LiveDisk

User Manual© Doctor Web, 2020. All rights reserved
This document is for information and reference purposes in relation to the specified software of
the Dr.Web family. This document is not a ground for exhaustive conclusions about thepresence or absence of any functional and/or technical features in the software of the Dr.Web
family and cannot be used to determine whether the software of the Dr.Web family matches
any requirements, technical task and/or parameters, and other third-party documents.
This document is the property of Doctor Web. No part of this document may be reproduced,
published or transmitted in any form or by any means for any purpose other than thepurchaser's personal use without proper attribution.
Trademarks
Dr.Web, SpIDer Mail, SpIDer Guard, CureIt!, CureNet!, AV-Desk, KATANA and the Dr.WEB logo
are trademarks and registered trademarks of Doctor Web in Russia and/or other countries.
Other trademarks, registered trademarks and company names used in this document areproperty of their respective owners.
Disclaimer
In no event shall Doctor Web and its resellers or distributors be liable for errors or omissions, or
any loss of profit or any other damage caused or alleged to be caused directly or indirectly by
this document, the use of or inability to use information contained in this document.

Dr.Web LiveDisk
Version 9.0
User Manual
1/27/2020

Doctor Web Head Office
2-12A, 3rd str. Yamskogo polya, Moscow, Russia, 125040
Website: https://www.drweb.com/
Phone: +7 (495) 789-45-87
Refer to the official website for regional and international office information.

Doctor Web
Doctor Web develops and distributes Dr.Web information security solutions which provide
efficient protection from malicious software and spam.
Doctor Web customers can be found among home users from all over the world and ingovernment enterprises, small companies and nationwide corporations.
Dr.Web antivirus solutions are well known since 1992 for continuing excellence in malware
detection and compliance with international information security standards.
State certificates and awards received by the Dr.Web solutions, as well as the globallywidespread use of our products are the best evidence of exceptional trust to the company
products.
We thank all our customers for their support and devotion to the Dr.Web products!

4

Table of Contents
1. About This Document5

2. General Description of Dr.Web LiveDisk

6

System Requirements

7

Creating Dr.Web LiveDisk Bootable Flash Drive

8

Starting Dr.Web LiveDisk

10

Desktop11

Shutting Down Dr.Web LiveDisk

13

Deleting Dr.Web LiveDisk from USB Flash13

3. Basic Functions
Dr.Web CureIt! Scanner

14
16

Startup, Restart and Shutdown

17

General Settings

19

Express Scan

20

Additional Tasks

21

Sending Statistics

29

Quarantine Manager

29

Dr.Web Updater

31

Registry Editor

32

Auxiliary Programs

37

Browser

37

Graphical File Manager

38

Console File Manager

40

Terminal Emulator

42

Network Configuration Program

43

System Date and Time45

4. Technical Support

47

User ManualAbout This Document

1. About This Document
About Manual
Thank you for choosing Dr.Web LiveDisk free anti-virus solution. It will help you to restore an
operating system when high virus activity has rendered it inoperable.
This manual is intended to help to use Dr.Web LiveDisk 9.0. Make sure you have the latest
version of the manual. The manual is constantly updated and the current version can always befound at the official web site of Doctor Web company at https://download.drweb.com/doc/.
Before reading the document, please view the conventions.

Conventions
The following symbols and text conventions are used in this guide:
Convention

Comment
Warning about possible errors or important notes to which you should pay
special attention.

Anti-virus network

A new term or an accent on a term in descriptions.

<IP-address>

Placeholders.

Save

Names of buttons, windows, menu items and other program interface elements.

CTRL

Keyboard keys names.

C:\Windows\

Names of files and folders, code examples.

Appendix A

Cross-references on the document chapters or internal hyperlinks to web pages.

User Manual5General Description of Dr.Web LiveDisk

2. General Description of Dr.Web LiveDisk
Dr.Web LiveDisk is an anti-virus solution which allows to restore an operating system when highvirus activity has rendered it inoperable.
Dr.Web LiveDisk is a bootable media (optical disk or USB flash drive) with a Linux-based
portable operating system and pre-installed software which performs anti-virus scans of thecomputer, neutralizes detected threats and allows the user to work with the registry and filesystem as well as browse webpages.
Dr.Web LiveDisk is delivered as a ready-to-use disk, or as an .iso image (in this case, you needto burn the image to a blank disk), or as an executable—the utility which is started in Windows
environment to create a bootable media (USB flash drive).
To prevent such situations, do not disregard the need to protect the operating system with antivirus software that employs the most advanced technologies.
Technologies and features implemented in products of Doctor Web company provide forreliable anti-virus protection of both large corporate networks and computers for home use.
Doctor Web company anti-virus solutions have low system requirements and deliver fast
performance and reliable protection against all types of malware. On the Doctor Web
company official website https://products.drweb.com/, you can find up-to-date information on
products for resident protection of computers and mobile devices against viruses, malicious
programs, and spam.

