What is Reddit's opinion of
Dr.Web CureIt!?
From 3.5 billion Reddit comments
14 reviews of this app found across Reddit:
you have the virus dormant on your system because of something else. not reddit. Use this: http://www.freedrweb.com/cureit/?lng=en
it will get the job done as it uses other means to detect it without the virus evading, if it is a virus.
also, anti-virus softwares are useless, they only prevent human error but dont protect from viruses. Prevention is the only way, and stuff like ad-block also helps, but im not sure if ads play a huge role in that.
If you run Windows, try this: http://www.freedrweb.com/cureit/?lng=en
It is Russian but it will detect most viruses and rootkits and other nasty stuff. The free version does not install but downloads a large file that can scan for viruses and other nasty stuff. Most of these adware and ransomware it can detect and remove as well.
You don't update it, just download a new copy.
Another good free one is Malewarebytes: http://www.malwarebytes.org/lp/malware_lp_form/
A third one is Emsisift emergency kit:
http://www.emsisoft.com/en/software/eek/
If you use all three, I doubt anything can survive not being detected. If you find a suspicious file you can mark it and send it to them to look at it.
Try cureIT by dr.Web (run it under SafeMode), here ~
http://www.freedrweb.com/cureit/?lng=en
...and do read it's documentation well for the numerous options it got underneath this porta-scanner (no installaton needed).
I think you might have stumbled on something. Download drWebb's cureIT (read documentation for its functional options), then run it under Safe Mode & see if it catches something malicious...
Ref uri here ~ http://www.freedrweb.com/cureit/?lng=en
Malwarebytes would definitely work. Check your proxy settings and make sure that you're not connected to one, normally a rootkit connects you via a proxy to the internet. I recommend the following
Malwarebytes - Below Dr. Web CureIt - http://www.freedrweb.com/cureit/?lng=en HiJack this - http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html And if it's bad enough, this ComboFix - http://www.bleepingcomputer.com/download/anti-virus/combofix
If you're using Windows:
1) Check the App History tab in the Task Manager. It shows how much traffic did any of installed Metro apps claim. (Windows 8+ only)
2) Open the Processes tab in the Task Manager, click on Network. This will show all of the running processes sorted by their network usage. If there is any abnormal amount of traffic coming from a process you don't know, google its name to ensure it isn't anything system-critical (like an update manager or something) and try to kill it.
3) Download Spacesniffer and try to find large folders which have been updated recently. This might help in case any of the users has been downloading vast amounts of data.
4) Install some traffic monitoring tool and collect data from several days worth of surfing.
5) Download CureIt and run a malware scan. It will remove potential malevolent processes that may be the source of your bandwidth inflation.
6) Ask the users if they have been watching a lot of videos or streaming music. It may be the problem.
7) Finally, call your ISP, explain the problem and ask if that's from their side (i.e., upstream). It may be a monitoring error, or something else alike.
Hmm, download & same time, read the full documentation on this malware/virus scanner. Once install, run it initially under Safe Mode (google the Howto that correspond to your winOS) ~
cureIT, ref uri here - http://www.freedrweb.com/cureit/?lng=en
Btw, if it's a desktop, dismantle your inoperatable hdd and boot it up as slave (remember to change the jumper-pin setup) on your other machine. BUT
...before you boot it up, better make sure your working PC has an updated functional anti-virus/malware on and scan the slaved hdd first! Might as well download/install this portable drWeb scanner as a backup (just remember not to run it tandem to your original resident scanner) AV scanner ~
Ref uri link, here - http://www.freedrweb.com/cureit/?lng=en
Note: This is a powerful portable version, can be kept on thumbdrive as backup scanner.
DrWeb got me out of some serious problems a few times. There's also a standalone no-install version (if you have a virus which prevents installations and updates); and there's the LIVE CD (I think it can be a USB stick), which you just boot up and scan with no worries, since it runs separately from your normal operating system.
I actually recommend more prevention (learn where to spot viruses and what to be suspicious about), instead of active defense and recovery.
The way I fixed this on both of my computers, a Frankenstein's Monster desktop and a Toshiba Satellite laptop, is as follows:
Run Antivirus 2012 malware so the window appears
Hit Ctrl-Alt-Del, open Task Manager
Right click on the malware's icon in the bar where the volume control is
Hit "Go to Process"
When it highlights the process, right click and hit "Go to File Location"
When the file location is displayed, end the process and quickly delete the file.
Now turn off your computer.
Restart in Safe Mode with Command Prompt (hit f8 to open the options while it's booting up)
When it boots, in the Command Prompt, type "regedit"
In the Registry Editor, go to Edit, then Find.
Type in the name of the .exe file associated with the malware (mine were "eyt.exe" and "icu.exe" respectively)
Delete every instance of this file in the registry, hit F3 after every deletion to search for the next one.
Now type "rstrui.exe" into the Command Prompt
It will open Windows System Restore.
Choose a restore point before your computer was infected.
System Restore will run.
The registry will be repaired, but not the malware.
To be safe, run a virus scan afterwards- I like Malwarebytes Anti-Malware and DrWeb Cureit. Links below :D
http://www.freedrweb.com/cureit/?lng=en
Good luck!
If you had a spare desktop in running condition with a working/updated AV/AM... download/install cureIT (note: shutoff resident scanner to avoid false-positives or rejection of installation). Then try dismantling your infected hdd & cabled it to your other desktop as slave (jumper reset) & use the cureIT to scan your slave disk.
Once scan & before re-installing back, place a copy of cureIT in a folder at any directory of your swiped hdd for use under safe mode once it was install back to its origin.
cureIT link here (and read docs fully) ~ http://www.freedrweb.com/cureit/?lng=en
I think you have either Sality or Virut.
I always suggest a reformat with these types of viruses as they are notoriously hard to get rid of due to the way they spread by infecting .exes.
If you really can't reformat try the Dr. Web boot CD
Well, aside from your resident AV, you may opt for another standby one that only scan on-demand & these were mostly in the form of portability (mostly free too) with a minuscule footprint. Say... cureIT (by dr.Web), Stinger-AVERT (by mcAfee) or malwareBytes. For your peace of mind, after your AV was done scanning, do another 1 on such porta-scanners. Here are the links to the previous 2 ~
cureIT - http://www.freedrweb.com/cureit/?lng=en
Stinger - http://www.mcafee.com/us/downloads/free-tools/how-to-use-stinger.aspx
Along with Combofix, I would recommend Dr. Web Cure it. When my sister's computer got a nasty virus on it that changed the FS type from NTFS to raw (so combofix and other programs wouldn't work) this was the only one I could find that changed it back.