Dr.Web Home Security Suite
Protection of workstations for home users
- Dr.Web Anti-Virus for Windows
- Dr.Web Security Space for Windows
- Dr.Web Anti-Virus for Mac OS X
- Dr.Web Anti-Virus for Linux
Licensing of Dr.Web Home Security Suite
Types of licenses
- Per number of protected workstations
Protection level
Dr.Web Anti-Virus | Dr.Web Security Space | |
Anti-Virus | ||
Anti-spy | ||
Anti-rootkit | ||
Firewall | ||
Anti-spam | ||
HTTP-monitor | ||
Parental Control | ||
Additional Advantages | ||
Free 30 days trial | ||
Dr.Web Mobile Security Suite Incluído!!! |
||
Operating Systems | ||
Windows 2000/XP/Vista/7 (32 and 64 bits) |
||
Linux (32 and 64 bits) |
||
Mac OS X (32 and 64 bits) |
Other features
- Discount for the number of PCs? Yes
- Discount for license period? Yes, for 24 months=20%, for 36-months=27%
- Restrictions? No more than 50 PCs
- Availables licensing periods? 12, 24 and 36 months
Dr.Web Antivirus for Windows
Protects home users workstations.
Advantages
- Best at curing active infections
- Installation in an infected system without its preliminary curing
- Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector
- Unique technologies blocking even unknown threats
- Full scan of archives at all nesting levels
- Detection and neutralization of viruses found only in RAM and never existing as files
Technologies
A good anti-virus application can detect viruses. Deleting an infected file that may contain important information is one thing, but restoring the file to its original «healthy» state is entirely another. Dr.Web treats user files with great care.
Cures viruses
- The Dr.Web anti-virus functions on infected computers; its exceptional resistance to viruses makes it stand out among anti-viruses.
- Dr.Web has the highest success rate in the industry for curing active infections.
- There is no need to cure a system prior to installing Dr.Web; this is due to the product's unique technologies for scanning memory processes and its outstanding ability to neutralize active infections.
- High probability to launch a scanning process in the infected system successfully even from a remote data-storage device without installation (e.g. from a USB flash drive).
Self-protection
Dr.Web is immune to any attempts by malicious programs to disrupt its operation. Dr.Web SelfPROtect is the unique anti-virus component that maintains the anti-virus' security.
- Dr.Web SelfPROtect is implemented as a driver that operates on the lowest system level. The driver can't be stopped or unloaded without a system reboot. There is no way for a malicious program to disrupt operation of the self-protecting module.
- Dr.Web SelfPROtect restricts access to a network, files and folders, certain branches of the Windows Registry and removable data-storage devices on the system driver level and protects the software from anti-antiviruses aiming to disrupt the operation of Dr.Web.
- Some anti-viruses modify the Windows kernel through intercepting interrupts, changing vector tables or using other undocumented features. This may have a negative impact on the stability of a system and pave new ways for malicious programs to get into a system. At the same time, Dr.Web SelfPROtect maintains security of the anti-virus and doesn't interfere with routines of the Windows kernel.
Unique engine features
- Scans archived files at any nesting level.
- Reliably detects packed objects regardless of whether or not Dr.Web recognizes the compression format and their detailed analysis aimed at exposing hidden threats.
- Leader in detecting and neutralizing complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector).
- Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system.
- Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed.
Detection of unknown threats
- FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers.
- The cutting-edge, non-signature scan technology Origins TracingTM ensures the high probability that viruses unknown to Dr.Web will be detected.
- The heuristic analyzer, whose analyses are based on criteria typical of various groups of malicious programs, detects most known threats.
Components
Efficient detection of all types of threats (Dr.Web Scanner)
- Quick and thorough scan of RAM, boot sectors, hard drives and removable data-storage devices.
- Neutralization of viruses, Trojans and other malware.
- Comprehensive databases for detection of spyware, riskware, adware, hack tools and jokers.
Real-time protection (SpIDer Guard® resident monitor)
- Real-time monitoring of the system's health - interception of all calls to files located on local drives, floppy discs, CD/DVD/ Blu-ray disks, flash-drives or smart cards.
- High resistance to attempts of malicious programs to disrupt operation of SpIDer Guard or to stop it.
Anti-rootkit technology (Dr.Web ShieldTM)
- Reliable protection of the system from viruses featuring rootkit-technologies that allow them to hide their presence in the compromised system.
