News on update

We’ve updated Dr.Web FixIt!’s End User License Agreement!

Mon, 29 Dec 2025 13:33:13 GMT

Dr.Web FixIt!’s End User License Agreement has been updated. The latest EULA version is available at https://license.drweb.com/agreement

Dr.Web FixIt! allows information security experts to conduct in-depth analyses of Windows PCs and servers remotely, neutralise identified threats, and resolve potential vulnerabilities. It is distinguished for its ability to detect brand-new malware, including malicious programs that perpetrators use in targeted attacks and can’t be identified by other cybersecurity tools.

Dr.Web FixIt! is primarily designed for information security professionals tasked with monitoring IT infrastructures and analysing cybersecurity incidents. However, even if a company doesn't employ an actual SOC team, the solution can still be used to identify threats on desktops, laptops and/or servers, and eliminate them.
If necessary, our experts will help you analyse the data gathered by Dr.Web FixIt! To get additional assistance and expertise from Doctor Web, you will need to purchase an expert support certificate.

You can purchase a Dr.Web FixIt! license from Doctor Web's partners.

A major centralised administration server update for Dr.Web Enterprise Security Suite and Dr.Web Industrial

Fri, 12 Dec 2025 11:13:26 GMT

Doctor Web is rolling out a major server component update for Dr.Web Enterprise Security Suite and Dr.Web Industrial 13.0.1.202511120 that will become available on December 15, 2025. The biggest change being introduced is for the Application Control component to further improve the security of protected devices.

The update package will also deliver other tweaks and feature upgrades. Those include additional functional analysis criteria for Dr.Web Enterprise Security Suite and Dr.Web Industrial:

In the “Application launch” category, Dr.Web can be set to stop office suite programs and mail clients from creating child processes. This can reduce the risk of infection via malicious documents and emails without interfering with the user experience.
In the “Launch of script interpreters” category, new rules are available to prevent scripts from being run from office suite apps and email clients and to block certain AutoIt, JavaScript and Python scripts. These restrictions will protect systems from cyberattacks that leverage script interpreters and help prevent dubious automation routines from being created.
The “Driver loading” category can now be used to prevent non-WHQL drivers from being installed. This option ensures that unsigned modules can't be used and potentially dangerous code won't be loaded into the kernel.

The updated set of rules provides cybersecurity administrators with additional flexible tools for preventing malicious activity and increasing their infrastructure’s resilience in the face of modern threats.
The update also addresses a number of identified issues, which include:

A Dr.Web server update error that could occur in systems with limited CPU and memory capacity.
An issue preventing the repository product “Content filter databases for UNIX” from being updated if the “Update only bases” option was enabled in the Control Center’s Update restrictions section.
Possible interference with routine DNS response cache updating.

A detailed changelog is available here.

Dr.Web CureIt! can now see what malware is trying to hide

Thu, 20 Nov 2025 08:00:25 GMT

Doctor Web has updated its free utility Dr.Web CureIt! to introduce a unique feature—the ability to scan files and folders that virus makers add to antivirus exclusions lists. This is a major step in tackling more sophisticated threats that seek to disable information security software to ensure they operate unhindered in the system.

The new feature was inspired by the success of Dr.Web FixIt!—the product employed by Doctor Web's experts to investigate information security incidents and eliminate complex infections. Many malicious programs attempt to add their own executable files to the antivirus exclusions list as soon as they get into a system. By doing so, they deceive the antivirus and make it ignore malicious objects, which allows attackers to steal data, encrypt files or use the device as a botnet node.

How the new feature works:

When the scan is started, Dr.Web CureIt! will automatically examine the exclusions lists of Microsoft Defender or any other antivirus found in the system.
Then all files and folders found on these lists are thoroughly scanned by the Dr.Web antivirus engine.
If a malicious object is detected among the exclusions, Dr.Web CureIt! notifies the user and removes the threat.

This feature can be of vital importance for ordinary users who may be unaware that their security software has been compromised. Now, even if a trojan is hiding in plain sight, Dr.Web CureIt! will be able to expose and neutralize it.

What’s coming next: emergency expert aid for Linux

Driven by the success of Dr.Web FixIt! under Windows, Doctor Web is also planning to release a full-blown version of the service for Linux to help information security professionals investigate cyberattacks on corporate infrastructures.
Currently you can use Dr.Web FixIt! for Linux to collect system information and send it to our technical support engineers. The utility is now available at https://free.drweb.ru/sysinfo/
The new service’s design features will subsequently be used to create a Dr.Web CureIt! version that will enable ordinary users to quickly scan their Linux machines and eliminate any consequences of infection.

