Dr.Web for Windows

Dr.Web for Windows incorporates the following components:

Dr.Web Scanner for Windows is an antivirus scanner with graphical interface. The program is launched at a user’s request, or as scheduled, and performs a computer antivirus scanning. There exists also a program version with the command line interface (Dr.Web Console scanner for Windows).

SpIDer Guard for Windows is an antivirus on-access scanners (also called as monitor). It constantly resides in memory scanning the files “on the fly” detecting any viral activity.

SpIDer Mail for Windows workstations is an antivirus mail scanner. The program intercepts requests of any mail clients to mail servers via POP3/SMTP protocols, detects and neutralizes viruses spreading through email before they are received by the mail client from the server, or before the message is sent to the mail server.

Dr.Web automatic updating module for Windows allows the registered users to receive virus database updates and Dr.Web program modules, and automatically installs them.

Dr.Web Scheduler for Windows makes it easier to schedule repeated tasks such virus definitions updates.

An antivirus scanner for DOS environment and some other auxiliary programs are also included into Dr.Web for Windows package.


License key file
The license key file

User’s rights to use the antivirus are specified in the key file. The following information is contained in the key file:

list of antivirus components licensed to the user;

product license term;

virus definitions automatic updates period (also called the “subscription period” and may not be equal to the license period);

other restrictions (i.e. the number of protected PCs, etc.).

The key file has the key extension and must be located by default in the installation directory.

The key file has a write-protected format and therefore cannot be edited. Editing the file makes it invalid. That is why it is not recommended to open your key file with a text editor which may occasionally corrupt it.

Users who have purchased the antivirus with Doctor Web’s certified partners obtain a license key file. The parameters of the key file are specified according to the license the user has paid for. The license key file contains the name of the user (or a company name), and the name of the selling company.

For evaluation purposes users may also obtain demo key files. Demo key files allow to take advantage of the full functionality of the program and the virus definitions updates, but have a limited term of use and no users’ support is provided.

The key file may be supplied with a key extension, or as a zip archive containing the key file. It may also have a dwz extension, which is used by the Dr.Web programs to automatically install the antivirus package updates.

The key file may be obtained in one of the following ways:

downloaded from the vendor’s web-server. At the end of the installation procedure, when updating the virus definitions bases for the first time, the user is invited to get registered and to input the registration serial number supplied with the product at the time of purchase. The license key file is then downloaded by the updating utility and saved into the Dr.Web’s working directory. If the user fails to supply the serial number, a demo key file may be obtained from the server.

included into the distribution package.

sent over to the user by e-mail as an attachment with the dwz extension. In that case the user should double-click the attachment icon to automatically install the key into the right location.

supplied on a media as a file with the .key extension. The user should copy it into the Dr.Web installation directory manually.

supplied as a zip archive containing a file with the key extension. The user should extract the key file using the respective archiving tool (WinZip or Pkunzip) into the Dr.Web installation directory.

If no key file has been obtained, or the present one has expired all antivirus components are disabled. The user may only launch the automatic updating utility to register and to obtain a key file.


Dr.Web OS requirements

The Scanner (GUI-version and the console version for Windows), as well as SpIDer Guard function in PCs operated by Windows 95/98/Me or Windows NT/2000/XP operating systems. The minimum program requirements match those for the respective OSs.

The DOS Scanner works under MS-DOS, or in the Windows command line mode. The computer has to fully support i80386 processor commands system.

All the security patches recommended by the OS developer must be installed. If the OS version is not supported any longer, you should upgrade it.


special symbols
The DrWeb package programs use special symbols (also named as mask symbols)? and * to mark the groups of file names and directories, corresponding to a certain pattern (mask). The first of them means any ordinary symbol allowable in the given context, the second one is used in the arbitrary sequence of allowable symbols (it can be of zero length). Therefore, the record *.exe is interpreted as "a file with any name and exe extension", and the records *.do? will mean a file with arbitrary name and the extension composed of three symbols, the first two of them are do, and the third one is arbitrary


This is a button of the information representation in the main window. If this button is pressed, a window will appear where
Switch to the report list with information on infected and suspicious objects


Show alerts on blocking by the program of an out-going message (a checkbox can be deselected if the mail program shows such alerts)


