Lists of frequently asked questions
Components Dr.Web
I have a strong suspicion that a virus has gotten into my computer. How can I run the scanner?
There are several ways to start the scanner.
- The scanner shortcut (the icon with a spider on the green field) is placed on the desktop during Dr.Web installation. Double-click on the shortcut and the scanner will start.
- The green spider icon is displayed in the system tray. Right-click on the icon. In the context menu, select Scanner; the scanner will start.
- Run the scanner via Windows Explorer to scan a specific object (file or folder). Right-click on the file or folder you want to scan. In the context menu, select Scan with Dr.Web (the item with the red spider icon). The Scanner will start immediately and the file will be scanned.
- Check the specific object (file or folder) you’ve found by dragging it onto the scanner icon or its open window when custom scan is selected.
In the scanner settings, there is an option to process infected and incurable files — Move to quarantine. Does this mean that such files are moved to some location within my computer? In other words, does this mean that my computer is still infected with a virus?
In respect to infected and incurable objects, the Move action does the following: The file is moved to a special quarantine folder. Furthermore, once moved, the file loses its extension. The virus is literally disarmed and rendered non-operational and, therefore, harmless. Later, you can open the Quarantine Manager and delete the files if you do not need them.
After installing the anti-virus I have found out that the module for self-defense hasn't been installed. What shall I do?
If you have not installed the self-protection module, do the following:
- Download the latest version of the curing utility Dr.Web CureIt and run a full scan. Cure detected infected objects and delete or move to the qurantine incurable malicious objects.
- After that you need to reinstall the anti-virus. Open Add and Remove Programs (Windows 2000 \ XP) or Programs and Features (Windows Vista / 7) in the Control Panel, and remove Dr.Web anti-virus. After rebooting, go to C: \ Program Files \ DrWeb (or another folder into which Dr.Web has been installed) and remove all files and folders, but the license key file drweb32.key.
- After that, download the latest distribution of the antivirus program and install it. To register, use the saved key file.
Can I remove viruses from the quarantine? How can I do it?
Quarantined files can be deleted by selecting the desired file and clicking Delete. It will remove the file from the quarantine and from the system.
Dr.Web for Windows encompasses many programs. Which of them actually protect against viruses and which are subsidiary?
A Dr.Web anti-virus is a set of programs, each of them protects its own section in your computer's defense. Removing or disabling at least one component greatly reduces the reliability of anti-virus protection in general, so we strongly advise you not to disable any of its modules unless absolutely necessary.
How can I disable the self-defense?
To temporarily disable self-protection, right-click on the Dr.Web icon in the system tray and in the context menu select Disable self-protection (if this feature is unavailable, please switch to the Administrative Mode and try again). A window will appear where you'll need to enter numbers from the picture and click Disable self-protection.
Caution! Disabling self-protection is not recommended, activate it again as soon as possible.
How do I restore a file from the quarantine?
Right-click on the Dr.Web icon in the system tray and select Tools–> Quarantine. In the subsequent window select the file and click Restore.
My anti-virus has found suspicious files and sent them in quarantine. What can I do to get rid of the viruses?
Quarantined viruses are not dangerous because they can't be launched. If you want to permanently delete infected files, clean the quarantine:
- If you are using Dr.Web for Winidows 5.0 and Dr.Web Security Space 5.0: remove all objects from the infected!!! folder, located in the anti-virus's installation folder.
- If you are using Dr.Web for Winidows 6.0 and Dr.Web Security Space: right-click on the Dr.Web icon in the system tray and select Tools–> Quarantine. In the subsequent window select the files you want to remove and click Delete.
- If your anti-virus is Dr.Web CureIt!, remove all objects from the C: \ Documents and Settings \ _your_user_name_ \ DoctorWeb \ Quarantine folder.
What is a self-protection module what is it for?
Dr.Web SelfPROtect protects the modules, processes, and branches of the registry used by Dr.Web for Windows from outside interference. The outside interference includes incompetent user actions that may render the anti-virus non-operational or make it malfunction as well as actions taken by anti-antiviruses that may terminate anti-virus processes, modify and remove its files and delete Windows Registry branches related to Dr.Web. Disabling the self-defense is not recommended!
What is the quarantine?
The quarantine is a special folder where the anti-virus stores suspicious and infected files. Suspicious files are stored to be later sent to Doctor Web's laboratory for analysis, infected files get into the folder if their removal and curing is impossible for some reason.
Where can I find files for which I have chosen the "Move" action?
- If you use Dr.Web for Windows 5.0 and Dr.Web Security Space 5.0 the quarantine folder name is infected!!!, It is located in the anti-virus installation folder (default path C: \ Program files \ Drweb).
- With Dr.Web for Windows 6.0 and Dr.Web Security Space access to the quarantine is only available through the program interface. To access the quarantine, right click on the Dr.Web icon in the system tray and select Tools–> Quarantine.
- Dr.Web CureIt! placed quarantined objects into C:\Documents and Settings\_Your_user_name_\DoctorWeb\Quarantine.
Where does Dr.Web move infected files?
Infected files are moved to a special storage — Quarantine — from where you can remove the file if necessary, restore it to its original location or send it for analysis in our virus lab.
Where is the quarantine located?
- If you use Dr.Web for Windows 5.0 and Dr.Web Security Space 5.0, the quarantine folder name is infected!!!, It is located in the anti-virus installation folder (default path C: \ Program files \ Drweb).
- With Dr.Web for Windows 6.0 and Dr.Web Security Space access to the quarantine is only available through the program interface. To access the quarantine, right click on the Dr.Web icon in the system tray and select Tools–> Quarantine.
- Dr.Web CureIt! places quarantined objects into C:\Documents and Settings\_Your_user_name_\DoctorWeb\Quarantine.
Why does Dr.Web simply delete Trojan horses but doesn't cure them?
To answer this question, you need to understand the difference between viruses and Trojan horses. Typically, a virus adds (appends its code) itself to an infected file so it incorporates its own code and the virus's code. Together they represent a virus-infected file. Most of these files can be cured by the Dr.Web anti-virus. Here we speak about curing files of viruses rather then curing viruses.
A Trojan horse is a complete malicious program. It doesn't inject its code into files but operates as a separate program, that's why it can't be cured but removed. Some Trojan programs compromise various system objects such as the Windows Registry. In this case we can speak about curing the system (but not the Trojan horse), which includes removing the Trojan and restoring the compromised objects to their healthy state.
Nothing found