Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Related files
DwNetFilter.exe
Dr.Web by Doctor Web Ltd. (Signed)
| Version: | 8.0.7.07121 |
| MD5: | 96ab5b94d4d6618d2623d89ceeff1dd7 |
| SHA1: | da218b38c22f698bff96ab81597c3097c483e6e7 |
Overview
dwnetfilter.exe runs as a service under the name Dr.Web Net Filtering Service (DrWebNetFilter) within the local user context. This is typically installed with the program Dr.Web Anti-virus for Windows published by Doctor Web. The file is digitally signed by Doctor Web Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | dwnetfilter.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web ® |
| Description: | Net filtering service |
| Typical file path: | C:\Program Files\drweb\dwnetfilter.exe |
| File version: | 8.0.7.07121 |
| Size: | 5.18 MB (5,435,648 bytes) |
| Build date: | 7/12/2013 4:35 PM |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“Dr.Web Anti-virus for Windows is the industry leader in curing active infections. It is an efficient tool for constant monitoring of system health that blocks attempts of viruses, Trojans, mail worms, spyware and other malicious programs to get into a protected system from any external source. Dr.Web is very user-friendly, has low system requirements and can be installed on any Windows PC. Protection of account information related to on...”
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'DrWebNetFilter' (Dr.Web Net Filtering Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00398668% | |
| Kernel CPU: | 0.00128496% | |
| User CPU: | 0.00270172% | |
| Kernel CPU time: | 3,125 ms/min | |
| Memory |
| Private memory: | 3.87 MB | |
| Private (maximum): | 8.51 MB | |
| Private (minimum): | 6.43 MB | |
| Non-paged memory: | 3.87 MB | |
| Virtual memory: | 65.49 MB | |
| Virtual memory (peak): | 66.88 MB | |
| Working set: | 6.43 MB | |
| Working set (peak): | 12.91 MB | |
| Resource allocations |
| Threads: | 13 | |
| Handles: | 121 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\drweb\dwnetfilter.exe" --ats |
| Owner: | User |
| Windows Service |
| Service name: | DrWebNetFilter |
| Display name: | Dr.Web Net Filtering Service |
| Description: | “Dr.Web Net Filtering service checks your Internet and e-mail traffic for viruses, spam and dangerous content. It is essential part of the Dr.Web Anti-Virus. Please do not stop and do not disable it.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Basic |
33.33% |
|
| Windows 7 Professional |
33.33% |
|
| Microsoft Windows XP |
33.33% |
|
Distribution by country
Russia installs about 66.67% of Dr.Web ®.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