You can download the updated version of Dr.Web CureIt! free of charge on our official website: https://free.drweb.com/download+cureit+free/

*Available free of charge for home use only.

Updated version of Dr.Web for mobile devices comes with a smart security system

Fri, 07 Nov 2025 09:00:00 GMT

Updated antivirus products for protecting Android-based smartphones, tablets and other mobile devices have been released. The main improvements concern the automation of the protection and operational stability.

What makes this release special?

The new automated threat-processing feature allows Dr.Web solutions to remove malicious objects and to block suspicious links or isolate potentially dangerous applications without delays and manual user intervention.

What does this mean for users?

Now users of personal devices do not need to monitor all of the threat notifications as they did before because manual responses can be completely eliminated. This feature has been designed to ensure that the antivirus product’s response won't depend on the user's response to system notifications about detected threats and the actions that have been performed with them. The intelligent system, developed by Doctor Web specialists, independently eliminates threats in real time in accordance with the parameters specified for responding to certain types of malware.
Corporate users will especially enjoy this feature. The automated removal of malicious objects and the blocking of suspicious links and many other actions occur instantly without the direct participation of administrators. This feature is also supported by the Control Center.

Administration has become even more convenient

This update delivers the ability to centrally manage the actions of the Scanner and SpIDer Guard components when various types of threats are detected on Android-based devices. Now the administrator can configure how the Dr.Web agent will respond to threats — notify, delete or ignore them, depending on the category.

Important notice!

Starting with the new version, support is no longer available for Android version 4.4. Please pay attention to this when updating the product.
If you are using the Dr.Web Security Space version for mobile devices and downloaded it from Doctor Web's official website, you must completely reinstall the application in order to update it — download the latest version of the agent and install it.
For users of Dr.Web Security Space for mobile devices who downloaded the application from Google Play and who are using Dr.Web subscriptions or Dr.Web Mobile Security Suite, the update will proceed as usual.

Dr.Web Enterprise Security Suite and Dr.Web Industrial centralized management servers have been updated

Fri, 07 Nov 2025 09:00:00 GMT

A new update for Dr.Web Enterprise Security Suite and Dr.Web Industrial servers has been released. The new version delivers stability improvements and new tools for centrally managing actions when threats are detected on Android devices. To gain all of the new benefits and for correct system operation, users are recommended to update their servers to the latest version.

The new version of the Dr.Web Enterprise Security Suite server includes changes that improve security-system management. Changes have also occurred in Dr.Web for Android mobile devices — these ensure that the Control Center has full control of the antivirus protection.

This update delivers the ability to centrally manage the actions of the Scanner and SpIDer Guard components when various types of threats are detected on Android devices. Now the administrator can configure how the Dr.Web agent will respond to threats — notify, delete or ignore them, depending on the category.

The settings previously presented as the parameters "Scan for adware" and "Scan for potentially dangerous programs" have been replaced by a new mechanism for customising actions. If these scan parameters are disabled, after the update, the default action "Ignore" will be applied to the corresponding programs. In other cases, the "Report" action is used.

Important notice for users

To take advantage of the full range of the new version’s features and to ensure that the protection components operate correctly, the centralized management servers must be updated to the latest version.
The update is available for download via the management console’s web interface.
If antivirus network administrators have any questions on how to configure or plan the update, they can contact our Technical Support Service for a consultation.

Dr.Web solutions support all versions of Windows, starting with Windows XP

Thu, 30 Oct 2025 15:23:15 GMT

Because Microsoft officially discontinued its support for Windows 10 as of October 14, 2025, Doctor Web is informing its users and partners of the following.

Support for Dr.Web products installed on computers running Windows 10
Currently, all versions of Dr.Web solutions are fully compatible with Windows 10. We confirm that:

Technical support and updates for Dr.Web antivirus databases and software components are available as usual;
With Microsoft support officially discontinued, Doctor Web is continuing to ensure that its products are compatible with Windows 10—for as long as this is possible, taking into account security requirements.

Long-term support for all versions, starting with Windows XP
Even though many Windows versions lack official support, they are still actively being used in individual infrastructures—including in industry, automated control systems and specialized corporate environments.
Taking into account the needs of these users, Doctor Web is continuing to provide support for all OS versions, starting with Windows XP, in current versions of Dr.Web solutions for PC protection.