This is a button of the information representation in the program's window. With this button pressed, the window will look as you
Display main window


This is a button of the information representation in the program's window. If this button is pressed, the statistics window will appear
Switch to the statistics window


Clean the list of objects the program has "reacted" to
Clear the report list on infected and suspicious objects


Update the virus bases and/or the DrWeb program version via the Internet. TCP/IP connection to the Internet is required for that
Update the virus bases and /or the Dr.Web program version via the Internet. TCP/IP connection to the Internet is required for that


Move to the Settings Panel


Exit the program


If this button is fixed as pressed, not only directories, but also files in them
If this button is fixed as pressed, not only directories, but also files are visible in the directory tree (on the right). This option is reasonable to be used if a definite file must be scanned (a group of files). When scanning the whole disk, or the directory, this option is not necessary, as large quantity of files "jam" the window and make it difficult to chose objects fro scanning


If this button is pressed, the directories and the drives tree are updated. This may be necessary, for example, if during the operation of the scanner
Update the directories and the drives tree. This may be necessary, for example, if during the operation of the Dr.Web Scanner for Windows you have enabled the network drive, or created a folder, etc.


If you often scan one and the same set of directories (drives), you can save this set by (to do this press this
Save the disks and directories selected for scanning. In future, this set can be restored by pressing the button below, instead of choosing the objects anew


With this button pressed, the set of objects for scanning saved before is restored.
Restore the set of objects for scanning saved before


Instead of deselecting "manually" the objects for scanning, you can press this button. No selected objects will
Clear the set of objects for scanning


Selection of objects for scanning window


Dr.Web Scanner for Windows (GUI-version) logo


This button may look as follows:

	No objects selected for scanning, nothing to scan
	The objects are chosen and you can start scanning. Press the button to start scanning.
	Scanning is in progress. If this button is pressed, the scanning will be terminated.


This line contains the information on the DrWeb32W program version, the current scanning path and other data.
This line contains the information on the DrWeb32W program version, the current scanning path and other data


This is a switch of the information representation in the program's window. With this button pressed, the main window appears.
Switch to the main window.


A confirmation to remove the task from the list, or to reject deletion is required in this window. To confirm press
To confirm deletion, press the Yes button, to reject press the No button


This column of the table contains the name of the infected or suspicious object (it is the file name, if the file is infected, Boot s
This column of the table contains the name of the infected or suspicious object (it is the file name, if the file is infected, or Boot sector, if the boot sector is infected, or Master Boot Record, if the MBR of the hard drive is infected)


The full paths to correspondent files are listed in this column.
The full paths to correspondent files are listed in this column


This column lists the name of a virus, or a virus modification as per the internal classification of the Dr.Web package (by modification
This column lists the name of a virus, or a virus modification as per the internal classification of the Dr.Web package (by modification of the known virus is meant the code resulted from a change made to the known virus and detected by the scanner, but the curing algorithms of the original virus are inapplicable to it). For suspicious objects an indication that the object "is possibly infected" and the type of a possible virus according to the classification of the heuristic analyzer is displayed


This column lists the actions the program made to deactivate a virus:

cured;

deleted;

renamed;

moved to.

In cases when the file is temporary inaccessible, the given actions cannot be applied immediately, but only after the PC reboot (suspended curing), the message in the fourth column will be modified accordingly. These actions can be defined in the correspondent dialog box. While viewing the report you can set the necessary actions to deactivated the detected viruses


The quantity of objects on the list (i.e., the Dr.Web program has reacted to).
The quantity of objects on the list (infected and suspicious) is displayed here


The quantity of the scanned objects is displayed here.
The quantity of the scanned objects is displayed here


These are the buttons with the help of which a single drives statistics, or the total statistics can be viewed
These are the buttons with the help of which a single drive statistics, or the total statistics can be viewed


This is a button to view the statistics of all scanned drives.
Show statistics of all scanned drives


These are buttons to view a definite drives statistics.
Show a definite drive’s statistics


The total quantity of the scanned objects


The quantity of the cured objects. The action to be made over the infected object is set in the correspondent dialog.
The quantity of the cured objects. The action to be made over the infected object is set in the correspondent dialog


The quantity of objects infected by main modifications of known viruses.
The quantity of objects infected by main modifications of known viruses


The quantity of the deleted objects. The action to be made over the infected object is set in the correspondent dialog.
The quantity of the deleted objects. The action to be made over the infected object is set in the correspondent dialog


The quantity of objects infected by modifications of viruses.
The quantity of objects infected by modifications of viruses


The quantity of the renamed objects. The action to be made with the infected objects is set in the correspondent dialog


The total quantity of suspicious objects possibly infected by viruses which are detected by the heuristic analyzer.
The total quantity of suspicious objects possibly infected by viruses


The quantity of the removed objects. The action to be made with the infected object is set in the correspondent dialog
The quantity of the removed objects.


