Solutions Buy Download Information Partners Support Forum About us «Doctor Web» company news (RSS channel)
Updating the anti-virus and virus databases


Why the number of entries in Dr.Web virus database is less than in some other AV-programs?

The creation of the Dr.Web anti-virus began in early 90th of the past century, when the Internet was only developing and was not a global network, when only few companies could offer to have access to the WWW. When the traffic cost a lot and the updates should be made as often as possible, the size of the virus database - the time of its downloading from the Internet - should be minimal. This was the task which faced the developers of the Dr.Web anti-virus and it was successfully solved - till today the Dr.Web virus database is the smallest among all other anti-virus programs. This is conditioned by the Dr.Web own technology of creation of the virus database on the basis of very flexible language specially developed for description of the base. The small size of the base spares costs on the Internet traffic, occupies less space on the hard drive and in main computer memory after the base is downloaded and installed. Small size of the base provides for the high-speed interaction of the components of the Dr.Web programs and does not overload the processor.

What is the most important in the anti-virus? Its ability to protect against viruses. This protection is secured, among other conditions, by adding the virus entries (signatures) to the base allowing to detect viruses. But the quantity of entries included in the base says nothing about the ability of an av-program to detect viruses. The most objective way to check the quality of protection is the comparative reviews held on the collections of viruses from “the wild” (InTheWild list) - i.e. viruses really existing in computers of users and not only in collections of virus laboratories or virus hunters.

One should also know that the virus database of each anti-virus program has its own structure. To explain why the number of entries in the Dr.Web virus database is less than the number of entries in the virus database of some av-developers, one should understand that not all viruses are unique. There are family of related (similar) viruses, there are viruses designed by special virus constructors- programs for creation of viruses. All of them are very similar, sometimes as two peas in a pod. Some developers of av-programs name each such virus with separate entry, which increases the size of the virus database.

The Dr.Web virus databases is designed differently; a single entry in it allows to detect tens, or hundreds, or even thousands similar viruses! Even smaller number of virus entries, comparing to some other av-programs, allows to detect with great likelihood yet unknown viruses (not included into the virus database) which will be created on the basis of already existing viruses.

Let us summarize what a user benefits from the small size of the virus database

  • It spares space on the hard drive
  • It spares main computer memory resources
  • It spares Internet traffic when downloading the updates
  • It provides for quick installation of the virus database and its processing when analyzing viruses
  • It allows to detect viruses which will be created in future by modifying the existing viruses
Thus, the fundamental difference of the Dr.Web virus databases from the virus databases of other av-programs is that alongside smaller number of the virus entries it allows to detect the same quantity (or even greater quantity) of viruses and malicious programs.

Page Up

A "spider" in the right bottom corner turned red. What is wrong?

The right bottom corner is called system tray. A red spider - the icon of SpIDerGuard - means that you have not updated for more than a week. As new viruses appear in dozens every day, such interval in updating is impermissible. We strongly advise you to update at your earliest convenience.

Page Up

Frankly, I often forget to update the virus databases. Is there some utility in your anti-virus to make the updates instead of me?

Of course, the developers of Dr.Web have designed such utility. The distribution kit of Dr.Web includes also an automatic updating utility, which provides for automatic updating of the program modules and the virus databases with any user's interference. You do not even have to set it up; all settings are done by the developers by default. Since the first moment Dr.Web is installed on your computer, the utility is active. To make sure the utility works, establish connection with the Internet. Immediately a small window called Dr.Web Update for Windows 95-XP v.432b will appear. This is the automatic updating utility.

Page Up

When I get my computer connected to the Internet, some small window called Dr.Web Update for Windows 95-XP v.432b. What is that?

This is very useful and important Dr.Web automatic updating utility. It provides for updates of the program modules and the virus databases and is run automatically when you connect your computer to the Internet. This is done by the Dr.Web developers intentionally to make users, without any action on their part, to update the virus databases as often as possible.

The updating process is fully automated. You have not to configure the utility. You have not to remember when you updated the last time. You have not enable the virus databases. All these actions are done by the automatic updating utility itself.

Page Up

When I get my computer connected to the Internet, the updating utility is run, then it turns red, “Exit” appears and nothing more happens. Why cannot I update?

Most likely, that the settings of Internet Explorer, used by you for surfing on the Internet, are switched to the off-line mode. The Dr.Web automatic updating utility needs this option to be on-line to automatically connected to the Internet as it is integrated with Windows operating system and uses some of the functions of Internet Explorer. To disable the off-line mode, select the Files menu item and deselect the Work off-line option.

Page Up

Please, explain why do you advise to update BEFORE EVERY connection to the Internet, but also write that your perfect heuristic analyzer can detect even the viruses which signatures are not included into the virus databases?!

