• The best utility for removing viruses according to users. Free Kaspersky utilities

    Infection when visiting sites from mobile devices

    Some sites on the Internet have been hacked by attackers targeting mobile device users. By visiting such a site from a computer, you will be taken to a harmless Internet resource, but by accessing it from a smartphone, you will secretly redirected to a site with an unpleasant “surprise”. Using hacked websites, attackers can distribute various malicious programs, the most “popular” of which are various modifications. The victim’s losses depend on what family of Trojans infiltrate your mobile device, i.e., on its malicious load. Read more about this phenomenon in our news.

    Attention mobile device users!

    Install Dr.Web antivirus for Android on your mobile device with the component URL filter. Cloud Filter will restrict access to inappropriate and potentially dangerous sites in several categories - this is especially important for protecting your children from inappropriate Internet content.

    URL filter present only in the full-featured version of Dr.Web for Android (it is not in Dr.Web for Android Light). For buyers of Dr.Web Security Space and Dr.Web Anti-virus, use of Dr.Web for Android - for free.

    Attention PC and laptop users!

    Install Dr.Web Link Checker

    These are free extensions for checking Internet pages and files downloaded from the Internet. Install the extension to your browser and surf the World Wide Web without fear of a virus attack!

    Download Dr.Web Link Checker for free for

    Opera

    Using the Dr.Web online file scanner, you can check files that you suspect for free for viruses and malware.

    You send your files using your browser, they are uploaded to our server, scanned by the latest version of Dr.Web with a full set of virus database additions, and you receive the scan result.

    How to scan a file or several files with Dr.Web Anti-virus online?

    • To check 1 file: click on the “Browse..” button and select the file that is suspicious. Click the "Check" button to start scanning.
    • The maximum file size is 10 MB.
    • To check multiple files: place the files in an archive (WinZip, WinRar or ARJ format) and download this archive by clicking on the “Browse” button. and then click on the “Check” button. The verification protocol will include a report on each file in the archive.

    IMPORTANT! The Dr.Web anti-virus scanner will help you determine whether the file(s) you provided for scanning are infected or not, but will not answer your question whether your computer is infected. For a complete scan of your hard drives and system memory, use our free healing utility CureIt! .

    You can also check your local network using the centrally managed network utility Dr.Web CureNet!

    Send a suspicious file

    Despite the fact that online antivirus services advertise themselves as tools without the need to download and install, this is not entirely true. One way or another, the user will have to organize access to the files.

    This means you need to install some minimal software on your machine, without which you cannot perform the check. They are the ones who contact the anti-virus database of their own website. Since this operation is performed online, it is conditionally classified as an online check.

    How to check for malicious content

    The installation and verification algorithm is not particularly unique and for everyone consists of the following steps:

    • downloading to your home computer the minimum necessary program files needed to communicate with the current database during the scan;
    • installation (installation) of the program;
    • computer check;
    • report on results.

    The most famous antivirus components for online scanning

    Kaspersky Security Scan

    According to the ratings, for a long time Kaspersky Anti-Virus was in the lead in terms of quality of work. Easy to use and accessible. To check with the proposed free utility called Kaspersky Security Scan, you must first download it from the official website http://www.kaspersky.ru/ by following the link to the “Free Utilities” tab. A screen will open with a complete list of all free offers from Kaspersky Lab.

    When you click on the Kaspersky Security Scan tab, you will be redirected to the download page.

    After saving the required file (be sure to remember the folder in which the utility was downloaded), start the installation by “clicking” on the file.

    Perform a full installation if you are not confident in your knowledge of the settings.

    You can refuse to install the Yandex browser, which will be asked to be done in the next dialog box.

    Select a check, it is indicated by arrow 1 in the image.

    It will take some time to download the program, about 10 minutes. And then you can start with the check (arrow 2), in each of the subsequent windows by selecting the button corresponding to the task.


    The scan report will be presented in the form of a board indicating the number of objects scanned, as well as the number and description of detected threats.

    If malicious files were found, you should click “Search for a solution” and follow the instructions depending on the nature of the detected threats. The fact that the utility itself does not destroy programs that it considers malicious, but only points to them, will allow you to manually sort and save the necessary information.

    Benefits of Kaspersky Security Scan:

    • it is important that the utility does not conflict with programs from other manufacturers that are already running on the machine being tested;
    • This is a Russian-language program, so it is easy to understand for users of the ru zone.