Scanning speed (Kilobyte/second)


Scanning time


Clear (null) the statistics.
Clear (null) the statistics


The quantity of the infected files and boot sectors


The total quantity of the scanned files and boot sectors


The list contains the general information on the program: the license term, the key validity term, the components' versions, the last date of the virus databases updates and
The list contains the general information on the program: the license term, the key validity term, the components’ versions, the last date of the virus bases updates and the number of entries in the virus bases


To disable the heuristic analysis of the scanned objects (i.e. a priori detection
Enabling of a heuristic analysis (a priori detection of unknown viruses judging by their virus code. Approximate, probabilistic nature of discovering infection, which allows to detect not the infected files, but only suspicious objects is a distinctive feature of such scanning. The whole class of programs (for example, multisystem PC loaders) having the similar codes with viruses can cause false alarms of the heuristic analyzer. Besides, such scanning somewhat increases the scanning time in PCs with low processors. This may argue for disabling the heuristic analysis. At the same time, its enabling will raise the reliability of the antivirus protection. By default, this mode is enabled


Use or not the heuristic analysis


To disable obligatory scanning of the main memory immediately after the program launch deselect the Scan memory checkbox (a memory can be
To disable obligatory scanning of the main memory immediately after the program launch deselect the Scan memory checkbox (a memory can be checked by a user’s request). Be default, this mode is enabled and we recommend not to disable it


The Scan boot sectors mode is enabled by default and we recommend not to disable it. If you still want to disable it
The Scan boot sectors mode is enabled by default and we recommend not to disable it. If you still want to disable it, deselect the checkbox.

The boot sectors of disks and the MBR of the hard drive are scanned when this mode is enabled, even if a single file is selected for scanning on the given drive


By default, the Scan subdirectories mode is enabled. To disable it, deselect the correspondent checkbox.
Scan subdirectories within the directories selected for scanning?


The given pane contains also the Prompt for multiple floppies checkbox. By default, it is enabled. Under this mode
This mode instructs the program to open a dialog requesting Scan another floppy? after a diskette is scanned. To scan the next floppy put it into the disk drive and press the Yes button; to finish scanning of floppies in the given disk drive press the No button


By default the Prompt on any action checkbox, which instructs the program to request a user's permission for any action
Request a user’s permission for any action with infected or suspicious objects (curing, removing, deleting or renaming)? It is recommended to save this mode (except for the cases when the scanning is made in automatic mode without a user’s intervention)


The masks have the following arrangement:
the "*" symbol replaces any, possibly empty sequence of symbols;
the "?" symbol replaces one and only one symbol (any)
other mask symbols do not replace anything and mean that in this place in the file name must be this particular symbol


The Scan mode radio button sets the way the files are selected for scanning. Chose the required position for it (for more details
Selection of the mode the files are chosen for scanning. Chose the required position for it (for more details point with the cursor to the definite button position and left-click it)


This area must contain the specified lists of values, if the scanning mode is selected as Selected types or User masks.
A lists of values in Selected types or User masks modes


The All files option means full scanning of all files within the set selected for scanning. This option enabled
The All files option means full scanning of all files within the set selected for scanning. This option enabled will considerably increase the scanning time


The By format option means that the scanner, judging by the internal format of files selected for the scanning set, will determine whether they can
To scan files which can be the "virus carriers", i. e. executable files (the name and the extension of the file are disregarded), and only after that it will scan the possibly executable files for viruses. This mode is enabled by default and we recommend not to disable it


The Selected types option allows to form the list of files' extensions to be scanned (other files within the
To scan files the extensions of which are included into the list of extensions selected by a user.

