High scan speed
Organisation of Dr.Web for IBM Lotus Domino and flexible administration system of the scanning process provide high-speed and resource-efficient scanning. Multi-thread scan feature of the solution enables it managing simultaneously large amounts of data. Low system requirements of Dr.Web for IBM Lotus Domino allow running it on any mail server hardware.

The unique technologies!
Dr.Web for IBM Lotus Domino features unique filtering technology that doesn’t require a block list so a company can’t be discredited by deliberate adding it to the list. Dr.Web for IBM Lotus Domino can change its behaviour depending on an envelope of a processed message or upon detection of blocking objects.

Flexible configuration and administration
Dr.Web for IBM Lotus Domino provides a system administrator with abundant tools for flexible configuration of actions performed upon results of a message scan: send notifications to a sender, recipient and system administrator on detection of viruses, store headers of received messages and attachments.

Efficient scan
E-mail messages can be scanned on-the-fly (real-time) or performed as a task scheduled by an administrator who can choose to do it when a server load is minimal.

Operational on partitioned servers
If install on a partitioned server, the installer will allow you to choose partitions to install Dr.Web for IBM Lotus Domino to. So copies of the anti-virus on various partitions will be run as separate processes in RAM, however, they will have a common database and executable files.

Grouping and group management
Grouping makes administration much easier. Every group may have its own settings. You can edit group profile to apply the same settings to several groups. A profile is used to specify actions upon detection of a suspicious or incurable message:move to the Quarantine or delete. Curable objects are cured automatically by default. If curing is not possible, an object is considered incurable and one of specified actions is applied to such object.

Blocking of infected objects
Infected and suspicious objects are moved to the Quarantine. Lotus Notes client is used to access quarantined objects.

Dr.Web for IBM Lotus Domino is an information security complex protecting Lotus Domino! Depending on your licencing scheme Dr.Web for IBM Lotus Domino allows to do the following:

• Detect and remove any piece of malicious code including mail and network worms, rootkits, file viruses, Trojans, bodiless and stealth viruses, polymorph viruses, macro-viruses and MS Office worms, script viruses, Spyware, password stealers, key loggers, paid dialers, adware, suspicious applications, hack tools, backdoors, jokers, spam, phishing, pharming, scamming and bounce messages;
• Process your incoming and outdoing mail and filter out viruses, spam and other unsolicited mai. A message body is scanned as well as all its components regardless of the nesting level..According to the scanning results the filter may allow a message, block it or modify it. Dr.Web for IBM Lotus Domino has a unique built-in anti-spam system that doesn’t require tuning. The anti-spam starts working as soon as the first message is received! The anti-spam doesn’t require connection to an external server or access to a database which also saves traffic.
• Check documents in specified nsf-bases for viruses;
• Examine mail messages picking out all its components for further analysis;
• Cure infected messages and their attached files;
• Move Infected and suspicious objects to the Quarantine;
• Process correctly archived files of most known formats including multi-volume and self-extracting (SFX) archives;
• send scan reports to recipients or other specified addressees using the templates;
• Collect statistics regarding all activities of the system;
• Protect its own plugins against failures;

Rapid response
The multi-thread scan technology allows scanning files on-the-fly before received files are processed, so the scan doesn’t delay messages received by user!

High level of protection
A virus database containing thousands of entries with constantly improved heuristic analyzer ensure that no viruses (including macro-viruses, Trojans and other types of malware) get to user workstations through mail messages. Dr.Web for IBM Lotus Domino detects malicious programs written for any platform - Windows, Unix, DOS including Microsoft Office worms. A user may select types of files to be scanned and set an action upon detection of a threat – report, cure, delete, move to the Quarantine, rename.

Correct scan of archived and packed files
Dr.Web for IBM Lotus Domino allows scanning archives and packers of most known formats and any nesting level including multi-volume and self-extracting archives which is especially relevant for a mail system. If scan archives the administrator can set maximum compression rate and nesting level, limit compression threshold and max size of a file to be extracted.

Quarantine
Infected and suspicious objects detected by Dr.Web for IBM Lotus Domino can be placed to the Quarantine. So later you can perform necessary actions to the files: extract important information, cure or deleteе.

Easy administration
Flexible configuration system allows configuring Dr.Web for IBM Lotus Domino as you see fit. All actions of the program are logged so you can analyze system behaviour and bottlenecks. The system promptly notifies an administrator so he can perform required tasks in a timely manner.

Efficient protection against unwanted mail

• Benefits

  Vaderetro plugin filters out spam messages from user mail using its own library (Vade Retro). The library is updated regularly, so the quality of filtering is constantly improved as well.

  High performance filtering
  Dr.Web Anti-spam scans over 100 messages on-the-fly in one second (1.9GHz Pentium 4 CPU)), which means it will scan 8.64 million messages in 24 hours!

  The anti-spam doesn’t require tuning!
  Unlike anti-spam solutions based on Bayesian filter Dr.Web Anti-spam for Unix mail servers doesn’t require any initial tuning before one is able to use it. The anti-spam starts working as soon as the first message is received!

  Intelligent spam detection system
  Different technologies are used for different types of undesired mail – spam, phishing-, pharming-, scamming-, bounce-messages - to ensure yet higher detection probability.

