Should I block it?

No, this file is 100% safe to run.

Additional versions

9.0.8.02070 (Build 10027)	25.00%
8.1.0.07100 (Build 9473)	75.00%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

dwarkdaemon.exe (Dr.Web Anti-Virus by Doctor Web Ltd.)

Related files

dwengine.exe

Dr.Web Anti-Virus by Doctor Web Ltd. (Signed)

Remove dwengine.exe

Version:	9.0.8.02070 (Build 10027)
MD5:	3093f7a2509892170b99c261aca331d2
SHA1:	a3273a2a99fdf490fabacee8f7ae33ad7a597538

Overview

dwengine.exe runs as a service under the name Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) within the local user context. The file is digitally signed by Doctor Web Ltd. which was issued by the VeriSign certificate authority (CA).

Details

File name:	dwengine.exe
Publisher:	Doctor Web, Ltd.
Product name:	Dr.Web Anti-Virus
Description:	Dr.Web Scanning Engine
Typical file path:	C:\Program Files\common files\doctor web\scanning engine\dwengine.exe
File version:	9.0.8.02070 (Build 10027)
Product version:	9.0.8.02070
Size:	2.54 MB (2,665,008 bytes)
Build date:	2/7/2014 7:11 PM
Certificate
Issued to:	Doctor Web Ltd.
Authority (CA):	VeriSign
Expiration date:	Thursday, July 10, 2014
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Service

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'DrWebEngine' (Dr.Web Scanning Engine (DrWebEngine))

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00047493%	0.028634%
Kernel CPU:	0.00015630%	0.013761%
User CPU:	0.00031863%	0.014873%
Kernel CPU time:	8,151 ms/min	100,923,805ms/min
CPU cycles:	750,951/sec	17,470,203/sec
Memory
Private memory:	145.89 MB	21.59 MB
Private (maximum):	119.47 MB
Private (minimum):	792 KB
Non-paged memory:	145.89 MB	21.59 MB
Virtual memory:	191.78 MB	140.96 MB
Virtual memory (peak):	238.09 MB	169.69 MB
Working set:	1.78 MB	18.61 MB
Working set (peak):	189.34 MB	37.95 MB
Page faults:	1,605,182/min	2,039/min
I/O
I/O read transfer:	34 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O other transfer:	6 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	128	600

Process properties

Integrety level:	System
Platform:	64-bit
Command lines:	watcher 2744 492 dwe-spider-ab8-1cf86e9af5f406d-watch "C:\Program Files\common files\doctor web\scanning engine\dwengine.exe"
Owner:	User
Windows Service
Service name:	DrWebEngine
Display name:	Dr.Web Scanning Engine (DrWebEngine)
Description:	“Dr.Web Scanning Engine checks your files against viruses. It is essential part of the Dr.Web Anti-Virus! Please do not stop and do not disable it.”
Type:	Win32OwnProcess
Parent processes:	dwengine.exe (Dr.Web Anti-Virus by Doctor Web Ltd.) services.exe (Services and Controller app by Microsoft)

Threads

Averages

wow64.dll
Total CPU:	0.08027506%	0.272967%
Kernel CPU:	0.00146450%	0.107585%
User CPU:	0.07881056%	0.165382%
CPU cycles:	1,849,839/sec	5,741,424/sec
Memory:	252 KB	1.16 MB
dwengine.exe (main module)
Total CPU:	0.01166036%
Kernel CPU:	0.00128054%
User CPU:	0.01037982%
CPU cycles:	531,755/sec
Context switches:	3/sec
Memory:	2.75 MB
ntdll.dll
Total CPU:	0.00616218%
Kernel CPU:	0.00148061%
User CPU:	0.00468157%
CPU cycles:	93,692/sec
Context switches:	2/sec
Memory:	1.66 MB