# Secure your computers from Fireball malware

Fireball, the latest Chinese browser hijacker, has affected around 250 million computers worldwide. Once the malware is installed, it targets browsers and turns them into zombies. These zombies generate unwanted advertisements in the browser and have the ability to run any code on the infected machines, leading to vulnerable file downloads. This malware/adware is also capable of installing more malicious adware, posing a severe threat to enterprise security.

ManageEngine Endpoint Central offers a solution to protect your computers from Fireball malware. Using Endpoint Central, you can scan the computers in your network, detect the files associated with Fireball malware, and remove them immediately from the affected computers.

[Download free e-book: Six best practices for escaping ransomware](https://www.manageengine.com/products/desktop-central/ransomware-ebook.html?fireball-Wpage)

## Steps to secure your computers from Fireball malware using Endpoint Central

You can follow the steps given below to secure your computers from Fireball malware.

1. Under Software Deployment, create an EXE package and upload the [PowerShell script file](https://www.manageengine.com/products/desktop-central/detect-fireball-malware.ps1).

2. Specify the installation command as *powershell.exe -ExecutionPolicy RemoteSigned -file DetectFireballMalware.ps1*

   ![Fireball malware](https://www.manageengine.com/products/desktop-central/images/fireball1.png)

3. Under Advanced Options, specify the maximum time limit for installation as 6 hours and specify the exit code as 225, then create the package.

   ![Fireball malware](https://www.manageengine.com/products/desktop-central/images/fireball2.png)

4. Deploy this package as a computer configuration across all the computers in your network.

   **Note:** When the files of the Fireball malware are detected, they will be automatically removed and the deployment status will be successful. To identify the computers where the malware is found, check the remarks on the computer for the message: "Operation did not complete successfully because the file contains a virus or potentially unwanted software".

You have now secured your computers from Fireball malware using Endpoint Central.

[How To's](https://www.manageengine.com/products/desktop-central/how-to.html)