{"id":289,"date":"2011-02-03T16:39:22","date_gmt":"2011-02-03T13:39:22","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=289"},"modified":"2011-06-07T15:22:23","modified_gmt":"2011-06-07T12:22:23","slug":"dr-web-antivirus","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/antivirus\/dr-web-antivirus.htm","title":{"rendered":"Dr.Web AntiVirus"},"content":{"rendered":"<p><img class=\"aligncenter size-full wp-image-290\" title=\"dr.web antivirus\" src=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2011\/02\/dr.web-antivirus1.ico\" alt=\"\" \/><\/p>\n<h1 style=\"text-align: center;\">Dr.Web AntiVirus<\/h1>\n<h2 style=\"text-align: center;\">Version 6.0<\/h2>\n<p style=\"text-align: center;\"><a href=\"http:\/\/products.drweb.com\/win\/av\/\">http:\/\/products.drweb.com\/win\/av\/<\/a><\/p>\n<p>* Best at curing active infections<br \/>\n* Installation in an infected system without its preliminary curing<br \/>\n* Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector<br \/>\n* Unique technologies blocking even unknown threats<br \/>\n* Full scan of archives at all nesting levels<br \/>\n* Detection and neutralization of viruses found only in RAM and never existing as files<\/p>\n<p><strong>The Windows boot time has become <span class=\"dif\">slow<\/span> than usually. Difference= <span class=\"dif\">24 sec (-47%).<\/span><\/strong><\/p>\n<p><img loading=\"lazy\" class=\"aligncenter size-full wp-image-291\" title=\"Dr.Web AntiVirus Version 6.0\" src=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2011\/02\/Dr.Web-AntiVirus-Version-6.0.jpg\" alt=\"\" width=\"602\" height=\"428\" srcset=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2011\/02\/Dr.Web-AntiVirus-Version-6.0.jpg 602w, https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2011\/02\/Dr.Web-AntiVirus-Version-6.0-300x213.jpg 300w\" sizes=\"(max-width: 602px) 100vw, 602px\" \/><\/p>\n<div id=\"blist\"><strong>SPIDERAGENT.EXE<\/strong><br \/>\nDescription: <strong>SpIDer Agent for Windows Doctor Web, Ltd. Dr.Web \u00ae 6.0.3.11261<\/strong><br \/>\nMD5= <strong>0AAEF3F131DBC409A993D3FD3ACA20AA<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>1435888<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\SPIDERAGENT: &#8220;&#8221;C:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERAGENT.EXE<\/strong>&#8220;&#8221;<\/div>\n<div id=\"alist\"><strong>SPIDERML.EXE<\/strong><br \/>\nDescription: <strong>SpIDer Mail \u00ae for Windows Workstation  Doctor Web, Ltd. Dr.Web \u00ae 6.0.1.12100<\/strong><br \/>\nMD5= <strong>23EB2DA12DCE9E5A3CA58BBA22A01072<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>1572592<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\SPIDERMAIL: &#8220;&#8221;C:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERML.EXE<\/strong>&#8221; -AUTORUN&#8221;<\/div>\n<div id=\"blist\"><strong>DWPROT.SYS<\/strong><br \/>\nDescription: <strong>Dr.Web Protection for Windows Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.6<\/strong><br \/>\nMD5= <strong>D33CFEB3404D47AD146040AF6916BEB6<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>135032<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\EVENTLOG\\SYSTEM\\DWPROT\\EVENTMESSAGEFILE: &#8220;%SYSTEMROOT%\\SYSTEM32\\DRIVERS\\<strong>DWPROT.SYS<\/strong>&#8221;<br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\DWPROT\\PARAMETERS\\DRIVERPATH: &#8220;\\WINDOWS\\SYSTEM32\\DRIVERS\\<strong>DWPROT.SYS<\/strong>&#8221;<br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\DWPROT\\IMAGEPATH: &#8220;SYSTEM32\\DRIVERS\\<strong>DWPROT.SYS<\/strong>&#8220;<\/div>\n<div id=\"alist\"><strong>SPIDERG3.SYS<\/strong><br \/>\nDescription: <strong>Dr.Web File System Monitor Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.5<\/strong><br \/>\nMD5= <strong>8F683D6AAC09B0F8C15E4D2D6728758C<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>93944<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\DWPROT\\PARAMETERS\\FILES\\7\\NAME: &#8220;\\WINDOWS\\SYSTEM32\\DRIVERS\\<strong>SPIDERG3.SYS<\/strong>&#8221;<br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\SPIDERG3\\IMAGEPATH: &#8220;SYSTEM32\\DRIVERS\\<strong>SPIDERG3.SYS<\/strong>&#8220;<\/div>\n<div id=\"blist\"><strong>DWENGINE.EXE<\/strong><br \/>\nDescription: <strong>Service Dr.Web Scanning Engine (DrWebEngine) Dr.Web (R) Scanning Engine checks your files against viruses. It is essential part of the Dr.Web (R) Anti-Virus! Please do not stop and do not disable it. Start Type: loaded automatically by Server Manager Dr.Web (R) Scanning Engine Doctor Web, Ltd. Dr.Web (R) Anti-Virus 6.0.3.12080<\/strong><br \/>\nMD5= <strong>E8B2CCA7AB58BED5A8EBAE93CF5773CD<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>1660248<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\EVENTLOG\\APPLICATION\\DR.WEB ENGINE\\EVENTMESSAGEFILE: &#8220;C:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DWENGINE.EXE<\/strong>&#8221;<br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\DRWEBENGINE\\IMAGEPATH: &#8220;&#8221;C:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DWENGINE.EXE<\/strong>&#8220;&#8221;<\/div>\n<div id=\"alist\"><strong>DRWEBSP.DLL<\/strong><br \/>\nDescription: <strong>Dr.Web Winsock Provider Hook Doctor Web, Ltd. Dr.Web Anti-Virus 6.0.0.10290<\/strong><br \/>\nMD5= <strong>4066BBD1A1551ECBF1CC7A99057E8D31<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>137456<\/strong><\/div>\n<div id=\"blist\"><strong>DRWEB32W.EXE<\/strong><br \/>\nDescription: <strong>DrWeb32W.Exe Dr.Web\u00a9 Scanner for Windows Doctor Web, Ltd. Dr.Web R for Windows 6.00.5.08312<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\<strong>DRWEB32W.EXE<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\<strong>DRWEB32W.EXE<\/strong>\\FOLDER: &#8220;C:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\DR.WEB&#8221;<br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\<strong>DRWEB32W.EXE<\/strong>\\: &#8220;C:\\PROGRAM FILES\\DRWEB\\DRWEB32W.EXE&#8221;<br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\<strong>DRWEB32W.EXE<\/strong>\\PATH: &#8220;C:\\PROGRAM FILES\\DRWEB&#8221;<\/div>\n<div id=\"alist\"><strong>DRWSXTN.DLL<\/strong><br \/>\nDescription: <strong>Dr.Web \u00ae Shell Extension Doctor Web, Ltd. Dr.Web \u00ae for Windows 6.00.0.02270<\/strong><br \/>\nMD5= <strong>6D0278599D1344A1ECB19BE5BCA4AF3E<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>87592<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{E7593602-124B-47C9-9F73-A69308EDC973}\\INPROCSERVER32\\: &#8220;C:\\PROGRAM FILES\\DRWEB\\<strong>DRWSXTN.DLL<\/strong>&#8220;<\/div>\n<p><!