Should I block it?
No, this file is 100% safe to run.
Additional versions
Relationships
Parent process
Child process
Related files
frwl_svc.exe
Dr.Web by Doctor Web Ltd. (Signed)
| Version: | 9.0.4.01210 |
| MD5: | 83c840c35478b8d6cffec2c73b8aa38c |
| SHA1: | 159de3c9bd38ee9545557ec1464b2ca71106dc5f |
Overview
frwl_svc.exe runs as a service under the name Dr.Web Firewall Service (DrWebFwSvc) within the local user context. The file is digitally signed by Doctor Web Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | frwl_svc.exe |
| Publisher: | Doctor Web, Ltd. |
| Product name: | Dr.Web ® |
| Description: | Dr.Web Firewall for Windows service |
| Typical file path: | C:\Program Files\drweb\frwl_svc.exe |
| File version: | 9.0.4.01210 |
| Size: | 1.71 MB (1,796,096 bytes) |
| Build date: | 1/21/2014 2:08 PM |
| Certificate |
| Issued to: | Doctor Web Ltd. |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 10, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'DrWebFwSvc' (Dr.Web Firewall Service)
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00101548% | |
| Kernel CPU: | 0.00025332% | |
| User CPU: | 0.00076215% | |
| Kernel CPU time: | 1,232 ms/min | |
| CPU cycles: | 263,300/sec | |
| Memory |
| Private memory: | 5.63 MB | |
| Private (maximum): | 11.42 MB | |
| Private (minimum): | 8.1 MB | |
| Non-paged memory: | 5.63 MB | |
| Virtual memory: | 58.63 MB | |
| Virtual memory (peak): | 69.98 MB | |
| Working set: | 8.55 MB | |
| Working set (peak): | 15.19 MB | |
| Page faults: | 22,004/min | |
| I/O |
| I/O read transfer: | 5.08 KB/sec | |
| I/O read operations: | 87/sec | |
| I/O write transfer: | 1.46 KB/sec | |
| I/O write operations: | 30/sec | |
| I/O other transfer: | 255 Bytes/sec | |
| I/O other operations: | 24/sec | |
| Resource allocations |
| Threads: | 11 | |
| Handles: | 271 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\drweb\frwl_svc.exe" |
| Owner: | User |
| Windows Service |
| Service name: | DrWebFwSvc |
| Display name: | Dr.Web Firewall Service |
| Description: | “Dr.Web (R) Firewall Service is a system level application of Dr.Web (R) Firewall. It is essential part of the Dr.Web (R) Anti-Virus! Please do not disable it.” |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Threads
Averages
| frwl_svc.exe (main module) |
| Total CPU: | 0.00117399% | |
| Kernel CPU: | 0.00035730% | |
| User CPU: | 0.00081669% | |
| CPU cycles: | 34,135/sec | |
| Memory: | 1.73 MB | |
| ntdll.dll |
| Total CPU: | 0.00003404% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00003404% | |
| CPU cycles: | 53/sec | |
| Memory: | 1.66 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Basic |
33.33% |
|
| Windows 7 Professional |
33.33% |
|
| Microsoft Windows XP |
33.33% |
|
Distribution by country
Russia installs about 66.67% of Dr.Web ®.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
100.00% |
|