- Neutralization of complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector).
Virus-free e-mail (SpIDer Mail® monitor)
- Virus scan of e-mails over SMTP/POP3/NNTP/IMAP4 doesn't affect performance of mail clients and doesn't cause a receipt delay.
- Customizable actions for different types of malicious objects - viruses, riskware, adware, hack-tools, paid dialers, jokers.
- Protection from mass mailings of worms through analysis of contents and sending time of outgoing messages which may indicate malicious activities.
Protection from network attacks (Dr.Web Firewall)
- Protection from unauthorized access from Internet, data leak prevention, blocking of suspicious connections on package and application layers.
- Application layer connections control allows monitoring interaction of applications and processes with network resources and registering all access attempts in the applications log.
- The packet layer filtering allows controlling connection to the Internet regardless of an application that uses it. The packet filter log stores information about packets sent over network interfaces.
- The trusted applications database and service for centralized processing of driver network messages make the firewall more stable and much easier to use.
Updates
Always up-to-date
- Updating over the Internet, whether automatically or according to a schedule, doesn't require user interference. Updating can also be launched manually
- Updates are very small - just 50-200 KB, and it takes very little time to download them even if a slow Internet connection is used
- Updating servers are always available
- In most cases, there is no need to reboot the system to complete updating; Dr.Web starts using the updated modules and latest virus definitions right away
- To save traffic, the anti-virus can be set to update virus databases only. However, enabling this option is not recommended. To counter the latest threats, Dr.Web undergoes constant refinement. New features are incorporated in the anti-virus package's updated modules and are downloaded from Doctor Web's server automatically during regular updating sessions. To protect a system from new malware, all components of an anti-virus must remain up-to-date
- You can also reduce traffic by downloading updates as archived patch files. Patch files are used to deliver minor additions and fixes for virus database or program modules. The special compression algorithm applied to such patches dramatically reduces the amount of transferred data
Virus monitoring service
- The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates as soon as analyses are completed - as often as several times per hour
- As soon as an update is released, users can retrieve it from several servers located at various points of the globe
- To avoid false positives, an update is tested over a huge number of uninfected files before it is released
- The intelligent system automatically adds entries for similar viruses into the database, ensuring the prompt neutralization of emerging threats
System requirements
Dr.Web anti-virus for Windows
- Windows 7/Vista/XP/2000 SP 4 + Rollup 1 (32- and 64-bit systems)
- Free disk space: ~82 MB. Additional free space for the firewall: ~ 8 MB
Additional requirements: access to the Internet for registration and updating.
Dr.Web Security Space
Comprehensive protection from Internet threats
- Comprehensive anti-virus solution for PC
- Real time protection
- Best at curing active infections
- Installation in an infected system without its preliminary curing
- Unique technologies blocking even unknown threats
- Full scan of archives at all nesting levels
- Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector
- Filtering spam and other types of unsolicited messages doesn't require training the anti-spam
- Reliable on-the-fly check of inbound and outbound http-traffic
- Efficient protection of children against exposure to objectionable content
- Protects against unauthorized access by a network; prevents data leaks; blocks suspicious connections on package and application layers
Technologies
A good anti-virus application can detect viruses. Deleting an infected file that may contain important information is one thing, but restoring the file to its original «healthy» state is entirely another. Dr.Web treats user files with great care.
Cures viruses
- The Dr.Web anti-virus functions on infected computers; its exceptional resistance to viruses makes it stand out among anti-viruses.
- Dr.Web has the highest success rate in the industry for curing active infections.
- There is no need to cure a system prior to installing Dr.Web; this is due to the product's unique technologies for scanning memory processes and its outstanding ability to neutralize active infections.
- High probability to launch a scanning process in the infected system successfully even from a remote data-storage device without installation (e.g. from a USB flash drive).
Self-protection
Dr.Web is immune to any attempts by malicious programs to disrupt its operation. Dr.Web SelfPROtect is the unique anti-virus component that maintains the anti-virus security.
- Dr.Web SelfPROtect is implemented as a driver that operates on the lowest system level. The driver can't be stopped or unloaded without a system reboot. There is no way for a malicious program to disrupt operation of the self-protecting module.