User Manual6General Description of Dr.Web LiveDisk

System Requirements
Dr.Web LiveDisk can be installed and run on a computer which meets the following minimum
requirements:
Parameter

RequirementCPU

x86-64-compatible

Random access memory

Minimum 1 GB of RAM (2 GB or more is recommended)

Other

A video card, a monitor, a keyboard, and a mouse (preferably)

Dr.Web LiveDisk no longer supports x86 CPUs.

Moreover, depending on the type of the media that contains Dr.Web LiveDisk, either an opticaldisk drive or a USB port is required.
To create a boot copy of Dr.Web LiveDisk, you can use any FAT32 USB flash drive with enoughfree space (not less than 1 GB).

User Manual7General Description of Dr.Web LiveDisk

Creating Dr.Web LiveDisk Bootable Flash Drive
You can create an original copy of Dr.Web LiveDisk to boot it from a USB flash drive. To dothis, use drweb-livedisk-900-usb.exe, which is a special tool for Windows OS. In thiscase, Dr.Web LiveDisk can be used as a portable operating system, customized for the needs ofa particular user, to access data on any computer regardless of the installed operating systems
and other software.
Note that when Dr.Web LiveDisk is loaded from a USB flash drive, it is still operating in RAM
mode. Thus, no changes made to the system while Dr.Web LiveDisk is running are saved, as wellas when CD/DVD media is used.
Despite the fact that drweb-livedisk-900-usb.exe does not change or delete drive'scontent, it is recommended to save the files of the flash drive you are going to use toanother data carrier before starting the program.

All Dr.Web LiveDisk files are written to the /boot directory. The utility may change theconfiguration of the flash drive partitions, if necessary. The original configuration is saved to
the /boot/partition.backup file. The drweb-livedisk-900-usb.exe program also
creates a new MBR on the flash drive. The original master boot record is saved to
the /boot/mbr.backup file.
To create a bootable flash drive
1. Connect a flash drive to the computer. It takes no longer than ten seconds to register theconnection.
2. Run the executable file drweb-livedisk-900-usb.exe.
3. The program will automatically find all flash drives available in the system. Select therequired drive.

User Manual8General Description of Dr.Web LiveDisk

4. You can also format the selected drive (before the process starts, the program displays awarning message that all data stored on the drive will be deleted).
5. To view the License agreement, click the corresponding link in the window (the default
browser opens and displays the text).
6. To create a bootable flash drive, click Generate Dr.Web LiveDisk.
7. File copying will start automatically.

8. After the process completes, click Exit to close the program.
Updating virus databases on your bootable flash drive
If it is necessary, you can save the up-to-date virus databases to your bootable flash drive
without rewriting all the Dr.Web LiveDisk files. Complete the following steps:
1. Create a new directory /zz.dir in the /casper directory on your flash drive.
2. Create a new subdirectory hierarchy /usr/local/lib/drweb in the /zz.dir directory.
3. Copy the up-to-date virus databases to /casper/zz.dir/usr/local/lib/drweb
directory.
After booting Dr.Web LiveDisk from a flash drive, you may download and install updates to thecomputer by the Dr.Web Updater component.

User Manual9General Description of Dr.Web LiveDisk

Starting Dr.Web LiveDisk
Make sure that your computer is set to start from the media with Dr.Web LiveDisk. Insert thismedia into the drive or USB port and turn on your computer (or restart the system if it isrunning).
By default, Dr.Web LiveDisk uses English language for the interface. If necessary, you canchange it to Russian. For that, press any key once the Doctor Web company logo appears at thebottom of your screen (on a light background).

Once a key is pressed, the boot menu appears on the screen with the F2 Language section
open.
To select the Russian language item, use the arrow keys ↓ and ↑ on your keyboard. Press ENTER.
The interface language will change to Russian.

Test the memory if your computer is extremely unstable and restarts at random Using the arrow
keys ↓ and ↑ on your keyboard, select the Test RAM menu item. The Memtest86+ program will
start. The program has a feature to list bad RAM regions in the format expected by the
BadRAM patch for the Linux kernel. The program supports dual-core and quad-core processors
as well as a large number of various motherboard chipsets.

User Manual10General Description of Dr.Web LiveDisk

If you want to start your operating system from the hard drive without running Dr.Web
LiveDisk, select Boot from first hard disk.

To start Dr.Web LiveDisk by using the arrow keys ↓ and ↑ on the keyboard, select theDr.Web LiveDisk item menu and press ENTER.
The operating system will start to load. After that, Dr.Web CureIt! starts and displays the
License and updates window. To go to the page where you can select a scanning mode, click
Continue. If you want to start an anti-virus scan later, click Exit and you will see the desktop on
the screen.

Desktop
Dr.Web LiveDisk includes a graphic shell with a window-based interface. Once Dr.Web LiveDisk
is started, it automatically runs the scanner Dr.Web CureIt!.
If you decide not to scan your system with Dr.Web CureIt! after Dr.Web LiveDisk startup andclick Exit or if you finish working with the scanner, the standard desktop appears on the screen.