Special symbols * and ? may be used in the extension list. The program keeps the list with main extensions of executable and archive files by default. You can edit this list.

To add the new element for scanning put it into the entry field in the upper part of the List area and press the Add button. To delete the element from the list select it in the list and press the Delete button. To restore the default list press the Default button


The User masks option is analogues to the Selected typesHIDC_RADIO_SELECTED_TYPES, but allows to select files not only by extensions, but also by files names masks
This option is analogues to the Selected types, but allows to select files not only by extensions, but also by files names masks


By default, the Check archived files option instructing to unpack archives and check the files inside them is enabled. This is a
Unpack archives and check the files inside them?. This is a time, memory and other Windows resources consuming action. To disable this mode deselect this checkbox


By default, the Packed executables option is also enabled. This mode instructs to check executable files packed by some
Scan executable files packed by some known to the Dr.Web package packer? This is not a resources consuming action and it is reasonable to retain it. If you still wish to disable it (the packed files will be scanned as usual executables, without unpacking), deselect this checkbox


By default, the Check email option is enabled. It instructs the program to check email files of several mail clients (those which
Scan email files of certain mail clients (those which store the mail messages as texts). Deselect the checkbox, if you do not use such mail clients


You can put into this field the masksMASK of files to be scanned.
You can put into this field the masks of files to be scanned


The list of masksMASK of files to be scanned
The list of masks of files to be scanned


With this button pressed, the mask for a file entered into the left field, is added into the list.
Add the mask onto the list in the left field


With this button is pressed, the maskMASK selected in the left field is deleted from the list.
Remove the selected mask from the list


With this button pressed, the changes made by a user are canceled and the list is restored as it was "by default" (i.e. as
With this button pressed, the changes made by a user are canceled and the list is restored as it was "by default" (i.e. as programmed by the Dr.Web authors)


Moves to the dialog with the reaction to the infected objects program settings


Moves to the dialog with the reaction to the incurable objects program settings


Moves to the dialog with the reaction to the suspicious objects program settings


The Report option enabled means that the program will only report to a user about all objects it has “reacted to”
The Report option enabled means that the program will only report to a user about all objects it has “reacted to”, without making attempts to cure, remove, delete or rename them


The Cure option enabled means that the program will make attempts to revert the infected object to its original state. The action
The Cure option enabled means that the program will make attempts to revert the infected object to its original state. The action is possible only when a known virus is detected, and the curing instruction is stored in the base; still, even in these cases, the curing may fail, for example, if the object has already been seriously damaged by a virus


The Delete option instructs to delete the infected file. No actions are taken for boot records under this mode.
The Delete option instructs to delete the infected file. No actions are taken for boot records under this mode


The Rename option chosen instructs to replace the extension of the file name with that input into the entry filed in the right area next to this button
The Rename option chosen instructs to replace the extension of the file name with that input into the entry filed in the right area next to this radio button. By default, it is #??, i. e. the first extension symbol is replaced with #. You can also type in your own variant in the mentioned entry field. The mode is inapplicable to boot records


The Move to option instructs to move the infected file to the directory the name of which is specified in the entry field on the right of this button
The Move to option instructs to move the infected file to the directory the name of which is specified in the entry field on the right of this button. By default, it is INFECTED.!!! (it is created in the directory you have installed the package to). You can yourself input the path and the name of the directory into the entry field, or chose it in the standard Windows directory tree by pressing the button on the right of the entry field


Te extension mask attributed to the renamed files is specified in the entry field. This extension can be changed
The extension mask attributed to the renamed files is specified in the entry field. This extension can be changed, but standard extensions (EXE, COM, BAT, DOC, PAS, BAS etc.) should not be used instead. By default, it is #??, i. e. the first symbol of the extension is replaced with #. You can also input your own variant into the mentioned entry field. This mode is inapplicable to boot records


The directory where the infected file is instructed to be moved to is specified in the entry filed. By default, the INFECTED.!!! directory
The directory where the infected file is instructed to be moved to is specified in the entry filed. By default, it is INFECTED.!!! (it is created in the directory you have installed the package to). You can also input yourself the path and the name of the directory in the standard Windows directory tree by pressing the button on the right of the entry field