! Please note that using outdated versions of OSs is associated with certain risks.

The lack of security updates leaves vulnerabilities unclosed.
Compatibility issues connected with modern versions of application software (browsers, drivers, etc.).
Increased risk of compromise—exploits for older operating systems are widely available in open sources, and cybercriminals are still carrying out attacks on vulnerable protocols (SMBv1, TLS 1.0, etc.).

Even if your company's business processes are critically dependent on these systems, it is strongly recommended that you plan to migrate to modern operating systems that provide security updates.
For any period that you are using outdated OS versions, you need to isolate nodes containing OS data from the Internet and your main corporate network segments through the use of VLAN, DMZ or firewalls, and you must carefully scan the entire data exchange process involving these systems for malicious content.

Get structured information about targeted attacks: Dr.Web vxCube reports merged with the MITRE ATT&CK matrix

Wed, 22 Oct 2025 14:23:09 GMT

Doctor Web is updating Dr.Web vxCube. The upcoming release will allow the sandbox's reports to be linked with the MITRE ATT&CK Enterprise matrix. As a result, analysis results will be integrated into the knowledge base of adversarial tactics and techniques to provide researchers with a more accurate assessment of samples being examined and allow them to recreate the attack timeline. The MITRE ATT&CK framework contains information about threat actors’ tactics and techniques. Cybersecurity experts use the knowledge base to further enhance the security of IT infrastructures.

This latest Dr.Web vxCube version won't merely provide researchers with a report on the activity of a potential threat but will also help them determine the sequence of steps taken to penetrate and infect a system. This information may subsequently be used to understand how current security policies should be changed to tighten security. Furthermore, the data on identified tactics and techniques can help create new SOC and SIEM rules for neutralising a specific threat.

To better demonstrate how information security professionals will benefit from the upcoming update, let’s examine the report generated after a common encryption ransomware sample was analysed with the new Dr.Web vxCube version.

Tactics: Initial Access
Technique: Replication Through Removable Media
The attacker downloaded the malware to a removable data storage device that became the source of the infection. Perhaps, the employee used their own infected USB stick.
Tactics: Execution
Technique: Windows Management Instrumentation (WMI)
As soon as the flash drive gets connected to a computer, the autorun routine is triggered (for example, a modified autorun.inf file could be used for this). The encryption ransomware uses WMI to activate its payload. It employs a legitimate administration tool (WMI) to evade detection by less advanced antiviruses.
Tactics: Persistence & Privilege Escalation
Technique: Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
To persist after a system restart and gain control as soon as a user logs in, the ransomware adds itself to the autostart app list. To accomplish this, it creates a corresponding registry entry or copies itself into the autostart folder. At this step, the trojan is often able to elevate its privileges to match those of the current user account.
Tactics: Defense Evasion
Technique: Indicator Removal: File deletion
Once the ransomware has gained a foothold in the system, it starts covering its tracks. It removes its original executable file from the USB stick or the temporary folder to make it harder for antivirus experts to detect and analyze it.
Tactics: Lateral Movement
Technique: Replication Through Removable Media
The malicious program does not confine itself to operating on a single compromised device. It monitors the system to determine when other USB drives get connected and infects them as well. Now, if an employee takes away their flash drive and connects it to another computer, the attack will be repeated. This is how the ransomware traverses air gaps within an infrastructure.
Tactics: Impact
Techniques: Inhibit System Recovery и Data Encrypted for Impact
Inhibit System Recovery: the ransomware attempts to destroy or encrypt point-in-time file copies created by the Volume Shadow Copy Service (VSS) to prevent the victim from recovering their data by using standard Windows tools.
Data Encrypted for Impact: the malware uses strong encryption algorithms to encrypt all important files (documents, photos, database files) on the computer. After that, a message appears on the screen demanding that a ransom be paid in exchange for the decryption key.

A cybersecurity professional can use this information to implement the following measures in order to prevent systems from getting compromised by similar malicious programs:

Impose tighter restrictions on the use of USB storage media (disable the autorun feature, only allow encrypted corporate flash drives to be connected to the computers).
Configure system monitoring tools to detect suspicious Run Registry keys and attempts to run malicious scripts with WMI.
Divide the network into multiple subnets to mitigate a threat’s ability to spread across the infrastructure.
Set up regular and secure data backups to ensure that a recovery option is always available.

