DwNetFilter.exe
Dr.Web by Doctor Web Ltd. (Signed)
Overview
There are 3 versions of dwnetfilter.exe in the wild, the latest version being 9.0.7.01222. It is started as a Windows Service called 'Dr.Web Net Filtering Service' with the name 'DrWebNetFilter' and described as “Dr.Web Net Filtering service checks your Internet and e-mail traffic for viruses, spam and dangerous content. It is essential part of the Dr.Web Anti-Virus. Please do not stop and do not disable it.”. . The average file size is about 5 MB. The file is a digitally signed and issued to Doctor Web Ltd. by VeriSign. Some variations of the file have been seen to be installed with the program Dr.Web Anti-virus for Windows from Doctor Web. During the process's lifecycle, the typical CPU resource utilization is about 0.0026% including both foreground and background operations, the average private memory consumption is about 9.7 MB with the maximum memory reaching around 54.58 MB. Addionally, typically read and write I/O disk operations is about 12.1 KB per minute for reads and 12.04 KB per minute for writes.
 Details
|
| File name: | dwnetfilter.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web ® |
| Description: | Net filtering service |
| Typical file path: | C:\Program Files\drweb\dwnetfilter.exe |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
| Windows Service |
| Service name: | DrWebNetFilter |
| Display name: | Dr.Web Net Filtering Service |
| Description: | “Dr.Web Net Filtering service checks your Internet and e-mail traffic for viruses, spam and dangerous content. It is essential part of the Dr.Web Anti-Virus. Please do not stop and do not disable it.” |
| Type: | Win32OwnProcess |
Programs installed in
(Note, the programs listed below are for all versions of Dr.Web ®.)
“Dr.Web Anti-virus for Windows is the industry leader in curing active infections. It is an efficient tool for constant monitoring of system health that blocks attempts of viruses, Trojans, mail worms,...”
Behaviors
(Note, the behaviors below are for all versions of dwnetfilter.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'DrWebNetFilter' (Dr.Web Net Filtering Service)
All file variations of dwnetfilter.exe