--more--><\/p>\n<p><strong>FILES ADDED:178<\/strong><\/p>\n<div id=\"clist\">C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\DOWNLOADED INSTALLATIONS\\DOCTOR WEB\\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}\\1033.MST<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\DOWNLOADED INSTALLATIONS\\DOCTOR WEB\\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}\\DRWEB-600-WIN-X86.MSI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\DRWEB-SETUP.LOG<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0402.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0404.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0407.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0408.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0409.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X040A.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X040C.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X040E.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0410.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0415.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0419.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X041B.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X041F.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0422.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0425.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0426.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0427.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0804.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\0X0816.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\1033.MST<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\DRWEB-600-WIN-X86.MSI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\SETUP.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}\\_ISMSIDEL.INI<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\DOCTORWEB\\DRWEB32W.LOG<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\DOCTORWEB\\SPIDERML.LOG<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50000.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50001.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50002.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50003.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50004.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50005.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50006.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50007.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50008.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50009.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50010.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50011.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50012.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50013.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50014.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50015.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50016.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50017.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50018.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50019.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50020.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50021.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50022.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50023.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50024.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50025.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50026.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50027.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50028.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50029.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50030.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50031.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50032.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50033.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50034.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50035.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50036.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50037.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50038.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50039.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50040.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50041.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50042.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50043.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50044.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50045.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50046.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50047.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50048.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50049.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50050.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50051.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50052.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50053.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50054.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50055.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50056.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50057.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50058.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50059.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50060.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50061.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRW50062.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRWDAILY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRWEBASE.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRWNASTY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRWRISKY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DRWTODAY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50000.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50001.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50002.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50003.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50004.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50005.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50006.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50007.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50008.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50009.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50010.