  Stand-alone anti-spam saves traffic
  The stand-alone anti-spam analyzer module doesn’t require connection to an external server or access to a database which also saves traffic.

  The unique technologies!
  The unique filtering technology doesn’t require a block list which means that a company can’t be discredited by deliberate adding it to the list.

  Regular updates
  Anti-spam updates are released on daily basis and are downloaded by Dr.Web automatic update utility. The unique technologies allow staying up-to-date with latest filtering evasion techniques applied by spammers with only one update in 24 hours and, therefore, save your traffic.

• Filtering technologies

  Spam-filter technology has several thousands rules that can be divided into several groups.

  Heuristic analysis
  An extremely complex and highly intelligent technology of empiric analysis of all components of a message: header field, message body, etc. If available, an attachment is analyzed as well. The heuristic analyzer is a subject of constant improvements, new rules are added regularly.

  Counteraction filtering
  Counteraction filtering is one of the advanced and most efficient features of Dr.Web anti-spam. It is capable of recognizing tricks of spammers used to evade anti-spam filters.

  HTML-signature analysis
  Messages containing HTML-tags are compared with samples from the HTML signature library of the anti-spam. The comparision combined with data on size of images typically used by spammers protects users against HTML messages containing online images.

  Semantic analysis
  Words and expressions used in the message are compared to words and expressions typical of spamm. A special dictionary is used for the purpose and hidden words, expressions and symbols are analyzed as well.

  Anti-scamming technology
  Scamming messages (as well as pharming messages –a subtype of scamming) are likely to be the most dangerous group of unsolicited mail including "messages from Nigeria", lottery or casino prize notification, forged bank and loan office messages. A special module is used to filter out such messages.

  Filtering technical spam
  So called bounces are delivery-failure messages sent by a mail server. Actual recipient of a bounce is not necessarily a sender of an undelivered message; such a message could be sent by a mail worm. Therefore bounces are as unwanted as spam. A special anti-spam module marks such messages as undesired.

• vaderetro - is a plugin that filters out spam using its own library (Vade Retro). The library is updated regularly, so the quality of filtering is constantly improved as well. High-performance filtering is combined with low system requirements so if you want to add Dr.Web anti-spam for better security it won’t require upgrading your hardware.

  Depending on the results of the analysis each message processed by the vaderetro plugin gets a certain number of points within -10000 +10000 range. The higher the score of a message the higher the probability for the message to be spam. The threshold value is set by SpamThreshold parameter in the plugin configuration file (if a message gains a number of points equal to the threshold value or over it, the message will be considered spam.

  Depending on its configuration the plugin may add one of the following headers to a message after analysis:

  • X-Drweb-SpamScore: n. n – the number of points assigned to the message by VadeRetro.
  • X-Drweb-SpamState: b. b - yes for spam and messages containing malicious code and no for normal messages and bounces.
  • -Drweb-SpamState-Num: s. s – defines to which class VadeRetro has put the message to . s may take one of four values: 0, 1, 2 and 3. 0 – a message is OK, 1 - spam, 2 - a message is infected, 3 – a message is a bounce. The header is added only if “yes" is set for ddXDrwebSpamStateNumHeader in the vaderetro plugin configuration file. .
  • -Drweb-SpamVersion: version. version - the version of VadeRetro library. The header added only if “yes" is set for AddVersionHeader in the vaderetro plugin configuration file. Besides, the plugin may add the following headers in the subject filed of a message considered spam or infected:
    • X-IS-SPAM, value YES/NO
    • X-SPAM-SCORE, a number of points given to the message by VadeRetro
    • X-SPAM-AGENT, the version of the VadeRetro library
    • X-SPAM-DETAILS, a detailed description of spam returned by the VadeRetro library
    • X-SPAM-STATE, curent status of a message.

Dr.Web Global Updating System

• Dr.Web virus monitoring service collects samples of viruses from all over the world.
• Updates can be obtained from several servers located in different parts of the globe.
• A hot update is released as soon as a new viral threat has been analyzed.
• An update is tested over a huge number of clean files before it is released.
• Dr.Web virus database is the most compact one. It makes scanning faster, saves time and system resources and allows instant updating. One entry added to the Dr.Wb virus database provides detection of hundreds or even thousands of viruses that are similar to the one detection of which is provided by the entry.
• Virus databases and program modules are updated automatically.
• You can download archived update files.
• The software features the concept of patches that is if a component must be updated, there is no need to download the whole component..

OS: Windows XP, Windows Server 2000, 2003;

Lotus Domino R 6.0 for Windows or later;

CPU Pentium 133 and higher;

RAM 64 MB (128 MB recommended);

Free disk space: 20 MB.

There are 2 types of licences for Dr.Web for IBM Lotus Domino:

• Anti-virus
• Anti-virus&Anti-spam

The product is licenced per a number of users.

Licenced components

• Mail monitor — scans incoming and outgoing messages.
• Anti-spam — filters out spam from incoming mail.
• Automatic update utility — updates virus database and program modules.

ACTION

Ask for a demo key for Dr.Web for IBM Lotus Domino and register it before May 1, 2008 — exchange it for a commercial license with 20% discount, if purchase before June 1, 2008.

Demo key request page
Download Dr.Web for IBM Lotus Domino here