbar of the CESAM Anti-Malware window) and temporarily disable displaying of safe files by unchecking Trusted and Checked statuses.

Thus, all trusted and checked files will be removed from the list and won't bother you in searching for malware ones.

Files with Unknown status.

Files with "Unknown" status may be both safe or malware. Therefore, if you are not sure about them, merely perform a scan again after some time - your unknown files will be added to the database and will get "Trusted" or "Malware" status.

4. Now scroll through the list of files and disable malicious objects by unchecking the checkbocks near them (malicious objects are marked with "Malware" status).

Then press Apply button.

If you have several malware objects, in some cases it is very important not to press Apply until you haven't unchecked all of them, because, if some component of the virus remains active, it can restore all the other components.

Restart your computer.

Now the virus is not active any more.

6. Start CESAM Anti-Malware again to delete disabled viruses from disk.

To simplify the search for disabled files you can right-click on it and choose Jump to file from the context menu. This will open the folder containing the file. Delete the file.

Now it's time to remove the disabled objects from CESAM Anti-Malware (it saves all information of what you have disabled, in case you ever want to restore it again).

Right-click on the disabled object and choose "Delete from storage" from the context menu.

What to do if malware object are automatically restored.

In this case you need the Disable objects using the driver function

Before disabling the malicious object as described above, do the following:

Go to CESAM Anti-Malware settings by pressing "Settings" at the top toolbar.

Set the "Disable object using the driver" option to "Always".

Then, do everything as it has been described before. After pressing Apply you will see the list of objects pendind being disabled (to make sure you haven't disabled something additional). Then you will be prompted to reboot the system.