| Dr.Web for Windows 5.0 has become even faster. Optimization and introduction of new technologies gave a significant boost of speed to the scanning process. Now the scanner checks RAM, boot sectors and files on hard drives thirty percent faster. Key features - Detection and neutralization of malware on hard drives, removable data storage devices and in RAM
- Real-time interception of calls to files on hard and floppy drives, CD/DVD/Blue-ray/Flash drives, and smart cards
- Detection of viruses placed in an archive at any nesting level
- New! The FLY-CODE technology allows checking files compressed by unknown packers
- Protection against unknown threats powered by non-signature detection technology Origins Tracing™ and the intelligent heuristic analyzer
- Protection against mass mailings performed by a mail worm from an infected machine
- Protection of account information related to online games, social networks, electronic money systems, credit card numbers and PIN codes
- Detection of spam-bots
- Virus scan of SMTP/POP3/NNTP/IMAP traffic
- On demand/scheduled scan
- Individual scan schedules
- Automatic updating
|
| Key Benefits Dr.Web is the anti-virus that cures The quality of an anti-virus application is defined not only by its ability to detect viruses but to cure them, to restore files to their original state instead of deleting an infected file that may contain information important for a user. The capability to operate in an infected system and exceptional resistance to viruses make Dr.Web a stand-out among anti-virus applications. - Improved! Dr.Web has the industry-highest successful rate of curing active infections.
- Improved! Unique technologies for scan of processes in the memory and excellent curing capabilities allow installing Dr.Web onto the infected system without its preliminary curing.
- High probability of a successful launch of the scanning process in an infected system without an installation using a removable media.
- Dr. Web anti-virus successfully functions on an infected computer. Its exceptional resistance to viruses makes it stand out among other anti-viruses.
- Dr.Web is one of few anti-viruses that can be installed in an infected system and can cure it without additional utilities.
- Dr.Web scanner can be launched from a movable medium (CD or USB storage device) without installation in a system.
- Most viruses attacking an infected system can be neutralized during installation of Dr.Web anti-virus while scanning memory and startup files. Moreover, virus databases can be updated before the scanning (during installation).
Self-protection Dr.Web SelfPROtect makes the anti-virus immune to any attempts of malicious programs to disrupt its operation. - Dr.Web SelfPROtect is implemented as a driver that runs on the lowest system level. It can’t be stopped or disabled unless the system is restarted.
- In order to keep the anti-virus operational Dr.Web SelfPROtect can restrict access to files, folders, removable data storage devices and certain branches of the Windows Registry.
- Some anti-viruses modify the Windows kernel (intercept interrupts, change vector tables or use other undocumented features). It may have a negative impact on the stability of a system and path new ways for malicious programs to get into a system. At the same time Dr.Web SelfPROtect maintains security of the anti-virus and doesn’t interfere with routines of the Windows kernel.
Anti-virus engine - Improved! Dr.Web checks archives of any nesting level. If a malicious object was archived many times and different types of archives were used, Dr.Web will detect and neutralize the threat.
- Improved! Dr.Web can scan archives of any nesting level and detects malicious objects disguised using several archivers.
- Improved! Best-of-breed technologies and algorithms allow Dr.Web to detect packed objects, analyze their components and expose hidden threats. Even if an unknown packer has been used to disguise malware, it will be detected by Dr.Web anyway.
- Improved! Unsurpassable detection rate for complex malware such as MaosBoot, Rustock.C, Sector.
- Blocking a virus in the RAM before it replicates itself to a hard drive lowers the probability for malware to exploit a vulnerability of a third-party application or the operating system itself.
- Dr.Web detects and neutralizes viruses that can be found only in the RAM but don’t exist as files on a hard drive. July 2001 saw the epidemics of CodeRed virus and Dr.Web turned out to be the only anti-virus capable of detecting it. Even now few anti-viruses can detect malware like CodeRed or Slammer.
Anti-rootkit - Improved! Dr.Web Shield™ ensures detection of viruses featuring rootkit-technologies that allow them to hide their presence in the system.
Dr.Web Shield™ provides the scanner with privileged access to files, registry and other key system components so it would be able to expose rootkits and block self-protection features of rootkits and stealth-viruses. Dr.Web scanner - High-performance Dr.Web scanner scans boot sectors, RAM, hard and removable drives, detects and disarms viruses, Trojans and malware of any other type.
- Enhanced by Dr.Web Shield™ it also detects all known rootkits and stealth-viruses.
