The CureIt! Utility, developed by Danilov's laboratory, is a lightweight version of the Dr.Web anti-virus. It does not require installation and is designed to scan your computer on demand. The program does a good job of removing most viruses and is convenient to use when infecting the system with viruses and malware. You can use the utility both in the absence of any protection on the computer, and in parallel with another antivirus - for safety net. In this article, we will show you how to use CureIt and get rid of malware with it.
Where to download the program
Click on Free download:
Please select Download Dr. Web CureIt! with the function of sending statistics:
Check the box I accept the terms of the License Agreement.
Click Proceed:
Wait for the file to finish downloading.
How to use CureIt
Run the downloaded file:
Agree to the security warning:
Ditch the enhanced protection mode:
Check the box I agree…
Click on Proceed:
Select all available objects:
In the upper right corner, click the button Settings and check the box Automatically apply actions to threats:
Click the button Run check:
The scan is running and if viruses are found, they will be automatically removed!
Attention! After the utility is finished, be sure to restart your computer!
In the event that you are performing treatment not from Safe Mode, we strongly recommend that you turn off your main antivirus during the scan. This will greatly speed up the check and save you from possible unpleasant surprises.
2. Run the downloaded file.
If you have Windows 7 or 8, be sure to run the file as administrator (right-click on the file and select the appropriate item).
3. Agree to the request of Dr.Web CureIt! enable enhanced protection mode.
4. You agree to participate in the Customer Experience Improvement Program by checking the box and clicking “Continue,” otherwise the check will fail.
5. Before checking, go to "Options" by clicking in the upper right corner on the "key", select "Settings".
6. In the first tab “Basic” we mark
- “Protect Dr.Web CureIt!”,
- “Block access to the network” and
- “Automatically apply actions to threats”.
7. You don't need to change anything else in the settings. "OK".
For a full scan of the computer, click "Start scan", to select the scanned items, click "Select objects to scan".
For the first scan, I advise you to fully scan your computer.
8. After checking by the Dr.Web CureIt! a window with scan results will appear, which shows the number of detected and neutralized threats, and below the list of disinfected, moved or deleted files is displayed.
9. If in the list you find a remote system file and are afraid for the performance of Windows, then it is easy to restore it from quarantine by going to
“Options” → “Quarantine Manager”.
Mark desired file and click "Restore".
Thus, you will not damage the system and will be able to re-scan for viruses with another scanner, such as or, which, perhaps, will cure the infected file, rather than delete it.
Dr. Web CureIt is a free curing utility with which you can qualitatively scan your computer for viruses. The utility can be used even if a different antivirus is installed on the computer, i.e. conflicts between Dr. Web CureIt and installed antivirus software does not arise. The big plus of CureIt is that you can run it from a USB flash drive - you don't need to install the program on your computer.
Where to download Dr. Web CureIt for free
Important! Download the utility only from the official website of the program. Otherwise, there is a big risk that you will download a program infected with viruses.
Step 1... Go to the Doctor Web website and click on the button Further (the official website always contains the most latest version Dr. Web CureIt, so don't torrent download the utility).
We read a small user agreement and click the "Next" button
Step 2. We read the information about the program and click on the button Download Dr.Web CureIt! with the function of sending statistics(if you select the option "I refuse to send statistics", then we will be offered to buy the program, so free use of Dr.Web CureIt is possible only if statistics are sent to the utility developers).
Click on the button “Download Dr.Web CureIt! with the function of sending statistics "
Step 3. Accept the license agreement by ticking the box next to the "I accept the terms of the License Agreement" and click on the Continue button.
Put a tick and click on the "Continue" button
Step 4. Allow file upload.
Allow file upload
After the utility is downloaded to your computer, you can copy it to a USB flash drive and run it on other PCs running Windows.
I remind you again. The utility is regularly updated - it adds information about new viruses that have appeared on the Web. When checking the computer use only the most new version programs.
How to use the Dr. Web CureIt
After launching the downloaded file (with the .exe extension), we will be prompted to run the scan by default, i.e. in enhanced protection mode.
It is suggested to run Dr.Web CureIt in enhanced protection mode
If you know that your computer is infected with viruses or there are signs of a computer infection, then just click OK, after which the scan will start in enhanced protection mode. In this mode, the malicious activity of viruses will be blocked by the utility.
Important! In the enhanced protection mode, you will not be able to work on the computer until the end of the scan.
Full computer scan with the possibility of parallel user work
Step 1. In order to be able to simultaneously scan the computer for viruses and work on it, after launching the utility, click on the Cancel button.
Step 2. We agree to send statistics and click on the Continue button.
We agree to send statistics and click on the "Continue" button
Step 5. We put a tick next to the item "My Computer" - after that all the disks on the PC will be highlighted. Click on the OK button.
Select all disks and click "OK"
Step 6. Push the button Run check.
Press the button "Start check"
The scan can take several hours - the scan time depends on the performance of the computer and the occupied disk space.
Most likely Dr. Web CureIt will find something. In this particular case, 6 threats were found, despite the fact that Kaspersky is installed on the computer. Internet Security(KIS) with fresh databases. For the sake of fairness, it should be noted that viruses were found not on the "C" drive, but on the "E" drive, which contained the installers of some programs and site backups.
Attention! If Dr. Web CureIt found "left" entries in the hosts file, then before clicking the Neutralize button, read the information below.
Dr. Web CureIt found 6 threats on drive "E"
What if CureIt wants to fix the hosts file?
