dwengine.exe
Dr.Web Anti-Virus by Doctor Web Ltd. (Signed)
Overview
There are 2 versions of dwengine.exe in the wild, the latest version being 9.0.8.02070 (Build 10027). It is started as a Windows Service called 'Dr.Web Scanning Engine (DrWebEngine)' with the name 'DrWebEngine' and described as “Dr.Web Scanning Engine checks your files against viruses. It is essential part of the Dr.Web Anti-Virus! Please do not stop and do not disable it.”. . The average file size is about 2.21 MB. The file is a digitally signed and issued to Doctor Web Ltd. by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0015% including both foreground and background operations, the average private memory consumption is about 178.43 MB and typical read I/O operations are around 34 Bytes per minute.
 Details
|
| File name: | dwengine.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web Anti-Virus |
| Description: | Dr.Web Scanning Engine |
| Typical file path: | C:\Program Files\common files\doctor web\scanning engine\dwengine.exe |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
| Windows Service |
| Service name: | DrWebEngine |
| Display name: | Dr.Web Scanning Engine (DrWebEngine) |
| Description: | “Dr.Web Scanning Engine checks your files against viruses. It is essential part of the Dr.Web Anti-Virus! Please do not stop and do not disable it.” |
| Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of dwengine.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'DrWebEngine' (Dr.Web Scanning Engine (DrWebEngine))
All file variations of dwengine.exe