User Manual11General Description of Dr.Web LiveDisk

On the desktop, you can see icons of main programs included in Dr.Web LiveDisk and theRestart Dr.Web icon for restarting Dr.Web components.
The taskbar (horizontal bar at the bottom of the screen) displays buttons of programs that are
currently open as well as the following items:—button which opens the system menu
—network connection icon (if a connection is established)—clock showing system date and time

Dr.Web LiveDisk is supplied with the following main components:· Program Dr.Web Registry Editor· Anti-virus scanner Dr.Web CureIt!
· Program Dr.Web Updater

Other auxiliary programs:· Console file manager Midnight Commander (with a text user interface)· Web browser (GNOME Web lightweight browser for viewing web pages)· MATE Terminal (terminal emulator—program for working in the console)· File Manager (PCManFM file manager with graphical interface)

You can start these programs by double-clicking the appropriate icon on the desktop.
The system menu provides access to system settings and its administration. The menu allows tolaunch the browser, run standard and system utilities, and shut down Dr.Web LiveDisk.
Moreover, Dr.Web LiveDisk provides you with an option to configure network connection
settings and system date and time.

User Manual12General Description of Dr.Web LiveDisk

Shutting Down Dr.Web LiveDisk
To shut down operation of Dr.Web LiveDisk, open the system menu by clicking the
buttonon the taskbar and select the Shutdown item. The program will display the corresponding
message and prompt you to ej ect the removable boot media. After that, press ENTER and thecomputer will turn off.

Deleting Dr.Web LiveDisk from USB Flash
After you finished working with Dr.Web LiveDisk, you can delete it with formatting of the flash
drive. In this case, all other files on the USB flash drive will be deleted as well. Complete thefollowing steps:
1. Connect a flash drive to the computer. It takes no longer than ten seconds to register theconnection.
2. Open the Start menu and click My Computer.
3. Right-click on the flash drive disk and choose Format in the context menu. If necessary, you
can also choose formatting parameters.
4. Click Start to run the formatting procedure.

User Manual13Basic Functions

3. Basic Functions
During its operation, Dr.Web LiveDisk uses a temporary RAM drive created when thesystem is starting. Thus, all changes in Dr.Web LiveDisk program settings will be lost after
the computer restarts.

Dr.Web LiveDisk can perform the following tasks:

Scan the system for viruses
Dr.Web CureIt! scanner allows to scan the system for viruses or malware.
Updating virus databases is described in the Dr.Web Updater section.

Edit Windows registry
Dr.Web Registry Editor allows to view, edit, and restore windows registry keys. The programautomatically detects Windows registry hives upon Dr.Web LiveDisk startup. After that, you canwork with registry keys as with ordinary text files (view their contents and edit them whennecessary).
It is strongly not recommended to delete, move or rename system predefined registry
hives and keys as this may lead to damage of the structure. In this case, Windows will not
be able to read the registry and the operating system or some of its components will
become inoperable.

View, edit, create and delete files
Inbuilt file managers allow to work with files and directories and perform such operations asviewing, editing, creating and deleting files.
· Midnight Commander is a console file manager with a text user interface.
· File Manager PCManFM is a file manager with graphical interface.

User Manual14Basic Functions

Work with Linux management console
Terminal emulator (MATE Terminal) provides access to Linux management console.

Configure network settings
A special inbuilt Network Configuration program allows to change computer network settings.
This can be necessary to establish Internet connection and update virus databases. It is
recommended to change network settings only if the configuration created upon Dr.Web
LiveDisk startup is not valid.

Browse the Internet
The inbuilt browser allows to browse the websites and view Help file on Dr.Web LiveDisk
components.

User Manual15Basic Functions

Dr.Web CureIt! Scanner
Dr.Web CureIt! is the ideal solution for situations when installation of an anti-virus is impossible
due to virus activity or some other reason. It does not require installation and is constantly
supplemented with the latest virus databases to ensure its effectiveness against all virus threats
and other malicious programs.
Dr.Web CureIt! allows you to run anti-virus scans of disk boot sectors and both separate files
and obj ects enclosed within complex structures (archives, email files, installation packages).
Dr.Web CureIt! uses all detection methods to detect viruses and other malicious software.
By default, Dr.Web CureIt! does not check archives. You can enable scanning of archived
files in Dr.Web CureIt! settings.

Dr.Web CureIt! detects and neutralizes the following types of malicious programs:· Worms· Viruses· Troj ans· Rootkits· Spyware· Dialer programs· Adware· Hacktools· Joke programs· Riskware

On detection of a malicious obj ect Dr.Web CureIt! only informs you about the threat.
Information on all infected or suspicious obj ects displays in the table where you can manually
select a necessary action.
The default settings are optimal for most cases. However, if necessary, you can modify actions
suggested upon threat detection by using Dr.Web CureIt! settings window. Please note that you
can set a custom action for each detected threat after scanning is completed, butcommon reaction for a particular threat type should be configured beforehand.
While scanning your system, Dr.Web CureIt! can send general information on yourcomputer and its state of information security to Doctor Web company servers. This
statistics gathering is optional.

User Manual16Basic Functions

Startup, Restart and Shutdown
Starting Dr.Web CureIt!
After Dr.Web LiveDisk is started and the operating system is ready, the anti-virus scanner
Dr.Web CureIt! automatically displays the License and updates window on the screen.

