Dr.Web Katana - non-signature antivirus Doctor WEB Katana

Dr. Web Katana (Dr. WEB Katana) is a whole range of new generation technologies from Doctor WEB designed to protect against virus threats that are not yet known to your antivirus.

Key Features of Dr.Web Katana

The Katana antivirus protection system is based on modern proactive and cloud technologies that exclude the use of virus databases, which means that the decision on the need to neutralize a particular malicious program is made only on the basis of an intelligent analysis of the behavior of applications running on the user's computer.

Antivirus neutralizes the latest, yet unknown threats, protects against the actions of the most dangerous malicious programs that are not detected by traditional signature and heuristic mechanisms, because these programs have not yet been submitted for analysis to the anti-virus laboratory, which means that they are not in the virus database at the time of penetration into the system. These threats mainly include ransomware, injectors, blocker trojans, and threats that exploit “zero-day” vulnerabilities.

The advantages of Dr Web Katana include the fact that the antivirus has a minimum of necessary settings, and also stops the actions of active malicious programs without slowing down the computer.

The Dr Web Katana product is not free, but the developers provide a free 30-day demo period during which the program is fully operational and you can appreciate its effectiveness.

To do this, in the registration wizard of the program, you must select the item "Activate a demo period for 30 days."

In conclusion, it should be noted that the technologies used in Dr.Web Katana are included in the products and starting from version 11, if they are present in the system, Dr.Web Katana will not be required.

A new protection tool that dispenses with virus signatures. Dr.Web Katana is a behavioral analyzer with support for cloud verification. It protects Windows computers from the most dangerous changes that malware can make on a computer. Katana is compatible with other antiviruses, firewalls and has minimal impact on computer performance.

Katana's system requirements are modest by modern standards: an i686-compatible processor (Pentium II and older), free RAM from 512 MB, free disk space from 150 MB and a screen with a resolution of 800 x 600. 32-bit operating systems are supported ( from Windows XP SP2 to Windows 10) and 64-bit (Windows Vista SP2 and above).

The classic bundle of anti-virus scanner + resident monitor has not been enough for effective protection for a long time. Both components use databases containing signatures of known malware. The databases are updated several times a day, but the rate of emergence of new malware is also steadily increasing. From time to time, fundamentally new threats and mechanisms for their distribution appear, for which traditional antiviruses are not ready.

The last time this happened was with ransomware Trojans that used legitimate cryptographic programs for extortion, and with the ModPOS Trojan, which hid in payment systems for three whole years.

The covert and even overt presence of malware becomes possible because before releasing a new version of malware on the network, advanced virus writers check the reaction of popular anti-virus scanners to it. If at least one works at the heuristic level, then they improve the code obfuscation technology. Therefore, at first, new Trojans, rootkits and other threats freely spread over the network. They are guaranteed not to be detected by signature-based antiviruses at first.

The fact of infection can be detected only by their suspicious activity, which is what behavioral analyzers like Dr.Web Katana do. It uses Dr.Web Process Heuristic technology, which analyzes the behavior of each running program, checking against updated activity patterns through a proprietary cloud service.

Another way to counter signature-based antiviruses is the use of common vulnerabilities. Typically, exploits target built-in system components, popular browsers, the Adobe Flash plugin, and the Java runtime environment. Using maliciously modified files, you can cause a code processing error and infect a computer, even if an antivirus with up-to-date databases is installed on it and user account control is enabled. Timely installation of updates reduces the risk of exploits, but does not completely eliminate it, since it remains possible to use an as yet unknown vulnerability and conduct a zero-day attack.

Dr.Web Katana prevents the use of exploits due to the Dr.Web ShellGuard component. It is part of the Dr.Web Process Heuristic technology that protects system components and the most vulnerable programs, such as browsers, MS Office applications, and media players. It also controls all Java applications that process Flash content and PDF files.

The default settings will suit most users, but you can always change them if you want. In addition to the preset monitoring modes, it is possible to manually set the control rules for any application.

It is argued that by analyzing the behavior of processes with minimal resource consumption, an effective counteraction to attempts by malware to infect a computer and make unwanted changes in its operation is achieved. Before buying Dr.Web Katana, you have the opportunity to try the program for free for a month, which we want to use to test “Katana” in combat in one of the following articles.

Program description
Non-signature antivirus for proactive protection against the latest active threats, targeted attacks and intrusion attempts, including through zero-day vulnerabilities that are not yet known to your antivirus.

Dr. Web KATANA is a whole complex of Dr.Web anti-virus technologies of the new generation, designed for proactive protection. It will protect against those threats that are not yet known to your antivirus.
Advantages
Dr. Web KATANA protects against the actions of the latest, most dangerous malware today, designed to be undetectable by traditional signature and heuristic mechanisms. These programs have not yet been submitted for analysis to the anti-virus laboratory, which means that they are not known to the virus database at the time of penetration into the system. These include the latest ransomware, ransomware, injectors, blocker Trojans, and threats that exploit zero-day vulnerabilities.
Dr.Web KATANA provides security almost from the moment the operating system is launched - it starts protecting even before the download of the traditional signature antivirus is completed!
All-seeing - neutralizes the latest, not yet known
threats to your antivirus. Every day, the anti-virus laboratory receives several hundred thousand program samples for analysis. Tens of thousands of entries are added to the virus database every day. These are the threats that virus analysts are already aware of and for which countermeasures have been developed. However, the greatest benefit to criminals comes from programs that have not yet been analyzed by information security specialists.
inconspicuous
The constant improvement of malicious programs and the growth of their number entail the expansion of the functionality of protection tools that work continuously in anticipation of an attack. This often slows down the computer, causing dissatisfaction with users who sometimes prefer to disable anti-virus protection for the sake of "speed". Significantly enhancing computer protection, Dr.Web KATANA practically does not consume system resources.
Dr.Web KATANA stops the actions of active malware without slowing down your computer.
Lightning fast - analyzes the behavior of threats on the fly and immediately stops malicious scripts and processes that your antivirus did not recognize.
Dr.Web KATANA protection is based on non-signature methods for detecting and neutralizing malware and cloud-based protection technologies. The product analyzes and controls all system processes, detects malicious ones by their characteristic behavior and blocks them.

For the correct installation of crack (license) in 10% of cases, suspend the antivirus (if another one is installed). When installing the key, the installation of the original Dr.web is violated and fits into the license manager