Dr.Web

Dr.Web
Developer(s)Doctor Web
Initial release1992 (1992)
Stable release
12.0.4 Build 12100
Operating systemLinux
macOS
Microsoft Windows
DOS
OS/2
Windows Mobile
Android
BlackBerry
Available in6 languages
List of languages
Russian, English, French, German, Japanese, Korean
TypeAntivirus
Websitewww.drweb.com
Dr.Web shield icon

Dr.Web is a software suite developed by Russian anti-malware company Doctor Web. First released in 1992, it became the first anti-virus service in Russia.[1]

The company also offers anti-spam solutions and is used by Yandex to scan e-mail attachments. It also features an add-on for all major browsers which checks links with the online version of Dr Web.[2]

Dr.Web has withdrawn from AV tests such as Virus Bulletin VB100% around 2008 stating that they believe that virus scans on viruses are different subject from that of real world malware attacks.[3]

Critics, reviews and reliability

[edit]

Staunch anti-adware policy led to software developers complaining that Dr.Web treated their virus free applications as a "virus". When developers tried contacting Dr.Web to resolve the issue, developers received no response.[4][5]

Notable discoveries

[edit]

Flashback Trojan

[edit]
Main article: Flashback (Trojan)

Dr.Web discovered the Trojan BackDoor.Flashback variant that affected more than 600,000 Macs.[6]

Trojan.Skimer.18

[edit]

Dr.Web discovered the Trojan.Skimer.18, a Trojan that works like an ATM software skimmer.[7] The Trojan can intercept and transmit bank card information processed by ATMs as well as data stored on the card and its PIN code.

Linux.Encoder.1

[edit]
Main article: Linux.Encoder

Dr.Web discovered the ransomware Linux.Encoder.1 that affected more than 2,000 Linux users.[8] Linux.Encoder.2 which was discovered later turned out to be an earlier version of this ransomware.

Trojan.Skimer discovery and attacks on Doctor Web offices

[edit]

Doctor Web received a threat supposedly from the Trojan writers or criminal organization sponsoring this malware's development and promotion:[9] On March 31, 2014, after two arson attacks were carried out on Igor Daniloff's anti-virus laboratory in St. Petersburg,[10] company received a second threat. Doctor Web released a statement that the company considers it its duty to provide users with the ultimate protection against the encroachments of cybercriminals and consequently, efforts aimed at identifying and studying ATM threats with their ATM Shield.[11]

Awards

[edit]
  • 2008: anti-malware.ru website conducted a test for the treatment of active infection, only Dr.Web scored the maximum possible number of points (15) and received Platinum Malware Treatment Award.[12]
  • 2009: anti-malware.ru website conducted a self-protection test of antivirus products, only Dr.Web scored the maximum possible number of points (38) and received Platinum Self-Protection Award.[13]
  • 2009: anti-malware.ru website conducted proactive protection test, Dr.Web took the second place and received Silver Proactive Protection Award.[14]
  • 2010: Platinum Self-Protection Award from Anti-Malware.ru.[15]

Controversy

[edit]

Allegedly the Pro-Ukrainian hacktivists DumpForums, who had hacked into the website of the Russian Ministry of Construction, Housing and Utilities (minstroyrf.gov.ru) in June 2022, obtained 10TB of data from the Russian anti-malware company Doctor Web (Dr.Web) in September 2024.[16][17][18][19][20]

See also

[edit]

References

[edit]
  1. ^ "Dr. Web LTD Doctor Web / Dr. Web Reviews, Best AntiVirus Software Reviews, Review Centre". Reviewcentre.com. Retrieved 2014-02-17.
  2. ^ Web, Doctor (2013-10-07). "Dr. Web LinkChecker :: Add-ons for Firefox". Addons.mozilla.org. Retrieved 2014-02-17.
  3. ^ "Doctor Web: statement on Virus Bulletin comparative reviews". news.drweb.com. Retrieved 2015-11-03.
  4. ^ "Drweb and false positive". Malwarebytes Forums. 20 December 2014.
  5. ^ "PDFsam Basic issue report". PDFsam Basic issue tracker.
  6. ^ Greenberg, Andy (April 9, 2012). "Apple Snubs Firm That Discovered Mac Botnet, Tries To Cut Off Its Server Monitoring Infections". Forbes. Retrieved April 10, 2012.
  7. ^ "Trojan.Skimer.18 infects ATMs". news.drweb.com. Retrieved 2015-11-27.
  8. ^ Dr.Web (November 6, 2015). "Encryption Ransomware Threatens Linux Users". Forbes. Retrieved November 16, 2015.
  9. ^ "Dr.Web - ATM Trojans – Doctor Web and ATM Trojans". antifraud.drweb.com. Retrieved 2015-12-09.
  10. ^ "ATM Skimmer Gang Firebombed Antivirus Firm — Krebs on Security". krebsonsecurity.com. 29 September 2015. Retrieved 2015-12-09.
  11. ^ ""На карте – ваши деньги"! Банкоматные троянцы угрожают вам, а их распространители – поджогами и физической расправой сотрудникам компании "Доктор Веб"". news.drweb.ru. Retrieved 2015-12-09.
  12. ^ "Тест антивирусов на лечение активного заражения (октябрь 2008)". Anti-Malware.ru (in Russian). 2008-10-21. Retrieved 2024-06-18.
  13. ^ "Тест самозащиты антивирусов (январь 2009)". Anti-Malware.ru (in Russian). 2009-01-16. Retrieved 2024-06-18.
  14. ^ "Тест проактивной антивирусной защиты (март 2009)".
  15. ^ "Тест самозащиты антивирусов (сентябрь 2010)". Anti-Malware.ru (in Russian). 2010-09-12. Retrieved 2024-06-18.
  16. ^ Савина, Соня (Savina, Sonya); Феоктистов, Егор (Feoktistov, Yegor) (23 April 2025). "«Важные истории» установили имена иностранцев, приехавших воевать за Россию: Это более 1500 наемников из 48 стран со всех концов света: Европы, Азии, Африки и Америки" [IStories Establish Names of Foreigners Who Came to Fight for Russia: These are more than 1500 mercenaries from 48 countries from all over the world: Europe, Asia, Africa and America]. Важные истории (istories.media) (in Russian). Archived from the original on 8 May 2025. Retrieved 8 May 2025 – via storage.googleapis.com.{{cite news}}: CS1 maint: multiple names: authors list (link)
  17. ^ Waqas (9 October 2024). "DumpForums Claim 10TB Data Breach at Russian Cybersecurity Firm Dr.Web". HACKREAD (hackread.com). Archived from the original on 8 May 2025. Retrieved 8 May 2025.
  18. ^ Ahmed, Deeba (7 June 2022). "Russian Ministry Website Hacked to Display "Glory To Ukraine" Message". HACKREAD (hackread.com). Archived from the original on 8 May 2025. Retrieved 8 May 2025.
  19. ^ Baran, Guru (9 October 2024). "DumpForums Claims to Have Stolen 10TB Data from Cybersecurity Firm Dr.Web". Cyber Security News (cybersecuritynews.com). Archived from the original on 8 May 2025. Retrieved 8 May 2025.
  20. ^ "Massive Dr. Web breach admitted by DumpForums". SC Media (www.scworld.com). 9 October 2024. Archived from the original on 8 May 2025. Retrieved 8 May 2025.
[edit]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Dr.Web&oldid=1289468545"