    The closest brother of Kaspersky antivirus, which claims to be the leader in the rating, is BitDefender QuickScan (working link http://quickscan.bitdefender.com/). Abroad, it is considered the best online virus detection assistant. To install it, you need to click on the “Scan now” button on the official website of this antivirus service.

    With your consent, a special extension will be installed on your computer for the browser in which you are working. This process takes much less time than installing Kaspersky, and further verification is much shorter. This is because BitDefender QuickScan does not analyze the entire computer system in detail. Only currently active threats.

    According to user reviews, the program may conflict with existing antivirus programs on the computer or indicate problems in their operation. This utility can suit those who are well acquainted with the English language in order to understand additional features, tips, and recommendations.

    A longtime friend and assistant of computer scientists - NOD32 antivirus

    Another “antivirus” with a Russian-language interface is the good old NOD32. Or rather, a scanner from ESET. To download from the main page of the company’s portal (https://www.esetnod32.ru/), you must click on the “Online scanner” link at the bottom of the screen, as indicated by the arrow in the picture.

    You can start downloading after entering your email. Despite the site's instructions that registration is not required, you will have to enter your email address, otherwise you will not be able to proceed further.

    Virus scanning is launched by Internet Explorer without additional installation, but for others the service will offer to download and install Smart Installer.

    Scanning a computer is not instantaneous; it may take time; its progress and results can be monitored in the active program window.

    The advantages of NOD32 include the use of heuristic analysis. This means that using the available data from previous scans, the program can calculate previously unknown viruses by analogy with those that have already been identified. Found problematic files will not be deleted if you uncheck the “Remove detected threats” button during setup.

    Panda ActiveScan and HouseCall

    Without implementation on the computer, a cloud scan is performed in Internet Explorer (only in it) by the antivirus program: Panda ActiveScan (http://www.pandasecurity.com/activescan/index/), which allows you to get rid of viruses without installing a full-fledged product.

    HouseCall offers free content analysis and detection of spyware and viruses.

    After accepting the license agreement, which, by the way, is in English, the ScanNow button will become available and you can start scanning the contents of your computer. The setting offers the choice of either a full scan or a quick analysis of the main sectors. HouseCall allows you to treat and remove detected viruses from the computer being scanned.

    The program is “delicate”: it does not leave changes on the computer, which is an additional advantage.

    Fans of popular Microsoft software can use its product: Safety Scanner (http://www.microsoft.com/security/scanner/ru-ru/), designed for a one-time computer scan. The program is valid for 10 days, after which you will have to download the updated version.

    How to check files and websites for viruses online

    It's easy to check individual files using services like Dr. Offers. Web or VirusTotal. To do this, upload the file that arouses your suspicions to the site and follow the instructions. This is convenient if you need to analyze a small amount of information.

    Online scanning of suspicious files and sites for viruses using Dr.Web

    The healing utility from Dr.Web is very popular. With its help, you can scan all information on your computer for viruses and malware. Individual files, as well as entire sites, are checked online, which can be done by following the link http://online.drweb.com. Enter the path to the file on your computer, or enter the URL, click on check - and the service will give you a report.

    As a result, the service will provide you with a report where, in addition to information about the viruses found, you can find out almost all the statistics of the file.

    To check a site for viruses, you first need to go to the appropriate tab, enter the portal address and start scanning.

    The site is scanned a little longer than the file, and eventually you will be presented with a scan report. The “Clean site” message indicates that the site is clean and there are no threats.

    The antivirus service VirusTotal.com presents VirusTotal Scanner, a program that requires installation on your computer.

    The first thing that distributors of the boxed solution call is the ability to check without additional file transfer to the network. Simply enter the path to the file in the program window on your computer. The form of the report is similar to that on the VirusTotal website.

    http://rsload.net/soft/security/11963-virustotalscanner.html) is suitable for operating systems Windows XP, 2003, Vista, 7, 8.x, 10 (32/64-bit). You can find and download the program on various resources.

    As practice shows, using one, even a very clear and understandable anti-virus program, is, to say the least, not effective. According to reviews from network users, the best solution is to have an “antivirus” installed for permanent use on your computer, and be sure to update it regularly. Plus, periodically, especially if suspicions arise, check your unit additionally using the scanners and utilities described above.

