March 31, 2021

Russian anti-virus company Doctor Web has updated Dr.Web Anti-rootkit API (12.6.0.202103250), the self-protection module Dr.Web Protection for Windows (12.05.11.03250), Dr.Web File System Monitor (12.05.04.03250), Dr.Web Shellguard anti-exploit module (12.06.00.12200) and Dr.Web Firewall for Windows driver (12.05.04.03250) in Dr.Web Security Space 12.0, Dr.Web Anti-virus 12.0 and Dr.Web Anti-virus 12.0 for Windows Servers. Furthermore, the module Dr.Web Device Guard for Windows (12.05.03.03250) has been updated in Dr.Web Security Space 12.0 and Dr.Web Anti-virus 12.0. The update introduces new features, resolves known issues, and delivers minor upgrades.

Changes made to Dr.Web Anti-rootkit API:

• New heuristic mechanisms are introduced to detect fileless malware and LOLBIN threats;
• The applications are now less likely to produce false positives involving DPH files;
• Preventive Protection routines now operate more efficiently;
• A new faster subsystem is now used to store and analyse certificates.

Changes made to Dr.Web Protection for Windows:

• A problem that might cause a system crash (BSOD) when the Driver Verifier was launched has been fixed;
• Application stability has been improved.

Changes made to Dr.Web File System Monitor, Dr.Web Device Guard for Windows and Dr.Web Firewall for Windows driver:

• Application stability has been improved.

The update will be performed automatically; however, a system reboot will be required.