SpIDer Guard® file monitor - Provides real-time protection and instant interception of all calls to files on hard and removable drives, floppy and compact disks, flash drives and smart cards.
- Resists attempts of malicious programs to disrupt its operation.
- Flexible configuration of SpIDer Guard allows changing the software settings on-the-fly depending on the actual load of the system
- Implemented as a Windows service SpIDer Guard provides a corporate network administrator with an opportunity to restrict user rights regarding changes of its configuration.
Self-protection - New! Dr.Web SelfPROtect makes the anti-virus immune to any attempts of malicious programs to disrupt its operation.
- Dr.Web SelfPROtect is implemented as a driver that runs on the lowest system level. It can’t be stopped or disabled unless the system is restarted.
- In order to keep the anti-virus operational Dr.Web SelfPROtect can restrict access to files, folders, removable data storage devices and certain branches of the Windows Registry.
SpIDer Mail® monitor - SpIDer Mail® monitor scans every message on-the-fly providing you only with clean e-mails.
Protection of e-mail E-mail remains one the most efficient ways to deliver malware to a computer. SpIDer Mail® will protect your system against cyber-evil and will scan mail traffic “on the fly” to make sure you get only clean messages free of malicious code or infected attachments. - SpIDer Mail doesn’t depend on an e-mail client and won’t delay receipt of e-mail.
- It supports SMTP/POP3/NNTP/IMAP4 mail protocols
- Individual rules can be created for different types of malicious programs – viruses, riskware, adware, hack tools, paid dialers and jokers.
- The Virus activity control feature protects a system against mass mailings performed by mail worms. SpIDer Mail examines components of a message and considers sending time in order to determine if an outgoing message is a part of malicious activities in a system.
 Compact and user-friendly Virus making and other Internet crimes are well-organized businesses. Updating of virus databases is essential for protection against such threats. Constant monitoring and lots of customers worldwide ensure prompt collection of information on dangerous web-resources and retrieval of latest samples of viruses that help keep protection of users up-to-date. - Software can be set to update automatically, on-demand or according to a schedule.
- Update files are downloaded very quickly even if a connection speed is low.
- There are always available update servers.
- No need to restart a computer after updating. Dr.Web starts using the latest virus definitions right away.
| Low traffic - Updates are very small – 50-200 Kb.
- You can choose to update only the virus database to lower your traffic. However, it is not recommended to use the option. Dr.Web anti-virus for Windows is constantly improved to counter newest cyber-threats. New features are added with updates of modules that are automatically updated from the server of the company during a regular updating session.
- Updates can be downloaded in archives to reduce traffic. Doctor Web uses a special data compression algorithm to reduce the size of downloaded updates. If a minor fix or an add-on is released for the virus database, it is downloaded as a patch so the amount of transferred data is decreased by dozens of times.
Virus monitoring service - The Doctor Web virus monitoring service collects malware samples all over the world.
- A hot update is released immediately after a new threat has been analyzed.
- As an update is released, it becomes available on several servers located in different parts of the globe to all Dr.Web customers.
- A new update is tested over a huge number of clean files to ensure that no false detection will occur.
- An intelligent system automatically adding similar viruses to a database ensures even prompter response to emerging threats.
Dr.Web virus database - Record small number of entries.
- Small size of updates.
- One entry allows detecting hundreds or even thousands of similar viruses.
Though smaller than virus databases of other vendors, it ensures detection of the same (or even greater) number of malicious programs. What are the benefits of a smaller database? - Lower disk usage
- Lower memory usage
- Lower updating traffic
- Higher scan speed
- Detection of viruses that are yet to come as modifications of known malware
Friendliness and usability The built-in scheduler allows to set scan time and frequency. Automatic updating of the virus database is also customizable. Dr.Web enables a user to specify actions performed to malicious programs of different types — viruses, spyware, riskware, adware, hack tools, paid dialers, jokers. Dr.Web is one of the few anti-viruses that allow setting different responses to threats of different types. - Set rules for each module of Dr.Web anti-virus for Windowsspecifying actions performed to different types of malicious programs – viruses, spyware, riskware, adware, hack tools, paid dialers, jokers.
- Use the default settings or choose to specify how the anti-virus will respond upon a detection of a malicious program.
- Define sequences of actions and instruct an anti-virus what to do if the first specified action can’t be applied to an infected object (e.g an incurable file can be moved to the quarantine or deleted).
|
