Dr.Web Security Space

Dr.Web Security Space

Dr.Web Security Space

Comprehensive protection for Windows, anti-virus for Mac OS X and Linux


One license provides protection 
for any devices


PC, Mac and mobile devices running OS supported by Dr.Web.


Dr.Web Security Space includes applications that provide comprehensive protection for Windows and Android and anti-virus security for OS X, Linux. If you want to switch from Windows to OS X while your license is valid, you won't have to replace your key file—just download the required distribution free of charge.

Compare Dr.Web products

Only proprietary anti-virus technologies

All rights to Dr.Web technologies are reserved by Doctor Web. Doctor Web is one of the few anti-virus vendors in the world to have its own technologies to detect and cure malware, an anti-virus laboratory, and a global virus monitoring service that collects malware samples all over the Internet. This allows the lab to respond rapidly to new threats, especially those of Russian origin.

Dr.Web anti-virus software allows our customers to effectively withstand any threats, even those not yet known.

Dr.Web anti-virus engine technologies

Criminal groups involved in the development and spread of viruses are thoroughly organized, so virus production has become streamlined, thus leading to explosive growth in the quantity of malicious malware. This immediately spawned a host of daily signature records being added to virus databases.


  • The Doctor Web virus monitoring service collects samples of malicious programs all over the Internet.
  • The Dr.Web anti-virus lab receives on average about 60,000 malware samples daily.
  • A record of sorts was set on November 28, 2012, when the Dr.Web anti-virus lab received over 300,000 samples. And that is not all of the malware that was created that day.

Virus analysts are not magicians and cannot instantly process the thousands and thousands of suspicious files received daily. Long gone are the times when anti-viruses could catch malware using only relevant virus signatures (i.e., records in virus databases) — i.e. detect only known viruses. If this were so till now, an anti-virus would be helpless in the face of unknown threats. However, an anti-virus remains the best and the only effective protection tool against all types of malicious threats — and, most importantly, — against viruses both known and unknown to the virus database.

Dr.Web incorporates many effective non-signature technologies for detecting and removing unknown malware. Together, they make it possible to detect the latest (unknown) threats before they are registered in the virus database. We'll describe just a few of them.

  • Fly-Code technology ensures the high-quality scanning of packed executables and virtualized file execution to unpack any (even non-standard) packers; this makes it possible to detect viruses that are even unknown to Dr.Web anti-virus software.
  • Origins Tracing treats a scanned executable as a specific sample which it then compares against the database of known malicious programs. The technology makes it highly likely that viruses not yet added to the Dr.Web virus database will be detected.
  • Structural entropy analysis detects unknown threats by arranging pieces of code in objects protected with encryption compression, interrupting the routines they use, and utilizing some additional parameters. This allows Dr.Web to detect a substantial portion of unknown threats.
  • ScriptHeuristic prevents any malicious browser scripts and PDF documents from being executed without disabling features provided by legitimate scripts. It protects against infection with unknown viruses that try to get into a system via a web browser. It works independently of the Dr.Web virus databases in any web browser.
  • Traditional heuristic analyser features routines to detect unknown malware. The heuristic analyser relies upon knowledge (heuristics) about certain properties typical to virus code and, vice versa, those that are extremely rare in viruses. Each of these attributes is characterized by its “weight”— — that is to say, by a number whose module refers to the importance and severity of the attribute; and its sign, respectively, indicates whether that attribute confirms or refutes the hypothesis on the possible existence of an unknown virus in the code being analyzed.
  • An execution emulator module is used to detect polymorphic and highly encrypted viruses when the search against checksums cannot be applied directly or is very difficult to perform (because secure signatures cannot be built). The method involves simulating the execution of an analyzed code by an emulator — a programming model of the processor (and, in part, PC and OS).

Dr.Web virus database

  • Dr.Web anti-viruses use a record low number of virus definitions in their database; one entry can identify dozens, hundreds or even thousands of similar viruses. This is a fundamental difference between the Dr.Web virus database and virus databases of other anti-virus programs. Even with a smaller number of entries, it can detect the same (or an even greater) number of malicious programs.
  • Even if no definition of a virus is present in the virus database, Dr.Web will most likely detect it by means of multiple technologies implemented in its anti-virus engine.
  • Dr.Web virus databases are devised in such a way that adding new entries doesn't lower the scanning speed.

What are the advantages of a small virus database with fewer entries?

  • Saved disk space
  • Lower memory usage
  • Lower updating traffic
  • Rapid virus analysis
  • Detection of future modifications of existing viruses


Every day millions of people around the world use the unique product Dr.Web CureIt!, created specifically to cure infected computers that run other anti-viruses.


Modern malware often operates invisibly to computer users, and, from the moment of its creation, it cannot even be detected by many anti-virus programs. Only an anti-virus can cure an infected system.

Protection components Dr.Web Security Space for Windows

Services for Windows

  • Dr.Web Cloud

    If a PC is connected to the Internet, all URLs opened by the user are first authenticated in the cloud on Doctor Web's servers. The URL is examined in real time regardless of how current the virus definitions on the user's computer are.

    Find out more

  • Data loss prevention (backup)

    By regularly creating back-up copies of your files, the Data loss prevention feature will keep them from becoming corrupted by encryption malware. Simply enable this feature so that even if a Trojan encodes your files, you will be able to restore them on your own without having to request support from Doctor Web. Unlike conventional backup programs, Dr.Web creates backups and protects them from intruders.

    Find out more | FAQ | Configuration video tutorial

  • Block access to removable devices

    Most modern threats can't replicate themselves. People spread Trojans from one PC to another with their flash drives. Dr.Web can block access to removable media — flash-drives and any other USB devices including webcams, cameras and portable media players.

    Find out more

  • No services for Windows are available under the Dr.Web Anti-virus license.

    Compare licenses

And also

  • My Dr.Web Portal

    Find out more

  • License Manager

  • Quarantine

  • Control Center

System Requirements

For Dr.Web Security Space

·         Windows 10/8/7/Vista (64-bit) and Windows 10/8/7/Vista/XP SP2 (32-bit).

·         RAM: at least 512 MB.

·         Free disk space: 1 GB. Temporary files created during installation will require additional disk space.

Anti-virus for Windows

·         Windows 10/8/7/Vista (64-bit) and Windows 10/8/7/Vista/XP SP2 (32-bit).

·         RAM: at least 512 MB.

·         Free disk space: 750 MB. Temporary files created during installation will require additional disk                   space.


·         Windows 10/8.1/8/7/Vista SP2/XP SP2+ (32-bit)

·         Windows 10/8/8.1/7/Vista SP2 (64-bit).

·         RAM: at least 100 MB.

·         Free disk space: ~150 MB. Temporary Files created during installation will require additional disk                 space.

Anti-virus for OS X

·         OS X 10.7 and later

·         RAM—as required by the OS

·         Internet connection for registration and updating.

Anti-virus for Linux

·         Operating system: GNU/Linux distributions supporting Intel x86/amd64 with kernel 2.6.37 (and later) and glibc 2.13 (and later).

·         At least 512 МB of free disk space.

·         Internet connection for registration and updating.

Dr.Web Security Space for Android

Android OS 4.0 — 7.1, Android TV 5.0+

Dr.Web Security Space for BlackBerry

BlackBerry 10.3.2+






























Contact Us

S5 Box


S5 Register