To run an anti-virus scan after Dr.Web LiveDisk startup or rescan you system, click the
Dr.Web CureIt! icon on the desktop.
In the License and updates window, you can view information about the license owner, thelicense expiration date, and the date when the virus databases were last updated.
If an update to virus databases is required, you can start Dr.Web Updater by clicking theUpdate Virus Databases icon on the desktop.

You can also read the conditions of statistics gathering and, if you want to participate in the
improvement program, select the appropriate check box. In this case, statistics collected while
scanning your system will be sent to Doctor Web company servers. By default, this option isdisabled.

User Manual17Basic Functions

Click Continue. It opens a window, where you can select a scan mode.

Restarting Dr.Web CureIt!
To reinitialize all Dr.Web components and restart the scanner, click theicon on the desktop.

Restart Dr.Web

If you want to run a new anti-virus scan without restarting all anti-virus components, click the
Dr.Web CureIt! icon on the desktop.

Exiting Dr.Web CureIt!
To finish working with Dr.Web CureIt!, close the program window.

User Manual18Basic Functions

General Settings
If you want to configure scan settings, click
Dr.Web CureIt! window.

OptionPreferences icon on the toolbar in the

Description

Automatically
apply actions
to threats

By default, if known viruses or computer threats of other types are detected during
scanning, Dr.Web CureIt! informs you about them. If enable this option, all detected
threats will be neutralized automatically according to default settings or user-specified
settings (if the user changed actions set by default).
Select this check box to apply actions to detected threats automatically.

Settings

Click this item to open the window with Dr.Web CureIt! settings, where you can configure
parameters of anti-virus scanning.

Quarantine
ManagerClick this item to open the window of Quarantine manager, where you can view
information on quarantined objects.

Help

Opens the Help file.

To change the interface language
Click theLanguage icon on the toolbar and then select the necessary option.

User Manual19Basic Functions

Express Scan
Dr.Web CureIt! provides a pre-installed template for anti-virus scanning of the most vulnerable
obj ects of your operating system.
To run express scans
1. If Dr.Web CureIt! is not running, start the program.
2. In the Scan mode window, click Start scanning.
3. During scanning, Dr.Web CureIt! displays general information on its progress and lists
detected threats.
To manage scanning process, use the following options:· To pause scanning, click Pause.
· To continue with the scanning, click Resume.
· To stop scanning, click Stop.

4. Once scanning completes, the program displays detailed information on detected threats.
Review scan results.
5. If scanning reveals viruses or other threats, you need to secure your system by neutralizingthem. To apply predefined actions to all detected threats at once, click Neutralize. If
necessary, you can select custom actions for particular threats.

User Manual20Basic Functions

Additional Tasks
For most cases, express scanning is enough to cure your computer from infections andmalicious programs. In rare cases, when subtle tuning is necessary, use the following options:· Perform custom scans, which allows you to select particular operating system obj ects or files

and directories to scan.
· Select custom actions to apply to detected threats.
· Configure settings of anti-virus scanning.

Custom Scan
Apart from the pre-installed scanning template that helps running an express scan of the mostvulnerable obj ects, Dr.Web CureIt! also provides you with custom scan mode that allows
configuring scanning in accordance with your particular needs.
To start scanning in custom mode, in the Scan mode window, click
Select objects for scanning.

This mode allows you to select obj ects for scanning:· Boot sectors of all disks· Root folders of all the boot disks found· Windows system folder (of all detected operating systems)· Folders "My Documents" of all computer users· Temporary files· Rootkits

User Manual21Basic Functions

To check all listed obj ects for viruses, select the Scanning objects check box in the tableheading.
To check a particular file of folder, click the link at the bottom of the table, and then selectobj ects for scanning in the Browse window.
If necessary, configure Dr.Web CureIt! settings before starting the scan.
Click Start scanning.
Once scanning completes, the program displays detailed information on detected threats.
Review scan results.
If scanning reveals viruses or other threats, you need to secure your system by neutralizingthem. To apply predefined actions to all detected threats at once, click Neutralize. If necessary,
you can select custom actions for particular threats.

Configuring Threat Neutralization
By default, if known viruses or computer threats of other types are detected during scanning,
Dr.Web CureIt! informs you about them. You can neutralize all detected threats at once byclicking Neutralize. In this case Dr.Web CureIt! applies the most effective actions according to
its configuration and threat type.

User Manual22Basic Functions

By clicking Neutralize you apply actions to objects selected in the table. Dr.Web CureIt!
selects all objects by default once scanning completes. When necessary, you can customize
selection of objects to be neutralized by using check boxes next to object names or threat
categories from the drop-down menu in the table header.

Moreover, you can apply an action individually to a particular threat. You can also attempt tocure an infected file and, if curing failed, neutralize the threat by removing the obj ect.
To select an action
1. Where necessary, select a custom action from the drop-down list in the Action field. By
default, Dr.Web CureIt! selects the action recommended for this type of threat.
2. Click Neutralize. Dr.Web CureIt! applies all selected actions at once.
There are the following limitations:· For suspicious obj ects, curing is impossible.
· For obj ects which are not files (for example, boot sectors), moving and deletion is impossible.
· For files inside archives, installation packages, or attachments, no actions are possible.

