Dr.Web for Qbik WinGate

Key features Anti-virus and anti-spam scanning of messages and their attachments sent via SMTP and POP3; Anti-virus scanning of files and data transferred over HTTP and FTP Curing of infected files transferred over HTTP Customizable list of data transfer protocols for scanning Adjustable scanning parameters, e.g. the maximum size and types of objects to be scanned and the actions to be performed with infected objects Enabling/disabling detection of particular types of malicious programs; when a threat is detected, Qbik’s settings determine what action is to be taken to neutralize it.

• Customizable actions for files that cannot be scanned.
• Detection of malicious objects compressed with various packers.
• The compact and efficient anti-spam module sets Dr.Web for Qbik WinGate apart from its competitors.
• The anti-spam requires no training and allows you to set different actions for different categories of spam, and to create white and black e-mail lists.
• Customizable actions performed with different types of objects, e.g. including moving them to the quarantine or adding specific prefixes into their subject fields.
• Log of errors and events in the Event Log, which contains information about module parameters, as well as notifications about viruses detected in infected messages and individual outbreaks.
• Isolation of infected files in either the Dr.Web quarantine or the WinGate quarantine.
• Viewing contents of the quarantine and then restoring and/or forwarding quarantined files.
• Back up of cured files in the quarantine.
• Features native control panel and quarantine manager.
• Automatic updating.

Anti-virus

Dr.Web for Qbik WinGate detects infected attachments in e-mails and infected objects transferred over HTTP and FTP, such as:

• infected archives;
• file bombs and zip bombs;
• adware;
• hack tools;
• paid dialers;
• jokers;
• riskware.

Dr.Web for Qbik WinGate does not scan:

• data transferred over HTTPS;
• encrypted e-mails;
• damaged and password-protected archives.

Dr.Web’s program settings determine the actions taken whenever a malicious program or non-scannable object is detected.

System requirements

• Hard disk space: minimum of 50 MB
• Operating system: Microsoft Windows 2000/XP/Vista, Microsoft Windows Server 2000/2003/2008 (32- and 64-bit systems)
• Proxy server: Qbik WinGate 6.

Unique engine features

• Scans archived files at any nesting level
• Reliable detection of packed objects (even if the compression format is unknown to Dr.Web), their detailed analysis aimed at exposing hidden threats
• Leader in detecting and neutralizing complex rootkits (Shadow.based (Confiсker), MaosBoot, Rustock.C, Sector)
• Intelligent memory scan technologies allow viruses to be blocked in the RAM before replicating themselves to the hard drive, making it less likely for malware to exploit the vulnerability of a third-party application or the operating system
• Dr.Web can detect and neutralize viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed

Detection of unknown threats

• FLY-CODE is a unique universal decompression technology enabling Dr.Web to unpack data that has been compressed with unknown packers
• The cutting-edge, non-signature scan technology Origins Tracing™ ensures the high probability that viruses unknown to Dr.Web will be detected
• The heuristic analyzer, whose analyses are based on criteria that is typical of various groups of malicious programs, detects most known threats

Anti-spam

The Anti-spam allows e-mails processed by SMTP server and POP3 proxy server services to be filtered to prevent unsolicited messages like spam from reaching their intended recipients.

The Anti-spam categorizes each message according to its probability of being spam: high, medium, or low. For each of these categories, one of the following actions can be set:

• Allow – the message will be allowed in and delivered to its recipient;
• Move to quarantine – the message will be isolated as defined in the quarantine settings and will not be delivered to the recipient;
• Delete – the message will be deleted;
• Add prefix into the message’s subject field and deliver – text specified in the prefix field will be added into the subject field of the message, which is then delivered to the recipient.

Black and white lists are used for additional filtering. No actions are performed on messages arriving from senders included in white lists, regardless of the contents. If an address is on the black list, all messages sent from that address are placed in the high probability category, and actions set for that category will be applied to such e-mails.

Licensing

Types of licenses

• Per number of protected users.
• Per server license – unlimited scanning of server traffic for as many as 3,000 protected users.

A license for Dr.Web for Qbik WinGate may also include the SMTP proxy as an additional component. Using these products together improves overall network security and reduces the workload of local mail servers and workstations.

License options

• Anti-virus
• Anti-virus + Anti-spam

Dr.Web for Qbik WinGate is also available in Dr.Web bundles for small and medium companies.

Always up-to-date

• Updating over the Internet, whether automatically or according to a schedule, doesn’t require user interference. Updating can also be launched manually.
• Updating is very quick even if a slow Internet connection is used.
• Updating servers are always available.
• Updates can be retrieved from an HTTP server.
• In most cases, there is no need to reboot the system to complete updating; Dr.Web starts using the updated modules and latest virus definitions right away
• Updates are small (50-200KB).
• To save traffic the anti-virus can be set to update virus databases only However, enabling this option is not recommended. To counter the latest threats, Dr.Web undergoes constant refinement. New features are incorporated in updated modules of an anti-virus package and are downloaded from Doctor Web's server automatically during regular updating sessions.
• You can also reduce traffic by downloading updates as archived files A special data-compression algorithm used by Doctor Web allows reducing size of downloaded updates. Patch files are used to deliver minor additions and fixes for virus database or program modules. The special compression algorithm applied to such patches dramatically reduces the amount of transferred data.

Virus monitoring service

• The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet to create antidotes and release updates as soon as analyses are completed — as often as several times per hour.
• As soon as an update is released, users can retrieve it from several servers located at various points of the globe.
• To avoid false positives an update is tested over a huge number of uninfected files before it is released.
• The intelligent system automatically adds entries for similar viruses into the database, ensuring the prompt neutralization of emerging threats.

Gallery

Anti-virus

Anti-spam