Dr.Web- Internet Security and Anti-Virus Software

 Advantages

• Comprehensive anti-virus solution for PC
• Real time protection
• Best at curing active infections
• Installation in an infected system without its preliminary curing
• Unique technologies blocking even unknown threats
• Full scan of archives at all nesting levels
• Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector
• Filtering spam and other types of unsolicited messages doesn't require training the anti-spam
• Reliable on-the-fly check of inbound and outbound http-traffic
• Efficient protection of children against exposure to objectionable content
• Protects against unauthorized access by a network; prevents data leaks; blocks suspicious connections on package and application layers

 Technologies

A good anti-virus application can detect viruses. Deleting an infected file that may contain important information is one thing, but restoring the file to its original “healthy” state is entirely another. Dr.Web treats user files with great care.

Cures viruses

• The Dr.Web anti-virus functions on infected computers; its exceptional resistance to viruses makes it stand out among anti-viruses.
• Dr.Web has the highest success rate in the industry for curing active infections.
• There is no need to cure a system prior to installing Dr.Web; this is due to the product’s unique technologies for scanning memory processes and its outstanding ability to neutralize active infections.
• High probability to launch a scanning process in the infected system successfully even from a remote data-storage device without installation (e.g. from a USB flash drive).

Self-protection

Dr.Web is immune to any attempts by malicious programs to disrupt its operation. Dr.Web SelfPROtect is the unique anti-virus component that maintains the anti-virus’ security.

• Dr.Web SelfPROtect is implemented as a driver that operates on the lowest system level. The driver can’t be stopped or unloaded without a system reboot. There is no way for a malicious program to disrupt operation of the self-protecting module.
• Dr.Web SelfPROtect restricts access to a network, files and folders, certain branches of the Windows Registry and removable data-storage devices on the system driver level and protects the software from anti-antiviruses aiming to disrupt the operation of Dr.Web.
• Some anti-viruses modify the Windows kernel through intercepting interrupts, changing vector tables or using other undocumented features. This may have a negative impact on the stability of a system and pave new ways for malicious programs to get into a system. At the same time, Dr.Web SelfPROtect maintains security of the anti-virus and doesn’t interfere with routines of the Windows kernel.

Unique engine features

• Scans archived files at any nesting level.
• Reliably detects packed objects regardless of whether or not Dr.Web recognizes the compression format and their detailed analysis aimed at exposing hidden threats.
• Leader in detecting and neutralizing complex rootkits (Shadow.based (Confiсker), MaosBoot, Rustock.C, Sector).
• Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system.
• Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed.

Detection of unknown threats

• FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers.
• The cutting-edge, non-signature scan technology Origins Tracing™ ensures the high probability that viruses unknown to Dr.Web will be detected.
• The heuristic analyzer, whose analyses are based on criteria typical of various groups of malicious programs, detects most known threats.

 License protection components

Detection of all types of threats (Dr.Web Scanner)

• Quick and thorough scanning of RAM, boot sectors, hard drives and removable data-storage devices.
• Neutralizes viruses, Trojans and other malware.
• Comprehensive databases for spyware, riskware, adware, hack tools and jokers.

Real-time protection (SpIDer Guard® file monitor)

• Real-time monitoring of the system’s health — interception of all calls to files located on local drives, floppy discs, CD/DVD/ Blue-ray disks, flash-drives, or smart cards.
• File monitor is highly resistant to attempts by malicious programs to disrupt its operation.

Anti-rootkit technology (Dr.Web Shield™)

• Reliable system protection from viruses featuring rootkit-technologies that allow viruses to hide their presence in a compromised system.
• Neutralization of complex rootkits (Shadow.based (Confiсker), MaosBoot, Rustock.C, Sector).

Virus-free e-mail (SpIDer Mail®)…

• On-the-fly virus scanning of e-mails over SMTP/POP3/NNTP/IMAP4 that doesn’t affect performance of mail clients and doesn’t cause receipt delays
• Individual processing rules for different types of malicious objects — viruses, riskware, adware, hack tools, paid dialers, and jokers
• An analysis of message contents and sending time allows the characteristics of malicious activities to be detected and prevents mail worms from carrying out mass mailings

…spam-free e-mail (Dr.Web Anti-spam)

• Real-time filtering of incoming and outgoing e-mail.
• The anti-spam doesn’t depend on a mail client and doesn’t cause receipt delays.
• The anti-spam doesn’t require configuration and starts working as soon as the first message is received.
• Different filtering technologies ensure the high probability of detecting spam, phishing, pharming, scamming and bounce-messages.
• Anti-botnet – you won’t be disconnected from the Internet because your computer sends out spam.
• Messages that have been filtered out are never deleted. Instead they are placed in a separate folder where you can always verify that no false detection has occurred.
• The standalone anti-spam analyzer module doesn’t require connection to an external server or access to a database, saving on traffic.

Sheild from Internet threats (SpIDer Gate™ HTTP monitor)

• The SpIDer Gate™ module scans incoming and outgoing HTTP traffic in real time, intercepts all HTTP connections, performs data filtering, blocks infected web-pages in any browser, scans files in archives and protects users from phishing sites and other dangerous web-resources.
• SpIDer Gate operates independently from web browsers.
• Filtering doesn’t affect the overall system performance, surfing speed or traffic.
• No configuration is required in the default mode; Dr.Web SpIDer Gate starts scanning right after installation.

Web-surfing control (Dr.Web Parental control)

• Protection of children from exposure to objectionable content.
• Block of access to web-sites from the list divided into 10 subject groups (Adult content, violence, weapons, drugs, gambling, etc.).
• Block of access to removable data storage devices, files, folders or network drives – an additional measure to protect data from deletion or unauthorized access.

Protection from network attacks (Dr.Web Firewall)

• Protects against unauthorized access by a network; prevents data leaks; blocks suspicious connections on package and application layers.
• The application layer connection control manages the ability of applications and processes to access network resources and registers access attempts in the applications log.
• The packet layer filtering allows controlling connection to the Internet regardless of an application that uses it. The packet filter log stores information about packets sent over network interfaces.

… and even more:

• on-demand scan/custom scan scheduling;
• automatic updating of Dr.Web virus databases;
• automatic notifications upon detection of infected, incurable or suspicious objects;
• virus database update reminders;
• administration of all anti-virus components from a single control panel;
• transparent operation — detailed scanner and SpIDer Guard logs.