- Dr.Web SelfPROtect restricts access to a network, files and folders, certain branches of the Windows Registry and removable data-storage devices on the system driver level and protects the software from anti-antiviruses aiming to disrupt the operation of Dr.Web.
- Some anti-viruses modify the Windows kernel through intercepting interrupts, changing vector tables or using other undocumented features. This may have a negative impact on the stability of a system and pave new ways for malicious programs to get into a system. At the same time, Dr.Web SelfPROtect maintains security of the anti-virus and doesn't interfere with routines of the Windows kernel.
Unique engine features
- Scans archived files at any nesting level.
- Reliably detects packed objects regardless of whether or not Dr.Web recognizes the compression format and their detailed analysis aimed at exposing hidden threats.
- Leader in detecting and neutralizing complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector).
- Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system.
- Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed.
Detection of unknown threats
- FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers.
- The cutting-edge, non-signature scan technology Origins TracingTM ensures the high probability that viruses unknown to Dr.Web will be detected.
- The heuristic analyzer, whose analyses are based on criteria typical of various groups of malicious programs, detects most known threats.
Basic license protection components
Detection of all types of threats (Dr.Web Scanner)
- Quick and thorough scanning of RAM, boot sectors, hard drives and removable data-storage devices.
- Neutralizes viruses, Trojans and other malware.
- Comprehensive databases for spyware, riskware, adware, hack tools and jokers.
Real-time protection (SpIDer Guard® file monitor)
- Real-time monitoring of the system's health — interception of all calls to files located on local drives, floppy discs, CD/DVD/ Blue-ray disks, flash-drives, or smart cards.
- File monitor is highly resistant to attempts by malicious programs to disrupt its operation.
Anti-rootkit technology (Dr.Web Shield™)
- Reliable system protection from viruses featuring rootkit-technologies that allow viruses to hide their presence in a compromised system.
- Neutralization of complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector).
Virus-free e-mail (SpIDer Mail®)
- On-the-fly virus scanning of e-mails over SMTP/POP3/NNTP/IMAP4 that doesn't affect performance of mail clients and doesn't cause receipt delays
- Individual processing rules for different types of malicious objects – viruses, riskware, adware, hack tools, paid dialers, and jokers
- An analysis of message contents and sending time allows the characteristics of malicious activities to be detected and prevents mail worms from carrying out mass mailings
...spam-free e-mail (Dr.Web Anti-spam)
- Real-time filtering of incoming and outgoing e-mail.
- The anti-spam doesn't depend on a mail client and doesn't cause receipt delays.
- The anti-spam doesn't require configuration and starts working as soon as the first message is received.
- Different filtering technologies ensure the high probability of detecting spam, phishing, pharming, scamming and bounce-messages.
- Anti-botnet — you won't be disconnected from the Internet because your computer sends out spam.
- Messages that have been filtered out are never deleted. Instead they are placed in a separate folder where you can always verify that no false detection has occurred.
- The standalone anti-spam analyzer module doesn't require connection to an external server or access to a database, saving on traffic.
Sheild from Internet threats (SpIDer Gate™ HTTP monitor)
- The SpIDer Gate™ module scans incoming and outgoing HTTP traffic in real time, intercepts all HTTP connections, performs data filtering, blocks infected web-pages in any browser, scans files in archives and protects users from phishing sites and other dangerous web-resources.
- SpIDer Gate operates independently from web browsers.
- Filtering doesn't affect the overall system performance, surfing speed or traffic.
- No configuration is required in the default mode; Dr.Web SpIDer Gate starts scanning right after installation.
Web-surfing control (Dr.Web Parental control)
- Protection of children from exposure to objectionable content.
- Block of access to web-sites from the list divided into 10 subject groups (Adult content, violence, weapons, drugs, gambling, etc.).
- Block of access to removable data storage devices, files, folders or network drives – an additional measure to protect data from deletion or unauthorized access.
Protection from network attacks (Dr.Web Firewall)
- Protects against unauthorized access by a network; prevents data leaks; blocks suspicious connections on package and application layers.
- The application layer connection control manages the ability of applications and processes to access network resources and registers access attempts in the applications log.
- The packet layer filtering allows controlling connection to the Internet regardless of an application that uses it. The packet filter log stores information about packets sent over network interfaces.
