Once a malicious program is detected by Dr.Web anti-virus, one of the following actions can be applied to it:
- cure– if the file is damaged computer virus, then it can be “cleaned” by removing harmful content and preserving its useful properties. This action is not available to Trojans, because they are completely malware and the only correct action for them is Delete.
In most cases, the “Cure” option will be inactive. This is due to the fact that the main percentage of threats currently are not viruses, but Trojans and other programs, the files of which are themselves created to perform some malicious actions on a PC, be it data theft, installation of banners, encryption of information, and much more. other. The files they contain either have nothing valuable in them, or the malicious functionality is inseparable from the useful one, for example, as is the case when a program, for example, makes it easier to take screenshots while simultaneously downloading and installing a Trojan miner on the PC.
You can only cure those files that have “caught” a virus - additional program code that adds negative functionality to them. This code can be “amputated”, thereby making the file again harmless and suitable for work.
- Delete– permanently delete a malicious object (file, script, email attachment, etc.).
- Move to quarantine– if for some reason you want to save the file (for example, to send it to the Doctor Web anti-virus laboratory), you can move it to a secure quarantine folder, from where it can no longer harm your PC.
- Ignore– do not perform any actions. You can do this only if you are completely sure that the alarm is false.
Why is it important to scan periodically?
Many users of Dr. Web, knowing that they are constantly protected by the anti-virus guard SpIDer Guard, completely neglect regular PC checks using an anti-virus Scanner. But under no circumstances should you do this!
The task of an anti-virus guard is to save the system from already activated malware, but rather than repel an attack that has begun, it is better to destroy the still “dormant” threat, and only a scanner can handle this.
Some users believe that since a scan has already been carried out at the time of installation of Dr.Web, the situation is then controlled by SpIDer Guard. But new threats appear every day. And a situation may occur that the new one - i.e. not yet known to the Dr.Web virus database - a virus or Trojan has entered the computer, but the guard does not yet have information about it. As long as the Trojan or virus is not active, it does no harm. The “trigger” for its activation can be the onset of a certain date/time, or even the action of a user who launches it with his own hands.
The strength of the antivirus is that new databases are released several times a day. And if in the morning the antivirus did not yet recognize some Trojan by sight, then in the evening it can already catch it.
It is the constant updating of databases and components, as a response to the improvement of threats by virus writers, that is the reason why a full PC scan needs to be carried out periodically, at least once a week. And then even the newest threats will be detected before they begin their malicious activities.
Set up scanning on a schedule, at least once a week. Let the test be carried out at a time convenient for you, for example, when you are not using a computer.
What is the scanner used for? Isn't the SpIDer Guard anti-virus monitor enough to always monitor all access to files?
Dr.Web scanner for Windows scans files either by user command or according to a schedule specified in the Scheduler. Not all files are scanned, but only those specified in the scanner settings. By default, files are scanned by format - files in archives, packaged and mail files, as well as RAM and all startup objects. If desired, you can specify scanning of disks, folders, scanning by file type, by a specified mask, or scanning all files. To view and/or change the current scanner settings:
- Click on the mini-agent icon (spider) in the lower right corner of the screen.
- Click on the “Scanner” - “Custom” button. The scanner window will open.
- Click on the settings window button, which is located in the upper right corner of the scanner window, the middle button (“Wrench”). The scanner settings menu will open.
How to enable scheduled scanning?
Use the standard Windows task scheduler.
Setting up a scanner schedule for Windows 8/8.1/10:
- Press the “Windows” + “X” keys in sequence.
- In the menu that opens, select “Computer Management”.
- The Computer Management window will open. In the "Utilities" group, find the "Task Scheduler" item and expand it.
- Find "Task Scheduler Library" and expand it.
-
- select the frequency of the scan: “once”, “daily”, “weekly” or “monthly”;
Setting up a scanner schedule for Windows Vista and Windows 7:
- “Start” → “Control Panel” → “System and Security (In Windows Vista → “System and Maintenance”)” → “Administrative Tools” → “Task Scheduler”. The Task Scheduler settings window will open.
- In the "Task Scheduler (Local)" group, expand the "Task Scheduler Library" settings group.
- Go to the Doctor Web task group.
- Right-click on the “Dr.Web Daily scan” task and select “Properties” in the contact menu that opens.