User Manual23Basic Functions

Configuring Scanning
The default settings are optimal for most uses. Do not change them unnecessarily.
To configure Dr.Web CureIt!
1. If Dr.Web CureIt! is not running, start the program. This opens Dr.Web CureIt! window.
2. Click thePreferences icon on the toolbar, and then select Settings. This opens thewindow which contains the following pages:· The Main page, where you can configure general parameters of Dr.Web CureIt! operation.
· The Actions page, where you can configure reaction of the Dr.Web CureIt! on detection of

infected or suspicious files and archives or other malicious obj ects.
· The Exclusions page, where you can specify files and folders to be excluded fromscanning.
· The Log page, where you can set logging options for Dr.Web CureIt!.

3. To get information on options available on the page, clickHelp.

4. After editing, click OK to save the changes or Cancel to cancel them.
Changes in the settings of Dr.Web CureIt! are retained only in the current program session. New
session resets program settings to their default values.

User Manual24Basic Functions

Main Page
On this page, you can set main parameters of Dr.Web CureIt! operation.

You can instruct Dr.Web CureIt! to apply recommended actions to detected threats
automatically, and select an option to interrupt scanning when on battery power.

Actions Page
By default, if known viruses or computer threats of other types are detected during scanning,
Dr.Web CureIt! informs you about them. These actions are suggested in accordance with thesettings on this page.

User Manual25Basic Functions

The best action for curable threats (for example, files infected with known viruses) is curing,
since it allows to restore the infected file completely. It is recommended to move other threats
to quarantine in order to prevent loss of potentially valuable data. You can select one of thefollowing actions:
ActionDescription

Cure

Instructs to restore the original state of an object before infection. If theobject is incurable, or an attempt of curing fails, the action set forincurable viruses is applied.
This action is available only for objects infected with a known virus thatcan be cured except for Trojan programs and files withincomplex objects (archives, email attachments, file containers). Trojan
programs are deleted on detection.
This is the only action available for boot sectors.

Move to quarantine

Instructs to move the object to a specific directory for isolation.
This action is impossible for boot sectors.

DeleteInstructs to delete the object.
This action is impossible for boot sectors.

IgnoreInstructs to skip the object without performing any action or displaying a
notification.
The action is available only for potentially dangerous files: adware,dialers, jokes, hacktools and riskware.

Threats within complex objects (archives, email attachments, file containers) cannot beprocessed individually. The threat neutralization action is applied to the entire object, andnot just to the infected part. By default, the program is set to inform on detection and movethe object to quarantine.

Exclusions Page
On this page, you can specify files and folders that should be excluded from scanning anddetermine whether to scan contents of archives, email files, and installation packages.

User Manual26Basic Functions

Here you can list names or masks for the files to be excluded from scanning (this option isappropriate for temporary files, swap files, etc.).
To configure excluded files list
Complete the following steps:· Enter the name (mask) of a file that should be excluded from scanning. To add a file residing

on your system, you can click Browse and select the file in the standard file chooser. You canalso use masks.
A mask denotes the common part of obj ect names, at that:ъ The asterisk (*) character replaces any, possibly empty, sequence of characters.
ъ The question mark (?) replaces any character (one).
ъ Other mask characters should be treated literally.

Examples:ъ Report*.doc defines all DOC documents which names start with the word

"Report" (ReportFebruary.doc, Report121209.doc, etc.).
ъ *.exe defines all executable files; that is, files with the EXE extension (setup.exe,

iTunes.exe, etc.).
ъ photo????09.jpg

defines all JPG images which names start with the word "photo",
end with "09" and contain exact number of 4 other characters in the middle(photo121209.jpg, photoJoe09.jpg, photo----09.jpg, etc.).

· Click the Add button on the right. The file (or file mask) will be added to the list below.
· To remove a file from the list, select it and click Delete. The file will be checked during thenext scan.

User Manual27Basic Functions

Log PageOn this page, you can specify logging parameters.

You can specify one of the following verbosity levels for logging:· Standard—in this mode, the most important events are logged, such as time of

Dr.Web CureIt! starts and stops or information on detected threats.
· Extended—in this mode, in addition to the most important events, names of packers andcontent of scanned archives is logged. If required, you can add such obj ects to the list of
exclusions, which can reduce system load. If necessary, you can add these obj ects to the list of
exclusions, which will help to increase computer performance. This logging mode is set bydefault for Dr.Web CureIt!.
· Debugging (not recommended)—in this mode, all details on Dr.Web CureIt! operation are

logged, which may result in considerable log growth. It is recommended to use this mode
only when errors occur in Dr.Web CureIt! operation or by request of Doctor Web company
technical support.