The new feature is available in both cloud-based and on-premise Dr.Web vxCube versions for Linux and Windows VMs. Only the English language is supported. Doctor Web intends to add MITRE ATT&CK support for Android threat analysis in the future.

The updated Dr.Web vxCube version will also include the current sandbox documentation. The cloud-based version of Dr.Web vxCube will be unavailable on October 23, 2025, between 10.00-11.00 GMT during scheduled updating.

To update the on-premise version, download the latest Dr.Web vxCube distribution and VM images and follow the installation guidelines found in the documentation to reinstall the software. Use the Download Wizard to get the latest Dr.Web vxCube version.

Dr.Web vxCube is a suspicious file analysis sandbox. It can help you identify indicators of compromise, prevent cyberattacks and eliminate advanced persistent threats. The sandbox is available as a cloud-based service and an on-premise solution.

Use this form to receive demo access to the cloud-based version of Dr.Web vxCube.

You can purchase a license for Dr.Web vxCube from Doctor Web's partners.

This update contains the MITRE ATT&CK® knowledge base. The knowledge base is being used and distributed under the MITRE Corporation's license.

The MITRE ATT&CK® Terms of Use are available at https://attack.mitre.org/resources/legal-and-branding/terms-of-use/.

We’ve updated Dr.Web vxCube’s End User License Agreement

Fri, 17 Oct 2025 07:54:03 GMT

Dr.Web vxCube examines suspicious files and their behaviour by running them in a sandbox, making it possible to detect signs of infection and promptly repel attacks, including those involving advanced persistent threats.
Dr.Web vxCube can analyse files meant to be run under Windows and Linux, as well as APK files (Android) and Docker containers.
The suspicious file analyser (sandbox) Dr.Web vxCube is available as a cloud-based service and an on-premise solution. Optionally, a custom Dr.Web CureIt! build can also be provided to cure a specific malicious file.
The updated license agreement is available at https://license.drweb.com/agreement/.
You can purchase a license for Dr.Web vxCube from Doctor Web's partners.

Antivirus Dr.Web Light for Android updated to version 12.2.6

Thu, 07 Aug 2025 09:52:28 GMT

August 7, 2025

Doctor Web has released an updated version of its Antivirus Dr.Web Light for Android: 12.2.6. The product now supports Android OS version 16. It also has an updated antivirus engine, more efficient threat-detection capabilities, and faster scanning speeds. A number of internal changes were also made to the application to improve its performance.

Please note that if you installed the previous version of Dr.Web Light for Android from Doctor Web's site, you will need to uninstall it and install the new one.

The updated version of the app is also available Google Play.

Dr.Web Light for Android provides only basic antivirus protection. To take advantage of the full range of gadget-protection features, including the Parental Control, Call and SMS Filter, URL Filter, Anti-theft and Firewall, we recommend purchasing Dr.Web Security Space for mobile devices.

You can download a free 14-day trial version of Dr.Web Security Space for mobile devices here.

Dr.Web vxCube update to include TLS traffic analysis, Windows 11 support, and UI improvements

Mon, 30 Jun 2025 17:39:40 GMT

June 30, 2025

Doctor Web is updating its interactive file analysis sandbox Dr.Web vxCube. The changes will apply to both the cloud-based and on-premise versions.

Key innovations:

Windows 11 available as a VM operating system for analysis
Scanning TLS traffic generated by samples being examined
Visual representation of PCAP file contents

Thanks to its MITM (man-in-the-middle) analysis feature, Dr.Web vxCube won't just determine the address a test sample is attempting to communicate with; it will also show what kind of data is being transmitted (only available under Windows if the corresponding option is enabled).

The “Network Activity” section now contains a visual representation of PCAP file contents to make analysis results even more detailed and easy to discern. The update also introduces improvements to the sandbox’s UI.

The cloud-based version of Dr.Web vxCube will be unavailable on July 2 between 9.00-10.00 a.m. GMT during scheduled updating.

Dr.Web vxCube can examine:

Java, Windows, Linux, and Android executables
Scripts
Microsoft Office/OpenOffice documents and other files as well as PDF files
Docker containers

Use this form to receive demo access to the cloud-based version of Dr.Web vxCube..