... and even more:
- on-demand scan/custom scan scheduling;
- automatic updating of Dr.Web virus databases;
- automatic notifications upon detection of infected, incurable or suspicious objects;
- virus database update reminders;
- administration of all anti-virus components from a single control panel;
- transparent operation – detailed scanner and SpIDer Guard logs.
Updates
Always up-to-date
- Updating over the Internet, whether automatically or according to a schedule, doesn't require user interference. Updating can also be launched manually
- Updates are very small — just 50-200 KB, and it takes very little time to download them even if a slow Internet connection is used
- Updating servers are always available
- In most cases, there is no need to reboot the system to complete updating; Dr.Web starts using the updated modules and latest virus definitions right away
- To save traffic, the anti-virus can be set to update virus databases only. However, enabling this option is not recommended. To counter the latest threats, Dr.Web undergoes constant refinement. New features are incorporated in the anti-virus package's updated modules and are downloaded from Doctor Web's server automatically during regular updating sessions. To protect a system from new malware, all components of an anti-virus must remain up-to-date
- You can also reduce traffic by downloading updates as archived patch files. Patch files are used to deliver minor additions and fixes for virus database or program modules. The special compression algorithm applied to such patches dramatically reduces the amount of transferred data
Virus monitoring service
- The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates as soon as analyses are completed — as often as several times per hour
- As soon as an update is released, users can retrieve it from several servers located at various points of the globe
- To avoid false positives, an update is tested over a huge number of uninfected files before it is released
- The intelligent system automatically adds entries for similar viruses into the database, ensuring the prompt neutralization of emerging threats
System requirements
For Dr.Web Security Space
- Windows 7/Vista/XP/2000 SP4 + Rollup 1 (32- and 64-bit systems).
- Free disk space: ~127 MB. An additional 8 MB are required to install the firewall.
Additional requirements: Internet connection for registration and updating.
Licensing
Types of licenses
- Per number of protected workstations
License options
- Dr.Web Security Space. The license includes the following protection components: Anti-virus, Anti-spy, Anti-rootkit, Anti-spam, HTTP monitor, Parental Control, Firewall.
Dr.Web Security Antivirus for Linux
Basic anti-virus protection
- Easy-to-use control center
- Real-time protection
- Custom scan
- Manageable quarantine
- User-friendly license manager
- Control over the command line
- Stylish interface
This product can be purchased as a component of Dr.Web Enterprise Security Suite.
It is also included in low-cost Dr.Web Universal bundle for small and medium companies.
Technologies
Unique engine features
- Scans archived files at any nesting level
- Reliable detection of packed objects (even if the compression format is unknown to Dr.Web), their detailed analysis aimed at exposing hidden threats
- Leader in detecting and neutralizing complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector)
- Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system
- Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed
Detection of unknown threats
- FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers
- The cutting-edge, non-signature scan technology Origins TracingTM ensures the high probability that viruses unknown to Dr.Web will be detected
- The heuristic analyzer, whose analyses are based on criteria that is typical of various groups of malicious programs, detects most known threats
Key features
- Detects and neutralizes viruses on hard drives and removable data storage devices
- Detects viruses in archives at any nesting level and in packed objects
- Scans files using FLY-CODETM technology, including those compressed with unknown packers
- Protects against unknown threats using the improved non-signature detection technology Origins TracingTM and an intelligent heuristic analyzer
- Offers four types of scanning: full, express, custom, and user-defined presets
- Monitors system health in real-time; intercepts all calls to files located on local drives, floppy discs, CD/DVD/ Blue-ray disks, flash drives, or smart cards
- Self-protection against attempts by malicious programs to disrupt operation of the anti-virus
- The quarantine lets you isolate infected files, allowing files to be restored to their original location and the maximum size of the quarantine to be restricted
- Detailed statistics on the anti-virus operation
- Automatic (scheduled) and on-demand updating
Updating
Always up-to-date
- Updating over the Internet, whether automatically or according to a schedule, doesn't require user interference. Updating can also be launched manually
- Updates are very small - just 50-200 KB, and it takes very little time to download them even if a slow Internet connection is used
- Updating servers are always available
- In most cases, there is no need to reboot the system to complete updating; Dr.Web starts using the updated modules and latest virus definitions right away
- To save traffic, the anti-virus can be set to update virus databases only. However, enabling this option is not recommended. To counter the latest threats, Dr.Web undergoes constant refinement. New features are incorporated in the anti-virus package's updated modules and are downloaded from Doctor Web's server automatically during regular updating sessions. To protect a system from new malware, all components of an anti-virus must remain up-to-date
- You can also reduce traffic by downloading updates as archived patch files. Patch files are used to deliver minor additions and fixes for virus database or program modules. The special compression algorithm applied to such patches dramatically reduces the amount of transferred data
Virus monitoring service
- The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates as soon as analyses are completed - as often as several times per hour
- As soon as an update is released, users can retrieve it from several servers located at various points of the globe
- To avoid false positives, an update is tested over a huge number of uninfected files before it is released
- The intelligent system automatically adds entries for similar viruses into the database, ensuring the prompt neutralization of emerging threats
- Platforms: full support for x86 architecture command system in 32 and 64-bit modes.