    It is important to remember that when choosing anti-virus services, you should contact only trusted sites, preferably directly to the Internet representatives of anti-virus program developers. Each of them has their own official websites, from where it is easy to download the necessary information or program. Manufacturers of “free” anti-virus software update their databases in a timely manner, keeping them up to date, and sometimes have a fairly wide range of free or shareware services.

    Kaspersky Virus Removal Tool is a free “light” version of the antivirus that fights the consequences, but does not prevent viruses from entering your system. As you know, it is easier to sell a product to a person if he has tried it and liked it. This is what many software companies do with their paid solutions. They give you a program to use for free for a month, and then ask you to buy the full version. This model has a slightly different principle: you are provided with a full-fledged antivirus, but which can only remove existing viruses from your computer. If you want complete real-time protection, we recommend purchasing the full package. Since our portal specializes in free software, we decided to download Kaspersky AVP Tool for free and see what it is like.

    Possibilities:

    • checking your computer for viruses;
    • manually treating your computer.

    Working principle:

    Kaspersky AVP Tool Portable is essentially a portable program: when you run the installation file, it does not install the program on the computer's hard drive, but loads it into memory. If you exit the program, it will not remain on the computer, and you must run the installer again. When the program is running, you can start automatically checking your computer. It will check system files for intrusion by foreign programs. Also in the “Manual Treatment” section, you can start collecting information about your computer’s software and send it for analysis to the “911 Anti-Virus Service”.

    Pros:

    • You can run it from a removable device and cure an infected computer.

    Cons:

    • takes up quite a lot of space;
    • does not provide permanent protection.

    In our opinion, this program can only be suitable for emergency treatment of an infected computer, but of course it is not suitable as a regular antivirus. If you need to cure a computer with viruses, you can download Kaspersky Virus Removal Tool for free on our website.

    A proprietary utility from Kaspersky Lab Kaspersky AVP Tool is a free scanner that quickly and efficiently detects Trojans, viruses, Internet worms and thousands of other threats. They are then either deleted or moved to quarantine.

    Kaspersky AVP Tool has a fairly simple appearance. Its installation on an infected computer takes place within a couple of minutes – even if we are talking about Windows Safe Mode. The search for malware is carried out using signature databases and has its own heuristic analyzer.

    The latest version of Kaspersky AVP Tool, which you can download from the website, has significantly improved the user interface. The creators of the scanner simplified the installer and configured it to run from flash drives. The treatment of active infection, as well as the self-defense of the process itself, has also been improved. Don’t forget about the use of cloud technologies called Kaspersky Security Network.

    Among the features of Kaspersky AVP Tool:

    • A completely free antivirus utility to quickly scan your computer.
    • The program has a simple appearance.
    • Allows you to collect information about the system and makes the creation of treatment scripts completely interactive.
    • Manual and automatic treatment of your PC from Trojans, viruses and worms.

    Of course, the price for having a free scanner is that Kaspersky AVP Tool does not provide the user with real-time protection. It also does not include a module for automatically updating virus databases. This utility will not replace a regular antivirus. Therefore, we advise you to install a free antivirus, which you can download here, or purchase a paid one.

    For a new PC scan (for example, in a week or in a month), the user will need to download this utility again with the latest antivirus databases. Kaspersky AVP Tool does not conflict with other antivirus programs, so it can be used as an additional means of protection.

    • Letter. Please tell us on your website about, for example, Kaspersky Virus Removal Tool or Kaspersky Security Scan, I think they deserve attention. I just had an argument with a friend, he tells me that the best anti-virus utility that works without installation on the computer is . I don’t argue, and you often mention it in your articles, it actually finds and neutralizes malware well, but I think the utilities from Kaspersky are no worse than the utilities from Dr.Web. Kaspersky Lab even has a utility called TDSSKiller.exe - it finds and neutralizes malware such as rootkits. There is an article on your website about, but not a word about the above-mentioned utilities. Or you think that they are not effective in fighting viruses. Max.
    • Letter No. 2 I downloaded the utility from Kaspersky Kaspersky Security Scan, but it turns out that it does not remove viruses, but simply informs about threats and the security status of your computer. I don’t understand what the point is in using it then. No signature.
    • Letter No. 3 Admin, help with advice. When scanning the computer for the presence of rootkits using the Kaspersky utility TDSSKiller, it was found suspicious object, medium danger – Service: sptd. The instructions for using the utility say: copy the suspicious object to quarantine and then send the files to Kaspersky Virus Lab or check for viruses on VirusTotal.com. In short, I copied a suspicious file to quarantine and wanted to check it on the VirusTotal.com website, but I can’t find the quarantine itself, there is no information about this anywhere in the program settings, the Kaspersky forum advised me to carefully read the instructions for using the TDSSKiller program, but there is no such information in the instructions either. No signature.