Stay one step ahead of cyberthreats with Dr.Web Katana 2.0

Mon, 07 Apr 2025 00:00:00 GMT

April 7, 2025

Version 2.0 is the latest release of Dr.Web Katana.

This software product acts as an auxiliary antivirus "shield" and incorporates Doctor Web’s most advanced preventive protection technologies in order to augment the security provided by other vendors’ solutions. Dr.Web Katana protects user files from encryption ransomware and blocks active threats, including zero-day vulnerability exploits and malicious programs that evade signature-based detection. To address all of today’s cybersecurity challenges, version 2.0 offers users the most effective threat detection technologies, optimised system performance, and an updated interface.

Key features

State-of-the-art analysis algorithms—updated behavioural analysis mechanisms and heuristic and cloud-based technologies ensure that new threats, including encryption ransomware, are instantly detected.
Improved compatibility—Dr.Web is optimised to run smoothly under the latest Windows versions and does not conflict with other vendors’ antiviruses.
Low CPU and memory usage—thanks to its optimised routines, the antivirus provides reliable protection with zero impact on system performance.
Updated interface—improved UI design and navigation make the product even more user friendly.

Updating Dr.Web Katana to version 2.0

Dr.Web will notify you that you need to restart your computer to install the updated program modules.

If your operating system does not support the SHA-256 hash algorithm, you won’t be able to update Dr.Web Katana to the latest version. Install the recommended operating system updates, restart your computer, and try updating Dr.Web again.

If for some reason you are unable to update the product, download the distribution package from our website and run the installer. The old version will be removed automatically during installation. If you run into difficulties, please contact our Technical Support Service.

Important!

In many ways, Dr.Web Katana is similar to Dr.Web Security Space. That's why you don't need to use Dr.Web Katana if Dr.Web Security Space is installed on your device—all of its key security technologies are already protecting your system.

Keep your loved ones safe in the digital world with new version Dr.Web Family Security 2.0.1

Mon, 10 Feb 2025 11:43:28 GMT

February 10, 2025

Create a secure digital environment with Dr.Web Family Security—the perfect solution for providing digital care for your loved ones.

This family-oriented app lets you ward off digital threats by monitoring activity on family devices and setting up protective restrictions. It will also help parents gently guide their children into adopting healthy gadget-usage habits and ensure that their Internet surfing remains danger-free. Dr.Web Family Security maintains a secure environment, allowing you to enjoy the benefits of your mobile device’s connectivity without the risk of being exposed to inappropriate content or encountering scammers. It will also protect your elderly family members from intrusive SMS spam and calls from “financial institutions”, while ensuring that the sensitive data on their devices won’t get stolen.

The key innovations of version 2.0.1 include support for Android 14 and 15. And to make it more convenient for users, the app is now also available on Google Play.

Other changes in version 2.0.1 include:

App optimisation for Xiaomi, Poco, Oppo, and Infinix devices, which are particularly popular among children.
We’ve added a dark theme and UI tweaks including adjustments for tablets and devices with small screens.
The family device Information Panel has been updated. Now it provides access to a map showing the location of family members at the time of the request as well as the list of all requests, including unsuccessful ones.
The new Dr.Web Family Security version available on Doctor Web's site also includes instructions to help users grant the app the permissions it requires.
Adjustments have also been made to the URL-filter and Application Control schedules.
Head of family devices now receive notifications that are appropriate for their current role.
We’ve added the ability to collect diagnostic data for technical support reports and corrected problems involving certain access restrictions and settings being overwritten.
Issues that could arise when roles were switched in the app have been addressed.

You can find detailed information about the changes in Dr.Web Family Security 2.0.1 in the Changelog section on our website.

To update the app to version 2.0.1, you need to uninstall the previous version and install the new one on both the head of family device and the dependent devices.

You can learn more about Dr.Web Family Security and get a 14-day trial here.

Upcoming major antispam update in Dr.Web products for Windows

Wed, 29 Jan 2025 09:43:11 GMT

January 29, 2025

Doctor Web continues to improve the antispam module in its products to ensure that unsolicited emails can be filtered out even more effectively.

Dr.Web Antispam examines various email features and attributes in real time. This includes not just the message headers and body but attachments as well, and filtering never causes message delivery delays. As a result, users are not bothered by email ‘junk’ or performance issues affecting their mail client applications.

By constantly introducing new filtering rules, Doctor Web ensures that users stay protected from spammers, who doggedly devise new tricks in an attempt to circumvent antispam technologies.

