Dr.web 2007讯息（英文比较多），请大家参阅！

mamigo

March 1, 2007
Doctor Web, Ltd. announces release of a new product - Dr.Web forWindows – Anti-virus + Anti-spam. Now a high efficient Anti-virus Dr.Web for Windows can also detect spam and protects desktops under Windows from unsolicited e-mails. The anti-spam version of Dr.Web for Windows includes an updated SpIDer Mail module with inbuilt anti-spam filter based on Vade Retro® technology by French company Goto Software. Dr.Web Anti-spam for Windows several advantages which outline it from many competitor products. The Vade Retro® spam detecting module analyzes e-mails absolutely autonomously without any calls to external databases. This secure high speed of analysis and constant improvement of the quality of this analysis due to dynamically updated code of the anti-spam module. The module integrated into SpIDer Mail is able to scan up to 100 messages per second. Up to 80% of spam is filtered by headers and the technology does not depend upon the language of the message. The technology is highly resistant to tricks of spammers to deceive spam filters, for example to graphical spam so widely spread these days.
"The beta-testing results held from the middle of January made us sure the market will understand and accept this new product by Dr.Web." - comments the release of the anti-spam product the CEO of Doctor Web, Ltd., Boris Sharov. "The cooperation with our French colleagues showed that this technology can constantly show a high level of detection of spam regardless of the country and the language of e-mails. This technology allows to detect even the most sophisticated tricks of spammers and does not require any teaching of the anti-spam by users". Users can download Dr.Web for Windows. Anti-virus+Anti-spam from web-site of Doctor Web, ltd. Those users who have already Dr.Web Anti-virus for Windows installed on their PCs should download the new installation package with anti-spam and re-install it over the existing version. Detailed information about the advanced settings of anti-spam can be found in Frequently asked questions. For electronic licenses of Dr.Web anti-spam solution visit our online-store or contact Dr.Web authorized partners of Doctor Web, Ltd.

mamigo

March 5, 2007Doctor Web, Ltd. offers registered users of Dr.WEB Anti-virus for Windows beneficial upgrade to its new product — Dr.WEB for Windows – Anti-virus + Anti-spam.
Home and business users of Dr.WEB Anti-virus for Windows who registered their licenses till February 1, 2007 are welcome to upgrade to Dr.WEB for Windows – Anti-virus + Anti-spam .
Unique beneficial terms of the upgrade include:

    * Free anti-spam license till the end of your current license for Dr.WEB Anti-virus for Windows
    * Free anti-spam license for 1 more year

To upgrade to Dr.WEB for Windows – Anti-virus + Anti-spam you should buy a one year upgrade license at the price of anti-virus only. You can buy the upgrade:

    * online — in Dr.WEB online store. The upgrade license you buy should be for the same quantity of protected objects as your current license for Dr.WEB Anti-virus for Windows.
    * offline — with Dr.WEB authorized partners. Chose the partner in your country and buy the upgrade license at the price of the anti-virus only.

IMPORTANT!!! During the registration of the upgrade license you should submit your key file for Dr.WEB Anti-virus for Windows registered before February 1, 2007. The new key file will be made for 12 months plus the term left till your current key file expiration.
These upgrade terms will last till June 1, 2007. You can also try Dr.WEB for Windows – Anti-virus + Anti-spam before you buy it. Read more here.