User Manual28Basic Functions

Sending Statistics
If you want to participate in the improvement program of Doctor Web company, select theappropriate option when running Dr.Web CureIt!.
In order to provide analysis of information security threats and overall viral situation around theglobe as well as to ensure continuous development and improvement of Doctor Web company
products, Dr.Web CureIt! collects and sends to Doctor Web company servers impersonal
statistics while it scans and cures your system.
This statistics contain only the following general information:· Information on each detected threat including its name and type, the name and type of

infected obj ect, and hash of the infected file when necessary.
· Scan summary including scanning time, number of scanned files and obj ects, number ofsuspicious obj ects, and number of detected threats per type.
· Summary on applied actions including number of unmodified obj ects as well as number of

cured, deleted, moved, renamed, and ignored obj ects.
The privacy statement from Doctor Web company is available on the official website
https://company.drweb.com/policy/.
To connect to the Internet, the program uses the network connection on your computer.

Quarantine Manager
Quarantine Dr.Web CureIt! serves for isolation of files that are suspected to be malicious. It also
store backup copies of files processed by Dr.Web CureIt!. The directory DrWeb CureIt
Quarantine is created in the root of the drive where an infected obj ect is located. Suchobj ects are moved to appropriate directories and then the quarantined files located on hard
drives are encrypted.
To open the Quarantine Manager window, click Preferenceson the toolbar and then selectthe Quarantine Manager item on the Dr.Web CureIt! settings menu.

User Manual29Basic Functions

The central table lists the following information on quarantined obj ects that are available toyou:· Object—name of the quarantined obj ect· Threat—malware class of the obj ect, which is assigned by Dr.Web CureIt! when the obj ect isquarantined· Date added—the date and time when the obj ect was moved to Quarantine· Path—full path to the obj ect before it was quarantined.

In the Quarantine Manager window, the following buttons are available:· Restore as—removes selected obj ects from the quarantine and restores them to selected

location.
Use this option only when you are sure that the selected objects are not harmful.

· Delete—deletes selected obj ects from the quarantine and from the system.

To apply an action to several files simultaneously, select the check boxes next to the obj ect
names and then click the corresponding button.
When you finish working with Quarantine manager, click OK.

User Manual30Basic Functions

Dr.Web Updater
New types of computer threats with more perfect masking techniques are constantly appearing
worldwide. Updating virus databases guarantees an up-to-date protection for your computer.
Updates are downloaded and installed by a specially designed component Dr.Web Updater.
You can run this component by clicking theDr.Web Updater window opens.

Update Virus Databases icon on the desktop.

To receive an update for virus databases, click Update now. After the Doctor Web company
server response is received, transfer of new files starts.

When the component notifies you that all required files are received, click Close to finish
working with Dr.Web Updater.

User Manual31Basic Functions

Registry Editor
Registry stores information that is necessary to ensure proper operation of Windows. This
information includes profiles for each user, applications installed on the computer, types of
documents created by them, folder properties, application icons, hardware that exists on thesystem, and used ports.
If you want to edit the registry manually, use the Dr.Web Registry Editor program, which is ananalogue of the registry tool for Windows.

Starting registry editor
On Dr.Web LiveDisk startup, Dr.Web Registry Editor automatically detects registry keys of
installed Windows operating systems. After that, you can work with registry keys the same way
as in the standard registry tool for Windows (view their contents and edit them whennecessary).
To start the program, double-click the

Dr.Web Registry Editor icon on the desktop.

The window of the registry editor is shown in the picture below.

User Manual32Basic Functions

At the top of the window, you can see a bar with the following control buttons:—opens insert menu which allows to add a key, a subkey or a particular value—removes a key, a subkey or a particular value—saves the current registry state—opens the search box where you can find an object in registry keys by the object nameOn the left pane of the editor window, you can see registry keys. If the program detects several
operating systems, it displays a separate register for each of them.
Every key can contain data that is called a value. On the right pane of the editor window, you
can see a table which displays values of the selected key.

Description for registry keys
HKEY_LOCAL_MACHINEThis key contains configuration parameters for the computer (for all users), including
data on the hardware and operating system (bus type, system memory, device drivers,
and startup settings).
HKEY_USERS
This key contains information on all user profiles on the computer, including
environmental variables, desktop settings, network connection settings, and parametersof printers and installed applications.

Working with registry
Use the Dr.Web Registry Editor program only if you are confident that the changes arecorrect. Exercise caution when editing the registry.
For additional protection, back up registry keys before you start editing them. If a problem
occurs, you can then restore the registry to its previous state.

User Manual33Basic Functions

To add a new key
1. On the left pane, select the group of keys where you want to add a new key.
2. Select the Key item in one of the following ways:· Via the insert menu by clicking theicon on the control bar (at the top of the editor

window).

· Open the сontext menu by right-clicking anywhere in the window and select New.

3. Enter a new key name and press ENTER.
To add a new key value
1. Select the key which value you want to change.
2. Via the insert menu or via the сontext menu select the type of the value to be added.
3. Enter the new name in the Value name box and, if necessary, change its default value
specified in the Value data box.
4. Click OK or press ENTER to save the changes.

User Manual34Basic Functions

Searching for keys and values
1. Click theicon on the control bar (at the top of the editor window). The Find window
appears on the screen.

