Перейти к содержимому


Фото
- - - - -

Dr. Web - Net filtering service


  • Please log in to reply
11 ответов в этой теме

#1 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 28 Май 2020 - 18:30

Hi!

 

Why this process has such a high data usage now it's about 200 MB sometimes I had 2,5 GB.

 

 

dwnetfilter.exe - It's related to spam filter or e-mail or traffic monitor?

 

 

Thanks!

 

Have a nice day!



#2 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 621 Сообщений:

Отправлено 28 Май 2020 - 22:12

Netfilter is needed (and it installs automatically) if SpiderMail/SpiderGate/AntiSpam was installed.

Memory consumption is very dependent on the specific characteristics of the PC and the specific point in time.

1-st of all, try to reboot your PC.



#3 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 29 Май 2020 - 02:34

I think this component scans all my traffic, include: hosts,etc. After reboot from ~1GB to 500 MB, didn't had so much traffic on Firefox and other apps.



#4 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 621 Сообщений:

Отправлено 29 Май 2020 - 09:13

That's right, netfilter acts as a "global proxy" which wraps all your traffic and analyzes it.

But 1 GB - too much, I think... Can you take a screenshot of your TaskManager (or any other tools you're using to analyze memory consumption)?



#5 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 29 Май 2020 - 20:33

In the picture is showed data usage for about 1 week.

 

Program used to measure is called Glasswire Network Security - latest version with license(basic) -  (firewall is off, I use Windows Firewall).

 

Прикрепленные файлы:


Сообщение было изменено Paul.R: 29 Май 2020 - 20:33


#6 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 621 Сообщений:

Отправлено 29 Май 2020 - 21:43

Oh, sorry... I meant high memory (RAM) usage, not traffic. As mentioned above, netfilter intercepts your traffic, so any tool (like Glasswire or any similar) will show that all (or most) traffic is used by filtering service. Howewer this service doesn't use your Internet. :) 10.4 GB = your browser + mail app + any networking related apps traffic.


Сообщение было изменено Dmitry_rus: 29 Май 2020 - 21:44


#7 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 30 Май 2020 - 00:24

Oh, sorry... I meant high memory (RAM) usage, not traffic. As mentioned above, netfilter intercepts your traffic, so any tool (like Glasswire or any similar) will show that all (or most) traffic is used by filtering service. Howewer this service doesn't use your Internet. :) 10.4 GB = your browser + mail app + any networking related apps traffic.

Thanks for advice!

 

All the host from that exe are related to sites,etc. - not a single one related to Dr. Web - I check them right now.

 

Dr. Web anti-rootkit Server -

                                                  - both have same IP and are located to Moscow, Russian Federation - Vysokie          

Dr. Web Control Service     -                               



#8 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 621 Сообщений:

Отправлено 30 Май 2020 - 01:03

Dr.Web has their own Cloud system and also checks executable files and libraries for certificates. That's why you may see active connections to Dr.Web's servers. But it doesn't take a lot of traffic.



#9 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 30 Май 2020 - 02:09

Good, case close!

Thanks for response.



#10 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 31 Май 2020 - 22:35

2 more paranoid questions before close it:

 

Dr. Web will send all my system files to cloud like Kaspersky (KSN) it's doing?

 

That IP(Moscov) address it's not related to any government structure?



#11 Dmitry_rus

Dmitry_rus

    Guru

  • Helpers
  • 3 621 Сообщений:

Отправлено 31 Май 2020 - 22:52

1. Neither Kaspersky nor Dr.Web send any files. Files can be very large, so sending files is a bad idea. Just a hash of (some) files.

2. That address is related to Dr.Web company. It's private company.



#12 Paul.R

Paul.R

    Newbie

  • Posters
  • 43 Сообщений:

Отправлено 31 Май 2020 - 23:52

Thanks! Have a great day!




Читают тему: 1

0 пользователей, 1 гостей, 0 скрытых