It opens a standard window to browse for a directory where the infected, incurable or suspicious objects can be removed to
It opens a standard window to browse or a directory where the infected, incurable or suspicious objects can be removed to


It switches to the reaction settings window for the infected objects detected in the archived files
It switches to the window of setting up the handling of infected objects detected in the archived files


It switches to the reaction settings window for the infected objects in mail files. The settings fully correspond to those
This switches to the window of setting up the handling of infected objects in mail files


It switches to the reaction settings window for the infected objects detected in file containers of the ActiveMIME (MSO),
This switches to the window of setting up the handling of infected objects detected in file containers of the ActiveMIME (MSO), PowerPoint, HTML, OLEMessage, RTF formats. The settings fully correspond to those described for the infected archives


The extension mask the renamed archives are awarded to is specified in this entry field. This extension can be changed; still,
The extension mask the renamed archives are awarded to is specified in this entry field. This extension can be changed; still, the standard extensions (EXE, COM, BAT, DOC, PAS, BAS etc.) should not be used. By default, it is #??, i. e. the first symbol of extension is replaced with #. You can also input your own variant into the entry filed


The Move to option instructs to move the infected archive to the directory, the name of which is specified in the entry filed on the right of this button
The Move to option instructs to move the infected archive to the directory, the name of which is specified in the entry filed on the right of this button. By default, it is INFECTED.!!! (it is created in the directory you have installed the package to). You can input yourself the path and the name of the directory into the entry field, or chose it in the standard Windows directory tree by pressing the button on the right of the entry field


The directory the infected archive is instructed to be moved to is specified in this entry field. By default, it is INFECTED.!!!
The directory the infected archive is instructed to be moved to is specified in this entry field. By default, it is INFECTED.!!! (it is created in the directory you have installed the package to). You can yourself input the path and the name of the directory, or chose it in the standard Windows directory tree by pressing the button on the right of the entry filed


It opens a standard window for browsing for a directory for the archives with the infected, incurable or suspicious objects
It opens a standard window for browsing for a directory for the archives with the infected, incurable or suspicious objects to be moved to


The Log to file checkbox is selected by default. Deselect the checkbox if no logs are needed.
Log to a file?


Enter the log file name into the entry field. The absolute, or the relative path is specified for the file name. To chose the existing file
Enter the log file name ?


Log file name


It opens a standard window to browse for the existing file the report will be logged to.
It opens a standard window to browse for the existing file the report will be logged to


Here you can chose whether the logs will be appended to the log file, or the log file will be cleared at every scanner launch
Will the logs be appended to the log file, or the log file will be cleared at every scanner launch?


The default value. It allows to append new logs to the log file. If the Append option is enabled
Instruct the scanner to append new logs to the log file.


This option allows to clear the log file at every scanner launch.
 Instruct to clear log files at every scanner launch


The Encoding option allows to chose the encoding of the log file. Possible variants are: AN
Selection of the log file’s encoding.


The ANSI button allows to log in the Windows encoding (Windows-1251 encoding table). Enabled by default
Keep logs in ANSI (Windows)


The OEM button allows to log in the DOS encoding (the IBM-866 encoding table)
Keep logs in OEM (DOS)


The group of checkboxes in the Details area allow to select what kind of information will be logged. With the Log to the file option enabled
The group of checkboxes allows to select what kind of information will be logged. With the Log to the file option enabled the reports on detection of infected or suspicious objects, including the names of the viruses, or their modifications (for suspicious objects there will be classification of suspicious codes as per the heuristic analyzer), and on the actions made will always be logged (even if no other checkbox is selected)


If the Scanned objects checkbox is selected, the names of all scanned objects will be displayed, and uninfected objects will be marked
List all scanned objects, uninfected objects will be marked with Ok (this mode may considerably increase the log file). This box is not checked by default


If the File packers names checkbox is selected, the detected executable files packed with special packers
List the detected executable files packed with special packers, and the names of their packers. This box is checked by default


If the Archivers names checkbox is selected, the scanned archives and their archivers will be displayed, as well as error
List the scanned archives and their archivers, as well as error reports (if, for example, it was not unpacked, as it was password protected). This box is checked by default


If the Statistics checkbox is selected, the statistics on the program's operation during the regular scanning and the whole
If the Statistics checkbox is selected, the statistics on the program’s operation during the regular scanning and the whole session is displayed