2. Enter data to search for and click Find.
3. If found, obj ects will be displayed in the table below.
4. At that, the Find button label changes to Stop. Click it if the required obj ect is alreadyfound.
5. To open it in the editor, double-click the appropriate row and close the Find window.
6. The selected obj ect is displayed on the left pane of the editor window. If the search obj ect
was a value, it is highlighted in the right pane.
Modifying key values
1. Select the key which value you want to change.
2. Select the required value in the table.
3. Either select Modify on the сontext menu or double-click the appropriate table row.
4. Modify the value in the Value data box.
5. Click OK or press ENTER to save the changes.
Removing keys and values
1. Find and select the registry element which is to be removed (key or value).

If you select a key, all its subkeys and values will be also removed.

2. Either select Delete on the сontext menu or click the icon of the removal tool
control bar.

on the3. The program displays a warning message. To confirm the removal, click Yes; to abort theprocess, click No.

User Manual35Basic Functions

Backing up a registry key
1. Open the сontext menu by right-clicking the key that you want to back up.
2. Select Export.
3. Choose file name.
4. Specify file path.
5. Click Save.
If necessary, you can send the .reg file to technical support or to the official forum.

Exiting registry editor
To finish working with Dr.Web Registry Editor, close the editor window. If any changes have notbeen saved, a window suggesting to save or discard changes will appear; choose theappropriate option to exit the editor.

User Manual36Basic Functions

Auxiliary Programs
Dr.Web LiveDisk is supplied with the following software tools that allow the user to work withthe file system, configure network and browse the websites:· Browser,· Graphical File Manager,· Console File Manager,· Network Configuration Program,· Terminal Emulator,· System Date and Time Configuration.

This document provides you with short description of the tools listed above. For details on how
to work with the programs, you may refer to the developers' websites.

Browser
Even though your computer cannot be started from the hard disk, the Web browser, included in
Dr.Web LiveDisk, allows you to view websites and save the pages. You will be able to view
saved pages after the operating system is fully restored and loaded.
A valid Internet connection is required to access web pages with the inbuilt browser. By
default, the browser start page is the one of Doctor Web company official website
https://www.drweb.com/.

Starting browser
To start the inbuilt browser double-click themenu.

Web icon on the desktop or use the system

During its operation, Dr.Web LiveDisk uses a temporary RAM drive created when thesystem is starting. Thus, all saved webpages and browser history will be lost after thecomputer reboots. To save viewed webpages, use a subdirectory of one of the file systemdisks residing in the /mnt/disk/.. directory.

For more information on working with the browser, visit the website of the developer athttps://wiki.gnome.org/Apps/Web/.
To finish working with Web browser, close the browser window.

User Manual37Basic Functions

Graphical File Manager
PCManFM is a file manager with graphical interface.

Starting graphical file manager
To start the file manager double-click theFile Manager icon on the desktop or use thesystem menu. The window of the graphical file manager is shown in the picture below.

Working with graphical file manager
The sidebar allows you to switch quickly between the directories of your file system. To view thefolder contents, click the appropriate folder icon on the sidebar and the obj ects contained in
the folder will be listed in the right pane.
With the mode switcher on the top of the sidebar, you can switch to viewing the places or the
directory tree.
In the Places mode, the sidebar displays fixed bookmarks: Home Folder, Desktop and Trash
Can, and custom bookmarks which you can create to quickly access particular folders. Clicking
the Home Folder bookmark opens the folder where user files are stored (created or
downloaded by the user while Dr.Web LiveDisk is running).
To add a bookmark to the sidebar, open the required folder and click Bookmarks →Add to Bookmarks on the program menu.

User Manual38Basic Functions

In the Directory Tree mode, the sidebar displays the hierarchy tree structure of folders. To
show or hide subfolders, click the arrow icon to the left of the folder icon.
The right pane of the window displays the folder contents. To open a subfolder, double-click its
name.
Right-clicking a file or folder opens a context menu which offers several actions for theselected obj ect.
If required, adj ust file manager settings to meet your needs. For that, click Edit → Preferences.
In the appeared window, you can configure the following: behavior and default view of the file
manager, display options of the icons, volume management, advanced options.

Working with files and folders
To find a required object, view all file system disks in the /mnt/disk/.. directory.

Opening files
When opening a file, the file manager applies the action recommended to this file type. For
example, text files are opened in a text editor and graphics files are opened in a graphics
viewer.
The file manager checks the extension of a file to detect the file type. If file has no extension or
the extension in unknown to the program, the file manager attempts to determine the type by
its contents.
You can change the application set by default to run files of a particular type. For that purpose,select a file of the appropriate type, right-click it and select Open With. In the appeared
window, select the required application or add a new application manually (if it is not in thelist). If you selected the appropriate check box, the specified application will be used to open
all files of this type by default.
Folder and file options
To open the file property sheet, right-click the required file or folder and in the context menu
select Properties.
File property sheets show information on any file or folder. In these window, you can change
file or folder permissions, and select an application to be used for opening files of this type.
For details on how to work with the program, refer to the PCManFM proj ect page athttps://wiki.lxde.org/en/PCManFM.