- The “Dr.Web Daily scan” task settings window will open. Go to the Triggers tab. If necessary, change the scan schedule, to do this:
- select an existing schedule and click on the “Change” button;
- select the frequency of the scan: “once”, “daily”, “weekly” or “monthly”
- Select the date the task will first run and the time it will be completed.
- Activate the task. To do this, right-click on the “Dr.Web Daily scan” task and in the window that opens context menu select "Enable".
Setting up a scanner schedule for Windows XP:
Open Windows Task Scheduler (Start → Control Panel → Scheduled Tasks). Find the Dr.Web Daily Scan task that was preinstalled when installing the antivirus and open it for editing. On the Job tab, select the Allowed checkbox. Specify the required scanning frequency and time on the “Schedule” tab. Click OK to apply the settings. Enter the username and password as prompted by the operating system.
Most often, just checking for viruses with an antivirus that is already available and constantly running on the computer is not enough. No matter what antivirus you use, it does not guarantee you complete protection from viruses, not to mention protection from various network attacks (but that’s a different story...). Therefore, from time to time it is better to check your computer not only with your regular antivirus, but also with another scanner, for example, from DrWeb. The program is called Dr Web CureIt, is designed to scan and clean your computer from viruses and is free.
In this article I will tell you how to use this scanner.
You need to understand that DrWeb CureIt is not a full-fledged antivirus program! This is just a scanner to scan your computer once over a period of time. Moreover, the program is not updated and in order for each new scan to be carried out with the latest databases, you need to download it again from the developer’s website.
Downloading and launching the DrWeb CureIt program
The developer of the program is, accordingly, the DrWeb company, so you need to download the program from their official website.
Do not download such programs from third-party sites, because, firstly, you can download a virus application instead of DrWeb CureIt, and secondly, even if you download a real scanner, most likely it will already be outdated.
Do not uncheck any boxes in the next window (otherwise you will not be able to download) and click the “Download” button again.
The program size is about 150 MB.
Wait for the installer to download and run the downloaded file.
When the program starts, check the “I agree to participate...” checkbox and click “Continue.”
The program is not installed on the computer, so all that remains is to configure and run the scan.
Setting up and running scans, neutralizing threats
In the next window, click on the key icon and select “Settings”.
On the first tab “General” at the bottom, check “Prohibit applications from low-level writing to the hard drive.”
On the “Exceptions” tab, under the line “Check the contents of the following files”, check “Archives” (as a result, the scan may slow down a little due to the fact that archived files will also be scanned, but this way you will scan the computer more thoroughly).
Click “OK” to save the program settings.
In the main program window, click “Select objects to scan.”
In the list of objects to check, check the following:
Boot sectors of all disks;
RAM;
System restore points;
Then click “Click to select files and folders”.
Mark the sections in the window hard drive on the computer that you will scan for viruses, for example:
If you want to completely scan your entire computer at once, tick everything from the list, but in this case the scan may take several hours (sometimes it lasts a whole day). It all depends on how much information is stored on your disks. If there are terrabytes of data, then the verification will take a very long time! :)
Therefore, if the hard drives are large and there is a lot of information on them, it would be easier to start by selecting only the disk with the system (“C”) and check it, since it is the most important, because the system is stored on it (with very rare exceptions when users install Windows to another section). Then you check the second disk and so on in turn, starting the scan all over again.
Click “OK” to save your selection.
Click “Run Scan” to start scanning.
All we have to do is wait for the check to finish...
At the end of the scan, the DrWeb CureIt scanner will display a list of threats found, if any were found and it will be possible to neutralize them. I recommend going through the list and checking whether the scanner has considered any file you need to be a virus, because false positives always occur. If not, then it is better to mark all threats as “Delete” in the “Action” column and click the “Defuse” button.
After a few seconds or minutes, depending on the number of threats found, they will be deleted.
If you decide to check sections hard drives one by one, then when checking the next section, disable those scan objects about which (rootkits, recovery points, etc.). Because you already checked these objects during the first scan and there is no point in checking them again.
Conclusion
The DrWeb CureIt scanner is very suitable for additional cleaning of your computer. I always check all hard drives with it regularly, at least once every couple of months, in addition to regularly scanning the entire computer with the main antivirus.
