Dr.Web^® CureNet!^™

Ask for demo Download Documentation Buy online Buy from partners

It became standard practice for many companies with high information security requirements to use anti-virus products from different vendors for workstations, servers and gateways in their corporate networks. Dr.Web CureNet! allows you to use 2 anti-viruses on workstations and Windows file servers simultaneously: Dr.Web and an anti-virus from another vendor. You don’t need a running server or to install the scanner included in Dr.Web CureNet! on Windows workstations and servers. Instead Dr.Web scanners for Windows are distributed between target machines. Once the scanning is completed, all files related to the scanners are deleted. You can disable network access for the target machine while it is being scanned to avoid recurring infection or prevent spreading of infection to other workstations in the network. Internet connection is not required Dr.Web CureNet! is not a web-service and therefore doesn't use Internet to upload scanner file to computers making the uploading and scanning faster and invulnerable to Internet connection bandwidth. Dr.Web CureNet! can even be used in networks that do not have access to the Internet. Compliance with security policies Dr.Web CureNet! doesn’t require a running server or any additional software. It doesn’t interrupt business routines and conforms with established server security policies.

Complete confidentiality Dr.Web CureNet! doesn’t send or receive data from a Doctor Web server and statistics regarding operation of the anti-virus in the corporate network will never be sent to the vendor. A report is created on the computer of the system administrator in the network, So information regarding scanning in the network remains strictly confidential. Always up-to-date An individual download link is stored in the “My Dr.Web CureNet!!” area as long as your license is valid. Use the link to download the latest version of Dr.Web CureNet! at any time you need it. You can also launch the updating utility to retrieve the latest updates to the virus database for your running Dr.Web CureNet! Easy administration Even an inexperienced system administrator can work with Dr.Web CureNet! The Dr.Web CureNet! Master Interface presents the scanning procedure as a sequence of steps that are very easy to follow. The administrator can monitor the scanning process real-time. Once curing is completed, a report regarding actions performed by Dr.Web CureNet! is stored on a computer with run Dr.Web CureNet! Master. Minimum network traffic A special data transfer protocol for TCP-IP and NetBIOS networks supports special traffic impression algorithms providing low Dr.Web CureNet! scanner distribution traffic. Efficient self-protection Dr.Web SelfPROtect is used for protection against anti-antivirus programs aiming to disrupt operation of anti-virus software. It protects modules and files of Dr.Web CureNet! on a target host before scanning is started. Reporting Once curing is completed, a report regarding actions performed by Dr.Web CureNet!is stored on a computer with installed Dr.Web CureNet!Master. It contains IP-addresses and names of scanned workstations and scanning exit status. Dr.Web CureNet! cures workstations and servers running MS Windows 2000/XP Professional/2003/Vista/2008/Windows 7.

Features table

Cures computers and server	Under Windows 2000 (SP4)/XP Professional/2003/Vista/2008/Windows 7
Curing in networks disconnected from the Internet
Network size	No limit
Dr.Web CureNet! Master installation	any PC under MS Windows 8/2012/7/2008/Vista/2003/XP Professional/2000
Distribution of curing scanners from USB-storage device
Installation of Dr.Web scanners for Windows	Installation is not required
Remote centralized launch of scanners in an infected system without its preliminary curing	Industry pacesetter!
Remote centralized launch of scanners on all hosts/on selected hosts
Disabling network access on a target machine during scanning to prevent recurring infection
Centralized configuration of actions performed to detected malicious objects
Centralized collection of statistics
Self-removal of scanners after scanning is completed
Hosts search
Automatic hosts search IP-addresses IP-address range mask network name
Scanning
Customizable scan profiles
Customizable actions for different types of malicious objects (spyware, adware, riskware, paid dialers, jokers)
Customizable actions for infected and suspicious objects as well as for objects of other types: cure, move to the quarantine, delete
Customizable actions sequences performed to a malicious object if one of the actions can't be applied
Choice of actions for infected packages (archives, containers, mail files)
Scan of archived files at any nesting level	Industry pacesetter!
Quick scan (scan of main memory, boot sectors of all drives, autorun objects, root directory of boot disk, Windows root directory, Windows system directory, My Documents directory, temporary system directory, temporary user directory)
Full scan (scan of all hard drives)
Heuristic analyzer
Non-signature detection technology complementing traditional signature-based scan and heuristic analyzer	Origins Tracing™
Exclusion of archives from scanning
Exclusion of mail files from scanning
Self-protection from malicious anti-antivirus programs
Self-protection	Dr.Web SelfPRotect
Curing
Detection and neutralization of viruses disguised with unknown packers	FLY-CODE
Scan of scripts including VB-Script, Java Script
Scan of logical drives
Scan of mail files
Detection and neutralization of running malicious programs of the following types: worms rootkits File viruses Trojans horses bodiless and stealth-viruses polymorphic viruses macro-viruses and malicious programs infecting MS Office documents script-viruses spyware adware hacking tools paid dialers jokers	Best-of-breed at curing active infections!
Updating
On-demand updating of virus databases and program modules of Dr.Web CureNet! over the Internet
Virus database size	Optimized number of entries!!!
Update size	Smallest in the industry!!!
Supported languages
English interface language
User manual in English
Support
Free technical support in English
Analysis of viruses unknown to Dr.Web

Scanning features

Two types of scanning – Express and full – allow specifying the necessary scanning depth. In most cases default settings are an optimum choice.

