Protection components

Improved! Efficient detection of all types of threats (Dr.Web Scanner)

• Quick and thorough scan of RAM, boot sectors, hard drives and removable data-storage devices.
• Neutralization of viruses, Trojans and other malware.
• Comprehensive databases for detection of spyware, riskware, adware, hack tools and jokers.

Completely revised! Real-time protection (SpIDer Guard® resident monitor)

• Real-time monitoring of the system’s health — interception of all calls to files located on local drives, floppy discs, CD/DVD/ Blue-ray disks, flash-drives or smart cards.
• Industry pacesetter! High resistance to attempts of malicious programs to disrupt operation of SpIDer Guard or to stop it.

Improved! Anti-rootkit technology (Dr.Web Shield™)

• Reliable protection of the system from viruses featuring rootkit-technologies that allow them to hide their presence in the compromised system.
• Industry pacesetter! Neutralization of complex rootkits (Shadow.based (Confi?ker), MaosBoot, Rustock.C, Sector).

Improved! Virus-free e-mail (SpIDer Mail® monitor)

• Virus scan of e-mails over SMTP/POP3/NNTP/IMAP4 doesn’t affect performance of mail clients and doesn’t cause a receipt delay.
• Customizable actions for different types of malicious objects – viruses, riskware, adware, hack-tools, paid dialers, jokers.
• Protection from mass mailings of worms through analysis of contents and sending time of outgoing messages which may indicate malicious activities.

New! Protection from network attacks (Dr.Web Firewall)*

• Protection from unauthorized access from Internet, data leak prevention, blocking of suspicious connections on package and application layers.
• Application layer connections control allows monitoring interaction of applications and processes with network resources and registering all access attempts in the applications log.
• The packet layer filtering allows controlling connection to the Internet regardless of an application that uses it. The packet filter log stores information about packets sent over network interfaces.

*Available only in Dr.Web Security Space Pro, Dr.Web Anti-virus Pro, Dr.Web Anti-virus for Mac OS X+ Dr.Web Security Space Pro, Dr.Web Anti-virus for Linux + Dr.Web Security Space Pro.

Technologies

The quality of an anti-virus application is defined not only by its ability to detect viruses but to restore files to their original state instead of deleting an infected file that may contain important information.

Cures viruses

• Dr.Web anti-virus functions on infected computers, its exceptional resistance to viruses makes it a stand out among anti-viruses..
• Dr.Web is the best at curing active infections in the industry.
• Unique technologies for scan of processes in the memory and outstanding active infection neutralization capabilities allow installing Dr.Web onto the infected system without its preliminary curing.
• High probability to launch a scanning process in the infected system even from a remote data-storage device without installation (e.g. from a USB flash drive).

Self-protection

Immunity to any attempts to disrupt operation of Dr.Web is ensured by the unique self-defence component Dr.Web SelfPROtect.

• Dr.Web SelfPROtect is implemented as a driver that operates on the lowest system level. The driver can’t be stopped or unloaded without a system reboot.
• Dr.Web SelfPROtect can restrict access to a network, files and folders, certain branches of the Windows Registry and removable data-storage devices on the system driver level and protects the software from anti-antiviruses aiming to disrupt operation of Dr.Web.
• Some anti-viruses modify the Windows kernel (intercept interrupts, change vector tables or use other undocumented features). It may have a negative impact on the stability of a system and path new ways for malicious programs to get into a system. At the same time Dr.Web SelfPROtect maintains security of the anti-virus and doesn’t interfere with routines of the Windows kernel.

Unique engine features

• Scan of archived files at any nesting level
• Reliable detection of packed objects, their detailed analysis aimed at exposing hidden threats.
• Leader in detection and neutralization of complex rootkits (Shadow.based (Confi?ker), MaosBoot, Rustock.C, Sector).
• Intelligent memory scan technologies allow blocking a virus in the RAM before it replicates itself to a hard drive and therefore lowering the probability for malware to exploit a vulnerability of a third-party application or of the operating system itself.
• Dr.Web is capable of detecting and neutralizing viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed.

Detection of unknown threats

• FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data compressed with unknown packers.
• The cutting-edge non-signature scan technology Origins Tracing™ provides a high probability of detection of viruses unknown to Dr.Web
• The heuristic analyzer detects most known threats with its analysis based on criteria typical of various groups of malicious programs.

Always up-to-date

• Updating of virus databases and program modules over the Internet (automatically, on-demand or scheduled) doesn’t interfere with user experience.
• Updating is very quick even if a slow Internet connection is used.
• There are always updating servers available.
• In most cases there is no need to reboot the system to complete updating: Dr.Web starts using the latest virus definitions right away.
• Updates are small (50-200KB).
• In order to save traffic the anti-virus can be set to update virus databases only. It is not recommended to enable this option. Dr.Web is improved constantly in order to counter latest threats. New features are incorporated in updated modules of an anti-virus package and are downloaded from Doctor Web's server automatically during updating.
• Updates can be downloaded as archives to save traffic. A special data-compression algorithm used by Doctor Web allows reducing size of downloaded updates. Patch files used to deliver minor additions and fixes for virus database or program modules reduce amount of transferred data manifold.

Virus monitoring service

• The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates immediately after the analysis is completed – as often as several times per hour.
• As soon as an update is released it becomes available to all users that can retrieve it from several servers located in various parts of the globe.
• To avoid false positives an update is tested over a huge number of uninfected files before it is released.
• The intelligent system automatically processing similar viruses ensures prompt neutralization of emerging threats.

My Dr.Web

"My Dr.Web" is your guide on www.drweb.com that helps you obtain information about user services.

• View your license data including the product name, the serial number, the date of the last update and the key file expiration date.
• Use the web-form of the online support system to ask for support or view the history of your request.
• Check a suspicious file or a link with the Dr.Web online scanner or send a file to the anti-virus laboratory for analysis.
• Renew a license, buy a new one or read the latest news from Doctor Web.