Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Dr. Web removal tool trouble


  • Please log in to reply
7 replies to this topic

#1 Baddogg

Baddogg

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:31 AM

Posted 01 January 2011 - 08:33 AM

After stumbling upon this BleepingComputer site and reading around on the forums I decided to try a few spyware/adware scans. Normally I run an up to date malwarebytes and superspyware once a month or if my machine acts oddly. Usually they find very little in the way of malicious files.
In a few posts I saw running malware/spyware/adware scans in safe mode was reccomended. So I ran superspyware and malwarebytes. First in normal mode (xp home), then in safe mode. The malwarebytes found nothing in both modes but superspyware found nothing in normal mode but 39 adware files in safe mode.
Now I start to wonder about the validity of my previous scans and saftey of my computer. My firewall and full time antivirus is zone alarm.
Is zone alarm that good or are my scan methods questionable?
After all of the above I decided to try a Dr. Web cure it scan. I downloaded it, put a shortcut on my desktop and ran it. Everything looked OK I guess, other than some or the russian language display issues. It also came up with nothing found.
Seems like I've got a clean machine.
Now I cannot get rid of the Dr. Webb.
I downloaded the Dr. Web removal tool from the list in this thread, ran it and rebooted. After reboot the shortcut is still on my desktop and the file is still in My Documents. They're still functional. I looked for it in the control pannel Add/Remove programs and it isn't listed.
At this point I'm not really sure what to do and am starting to wonder about the Dr. Web cure it software and whether its malicious or not. Why would they make it so hard to remove?
Any help would be appreciated :o
Other than my browser being somewhat slow at times my computer seems OK.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:31 AM

Posted 01 January 2011 - 09:16 AM

It sounds like you downloaded and installed Dr. Web Anti-virus instead of Dr. Web CureIt which is a separate stand-alone tool, easily deleted when finished using and doesn't require a removal tool.

You mention both in your post...can you confirm which Dr. Web you used, the anti-virus or CureIt?

Are you able to right-click on the desktop shortcut, the file in My Documents and manually delete them?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Baddogg

Baddogg
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:31 AM

Posted 01 January 2011 - 10:50 AM

Well I guess I'm not 100% sure which one I downloaded. I got the link from Grinder's post explaining Rkill. The link says Dr. web cureit. I opened that link and downloaded what I thought was cureit. The file name in My documents and the shortcut is 5vllc64v.
When I click on either file the a microsoft box pops up and asks if I want to run the program. If I choose run Dr. Web begins the scan process and then asks if I want to run the emergency mode or the standard mode. I always choose cancel which is suppose to run the standard mode scan. Then an attention box opens warning me that I can only use the free version if its for my PC and all other uses require purchase. I choose no meaning don't open the purchase window. At that point I can choose start or update. I've run the scan and it always shows no issues when its done. If I close the green Dr. Web display with the x then the program closes and doesn't scan. Everything seems OK but I'd like to get rid of it.
Thanks for your help

#4 Baddogg

Baddogg
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:31 AM

Posted 01 January 2011 - 10:55 AM

Almost forgot. I probably can right click and delete the shortcut and the other file but was sort of afraid that wasn't the right way and the program would still exsist.

#5 frankp316

frankp316

  • Members
  • 2,677 posts
  • OFFLINE
  •  
  • Local time:01:31 AM

Posted 01 January 2011 - 12:07 PM

The one thing that a SuperAnti Spyware scan will detect that Malware Bytes will not detect is cookies. That is normal and cookies are not harmful to your system.

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:31 AM

Posted 01 January 2011 - 01:11 PM

Almost forgot. I probably can right click and delete the shortcut and the other file but was sort of afraid that wasn't the right way and the program would still exsist.

As I said Dr. Web CureIt is a stand-alone application, you can manually delete when finished using it.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Baddogg

Baddogg
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:02:31 AM

Posted 01 January 2011 - 02:41 PM

Thanks much
I deleted as suggested and its gone.
Sometimes I make the simplest things difficult.
I guess my paranoia got the better of me. :thumbup2:

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:31 AM

Posted 01 January 2011 - 04:24 PM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users