Igor Zdobnov, Doctor Web Antivirus Laboratory Chief:

"In February, we’re releasing the most impactful update in this component’s history to significantly enhance and upgrade all of its technologies. Every day, spammers find new ways to bypass antispam algorithms, which is why we've adapted the new version as much as possible to detect all types of spam mailings, including phishing".

Marina Rybkina, Doctor Web Spam Analysis Department Manager:

"Identifying tell-tale spam attributes and creating rules to shield users from spammers as they try to bypass filtering technologies is one of our analysts’ main tasks. We also make timely adjustments to our existing antispam routines to adapt to brand-new detection-evasion techniques.

Spam filtering can, to some extent, protect users from phishing attacks. Most phishing samples have certain distinct features that our analysts use to create antispam algorithms for preventive protection against similar fraudulent campaigns".

Important information for Windows XP users

Please note that the updated component version scheduled for release on February 3, 2025, will rely on technologies that are not compatible with Windows XP.

It is recommended that you update this operating system to a later version if possible or that you do not install the latest antispam version. In the latter case, the component will continue to operate. To proceed with that approach, select "Update" in the application settings, click "Advanced settings", and in the component updating section, select "Virus databases only".

Smart antivirus security with Dr.Web for Unix-like systems—for business and government organisations

Thu, 12 Dec 2024 04:00:00 GMT

December 12, 2024

Dr.Web for Unix-like systems combines high-quality protection with low system requirements, making this solution the perfect choice for organisations of any size. With our own unique time-proven technologies and the long-term trust of renowned companies, we are confident that we are providing vital corporate infrastructures with reliable protection.

Dr.Web Mail Security Suite offers a set of antivirus protection tools for scanning email traffic. It prevents threats and spam from spreading with incoming and outgoing messages. Dr.Web Mail Security Suite won't allow email to become the medium of infection and data leaks. Dr.Web blocks threats before they can find their way into a corporate infrastructure and inflict damage.

Dr.Web Mail Security Suite can also be integrated with the Dr.Web vxCube sandbox to examine email attachments in real time automatically and receive detailed reports on the analysis results.

Dr.Web Gateway Security Suite analyses HTTP, FTP, SMTP and POP3 traffic. Thanks to Dr.Web's multi-threaded scanning technology, data gets scanned very quickly. Dr.Web Gateway Security Suite provides companies and organisations with enormous administrative flexibility, allowing them to implement literally any security configuration that will comply with their established security policy.

To stay protected, follow the instructions below to update your Dr.Web solutions for Unix-like systems:

Make sure that the ´drweb-repo´ package is installed.
Depending on your platform:
- In rpm-based distributions, download and install the update:
  - # rpm -U drweb-repo11.1.rpm
- Debian packages:
  - # dpkg -i drweb-repo11.1.deb
  - # apt-get install -f
If you use APT, import a new key as follows:
# wget https://repo.drweb.com/drweb/drweb.gpg -O /etc/apt/trusted.gpg.d/drweb.gpg
Follow the standard routine to complete the update; confirm the new key installation, if necessary.

Important: all these actions require root privileges.

The update is available for the following software products:

Dr.Web for Linux
Dr.Web for Internet-gateways Unix
Dr.Web for Unix Server
Dr.Web for Unix Mail Servers
The scanning server included with Dr.Web Enterprise Security Suite 13.0.1
Dr.Web Industrial for Linux
Dr.Web Industrial for Unix servers
The scanning server included with Dr.Web Industrial Server 13.0.1

Updates made to corporate Dr.Web 13.0.1 products supporting remote administration and Dr.Web Industrial

Mon, 14 Oct 2024 14:08:10 GMT

October 14, 2024

Doctor Web has updated its corporate Dr.Web 13.0.1 products supporting remote administration as well as the secure automated production solution Dr.Web Industrial. The update introduces new features (including the changes requested by business users) and addresses known software issues.

New features

Changes affecting all the updated products

To reduce the workload of virtual servers running on the same host, scheduled tasks in protected systems can now be delayed; when this task scheduler option is used, the task will be started within the selected timeframe relative to the task's appointed time.

The Dr.Web Server's task scheduler now features the critical task Replace the encryption key for updating the private encryption key and Dr.Web Server's certificate.

The period during which the virus databases are considered current (not outdated) can now be specified for Agents under Unix-like systems. This option is already available for Agents under Windows—it allows you to specify for how long the Agent won't prompt a user to update virus signatures.

