Anti-virus agents

The anti-virus agent is a Dr.Web AV-Desk component installed on all computers in a protected network.

Installation

After signing up for the service a customer receives an installer (about 1100KB) download link. The executable file contains a unique subscriber UID generated by the server and stored in the database. Once the installer is launched, a TCP/IP connection is established between the user machine and the anti-virus server and the identification procedure is performed. If the computer is identified successfully, the main anti-virus package is downloaded from the server. Updating and configuration of anti-virus packages is carried out according to instructions received from the server.

Anti-virus agent components

Dr.Web scanner for Windows

• Performs a full scan of the system memory, active processes and files launched at system’s start-up.
• Scans archived files at any nesting level including files placed in multi-volume and self-extracting archives.
• High-speed on-demand scan performed by the multi-thread anti-virus engine.
• Dr.Web Shield™ is the scanner module that enables the anti-virus to neutralize rootkits.
• Dr.Web SelfPROtect controls access to a network, files and folders, certain branches of the Windows Registry and removable data-storage devices on the system driver level and protects the software from anti-antiviruses aiming to disrupt operation of Dr.Web.

SpIDer Guard® resident monitor

• A powerful tool for real-time anti-virus protection
• All calls to files located on local drives, floppy discs, CDs, flash-drives or smart cards are monitored on-access by the SpIDer Guard.
• SpIDer Guard is extremely resistant to attempts of malicious programs to disrupt its operation.
• Implemented as a Windows service, SpIDer Guard enables an administrator to restrict users’ rights to modify settings of the resident monitor.

SpIDerMail® resident monitor

• On access filtering of incoming and outgoing POP3/SMTP/IMAP4/NNTP traffic.
• Scanning of incoming and outgoing messages is performed prior to their receipt by a server.
• Detection and blocking of malicious activities based on analysis aiming to find attributes characteristic of mail worms.
• Unlike anti-spam solutions based on Bayesian filter Dr.Web anti-spam doesn’t require any tuning before one is able to use it
• Language-independent analysis allows detecting a spam message regardless of its language
• Different filtering technologies for different types of undesired mail provide high detection probability.
• Unique spam detection technologies based on several thousands of rules do not require frequent updates (updated once in 24 hours).
• Filtered messages are never deleted but automatically placed into a special folder.

SpIDer Gate™

• HTTP-traffic anti-virus filtering.

Parental control

Keyword and URL-based blocking of web-sites. Block of access to removable USB data storage devices, files, folders or network drives and protection data from deletion or unauthorized access.