mamigo

March 04, 2007 Last February was marked by a confrontation between two teams of virus writers: Win32.Dref creators competed with those of Win32.HLLM.Limar for access to users’ computers. Win32.HLLM.Limar, a mail worm, which peaked in autumn 2006 with its modifications springing up every other day, is gradually giving way to Win32.Dref. When Win32.Dref attacks an infected system, it sets up a driver, detected by Dr.WEB Antivirus as BackDoor.Groan, and a number of other malware for self-dissemination and DdoS attacks, targeting both anti-spam adherents’ web-sites and Win32.HLLM.Limar spreaders. In addition, Win32.Dref modules are regularly upgraded by modification of packers that make their detection even more difficult. To cope with this, special signature records have been added to Dr.WEB virus definitions database thus allowing the detection of Win32.Dref regardless of the packer’s modification. On the other hand, Win32.HLLM.Limar’s creators had to resort to frequent changes of their modules’ download links. Win32.HLLM.Limar became more active by the end of February, but triggered no large outbreak in the long run. This confrontation reminds of a notorious competition of Win32.HLLM.Beagle, Win32.HLLM.Netsky and Win32.HLLM.MyDoom, fighting for virus Olympus all through years 2003-2004. It’s only natural that virus writers couldn’t but contribute to St. Valentine’s Day. A few modifications of Trojans, classified by Dr.WEB as Trojan.MulDrop.5549 and Trojan.MulDrop.5550 have been sent to users as holiday postcards. When opened, they resulted in a leak of all system passwords. As Secunia reports, numerous vulnerabilities were found in the Microsoft Internet Explorer, Microsoft Malware Protection and Microsoft Word. These breaches are regarded as critical since they allow for any code to be run on a targeted desktop. On the whole, virus situation like this is no longer out of the ordinary. It keeps timely correction of the vulnerable components in the focus of counteraction. Virus statistics by Doctor Web, Ltd. in February, 20076990 entries have been added to Dr.Web virus database in February, 2007. Find below a short summary table of on-line monthly virus scan at online.drweb.com. [tr]Virus nameQuantity[/tr]
Trojan.Isbar.13        289
Win32.HLLM.Limar        273
Win32.HLLM.Wukill        141
Trojan.Virtumod        96
VBS.Psyme.239        92
Trojan.Peflog.31        77
Trojan.Peflog.30        70
Win32.HLLM.Beagle        69
Win32.HLLW.MyBot        35
Trojan.Packed.14        31
Virus detection in February '07 at mail servers and in networks protected by Dr.Web Anti-virus:
[tr]Virus name% of the overall quantity[/tr]
Trojan.Bankfraud.272        21.44
Win32.HLLM.Beagle        11.11
Win32.HLLM.Perf        7.84
Win32.HLLP.Sector        7.65
Win32.HLLM.Netsky.35328        6.32
Trojan.Packed.8        6.12
Trojan.Packed.14        5.04
Win32.HLLM.MyDoom.based        4.43
Win32.HLLM.Netsky.based        3.53
Win32.HLLM.Limar        3.44
Trojan.Packed.11        2.67
Trojan.Packed.10        2.64
Win32.HLLM.MyDoom.49        2.62
Win32.HLLM.MyDoom.33808        1.86
Trojan.Packed.12        1.48
Win32.HLLM.Graz        1.31
Win32.Parite.1        0.93
Win32.HLLM.Limar.based        0.66
Exploit.IframeBO        0.52
Trojan.Packed.18        0.43
Other malware        7.96

mamigo

March 6, 2007 Doctor Web, Ltd will use the upcoming CeBIT expo trade show in Hanover, Germany (15th - 21st March) as the opportunity to present its innovations in information security. It is the third year that Doctor Web, Ltd has participated in one of the largest trade fairs, showcasing digital IT security and telecommunications solutions for home and corporate environments. This year the company will be represented by its experts from Moscow, leading developers from Saint-Petersburg and its representative in Germany - Dr. Web (Antivirus) Deutschland GmbH. Renowned founder of Dr.Web Anti-virus, Igor Danilov, will be present at the expo on the 16th and 17th of March. Doctor Web, Ltd. developers will showcase the following new security solutions: Dr.WEB AV-Desk (beta), Dr.WEB Anti-virus for MS Exchange servers (beta), Dr.WEB Anti-spam for Windows\Unix and other new innovations. The visitors to the Doctor Web, Ltd stand will witness the release of the new Dr.WEB AV-Desk service. Forums with numerous international partners are also on the agenda. Doctor Web, Ltd. stand J12 will be located in Hall 6, IT-Security sector. Also visit our map location here.

mamigo

March 12, 2007 Doctor Web, Ltd. announces release of the corrected weekly add-on to Dr.Web virus database - drw43378.vdb The add-on was corrected to remove false alarm for processing of files packed With UPACK. Corrected weekly add-on is available on all updating servers of Doctor Web, Ltd. and will be automatically downloaded by all Dr.WEB Anti-viruses during the next update.

mamigo

March 12, 2007 Doctor Web, Ltd., a Russian developer of Dr.WEB security solutions, launches public beta-testing of Dr.Web for Exchange Server 2000/2003 (anti-virus + anti-spam). Dr.Web for Exchange Server 2000/2003 (anti-virus + anti-spam)In the protected system Dr.Web for Exchange Server 2000/2003 performs the following actions:

    * scans all incoming and outgoing traffic
    * stores infected and suspicious objects in the quarantine
    * notifies and warns on virus events
    * logs results of operation
    * automatically updates the virus databases

