frwl_notify.exe
Dr.Web by Doctor Web Ltd. (Signed)
Overview
frwl_notify.exe has 3 known versions, the most recent one is 9.0.4.01210. frwl_notify.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 2.19 MB. It is an authenticode code-signed executable issued to Doctor Web Ltd. by the certification authority VeriSign. Some variations of the file have been seen to be installed with the program Dr.Web Anti-virus for Windows from Doctor Web. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 2.79 MB with the maximum memory reaching around 8.07 MB. Addionally, typically read and write I/O disk operations is about 35 Bytes per minute for reads and 0 Bytes per minute for writes.
 Details
|
| File name: | frwl_notify.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web ® |
| Description: | Dr.Web Firewall for Windows notify module |
| Typical file path: | C:\Program Files\drweb\frwl_notify.exe |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
Programs installed in
(Note, the programs listed below are for all versions of Dr.Web ®.)
“Dr.Web Anti-virus for Windows is the industry leader in curing active infections. It is an efficient tool for constant monitoring of system health that blocks attempts of viruses, Trojans, mail worms,...”
Behaviors
(Note, the behaviors below are for all versions of frwl_notify.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'Firewall' → "C:\Program Files\DrWeb\frwl_notify.exe"
All file variations of frwl_notify.exe