Changes relevant to Dr.Web Industrial

The Report action is now enabled in the Scanner for Unix-like systems for all types of threats, except those that cannot be cured, and Dr.Web Agent Scanner has the action enabled for all types of threats.

Error fixes

An issue that in some cases could prevent the Dr.Web Server connection parameters from being passed to individual and group Dr.Web Agent for Windows installers has been resolved. Thanks to this fix, deploying an antivirus network has become much easier You can find out more about this update's error fixes in the Changelog section on our website.

To avoid potential issues involving changes in Dr.Web's local settings in Unix-like systems, it is recommended that you update Dr.Web ConfigD to the current version before applying the update.

If you’ve never heard about Dr.Web before, you can always try out its features and get first-hand experience with the high level of security it provides, before purchasing a license:

Trial for business users

Dr.Web Industrial trial

Widgets and other innovations in the latest Dr.Web FixIt! release

Wed, 09 Oct 2024 00:00:00 GMT

October 9, 2024

Doctor Web has updated its remote system diagnostics and threat elimination service Dr.Web FixIt! to version 2.4. The latest release introduces a variety of information widgets to make the service easier for operators to use. Major changes have also been made to the solution's UI—now its design incorporates the latest look and feel, tweaks, and upgrades included into other Dr.Web products; these significantly boost the user experience. While maintaining the same set of analysis and threat neutralisation tools, version 2.4 boasts improved usability and additional customisation options.

What's new in Dr.Web FixIt!:

The widget panel page allows service operators to keep track of identified security issues in real time. Widget information filters are applied to the current analysis report automatically. Thanks to the at-a-glance analysis view and data filters, detected system anomalies get highlighted instantly—this makes the task of service operators much easier. In addition to the pre-configured widgets—"Suspicious", "Dangerous" and "System updates", operators can create the custom widgets that will best suit their system analysis tasks. Widgets also provide access to detailed information about identified security issues.
In the "Search and Analyse" section, operators can now add filters to their favourites, which also helps speed up information security incident examinations. In addition, the service now allows multiple filters or an entire filter group to be applied for subsequent actions.
The Tasks section’s layout has been changed. Now operators can download reports while a system analysis is still in progress. Thanks to the ability to access a report before an analysis is complete, operators are able to respond to security incidents more promptly. The System page layout has also been updated to provide additional details and present information in a more clear-cut way.
Thanks to the ability to generate and download a curing script for the specific system being examined, redownloading the utility for a current analysis session is no longer necessary.
In the Network section, the DNS cache can now also be analysed. This may help operators identify malware's attempts to communicate with its C&C (command and control) servers.
The Quarantine tab has been added to the "Dr.Web" section. It contains information about isolated malicious objects from the machine where the corresponding report data was collected.
The Dr.Web FixIt! user guide has also been updated.

You can request demo access to Dr.Web FixIt! here.

Dr.Web products for mobile devices now officially support Android OS 14

Tue, 13 Aug 2024 11:53:38 GMT

August 13, 2024

Doctor Web has added official support for Android OS 14 to all the versions of its mobile device products: Dr.Web Mobile Security Suite, Dr.Web Security Space for mobile devices, and the subscription-based Dr.Web Antivirus.

Doctor Web looks after its users by ensuring that they remain protected in a rapidly changing digital space. We monitor updates and regularly add new features to our solutions. Ever since Android 14 was released, the owners of gadgets running it have been provided with the full functionality of Dr.Web products for mobile devices, which protects users from cyber threats.

Prior to this, Doctor Web did not officially announce the release of a version with Android 14 support due to a change in Google's requirements. Despite the fact that meeting these requirements did not affect the functionality of Dr.Web products, we needed to do this in order to get our antivirus on Google Play After being refined to meet the new requirements, Dr.Web products continue to provide our users with a high level of protection. The new version for mobile devices (Android) also introduces some other changes:

an issue causing the Security Auditor to show an incorrect message about system certificates has been eliminated
application stability has been enhanced on Xiaomi, Poco, and Realme XT devices
several errors in the URL filter have been fixed; now it is even more convenient to filter sites by category
the Call and SMS Filter was given a performance boost; the ability to work with masks in the Allowing Filter has been added; and the system for unlocking the device via SMS has been improved
read-only threats in system files are now detected more accurately
Internet connections for malicious system applications can now be disabled in the Firewall

Our team continues to actively improve Dr.Web products for mobile devices so that users always stay protected.