Updated: 02/09/2018 Published: 2016 or earlier
Description
CureIt (read as cue it or rude kure it) - free (for home computers) healing antivirus utility. The main difference from most “colleague programs” is that it does not scan the system in automatic mode, but must be started manually. There are also no updates for it and you need to download the latest version every time before starting it. The undeniable advantages of this program include its free nature, protection against a wide range of unwanted software (viruses) and the ability to run in safe mode.
How to use
1. How to download
There is no need to register, just leave the checkboxes to send statistics and agreement with the terms and conditions (otherwise, free version will not be available for download) and click on Download Dr.Web CureIt!:
The program will be copied to our computer.
If CureIt does not download, you need to download it on another computer and transfer it to a flash drive.
2. How to scan
It is advisable to start the computer in safe mode;
Double-click on the downloaded exe file;
Check the box that you agree to take part in improving the quality and click Continue:
And press the button Start checking— a full scan of the computer will begin:
Express scanning is performed quickly (up to 5 minutes). A full scan can take a long time, depending on the speed of the media and the amount of data.
If viruses are detected, you must specify an action for the program. It is preferable to treat infected files. If the file cannot be disinfected, you can choose to either delete it or move it to storage.
If the program does not start, try booting into safe mode (if this has not already been done), download Dr.Web LiveDisk (LiveCD) or first scan your computer with an analogue one (list below).
3. How to update
Free Cureit for home is downloaded in one single file - no updates are provided. If you need to scan your computer with a fresh version of the program, you need to download it again.
Dr. Web CureIt is a free healing utility that can be used to thoroughly check your computer for viruses. The utility can be used even if another antivirus is installed on the computer, i.e. conflicts between Dr. Web CureIt and installed antiviruses do not occur. The big advantage of CureIt is that it can be launched from a flash drive - there is no need to install the program on your computer.
Where to download Dr. Web CureIt free
Important! Download the utility only from the official website of the program. Otherwise, there is a high risk that you will download a program infected with viruses.
Step 1. Go to the Doctor Web website and click on the button Next (the official website always contains the most latest version Dr. Web CureIt, so do not try to download the utility via torrent).
Reading a short user agreement and click the “Next” button
Step 2. Read the information about the program and click on the button Download Dr.Web CureIt! with statistics sending function(if we select the option “I refuse to send statistics”, then we will be offered to buy the program, so free use of Dr.Web CureIt is possible only if statistics are sent to the developers of the utility).
Click on the button “Download Dr.Web CureIt!” with the function of sending statistics"
Step 3. We accept the license agreement by checking the box next to the inscription “I accept the terms License Agreement" and click on the Continue button.
Check the box and click on the “Continue” button
Step 4. Allow the file to be downloaded.
Allow file upload
After the utility is downloaded to your computer, you can copy it to a flash drive and run it on other PCs running Windows.
Let me remind you again. The utility is regularly updated - information about new viruses that have appeared on the Internet is added to it. When checking your computer use only the best new version programs.
How to use the Dr. Web CureIt
After launching the downloaded file (with the .exe extension), we will be prompted to run the default scan, i.e. in enhanced protection mode.
It is proposed to run Dr.Web CureIt in enhanced protection mode
If you know that your computer is infected with viruses or there are signs of infection on your computer, then just click OK, after which the scan will begin in enhanced protection mode. In this mode, the malicious activity of viruses will be blocked by the utility.
Important! In enhanced protection mode, you will not be able to work on the computer until the end of the scan.
Full computer scan with the possibility of parallel work of users
Step 1. In order to be able to simultaneously scan your computer for viruses and work on it, after starting the utility, click on the Cancel button.
Step 2. We agree to send statistics and click on the Continue button.
We agree to send statistics and click on the “Continue” button
Step 5. We put a tick next to the “My Computer” item - after this all disks available on the PC will be highlighted. Click on the OK button.
Select all drives and click “OK”
Step 6 Press the button Run scan.
Click the “Start scan” button
The scan can take several hours - the scan time depends on the performance of the computer and the occupied disk space.
Most likely, Dr. Web CureIt will find something. In a specific case, 6 threats were found, despite the fact that Kaspersky is installed on the computer Internet Security(KIS) with fresh databases. To be fair, it should be noted that the viruses were found not on the “C” drive, but on the “E” drive, on which installers of some programs and website backups were stored.
Attention! If Dr. Web CureIt found “left” entries in the hosts file, then before clicking the Disarm button, read the information below.