    Free Kaspersky utilities

    In this article we will download and use it in combat conditions free Kaspersky utilities- Kaspersky Virus Removal Tool, Kaspersky Security Scan, and anti-rootkit utility TDSSKiller. Let's get acquainted with the Kaspersky Rescue Disk. How everything works for Kaspersky (and it works), you will see for yourself and draw a conclusion.

    Undoubtedly, it is worth carrying anti-virus utilities from Kaspersky on a flash drive and using them as needed in the fight against viruses. I didn’t write anything about these utilities only because I simply don’t have enough time.

    All Kaspersky Lab products incorporate the latest developments in the field of antivirus technologies, including new “cloud” technologies. Take, for example, Kaspersky Virus Removal Tool (AVPTool), a constantly updated free antivirus scanner. It should be used from time to time to scan your computer for the presence of malware. By scanning your computer, this utility neutralizes malicious programs located on your computer: Trojans, Internet worms, rootkits, as well as spyware and adware. Kaspersky Virus Removal Tool can be launched in automatic and manual mode.
    • But it is important to know that this utility does not provide real-time protection for your computer, that is, Kaspersky Virus Removal Tool will not replace your standard antivirus, but will only help it. Working on your computer, Kaspersky utilities do not conflict with the anti-virus software you have installed.
    • Very important note. You should know everything about all the utilities you use so that the situation described in the second letter does not happen. The Kaspersky Security Scan utility does not actually remove viruses, but you still need to use it and now you will see how. We will check the functionality of free Kaspersky utilities on my friend’s computer; when visiting one site that turned out to be malicious, he planted two Trojans for himself - in the Startup folder and the Temp temporary files folder.
    All free utilities from Kaspersky can be downloaded on the official page http://www.kaspersky.ru/virusscanner

    Kaspersky Virus Removal Tool

    Let's start with the Kaspersky Virus Removal Tool utility, analyze all its settings and check our computer for viruses.

    The language is Russian and click Download, then download the program installer to our computer and run it.

    We agree to the license agreement and click Get started.

    The free utility Kaspersky Virus Removal Tool can be launched in Automatic check, there is also a Manual Treatment mode.

    Before you click Run scan, I advise you to go to the program settings. In option Check area, be sure to check My Documents, My Mail and most importantly Disk (C:). Why?

    When scanning an infected computer, I did not select Disk (C:) in the settings and the Kaspersky Virus Removal Tool found only one virus in startup,
    , but did not find the second malicious program - located in the Temp temporary files folder
    . I had to rescan Drive (C:) separately, and only after rescanning was the virus found.
    Security level can be left in the middle

    Option Action, you can check the box - Prompt when detected.

    If the Kaspersky Virus Removal Tool utility detects a virus program on you, it will inform you to Disinfect, (if possible) Delete (recommended) or Skip.

    So, let's go, let's press Run scan

    The first Trojan program was found after 8 minutes.

    The second Trojan, as I already said, was found during a second scan, so do not forget to select drive (C:) for scanning in the program settings. The utility immediately suggested removing the second malicious program.

    As for manual treatment. It takes place in three stages. Click Collecting information about the system,

    The utility collects the information it needs, which is located in the file avptool_sysinfo.zip

    Next, register on the Kaspersky Lab forum in the Anti-Virus thread, ask your question and attach the archive avptool_sysinfo.zip, you should definitely receive an answer, and sometimes specialists may offer you to run a script, which you need to copy into the Execute script window and click Run script.

    http://support.kaspersky.ru/6182

    At the end of the utility, the following proposal is received. If you press the button Install protection, we will immediately be taken to a page with paid antivirus solutions from Kaspersky Lab.


    Free utility Kaspersky Security Scan

    Let's move on to the second Kaspersky Security Scan utility, we will check the same infected computer with two viruses: in Startup and in the Temp temporary files folder.