In the Log size limit area it is specified whether or not the log file size will be limited, if yes, then its maximum possible size is set


If the Cut it longer than checkbox is selected, the log file size will not exceed the size indicated in the neighboring field. If the file size exceeds
If the Cut it longer than checkbox is selected, the log file size will not exceed the size indicated in the neighboring field. If the file size limit is exceeded, the log file is cleaned and the information is logged at the beginning


The entry field for the maximum log file size in kilobytes
Specify the maximum log file size in kilobytes


The Location of virus bases lists the paths to the directories the virus bases reside, and every path
This drop-down list contains the paths to the virus bases. The base files with non-standard (different from .vdb) extensions and resided not in the package installation directory should be included into it


The list of paths to the virus bases contains the list of paths to the directories the virus bases reside, and every path ends with the file name mask *.extension. Originally, the list contains just one entry  — *.vdb (that means all files with vdb extension associated with main virus base and the updates in the Dr.Web directory)


It opens a standard window for browsing for a virus base directory.
It opens a standard window for browsing for a virus base directory


It adds a new path and/or a virus base mask to the list. This list helps to set the path to the virus bases
It adds a new path and/or a virus base mask to the list. This list helps to set the path to the virus bases outside the main directory (for example, to the updates kept beyond the main base)


It removes the selected path and/or the virus base mask from the list


The list contains the paths to the directories, the files in which will not be scanned


The list contains the paths to the directories the files in which will not be scanned


It opens a standard window for browsing for a directory to be excluded from scanning


It adds the directory to the excluded paths list


It removes the directory from the excluded paths list


The list contains the file names which will not be scanned


This drop-down list contains the file names to be excluded from scanning


It opens a standard window for browsing for a file to be excluded from scanning


Specify the element you wish to add into the list and press Edit


Select the object for deletion in the drop-down list on the right of the button and press Delete to exclude the object from the list


By default, the sound effects are disabled. To enable the sound reactions check the Sounds box.
By default, the sound effects are disabled. To enable the sound reactions check the Sounds box


The list contains the file events which can be "sounded". The correspondent sound file is showed on the right


The sound file name associated with the event


It opens a standard window for browsing for a wav-file to enable sound effects for an event


To automatically save the program settings at exit select the
Enable automatic saving of changes in configuration at exit?


To fix the program's windows positions and the respective parameters in the Windows registry check the Use
To fix the program’s windows positions and their respective parameters in the Windows registry select the Use registry settings checkbox. This will automatically save the geometric parameters of main windows between the scanner sessions. This mode is enabled by default


In the Scan priority area there is a slider, which sets the priority of this program with respect to other Windows applications
Set the priority of this program with respect to other Windows applications


It launches the Dr.Web scanner (GUI-version) for scanning a single file, or a group of files specified in the Scan path and mask
It launches the Dr.Web scanner (GUI-version) for scanning a single file, or a group of files specified in the Scan path and mask entry field


It opens the Internet browser window and points to the web-site of the Dr.Web for Windows 95-XP package developers


The window contains the general information on the program during the last session. Having read the statistics press the ÎÊ to close the window


Check the viral activity manifestations (unsolicited mails)?


Whether or not to heuristically analyze for unknown viruses


Press it to move to the additional scanning settings window


Whether or not to scan the archives


Whether or not scan the files in archives


Whether or not to scan the packed executable files


Whether or not to scan the packed executable files


This checkbox instructs the program to heuristically
Enable or not the blocking mode for spam


Autorun or not the program at the system startup


Autorun mode of the program at the Windows reboot


Specify the maximum archive nesting level (in mail attachments)


Specify the maximum compression rate of the archive (in mail attachments)


Specify the maximum file size at unpacking


Close the window without saving the settings’ changes


Close the window and save the settings’ changes


Specify the maximum message scanning time


Maximum message scanning time, if exceeded, the message is considered unchecked


Maximum file size at unpacking


Maximum archives compression rate


Maximum archives nesting level


Display or not the dialog on blocking an outgoing message (it is usually displayed by the mail program)


With the checkbox selected the deleted and removed messages will also be deleted from the POP3-server


Chose the action for the infected messages


Reaction to the infected messages


Delete or not (regardless the mail program settings) the messages stopped by the antivirus at the POP3 server