Dr. Web CureIt detected 6 threats on drive “E”
What if CureIt wants to fix the hosts file?
So, if a hosts file appears in the list of threats, then before deciding whether to neutralize the threat or not, you need to consider the situation:
- If you cannot access sites such as Odnoklassniki and VKontakte, then it makes sense to allow the utility to make changes to the hosts file;
- If you use unlicensed Adobe programs, such as Photoshop, you should not rush, as most likely the hosts file will look like this:
All lines that begin with the “#” sign are comments and can be ignored, since they are not processed. We are interested in the last four lines (circled in red):
- 127.0.0.1 lmlicenses.wip4.adobe.com
- 127.0.0.1 lm.licenses.adobe.com
- 127.0.0.1 activate.adobe.com
- 127.0.0.1 practivate.adobe.com
These lines are added to the hosts file when activating unlicensed Adobe programs. This is done to prevent programs from contacting Adobe services and checking the license. If these lines are deleted by the Dr. Web CureIt, work Photoshop programs, After Affects, Premiere - will be blocked.
Good luck everyone! Protect your computer from viruses - they are contagious!
Nikolay Peredelkin
Hello. Now I will write a very interesting and useful article about the utility CureIt by Dr.Web. I will write about how you can use it to check the reliability of your antivirus and how you can quickly remove a virus, Trojan and other malicious software. Let’s first tell you a little about Dr.Web CureIt, and then I’ll write what you can do with this utility, in what cases you need to use it, how to download and use the Dr.Web CureIt utility.
Dr.Web CureIt is a free utility (for treatment only home computer), from the famous antivirus company Dr.Web. The whole point is that Dr.Web CureIt does not need to be installed on your computer and you do not need to remove the already installed antivirus. Just download Dr.Web CureIt, launch it, select the scanning mode and wait for the utility to scan our computer and remove the threats found.
Why use Dr.Web CureIt?
If you already have an antivirus installed, for example, I have ESET NOD32 installed, then using the CureIt utility you can check the reliability and effectiveness of already installed antivirus. How? Yes, just scan your computer using CureIt. And if it detects a lot of viruses with which your antivirus for a long time lived in harmony, then you should think about changing your antivirus, for example to the same Dr.Web.
As I already wrote, I have NOD32 installed, so when scanning with Dr.Web CureIt, it found and cured only one Trojan. Whatever antivirus you have, well, except for Dr.Web :) I advise you to perform such a check and understand how effectively your antivirus works.
It often happens that strange and different problems appear on your computer. Typically, viruses and other malware are to blame. Sometimes it’s clear that the virus is to blame for everything, and sometimes you can’t tell what the problem is. In any case, I always advise scanning your computer with an antivirus with updated antivirus databases, or AVZ utility which I wrote about in the article.
So, the Dr.Web CureIt utility is another tool that needs to be used to check your computer in such situations.
How to check your computer using Dr.Web CureIt?
Enough with the theory, let's move on to the technical part. First, we need to download the utility. To do this, go to the website, scroll the page and click on the button “Download for free”.
Scroll the page and press the button.
Put a tick next to “I accept the terms of the License Agreement.” and click “Continue”.
A message will appear in which you need to click “Save” and save the file, for example, to your desktop. The file size is almost 106 MB.
When the file cureit.exe fully boot onto the computer, launch it by double-clicking on it with the left mouse button.
A window will open with a message that Dr.Web CureIt is running in enhanced protection mode. Click “Ok”. In enhanced scanning mode, the computer will be blocked, but there is also a greater chance of finding a virus.
You can check the box and agree to participate in the improvement program antivirus programs and click “Continue”.
If necessary, you can select objects to scan and click on the big button to start scanning “Start checking”.
Now you need to wait until the check is completed. After scanning, the utility will display a list of threats found, opposite which you can choose what to do with them; I recommend choosing “Cure”. And press the “Disarm” button.
After cleaning the system, reboot, and the file that we downloaded can be deleted.
Now you know another one good way, which can quickly remove the virus. This utility definitely deserves attention and thanks to Dr.Web for the opportunity to scan and clean your computer from viruses for free. Everything is organized so simply that anyone can perform such a check, you don’t have to be a specialist.
Check your computers, check the effectiveness of the antiviruses that you have installed. Good luck!