    The Kaspersky Security Scan utility does not remove viruses, but after scanning your computer it provides detailed information about the threats located in your operating system and where they were found, vulnerabilities and other problems. It all looks like this.
    Let's go to the page again http://www.kaspersky.ru/virusscanner, select Kaspersky Security Scan and click Download.

    Download and run the utility. Again I want to say that if Quick check you are not satisfied, then choose Full check. In my case, the situation with Quick Scan repeated itself; it found only one virus in Startup.

    C:\Users\Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    During a full scan, the utility found a second malware in temporary files
    C:\Users\Username\AppData\Local\Temp
    After a while

    The free Kaspersky Security Scan utility will give you this report. Click on the arrow.

    What is the state of the anti-virus program on your computer? I got a note because my anti-virus program was disabled at the time the utility was running.
    If the utility finds malware, it will give you their location.

    Vulnerabilities

    Other problems. Provides very important information about vulnerabilities associated with the parameters of programs installed on your computer and the operating system itself. As you can see, the utility correctly noted problems on my computer related to autorun from various media that need to be corrected.


    Rescue Disk Kaspersky Rescue Disk

    The advantage of checking the operating system from a rescue boot disk over other utilities is that the malware found in the operating system is inoperative, one might say, simply lying on the hard drive.

    Select Kaspersky Rescue Disk and click download.

    Download the disk image in ISO format, burn it to a disc. Who doesn’t know how to burn an ISO image onto a blank CD or DVD, read our article
    So, after we have burned the image onto a blank CD, we boot our computer from the Kaspersky Rescue Disk. Again, for those who don’t know how, read our article
    In this window, to continue loading, you need to press any key on the keyboard.

    We choose the language Russian, however, who needs which one.

    We accept the conditions - press key 1.

    Choose Graphic mode.

    Wait for the disks to mount.

    Here is the desktop of the Kaspersky Rescue Disk antivirus disk. Let's look at the main capabilities of the disk.
    Click on Kaspersky Rescue Disk to open a settings window; there is nothing complicated to manage here. In the settings, we additionally mark drive C: for virus scanning, or if you want all drives, but the scan in this case will take a very long time. Click on the button Run check objects.

    Kaspersky Rescue Disk has a registry editor, which you will agree is very convenient; by the way, earlier versions of the disk did not have it.

    You can also use the File Manager if you need to move your files from one hard drive partition to another.

    And using the built-in browser you can access the Internet.


    TDSSKiller - protection against rootkits

    Well, the turn has come to the TDSSKiller utility, which can help you detect and neutralize rootkits on your computer. A rootkit is a program for hiding the presence of a malicious program in an operating system, helping an attacker to manage a hacked Windows and hide traces of his malicious activities by hiding destructive processes and the rootkit itself.

    You can download it on the official website of Kaspersky Lab; by the way, detailed instructions for using the utility are available at this link http://support.kaspersky.ru/5353?el=88446 Click Download the file TDSSKiller.exe

    Download and launch.

    If the program displays a window indicating that an update is available for download, click on Download update.

    By default, the utility is configured optimally and there is no need to change anything. Click Start checking.

    If after scanning the program displays the following window - Suspicious object, medium danger - Service: sptd, then this is not scary. Service: sptd is a service of the program - the Daemon tools disk drive emulator. You may ask - How can you determine whether it’s scary or not?

    TDSSKiller can detect the following suspicious services or files:
    Hidden service – a hidden key in the registry;
    Blocked service– inaccessible key in the registry;
    Hidden file – a hidden file on the disk is hidden when enumerated in the standard way;
    Locked file- the file on the disk is not available for opening in the standard way;
    Spoofed file- when reading, the file’s contents are not real;
    Rootkit.Win32.BackBoot.gen - suspected infected MBR boot record.

    For detailed analysis, Kaspersky Lab recommends copying detected objects to quarantine by selecting the Copy to quarantine action (the file will not be deleted!!!), then sending the files to Kaspersky Virus Lab or VirusTotal.com scanning.

    Quarantine location is the root of the C:\TDSSKiller_Quarantine drive
    Open the website VirusTotal.com, then click Select file

    Open and Check

    Analysis of the sptd.sys file on VirusTotal.com showed that only one antivirus company, TrendMicro, classified the sptd.sys file as a PAK_Generic.009 virus.

    At one time, I established that this file is safe, but to be completely sure, our reader can send it to Kaspersky Virus Lab.

    Articles on this topic: