User guide

Cleaning Rootkits through Quick Heal Emergency CD

In some cases it may happen that rootkits are not being cleaned. They are reappearing during Quick Heal Anti-Rootkit scan. In such

case you can also use Quick Heal Emergency CD for proper cleaning. All you have to do is create a Quick Heal Emergency CD and

boot your system through it. To create a Quick Heal Emergency CD and clean your system through it please follow the below given

steps:

Steps 1

To create an Emergency CD

To create Quick Heal Emergency CD, your system should fulfill following requirements:

• Licensed copy of Microsoft Windows Operating System. (Windows 2000/XP/2003 or above).

• Microsoft Windows Installation CD. (Windows XP/2003 or above)

• A blank writable CD and a CD-Writer drive.

• Emergency CD can only be used to scan and clean drives of the same system for which you have licensed Microsoft

Windows operating system.

Creating Emergency CD:

1. Start Quick Heal Total Security.

2. Click on Tools from the left pane.

3. Click on Emergency CD.

4. Click Next.

5. Select Create Emergency CD, click Next.

6. Bootable files required to make the CD bootable. Select Operating System Installation CD option and insert the

Operating CD (Windows XP and Windows 2003 operating system CD only). Select the CD-Rom drive.

7. Click Next.

8. System files will be fetched from the installation CD.

9. Remove the Operating System Installation CD and insert a blank writable CD.

10. Select the CD-Rom drive.

11. Click Next.

12. Emergency CD will be created.

Steps 2

1. Start Quick Heal Anti-Rootkit.

2. In the left side of the main window click on Start Scan.

3. Quick Heal Anti-Rootkit will start scanning your system for suspicious rootkit activity in running Processes, Windows

Registry and Files and Folders.

4. After completing the scan result is displayed in three different tabs that will display hidden items in running Processes,

Windows Registry and Files and Folders.

5. You can now select and take appropriate action against each displayed threat. Like you can terminate the rootkit process

or rename the rootkit registry entry or files.

Steps 3

1. Boot your system using Quick Heal Emergency CD.

2. Quick Heal Emergency CD will automatically scan and clean the rootkits from your system during native scan.