       
Easy installation and tuning
Despite the complexity of task for anti-virus protection of corporate mail traffic performed by Dr.Web for Exchange Server 2000/2003, it is easy and flexibly integrated into the mail system, simple in installation and set up. Fully automatic start at the system startup and convenient updating procedure with the help of the standard Windows scheduler considerably facilitate administration of Dr.Web for Exchange Server 2000/2003. . Minimal system load
The option of multi-thread scanning allows the processing of huge amounts of e-mails. Low system resources requirements of Dr.WEB for Exchange Server 2000/2003 make it compatible with all types of mail servers. Its installation and functioning does not require the hardware upscale. Dr.Web for Exchange scans objects in the memory buffer which increases substantially the efficiency of scanning. Grouping and managing groups
Dr.Web for Microsoft Exchange Server 2000/2003 is highly scalable to the network size and its topology. It can be adapted both for small networks and complicated distributed intranets with thousands of hosts. The option of grouping facilitates administration of the anti-virus protection. The administrator can specify different settings for different groups, as well as similar settings for several groups. This is achieved on the basis of profiles. A profile determines whether the messages should be cured, deleted, moved to quarantine, blocked, etc. Reprioritizing during the check
All incoming messages are processed according to the scanning priority assigned to them. Just being saved to folders, each message is treated as a low priority object. As soon as a client attempts to access such message, the latter is reassigned to a high priority list. To assure ultimate protection, outbound messages are processed prior to being retrieved by the client. Thus, reprioritization of messages, as well as two way mail scanning mode provide for perfect protection and efficient use of system resources. Filtering of spam
Filtering of corporate mail traffic for unsolicited e-mails is done with the help of the Vade Retro library, developed by French company Goto Software. Depending on the analysis result each message processed by the Vade Retro library is given a score — the integer ranging from -10000 to +10000. The lesser the score, the more likely the message is not spam. The threshold is set to 200, i.e. of the message is given the 200 score and more, it is marked by vaderetro as spam. After the message is analyzed, the ***SPAM*** mark is added to its subject. System requirements For installation and proper functioning of Dr.Web for Microsoft Exchange Server 2000/2003 it is required:

    * Processor: minimum –– Pentium 133 MHz, recommended –– Pentium 733 MHz
    * OS: Microsoft Windows 2000 Server, Windows 2000 Advanced Server, Windows 2000 Datacenter Server with SP3 or later; Windows Server 2003 R2, Windows Server 2003 Standard Edition, Windows Server 2003 Enterprise Edition or Windows Server 2003 Datacenter Edition. For Microsoft Windows 2000 Server SP4 and Windows Installer 3.1 (KB893803) is required.
    * Supported server software: MS Exchange server 2003
    * RAM: 256 MB (512 MB recommended)
    * Available space: 20 MB for Installation directoryю It may also require 50 MB for logs and 500 MB for log archives

We welcome users to participate in our public beta-testing of Dr.Web for Microsoft Exchange Server 2000/2003. To get the access to the restricted area for Dr.WEB beta-testers, you should register here. Every beta-tester of Dr.Web for Microsoft Exchange Server 2000/2003 will receive FREE one year e-license for Dr.Web for Windows – Anti-virus + Anti-spam. For this, they should send a message to market@drweb.com. Most active beta-testers will receive a unique offer to purchase Dr.Web for Microsoft Exchange Server 2000/2003 with 80% discount for any quantity of protected objects for up to 3 years of the license term!

mamigo

March 13, 2007 Doctor Web, Ltd., a Russian developer of Dr.WEB security solutions, launches public beta-testing of DR.WEB for IBM Lotus Domino (under Windows). Dr.Web Anti-virus for IBM Lotus Domino protects from viruses, spyware, adware and other types of unsolicited codes IBM Lotus Domino application servers. It is one more DR.WEB product for protection of large and extra large networks – this time for IBM Lotus Domino servers, securing communication infrastructure for mutual interaction and shared usage of information resources of corporations. Dr.Web for Lotus Domino operates under Windows NT/2000/XP and performs the following functions:

    * Checks for viruses and malicious programs in all incoming and outgoing e-mail messages;
    * Cures infected mail messages and files attached to them;
    * Stores infected and suspicious objects in the quarantine;
    * Notifies users and administrators about infected and suspicious objects;
    * Keeps logs of events and actions.

Package components

    * Monitor — checks received and sent e-mail messages.
    * Scanner — checks documents in nsf-bases specified by the administrator.
    * Quarantine — stores infected and suspicious objects. It is implemented as nsf-base.
    * Updating utility — automatically updates anti-virus databases and program modules.