- Free disk space: at least 90 MB.
- Operating system: GNU/Linux distributions with 2.6.x kernel.
- Internet access for registration and updates.
Licensing
Types of licenses
- Per number of protected workstations
License options
- Anti-virus
- Anti-virus + Control center
Dr.Web Antivirus for Mac OS X
Basic protection from viruses and other malware targeting Mac OS X and other operating systems
- Easy-to-use control center
- High scanning speed
- Custom scanning profiles
- Reliable real-time protection
- Minimal consumption of system resources
- Low updating traffic
- Flexible configuration
- Stylish and user-friendly interface
Technologies
Unique engine features
- Scans archived files at any nesting level
- Reliable detection of packed objects (even if the compression format is unknown to Dr.Web), their detailed analysis aimed at exposing hidden threats
- Leader in detecting and neutralizing complex rootkits (Shadow.based (Conficker), MaosBoot, Rustock.C, Sector)
- Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system
- Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed
Detection of unknown threats
- FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers
- The cutting-edge, non-signature scan technology Origins TracingTM ensures the high probability that viruses unknown to Dr.Web will be detected
- The heuristic analyzer, whose analyses are based on criteria that is typical of various groups of malicious programs, detects most known threats
Key features
- Scan of autorun objects, removable data storage devices, network and logical drives, e-mails, files, and directories including archives
- Three types of scanning: express, full, and custom
- Automatic, manual, and scheduled scan
- Settings of SpIDer Guard® are password protected against unauthorized modification
- Different actions can be performed with different types of objects: cure, move to the quarantine, delete; action sequences allow you to define which action will be applied to an object if the first action can't be performed
- User-defined file and path exclusions
- Detection and neutralization of viruses disguised with unknown packers
- The anti-virus log contains the time of each event, the name of the scanned object, and the type of action applied to the object
- Automatic (scheduled) and on-demand updating
- Virus notifications, including event sounds, for all viral events
- Quarantine to isolate infected files; quarantine storage time and maximum size can be specified
- Curing, restoring, and removal of quarantined objects
- Detailed operation log
- Modules are available as command line utilities that can be used with Apple Scripts
Updating
Always up-to-date
- Updating over the Internet, whether automatically or according to a schedule, doesn't require user interference. Updating can also be launched manually
- Updates are very small – just 50-200 KB, and it takes very little time to download them even if a slow Internet connection is used
- Updating servers are always available
- In most cases, there is no need to reboot the system to complete updating; Dr.Web starts using the updated modules and latest virus definitions right away
- To save traffic, the anti-virus can be set to update virus databases only. However, enabling this option is not recommended. To counter the latest threats, Dr.Web undergoes constant refinement. New features are incorporated in the anti-virus package's updated modules and are downloaded from Doctor Web's server automatically during regular updating sessions. To protect a system from new malware, all components of an anti-virus must remain up-to-date
- You can also reduce traffic by downloading updates as archived patch files. Patch files are used to deliver minor additions and fixes for virus database or program modules. The special compression algorithm applied to such patches dramatically reduces the amount of transferred data
Virus monitoring service
- The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates as soon as analyses are completed – as often as several times per hour
- As soon as an update is released, users can retrieve it from several servers located at various points of the globe
- To avoid false positives, an update is tested over a huge number of uninfected files before it is released
- The intelligent system automatically adds entries for similar viruses into the database, ensuring the prompt neutralization of emerging threats
System requirements
- Mac OS X 10.4 or higher
- Intel processor
- ~30 MB free disk space
Licensing
Types of licenses
- Per number of protected workstations
License options
- Anti-virus