Individual scanning configuration allows setting responses of the scanner software to different events. See “Scanning options” in the “Features table” for more information.

You can also choose not to scan archives and e-mail files to speed up the scanning process. Suspicious objects are moved to the quarantine located on the computer with installed Dr.Web CureNet! Master.

Once scanning is launched, its progress can be viewed real-time in the statistics tab of Dr.Web CureNet! Master

Scanning settings can be saved in XML profiles. You can either use the Default profile, or create your customized ones.

A report is generated upon completion of the scanning.

Easy deployment

Search for stations and launch of Dr.Web for Windows scanners on target hosts is performed remotely using the Dr.Web CureNet!. Master. The Master is a Windows application that can be installed on any computer connected to the network.

A connection to a host is established using rights of a current user or an available list of passwords of stations in the network.

The Master scans the network for connected hosts before the anti-virus software is distributed between workstations.

One can choose to perform scanning on all available hosts or select workstations and servers that must be checked for viruses. Hosts are selected by their IP addresses, according to a specified IP address range, a mask or NetBIOS name.

When the scanning is completed, all available hosts will be displayed in the Master window.

Cures viruses

The quality of an anti-virus application is defined not only by its ability to detect viruses but to restore files to their original state instead of deleting an infected file that may contain important information.

• Industry pacesetter! Dr.Web has the highest rate of successful curing of active infections in the industry.
• Industry pacesetter! The unique memory scan technologies and outstanding curing capability allow launching Dr.Web in an infected system (without its preliminary curing).

Anti-virus engine

• Only Dr.Web can scan archived files at any nesting level. Even if a malicious object has been archived many times with different data-compression applications, Dr.Web is sure to detect and neutralize the threat.
• Dr.Web technologies and algorithms allow reliable detection of packed objects, their detailed analysis aimed at exposing hidden threats. Even if an unknown packer has been used to disguise malware, it will be detected by Dr.Web anyway.
• Dr.Web is an unsurpassable leader in detection and neutralization of complex viruses like MaosBoot, Rustock.C, Sector.
• Blocking a virus in the RAM before it replicates itself to a hard drive lowers the probability for malware to exploit a vulnerability of a third-party application or the operating system itself.
• Dr.Web is capable of detecting and neutralizing viruses that can be found only in RAM and do not exist as files on disks, e.g. Slammer or CodeRed. Dr.Web detects and neutralizes viruses that can be found only in the RAM but don’t exist as files on a hard drive. July 2001 saw the epidemics of CodeRed virus and Dr.Web turned out to be the only anti-virus capable of detecting it. Even now few anti-viruses can detect malware like CodeRed or Slammer.

Anti-rootkit

• Dr.Web Shield™ ensures detection of viruses featuring rootkit-technologies that allow them to hide their presence in the system.
• Dr.Web® Shield™ provides the scanner with privileged access to files, registry and other key system components so it would be able to expose rootkits and block self-protection features of rootkits and stealth-viruses.

Detection of unknown threats

State-of-the-art Dr.Web technologies allow anti-viruses to detect even unknown threats and save your information.

• FLY-CODE is a universal decompression technology that allows detecting viruses disguised by means of packers unknown to Dr.Web. Special entries n the virus database allow the heuristic analyzer to suggest if a packed file contains malicious code. An object detected in such a way gets “Probably Trojan.Packed” added to its name.
• Origins Tracing™ is the cutting-edge non-signature detection technology that ensures a high probability of detection of malicious code that has not been registered in the Dr.Web virus database. It has already proven its efficiency during epidemics that caused data losses to many users of competitive solutions. Origins Tracing™ is added to traditional signature scan and heuristic analysis which significantly improves detection of unknown malware. The Origins Tracing™ technology allowed reducing the size of Dr.Web signature databases and lowered the number of false positives by the heuristic analyzer.
• The heuristic analyzer detects most known threats with its analysis based on criteria typical of various groups of malicious programs. Even if a signature of a virus is not present in the database, the heuristic analyzer will serve as another barrier in the way of an intruder.

Licensed per number of workstations that need to be scanned and cured for 12, 24 and 36 months of use.

Licensed components

• Dr.Web CureNet! Master
• Network scanner
• Accounts list management module
• Scanning service
• Updating utility

Master

• Any PC running MS Windows 8/2012/7/2008/Vista/2003/XP Professional/2000 (32- and 64-bit systems)
• Free disk space: 36 MB or more
• Internet connection for updating of virus databases and components of Dr.Web CureNet!
• TCP/IP network

Scanner

• Free disk space: 17 MB or more
• A PC running MS Windows 8/2012/7/2008/Vista/2003/XP Professional/2000 (32- and 64-bit).

Personal area

After a registration of a Dr.Web CureNet! serial number a user receives a link that enables him to access the Dr.Web CureNet! Personal area.

In the personal area a user also can download Dr.Web CureNet! program modules, submit requests for technical support to Doctor Web and view his requests history. When a user’s license expires, he can order a new one in his personal area. The personal area also provides access to other online Dr.Web services and sections of the website.