So, if the list of threats appears hosts file, then before deciding whether to neutralize the threat or not, it is necessary to proceed from the situation:
- If you cannot go to sites such as Odnoklassniki and VKontakte, then it makes sense to enable the utility to make a change to the hosts file;
- If you are using unlicensed Adobe programs such as Photoshop, you should not rush, as most likely the hosts file will look like this:
All lines that begin with the "#" sign are comments and you can ignore them, since they are not processed. We are interested in the last four lines (circled in red):
- 127.0.0.1 lmlicenses.wip4.adobe.com
- 127.0.0.1 lm.licenses.adobe.com
- 127.0.0.1 activate.adobe.com
- 127.0.0.1 practivate.adobe.com
These lines are added to the hosts file when unlicensed Adobe programs are activated. This is done to prevent programs from contacting Adobe services and checking the license. If these lines are removed by the Dr. Web CureIt, work Photoshop programs, After Affects, Premiere - will be blocked.
Good luck to all! Protect your computer from viruses - it's contagious!
Nikolay Peredelkin
If a threat was detected in an installation package included in the archive object, Dr Web CureIt will move the entire object to quarantine.
The disinfection of some objects requires a system reboot.
Available options:
- Suggest system restart;
- Reboot the system to automatic mode... Unsaved data may be lost.
Settings section Exceptions
In this section, you can specify files and folders that you do not need to scan, as well as determine whether to scan archives and installation packages.
Scanning mail files is available only in commercial versions of the program.
List of files excluded from scanning
You can specify files or a mask by which the program will determine the files to be excluded from scanning.
Creating a list of files excluded from scanning
To define a list, select one of the actions:
- Specify the name of the file, or create a mask. For existing files use the button Overview... Using a mask, you can set the part of the name common to many objects. Symbols used:
- * - replacement of any sequence of characters;
- ? - replacement of any single character;
- Others, used not for replacement, but meaning that this symbol should be in this position.
- Examples of masks:
- * .jpg - any files jpg;
- log _ *. txt - files with a part of the word at the beginning of the name log_ with extension txt;
- file _ ??. doc - files doc, in the name of which after the word file_ there are any 2 symbols.
- To add a file name or mask, click the button Add to.
- To remove a file from the list, press the button with the appropriate name, having previously selected it.
Settings section Report
The section is intended for making settings in the report creation mode.
The program offers the following options for maintaining a report:
- Standard, fixing the start, stop of the program and threats that were detected;
- Debug - the most detailed report. Recommended in case of problems with Dr Web CureIt, or upon request of technical support.
And the virus writer said to viruses: "Be fruitful and multiply! ..".
What Dr.Web CureIt!
Dr.Web CureIt Is a free antivirus scanner based on a standard scanner Dr.Web... Despite some limitations compared to Dr.Web anti-virus for Windows(lack of resident monitor, command line console scanner and module automatic update, impossibility of checking archives, etc.), Dr.Web CureIt! is able to efficiently scan the system and perform the necessary actions on the detected threats.
Dr.Web CureIt! ideal for situations where installation of antivirus is impossible as a result of viruses or for any other reason, because it does not require installation, it works under MS Windows 95/98 / Me / NT4.0 / 2000 / XP / 2003 / Vista + and is constantly updated and supplemented with fresh virus databases, which provides effective protection against viruses and other malicious programs.
Dr.Web CureIt! detects and removes: rootkits, mail worms, network worms, file viruses, Trojans, stealth viruses, polymorphic viruses, "incorporeal" viruses, script viruses, spyware ( Spyware), password hijackers, keyloggers, dialers, adware (Adware), potentially dangerous, trapdoors, joke programs, malicious scripts.
How to use the utility Dr.Web CureIt!?
Go to the page www.freedrweb.com/cureit/, download;
- run the utility executable file;
- press Start -> OK... The system will be checked for active viruses;
- wait for the scan results;
- upon detection of infected objects, the system will be disinfected, incurable files will be moved to quarantine (a confirmation request will be issued before any action).
Configuring the utility
In the main window of the program on the tab Check you can select the scan mode by setting the corresponding switch - Quick check, Full check, Selectively.
On the menu Settings -> Change settings:
- tab Check (Heuristic Analysis, List of excluded paths, List of excluded files);
- tab File types (All files, Selected types, Preset masks);
- on the tab Actions you can set actions for detecting malicious objects ( Cure, Inform, Delete, Move, Rename);
- tab Report (Maintain report file);
- tab General (Autosave settings, Use settings from the registry, Check battery operation, Check priority, Use sounds).
Antivirus scan modes
Quick check
In this mode, the following objects are scanned:
– RAM;
– boot sectors all disks;
- startup objects;
- root directory boot disk;
- root directory of the installation disk Windows;
- system directory Windows;
- folder My Documents;
- temporary directory of the system;
- user's temporary directory.
Full check
In this mode, a full scan of all hard drives and (including boot sectors).
Selectively
This mode provides the ability to select any folders and files for subsequent scanning. Along with the selected objects, the boot sectors of all disks will be scanned.
Notes (edit)
1. By default, the program performs anti-virus scanning of all files using both virus databases and a heuristic analyzer (an algorithm that most likely detects viruses unknown to the program based on general principles their creation). When checked, they are unpacked executable files packed with special packers.
2. Healing Dr.Web CureIt! will cure an infected system once - it is not a permanent means of protecting against viruses. Supplied complete