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50011.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50012.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50013.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50014.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50015.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50016.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50017.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50018.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50019.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50020.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWN50021.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWNTODAY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50001.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50002.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50003.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50004.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50005.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50006.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50007.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50008.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWR50009.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES\\DWRTODAY.VDB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\DESKTOP\\DR.WEB SCANNER.LNK<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\DR.WEB\\DR.WEB HELP (ENGLISH).LNK<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\DR.WEB\\SCANNER.LNK<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\DR.WEB\\SPIDERAGENT.LNK<br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DRWEB32.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DWENGINE.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DWINCTL.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE\\<strong>DWSEWSC.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\ALERT.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\CURED.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\DELETED.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWADINS.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\DRWEB32.INI<br \/>\nC:\\PROGRAM FILES\\DRWEB\\DRWEB32.KEY<br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEB32W.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEBFOROUTLOOK.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEBSETTINGPROCESS.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEBSP.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEBUPW.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWEBWCL.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWMSG.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWREG.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DRWSXTN.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DWEBLLIO.DLL<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DWQRUI.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DWSCANCL.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>DWSYSINFO.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\EN-DRWEB.CHM<br \/>\nC:\\PROGRAM FILES\\DRWEB\\ERROR.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\FINISH.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\LANG.LST<br \/>\nC:\\PROGRAM FILES\\DRWEB\\LICENSE.TXT<br \/>\nC:\\PROGRAM FILES\\DRWEB\\MOVED.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\RENAMED.WAV<br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERAGENT.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERAGENT_ADM.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERAGENT_SET.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\SPIDERG3.LOG<br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>SPIDERML.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\<strong>SPML_SET.EXE<\/strong><br \/>\nC:\\PROGRAM FILES\\DRWEB\\TEST.TXT<br \/>\nC:\\PROGRAM FILES\\DRWEB\\UPDATE.DRL<br \/>\nC:\\WINDOWS\\INSTALLER\\26720.MSI<br \/>\nC:\\WINDOWS\\INSTALLER\\{D68B6F53-200B-4899-B005-D264F0083AA6}\\1033.MST<br \/>\nC:\\WINDOWS\\INSTALLER\\{D68B6F53-200B-4899-B005-D264F0083AA6}\\<strong>ARPPRODUCTICON.EXE<\/strong><br \/>\nC:\\WINDOWS\\SYSTEM32\\DRIVERS\\<strong>DWPROT.SYS<\/strong><br \/>\nC:\\WINDOWS\\SYSTEM32\\DRIVERS\\<strong>SPIDERG3.SYS<\/strong><br \/>\nC:\\WINDOWS\\TASKS\\DR.WEB DAILY SCAN.JOB<br \/>\nC:\\WINDOWS\\TASKS\\DR.WEB UPDATE.JOB<\/div>\n<p><strong>FILES[ATTR]MODIFIED:2<\/strong><\/p>\n<div id=\"dlist\">C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\CE4CF87733651BF1F44DD1E02FC1A8E8<br \/>\nC:\\PROGRAM FILES\\VMWARE\\VMWARE TOOLS\\<strong>VMWAREUSER.EXE<\/strong><\/div>\n<p><strong>FOLDERS ADDED:12<\/strong><\/p>\n<div id=\"clist\">C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\DOWNLOADED INSTALLATIONS<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\DOWNLOADED INSTALLATIONS\\DOCTOR WEB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\DOWNLOADED INSTALLATIONS\\DOCTOR WEB\\{9B68B1FE-85E3-41FE-8B0F-C281D0938781}<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\{F34C0C50-9F20-410A-9153-E2B86E6F8F3E}<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\DOCTORWEB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\APPLICATION DATA\\DOCTOR WEB\\BASES<br \/>\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\DR.WEB<br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB<br \/>\nC:\\PROGRAM FILES\\COMMON FILES\\DOCTOR WEB\\SCANNING ENGINE<br \/>\nC:\\PROGRAM FILES\\DRWEB<br \/>\nC:\\WINDOWS\\INSTALLER\\{D68B6F53-200B-4899-B005-D264F0083AA6}<\/div>\n<div class=\"wpInsert wpInsertInPostAd wpInsertBelow\" style=\"padding: 0px;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Dr.Web AntiVirus Version 6.0 http:\/\/products.drweb.com\/win\/av\/ * Best at curing active infections * Installation in an infected system without its preliminary curing * Absolute leader in detection and neutralization of complex viruses such as MaosBoot, Rustock.C, and Sector * Unique technologies blocking even unknown threats * Full scan of archives at all nesting levels * Detection [&hellip;]<br \/><a style=\"color: #42A2CE\" href=\"https:\/\/regrunreanimator.com\/research\/antivirus\/dr-web-antivirus.htm\"><u>More&#8230;<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[8],"tags":[250,251,252,253,254,255,256,257,258],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/289"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=289"}],"version-history":[{"count":0,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/289\/revisions"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}