It is generally known, that dozens of viruses appear every day. The overwhelming majority of them are modifications of already existing viruses - their native brothers and sisters. The Dr.Web heuristic analyzer really allows to detect with high probability that a file I “probably“ infected with a modification of a virus. But “probably” does not mean “infected for sure”. For sure, the Dr.Web anti-virus will detect this file as a virus only after the virus signature is added into its virus database..

The heuristic analyzer also allows to detect a suspicious, peculiar to viral codes activity and neutralize it with the help of SpIDerGuard or MailGuard. BUT, none of AV-vendors will ever guarantee that today, just now, somebody writes a brand new virus, which will not be detected by the most perfect heuristic analyzer.

That is why the Dr.Web developers have designed an automatic updating utility which “makes” users - regardless want they or not, remember or not - to receive updates of the virus databases.

Page Up

I have installed Dr.Web. In the scanner main window I pressed the “Settings” button. A window for editing settings opened. I opened the “Update” pane and wanted to set up the updating procedure. But there should be filled in a proxy address and password. Where can I receive these data?

The Update pane is designed for users connecting to the Internet via proxy servers - and only for them! Those not connecting to the Internet via proxy servers should not specify any settings in this pane - all the settings for the automatic updating are made by the developers.

To receive proxy address and password for those connecting to the Internet via proxy servers, contact you system administrator or internet Service Provider.

Page Up

My anti-virus does not work! When I try to use it, the updating utility is always run and asks to register. But I have already registered the program! Why should I register again?

Most likely, your key file expired - either it was a license key file you have paid for, or a demo key file you used for 20 days. When the key file expires, all components of the anti-virus, except for the automatic updating utility, are blocked.

To purchase a license key file, contact our partners.

But if it was a demo key file that expired, you will have to wait for 4 months before you will be able to use once again our demo version, as demo key files can be received ONCE IN FOUR MONTHS ONLY.

Page Up

I cannot update my Dr.Web and an updating error report is generated. What should I do?

  • Make sure Internet connection is active.
  • Make sure Internet Explorer is enabled.
  • If you use a firewall – enable in its settings the Internet connection for Dr.Web Updating utility: DrWebUpw.exe in the directory where Dr.Web Anti-virus is installed.
  • If proxy server is used to connect to the Internet, specify in settings (DrWeb scanner, Settings, Modify settings, the “Updating” pane) address, port of the proxy server, user name and password.

ЕIf you still cannot update, do the following: Run, All programs, DrWeb, Automatic updating. Check the "Log details" box and press the "Start" button. When the updating is completed, a location of the log file (DrWebUpw.log) will be displayed. Send this file to Dr.Web technical support service and describe how you connect your computer to the Internet: if a proxy server is used, if used with authorization or without it; if proxy server is set up in Internet Explorer, or in DrWeb scanner in the "Updating" pane.

Page Up

How can I disable a popup appearing after every Dr.Web update?

For this you should edit the configuration file - DrWeb32.ini.

  • If version Dr.Web 4.33 was installed (there was no upgrade from 4.32 to 4.33)
    To find DrWeb32.ini configuration file, choose "Start/Programs/DrWeb/Logs/ DrWeb Settings". By default, Acknowledge=Yes. You should change Yes to No. Now, this line will look this way
    Acknowledge = No
    
    A popup will not appear any more.
  • If Dr.Web was automatically upgraded from v.4.32 to v. 4.33
    Find the DrWeb32.ini configuration file in the Dr.Web installation directory - C\Program Files\DrWeb. Open this file with any text editor, for example with Notepad. Find the [SpIDerGuardNT] section in it. By default, Acknowledge=Yes. You should change Yes to No. Now, this line will look this way
    Acknowledge = No
    
    A popup will not appear any more.

If the Acknowledge string is missing in the configuration file, you should create it.

Page Up

Back to F.A.Q.

   Support


  Important news
 
08.08 Signature database drw44400.vdb (drw43353.vdb, drw43354.vdb, drw43355.vdb, drw43356.vdb) re-released

25.07 Signature database drw44448.vdb (drw433am.vdb) re-released

23.07 Signature database drw44443.vdb (drw433ah.vdb) re-released

21.07 Signature database drw44449.vdb (drw433an.vdb) re-released

11.07 Corrected verson of Dr.Web SpIDer Guard 4.44 released


   My five cents
 
What is the screen size of your monitor?

12''
14''
15''
17''
19''
more than 19''
other



Doctor Web, Ltd. © 2008 Doctor Web, Ltd. - a Russian company developing and distributing Dr.Web® Anti-virus solutions.
Our customers can be found among home users from all regions of the world and in large enterprises, small companies and nationwide corporations. We thank all of them for support and long-term devotion to our product. State certificates and awards received by the Dr.Web Anti-virus, as well as the geography of our users are the best evidence of exceptional trust to the products created by the talented Russian programmers.