[hammerman]

Hello,

Here are the modified instructions.

Download Dr.Web CureIt to the desktop.

• Doubleclick the drweb-cureit.exe file, then on Start and allow to run the express scan
• This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
• Once the short scan has finished, just let it cure whatever it finds...
  
  • Now, go to Settings >> Change Settings
  • Go to Actions tab >> under Objects section, change the settings to below
    
    • Infected objects - Cure
    • Incurable objects - Report
    • Suspicious objects - Report
  • Don't change any other settings
  • Press Apply then OK
• Select Complete Scan
• Select all drives. A red dot shows which drives have been chosen.
• Click the green arrow at the right, and the scan will start.
• If prompted to Move files, select No to All
• After the scan has finished, click Select All
• Click on Cure. Don't select Move, or Rename or Delete
• After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
• Save the report to your desktop. The report will be called DrWeb.csv
• Close Dr.Web Cureit.
• Reboot your computer to allow files that were in use to be moved/deleted during reboot.
• After reboot, post the contents of the log from Dr.Web you saved previously in your next reply along with a new OTL log.

NOTE: During the scan, a pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.

[Advertisements]

After the quick scan it said the HOSTS file had been modified and I clicked yes to revert it back to the default one, it has seemed to solve the issues I was having, I'll post an OTL log as soon as I can though just in case.

[mrsunday]

After the quick scan it said the HOSTS file had been modified and I clicked yes to revert it back to the default one, it has seemed to solve the issues I was having, I'll post an OTL log as soon as I can though just in case.

[hammerman]

Hello,

That's an interesting find. Did you manage to complete the full Dr.Web scan. This is needed to ensure you are not infected with Virut.

Could you post the Dr.Web log aswell as the OTL log.

[mrsunday]

I'll try and get the full Dr.Web scan tomorrow.

[hammerman]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.