Select the action for the suspicious messages


Reaction to the suspicious messages


Select the action for the unchecked messages


Reaction to the unchecked messages


Set the path for the removed messages


Quarantine directory for the removed messages


Press this button to select the directory for the removed messages


Press to move to the additional engine settings window (the quantity and the operation modes of startup modules)


Close the window without saving the changes


Set the path to the search engine


Path to the complex engine (the drweb32.dll file)


Press this button to select the location of the search engine


Set the path to the virus bases


Path to the virus bases


Press this button to select the virus bases location


Input the flagfile name


The flagfile the changes in which cause updates of virus bases


Press this button to select the path to the flagfile


Specify the flagfile’s check period


Flagfile check period


Maximum number of simultaneously loaded search engines


Specify the maximum number of search engines


Specify the number of originally loaded search engines


The number of search engines loaded at the program launch


The time after which the unused search engine is unloaded


The time after which the unused search engines are unloaded


Allow icon animation during the mail scanning


Keep or not the log file


Enable logging


Log or not the checked virus-free messages


Log or not all messages (not only infected)


Specify the log file name


Press to select the name and the location of the log file


Specify the maximum log file size


Enable or not animation of the program icon in the Task bar


Maximum log file size


Traffic automatic hook
Specify the list of automatically hooked POP3/SMTP-servers. The servers are specified in the format ADDRESS:PORT, digital and domain address forms are admitted, special symbol * is admitted.
With the Test hooks functionality on every starting checkbox selected the possibility of automatic hook is checked; if interception is impossible a user is notified about it. In such case chose the manual hook mode


Manual traffic hook
Specify the hooks list. The hook is set in the format

PORT_PROGRAM -> ADDRESS:PORT

The program ports are numbered starting from 7000 by successively following numbers, the address of the hooked server is set in the domain and the digital form


List of hooked addresses


List of hooked ports


Input the address of the server (digital or domain), * is admitted


Input the port of the server


Input the port of the program (starting from 7000, the numbers must successively follow)


Input the address of the server (digital or domain)


Input the port of the server


Press to add the address of the server into the list


Close the window without saving changes


Press to delete the selected server from the list


Close the window and save the settings


Add the hook into the list


Close the window without saving changes


Delete the selected hook from the list


Close the window and save the settings’ changes


Check the automatic hook functioning at every program launch


Manual hook mode


Automatic hook mode


POP3-server address


POP3-server port


Check the automatic hook functionality


Use the hook settings automatic mode (recommended)


Set the manual hook (if automatic mode is impossible)


Press to set parameters of the selected hook mode


Input the SpIDer Mail port number (the numbers must successively follow starting from 7000)


Input the IP, or the domain address of the hooked POP3/SMTP server


Input the port of the hooked POP3/SMTP server


List of hooks. Select the hook for removal


Press to add the hook selected above into the table


Press to delete the selected hook


The File menu consists of a single menu item - Exit. Select this item to exit the Scheduler in this session
The File menu consists of a single menu item - Exit. Select this item to exit the Scheduler in this session of Windows


The main program controls reside in the Tasks menu:

Select Add to add a new task to the list of tasks run by the Scheduler and set the task parameters.

Select Edit to edit the parameters of the task selected in the list of tasks.

Select Remove to remove the selected task from the list of tasks run by the Scheduler


The Options menu contains the single menu item called Load at startup set by default (the Scheduler is automatically
The Options menu contains the single menu item called Load at startup set by default (the Scheduler is automatically loaded at the Windows start). To disable this option deselect this checkbox, to restore autoloading select the checkbox


English (Built-in) and Russian (Ðóññêèé) menu items form the Language menu. Select the necessary program interface language.
English (Built-in) and maybe other language items form the Language menu. Select the necessary program interface language


Calling helps


The tasks list consists of the following columns:

Title — arbitrary task name;

Next run — the date and time set for the given task (or the value is blocked, if the task blocking was selected);

Path — full path and name of the launched file;

Parameters — additional launching parameters (keys)


The OK button closes the main window saving the changes made in the program parameters (the Scheduler keeps operating).
The OK button closes the main window saving the changes made in the program parameters (the Scheduler keeps operating)