Download a free 14-day demo version of Dr.Web Security Space for mobile devices https://download.drweb.com/android/?lng=en

Components in Dr.Web products for Windows updated

Thu, 18 Jul 2024 02:00:00 GMT

July 18, 2024

Following the update of its standalone Dr.Web antiviruses for Windows, Doctor Web is introducing similar upgrades for its products that support remote administration via the Control Center. This update boosts application performance and further enhances antivirus security in Dr.Web-protected systems.

The changes being introduced include:

Dr.Web Net filtering service now supports all relevant encryption standards, including those unavailable in the protected OS, which increases traffic filtering effectiveness.
Adjustments to the Agent’s UI ensure easier and more consistent navigation in administrator mode.
Bluetooth device blocking is now more reliable.
Email templates are now scanned more thoroughly. The Dr.Web Scanning Engine option allowing files in archives to be excluded from scanning by using file masks is available again.
Adjustments have been made to the way SpIDer Guard responds to threats in locations on the exceptions list.
Issues that could arise if a Dr.Web application had been downgraded to its older version have been resolved.
Upgrades have also been introduced for Dr.Web server’s task scheduler, which allows administrators to automate antivirus security routines on protected computers, e.g., the scheduling of regular system scans at a specific time.

The update will be downloaded and installed automatically; however, a system reboot will be required.

Request a free demo

Dr.Web Enterprise Security Suite. A corporate antivirus product line for business and government organisations.

Request a free demo

Major component update in Dr.Web for Windows

Mon, 24 Jun 2024 13:36:34 GMT

June 24, 2024

Doctor Web is updating a number of software components in Windows for Dr.Web Desktop Security Suite 12.0, Dr.Web Server Security Suite 12.0, and Dr.Web Security Space 12.0. The update improves the applications’ performance and the anti-virus protection quality as well as Dr.Web’s compatibility with the operating system and other software.

The changes being introduced include:

Dr.Web Net filtering service, responsible for intercepting traffic, now supports all relevant encryption standards, including those unavailable in the protected OS, which increases traffic filtering effectiveness.
Adjustments to the Agent’s UI ensure easier and more consistent navigation in administrator mode.
Bluetooth device blocking is now more reliable.
Email templates are now scanned more thoroughly. The option allowing files in archives to be excluded from scanning by using file masks is available again for Dr.Web Scanning Engine.
Adjustments have been made to the way SpIDer Guard responds to threats in locations on the exceptions list.

The update will be downloaded and installed automatically; however, a system reboot will be required.

If you’re still unfamiliar with Dr.Web, use the demo version to try out its features and get first-hand experience with the high level of security it provides, before purchasing a license:

Dr.Web Enterprise Security Suite products for business and government organisations.

REQUEST A FREE DEMO

New version of the free anti-virus Dr.Web Light for Android

Thu, 02 May 2024 01:00:00 GMT

May 2, 2024

Russian anti-virus company Doctor Web has updated its free anti-virus Dr.Web Light for Android.

In new version 12.2.2, the anti-virus engine, the "heart" of the application that provides reliable protection against all types of malware, has been updated. Long-awaited support for Android 14 has also been implemented.

In addition, the update has improved the user interface. Threats are now divided into more categories to make configuring scans easy.

The update is available on our website via this link, and on Google Play.

The main features of Dr.Web Light for Android:

Detects modifications made to a device's file system in real time (saved files, installed applications, etc.).
Scans all files in memory or individual files and folders on user demand.
Scans archives.
Detects modifications made to the system area.
Deletes detected security threats or moves them to the quarantine.
Helps unlock a friend's device.
Regularly updates the Dr.Web virus databases via the Internet.
Gathers statistics on detected threats and application actions, and keeps an event log.

The following components are unavailable in Dr.Web Light for Android:

Parental Control – restricts access to certain Internet resources, Dr.Web component settings, and unwanted applications, and blocks unwanted calls and SMS messages;
Anti-theft – protects information stored on a device from unauthorised access by locking the device when it is lost or stolen;
Firewall – protects a mobile device from unauthorised access and prevents sensitive data from being leaked over a network by controlling network connections and data transmissions; blocks suspicious connections.

Read more about all the protection components of our comprehensive product Dr.Web Security Space for Android on a special page.