User Manual39Basic Functions

Exiting graphical file manager
To finish working with the file manager, close the program window or on the File menu click
Close Window.

Console File Manager
The inbuilt Midnight Commander file manager is similar to those used in MS-DOS andWindows operating systems and works in the console.

Starting console file manager
To start the console file manager double-click theMidnight Commander icon on thedesktop or use the system menu. The following picture shows the window of the console file
manager:

User Manual40Basic Functions

Working with files in Midnight Commander
In addition to the file system navigation bars, the file manager contains the inbuilt text editor
that enables you to view and edit text files.
· To view a file, select its name and press F3; to edit the file, press F4.
· To delete the selected file, press F8.
· The bottom pane of the window displays actions corresponding to the functional keys.
· Additional functions of the file manager are available on the main program menu. To open

the menu, press F9.
The input line that enables you to enter commands to the operating system is displayed
between the bottom menu and navigation bars (similar to working in the console).
To find a required object, view all file system disks in the /mnt/disk/.. directory.

For details on the program, visit the developers' website at https://www.midnightcommander.org/. You can also take advantage of the Help file provided with Midnight
Commander. To open the program Help, either click Help on the bottom menu or press F1.

Exiting console file manager
To shut down Midnight Commander, do one of the following:· Close the program window.
· Type exit at the command prompt.
· Press F10 and select YES when you are prompted to confirm exit.
· Select Quit on the bottom menu and then select YES when you are prompted to confirm exit.

User Manual41Basic Functions

Terminal Emulator
With MATE Terminal program, you can access Linux management console and work in text
mode.
Working with the console requires basic knowledge of Unix-based operating systems andis recommended only to experienced users.

Starting terminal emulator
To start the terminal emulator double-click thethe system menu.

MATE Terminal icon on the desktop or use

When you start the terminal emulator for the first time, the program operates with its default
settings.
The window of the terminal emulator is shown in the picture below.

Working with terminal emulator
To enter a command, type it at the command prompt marked with the prompt character #.
Before the prompt character, the program shows the user name, the current system name(always root@drweb), and the current working directory.
You can scroll through the window contents bottom-up, as in teletype systems.
For details on the program, visit the developers' website at https://mate-desktop.org/.
To finish working with the terminal, either close the program window, or type exit, or on theFile menu click Close Window.

User Manual42Basic Functions

Network Configuration Program
Dr.Web LiveDisk uses a network connection on your computer to connect to the Internet. A
valid Internet connection is primarily required to update virus databases used by
Dr.Web CureIt!. Moreover, it allows you to view websites (including documentation on
particular components) in the browser supplied with Dr.Web LiveDisk.
Dr.Web LiveDisk automatically detects network connection settings on its startup. In most cases,
the parameters are detected correctly and do not require manual modification. However, if a
network connection is not found or the network is not available, you can specify correctconnection parameters manually via the network configuration program.
The network configuration program can work only with accessible network devices.

The program monitors the state of network interfaces and can automatically switch to aconnection with higher speed. If a wired network interface is found, the program connects tothis interface.
In the lower-right corner of the desktop, you can see a network connection icon which indicatesthe connection state:—connection is established—networking is disabled—the program is searching a connection

Configuring network connections
1. To adj ust the configuration settings, click theicon and select Edit Connections.

User Manual43Basic Functions

2. The Network Connections window appears on the screen.

3. To add a new connection, click Add and in next window select type of connection you wish
to create. If you want to adj ust already specified settings, select the required connection andclick Edit. This opens the edit window.

4. Configure settings as necessary.
You can move the cursor by using the TAB key and select/clear check boxes (when arequired check box has focus) by pressing ENTER.

5. If required, select the General tab and selectAutomatically connect to this network when it is available.
6. Click Save. If you click the Cancel button, provided data are not saved.
7. To exit the network configuration program, click Close.

User Manual44Basic Functions

System Date and TimeTo view the calendar, click the clockin the lower-right corner of the desktop.

To change the system date and time, right-click the clock and then, in the context menu, click
Preferences.

In the open window Clock Preferences, click Time Settings.

User Manual45Basic Functions

Set the required date and time values.

To save your changes and close the Time & Date window, click Set System Time. After you
finish using the program, click Close in the Clock Preferences window.

User Manual46

Technical Support

4. Technical Support
If you encounter any issues installing or using company products, before requesting for theassistance of the technical support, take advantage of the following options:· Download and review the latest manuals and guides at https://download.drweb.com/doc/.
· Read the frequently asked questions at https://support.drweb.com/show_faq/.
· Browse the Dr.Web official forum at https://forum.drweb.com/.

If you have not found solution for the problem, you can request direct assistance from Doctor
Web company technical support by one of the following ways:· Fill in the web form in the corresponding section at https://support.drweb.com/.
· Call by phone in Moscow: +7 (495) 789-45-86.

Refer to the official website at https://company.drweb.com/contacts/offices/ for regional andinternational office information of Doctor Web company.

User Manual47© Doctor Web, 2020