Press the Exit button to exit the Scheduler in the current Windows session. At the next Windows restart
Press the Exit button to exit the Scheduler in the current Windows session. At the next Windows restart the Scheduler will be loaded automatically, if you have not disabled its automatic load. To start the Scheduler manually select in the Doctor Web program group the Scheduler item. The main window will also be closed saving all changes made in the program’s parameters


Title - an arbitrary name of the added task. To facilitate communication with the Scheduler it is recommended to give tasks
Title — an arbitrary name of the added task. To facilitate communication with the Scheduler it is recommended to give tasks meaningful names. This field must be obligatory filled in


If any task must be disabled, to some reason, there is a possibility to block the task i
If any task must be disabled, to some reason, there is a possibility to block the task in the Scheduler, i.e. to temporary exclude it from the schedule. To block the task (the launching time settings will be saved, but the task will not actually launched), check out the default Enable box in the task parameters settings window, to unblock the task – check the box


Path - the full path and the name of the launched file. You can yourself input the path and the name for the definite directory into the entry field,
Path — the full path and the name of the launched file. You can yourself input the path and the name for the definite directory into the entry field, or select it in the standard Windows directory tree by pressing the button on the right. This field must be obligatory filled in


It opens a standard window for browsing for a file in Windows.
It opens a standard window for browsing for a file in Windows


It opens a standard window for browsing for a path to a file (directory) from the hierarchical Windows list


Parameters - additional parameters (keys) to be processed at the given task launch. This field may not be
Parameters — additional parameters (keys) to be processed at the given task launch. This field may not be filled in


The button runs the task only once at the specified time. The following fields should be filled in: launch time (left entry field
The button runs the task only once at the specified time. The following fields should be filled in: launch time (left entry field), launch date (central entry field) and year (right entry field) are typed in from the keyboard; the month is selected from the drop-down list. By default the current time and date are set


The button runs the task every hour. Specify the minute of the hour the task must be run.
The button runs the task every hour. Specify the minute of the hour the task must be run. By default, the current minute of the day is set


The button runs the task at a definite time on specified days of the week. Specify the run time in the entry field
The button runs the task at a definite time on specified days of the week. Specify the run time in the entry field and select the checkboxes against the days of the week the task must be run. By default, the current time and all days of the week are set


button runs the task at a definite time once a week. Specify the launch time and select the day of the week from the list on
The button runs the task at a definite time once a week. Specify the launch time and select the day of the week from the list on which the task must be run. By default, the current time and day are set


The button runs the task at a definite time once a month. The launching time and the date when the task must be run
The button runs the task at a definite time once a month. The launching time and the date when the task must be run should be specified. By default, the current time and date are set


The button runs the task once a year at a definite time. The following fields must be filled in: launching time (left entry field
The button runs the task once a year at a definite time. The following fields must be filled in: launching time (left entry field), the date entry field (in the center) and the year entry field (in the right) are typed in from the keyboard; the month is selected from the drop-down list. By default, the current time and date are set


Specify the time as HH:MM


Select the day of the week the task must be run.
Select the day of the week the task must be run


Select this checkbox to run the skipped task at the first opportunity


Select the checkbox to run the task while on line


Specify the date as DD._1
Specify the date as DD


Select the month in the drop-down list


Specify the year as YYYY.
Specify the year as YYYY


Specify the minute of the hour every task must be run (in MM format)


With this option chosen the definite task will be run every week on Sundays


With this option chosen the definite task will be run every week on Tuesdays


With this option chosen the definite task will be run every week on Mondays


With this option chosen the definite task will be run every week on Fridays


With this option chosen the definite task will be run every week on Wednesdays


With this option chosen the definite task will be run every week on Saturdays


With this option chosen the definite task will be run every week on Thursdays


Specify the date as DD.
Specify the date as DD


The number of messages scanning of which was interrupted


The number of messages scanning of which was interrupted


Total quantity of messages


Total quantity of messages


Quantity of deleted messages


Quantity of deleted messages


Infected messages detected


Infected messages detected


Quantity of messages moved to the quarantine directory


Quantity of messages moved to the quarantine directory


Total quantity of scanned messages


Total quantity of scanned messages


Quantity of skipped messages


Quantity of skipped messages


Suspicious messages detected


Suspicious messages detected