       
High scanning speed
The structure of DR.WEB for Lotus Domino, remarkable implementation of scanning method and options allowing to flexibly administer the scanning process –– all this account for a high scanning speed and largely spare system resources. The option of multi-thread scanning allows the processing of huge amounts of e-mails. Flexible settings and administration
DR.WEB for Lotus Domino has all necessary tools allowing administrators to flexibly specify algorithms of actions of the anti-virus upon the check of messages, send notifications to senders, recipients and administrators on the viruses detected, store original copies of received e-mail messages. Efficient scanning
The e-mail messages can be scanned on-the-fly (in the real time mode), or on demand. This allows to launch scannings when the load on the server is minimal. DR.WEB for Lotus Domino scans objects saved in the memory buffer which considerably increases efficiency of scanning. Grouping and managing groups
DR.WEB for Lotus Domino is highly scalable to the network size and its topology. It can be adapted both for small networks and complicated distributed intranets with thousands of hosts. The option of grouping facilitates administration of the anti-virus protection. The administrator can specify different settings for different groups, as well as similar settings for several groups. This is achieved on the basis of profiles. Blocking of infected and suspicious objects
The infected and suspicious objects detected by the anti-virus are moved to the quarantine. Standard Lotus tools can bе used to access the objects moved to the quarantine. Very frequent updates
One of the biggest advantages of DR.WEB anti-virus is the release of frequent daily updates of the virus database, going to several times per hour during the high malware outbreaks.
The updating utility can be launched manually, as well as on the schedule, which makes it easy to keep the virus databases and program files of the anti-virus package up-to-date. After the update is received, no reboot is required.
The updates are downloaded in seconds and their size seldom exceeds 40 КB! DR.WEB anti-virus has one of the most compact virus databases which allows to scan faster, to save computer resources and to update instantaneously. Just a single entry in it allows to detect tens, or hundreds, or even thousands similar viruses! System requirements Operating system: Windows NT/2000/XP; Lotus Domino R6.0 for Windows or higher; Processor Pentium 133 or higher; RAM 64 MB (recommended 128 MB) Free space on drive: 20 MB We welcome users to participate in our public beta-testing of DR.WEB for IBM Lotus Domino. To get the access to the restricted area for Dr.WEB beta-testers, you should register here. Every beta-tester of DR.WEB for IBM Lotus Domino will receive FREE one year e-license for Dr.Web for Windows – Anti-virus + Anti-spam. For this, they should send a message to market@drweb.com. Most active beta-testers will receive a unique offer to purchase DR.WEB for IBM Lotus Domino with 80% discount for any quantity of protected objects for up to 3 years of the license term!

mamigo

March 19, 2007 Doctor Web, Ltd. announces release of a new corrected version of functional components included in a standard Dr.Web for Windows installation package - Scanner, Updating utility, SpIDer Mail and Scheduler (last 2 items are appropriate for workstations only).
Changes have been introduced due to the fact that Dr.Web Help files will soon appear in chm format. Help files in the chm format were introduced in the Dr.Web Anti-virus + Anti-spam package, which has been released in the end of February. With the new changes, in both packages for Windows - Dr.Web Anti-virus and Dr.Web Anti-virus + Anti-spam - the respective modules will be identical.
Corrected components are available from all updating servers of Doctor Web, Ltd.

mamigo

Dear Customers of Dr.Web!
March 19, 2007, 15:28:25 (MSK) incorrect add-on to Dr.Web virus database was released. As a result, several components of Dr.Web Anti-virus failed to function properly. Anti-virus laboratory of Doctor Web, Ltd. has already removed the malfunction and new corrected add-on is already available for customers of Dr.Web. To replace the incorrect add-on with the corrected one, you should update Dr.Web. To restart Dr.Web resident components Windows should be restarted. How to update Dr.Web?

    * In Dr.Web anti-virus for Windows
      Start -> All programs -> Dr.Web -> Automatic updating
    * In Dr.Web Enterprise Suite
      Connect to anti-virus server from the Enterprise Suite console -> "Administration" -> "Check for updates".

We offer customers our sincerest apologies for release of incorrect update.

mamigo

March 22, 2007 Doctor Web, Ltd announces the release of a corrected version of SpIDer Mail for Windows workstations. The causes of the incorrect communications with some mail servers have been eliminated (EHLO and HELO processing is improved). SpIDer Mail for Windows workstations is available for downloading from Dr.Web Update servers