Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
DwNetFilter.exe
Dr.Web by Doctor Web Ltd. (Signed)
| Version: | 9.0.7.01222 |
| MD5: | 2877340e36b286dfb2f10cb8dd9c4d0e |
| SHA1: | f281d255756d77d898c8429c086fb729422d8bfb |
Overview
dwnetfilter.exe runs as a service under the name Dr.Web Net Filtering Service (DrWebNetFilter) within the local user context. The file is digitally signed by Doctor Web Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | dwnetfilter.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web ® |
| Description: | Net filtering service |
| Typical file path: | C:\Program Files\drweb\dwnetfilter.exe |
| File version: | 9.0.7.01222 |
| Size: | 6.19 MB (6,491,904 bytes) |
| Build date: | 1/22/2014 9:11 PM |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'DrWebNetFilter' (Dr.Web Net Filtering Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00126842% | |
| Kernel CPU: | 0.00071997% | |
| User CPU: | 0.00054845% | |
| Kernel CPU time: | 66,675 ms/min | |
| CPU cycles: | 3,037,746/sec | |
| Memory |
| Private memory: | 15.53 MB | |
| Private (maximum): | 100.65 MB | |
| Private (minimum): | 9.38 MB | |
| Non-paged memory: | 15.53 MB | |
| Virtual memory: | 183.16 MB | |
| Virtual memory (peak): | 442.17 MB | |
| Working set: | 41.39 MB | |
| Working set (peak): | 101.58 MB | |
| Page faults: | 461,788/min | |
| I/O |
| I/O read transfer: | 12.1 KB/sec | |
| I/O read operations: | 10/sec | |
| I/O write transfer: | 12.04 KB/sec | |
| I/O write operations: | 72/sec | |
| I/O other transfer: | 1.98 MB/sec | |
| I/O other operations: | 991/sec | |
| Resource allocations |
| Threads: | 24 | |
| Handles: | 366 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\drweb\dwnetfilter.exe" --ats |
| Owner: | User |
| Windows Service |
| Service name: | DrWebNetFilter |
| Display name: | Dr.Web Net Filtering Service |
| Description: | “Dr.Web Net Filtering service checks your Internet and e-mail traffic for viruses, spam and dangerous content. It is essential part of the Dr.Web Anti-Virus. Please do not stop and do not disable it.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| dwnetfilter.exe (main module) |
| Total CPU: | 0.00348287% | |
| Kernel CPU: | 0.00255498% | |
| User CPU: | 0.00092790% | |
| CPU cycles: | 105,146/sec | |
| Memory: | 6.7 MB | |
| mswsock.dll |
| Total CPU: | 0.00066640% | |
| Kernel CPU: | 0.00049980% | |
| User CPU: | 0.00016660% | |
| CPU cycles: | 12,611/sec | |
| Memory: | 340 KB | |
| ntdll.dll |
| Total CPU: | 0.00003407% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00003407% | |
| CPU cycles: | 2,360/sec | |
| Memory: | 1.66 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Basic |
33.33% |
|
| Windows 7 Professional |
33.33% |
|
| Microsoft Windows XP |
33.33% |
|
Distribution by country
Russia installs about 66.67% of Dr.Web ®.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
