Dr.Web Mobile Security is an Android security application for checking apps and files, controlling network activity and restricting access to device functions. The current product is called Dr.Web Security Space for mobile devices. Its phone and tablet tools cover malware scanning, website filtering, app locks, unwanted communications and remote actions for a missing device. It also supports Android TV with a smaller set of components.
In the consumer Android editions, SpIDer Guard, Scanner and Security Auditor can operate without a license. The remaining protection components require a license, with a trial available to try the complete suite. A qualifying Dr.Web computer license can also include mobile protection.
How Dr.Web Mobile Security scans a device
SpIDer Guard checks the file system as apps are installed and files arrive on the device. It continues running when the Dr.Web interface is closed, and reports detected threats through notifications and the protection status display. Its settings can also enable checks when removable storage is mounted and monitor additions, deletions or changes to executable files in the system area.
The separate Scanner gives users a choice of scope. Express scanning checks installed applications, a full scan examines system files, and a custom scan targets selected files or folders. General archive inspection is optional; Android APK installation packages are checked even when archive scanning is disabled. Android’s own access restrictions still apply: protected folders such as Android/data and Android/obb cannot be scanned on newer Android releases.
Dr.Web Mobile Security presents detections in its results screen, where threats can be removed or moved to quarantine. The event history records scans, detections and actions so that users can see what the protection components have done. Virus databases receive updates over the internet.
For screen-locking ransomware, Dr.Web includes a recovery action that can terminate the locker’s running process and return access to the security application when SpIDer Guard is active. This action closes other active processes as well, so their unsaved work can be lost. Removing a screen lock does not itself restore files that malware has encrypted.
Blocking websites by category or list
The URL filter controls websites opened in supported browsers, including Chrome, Edge and Firefox. It checks through Dr.Web Cloud and blocks known infection sources by default. Additional categories let users restrict subjects such as gambling, adult content, games or social networks. A blocked page produces a notification rather than displaying its contents.
Individual website lists provide more precise control. An allowed or blocked address takes precedence over the category settings, and an allow-list-only mode restricts browsing to the sites entered on that list. These entries are specific website addresses; they do not support keyword rules or address masks. Selecting the adult-content category also enables safe search in supported search engines.
Parental Control locks
Parental Control applies restrictions to installed applications and Dr.Web’s component settings. The account owner can select a single app, assemble a custom group, or restrict access during a specified time interval. Opening a blocked item brings up a lock or login screen, with access available through the Dr.Web account password or a fingerprint.
Protecting the component settings prevents someone using the device from changing the restrictions themselves. The component also records events involving blocked apps and settings. These controls operate on the device where Dr.Web is installed and configured.
Firewall and mobile data limits
The Dr.Web Mobile Security firewall shows which applications are transferring data and how much incoming and outgoing traffic they use. Users can control app access over Wi-Fi, mobile networks and roaming, or set a mobile data allowance for a chosen period.
The firewall uses Android’s VPN interface to filter traffic without requiring root access. It does not establish an encrypted VPN tunnel. Android allows only one application to use that interface at a time, so starting another VPN application disables the Dr.Web firewall. Firewall operation also prevents the device from acting as a Wi-Fi hotspot and can affect direct connections to other devices on a local network.
Call and SMS filtering
Call and SMS filtering can work in either a blocking or an allowing mode. The blocking mode rejects entries on selected lists, while the allowing mode accepts communications only from the contacts or number patterns entered there. Users can choose standard lists or create their own; the two modes are mutually exclusive.
The Google Play edition does not include SMS filtering. Android restrictions and dual-SIM behavior can also affect filtering, and the component requires the corresponding communication permissions. Devices without SIM support do not provide this component or Anti-Theft.
Anti-Theft for a missing device
After advance configuration, Anti-Theft can locate a missing device, lock it or remotely remove personal data. A SIM change can also trigger locking. Remote push commands use a confirmed buddy relationship between devices with Anti-Theft enabled. SMS commands provide another route for supported editions, but the receiving device must use the website or Huawei AppGallery build.
The Dr.Web account password controls access to a locked device.
Security Auditor
Security Auditor examines conditions that a malware scan alone does not address. Its findings include vulnerabilities, conflicting software, installed user certificates and settings such as USB debugging or blocked Dr.Web notifications. Users can open a finding to read its details and reach the relevant device settings when a change is needed.
The auditor also checks optimization settings that can interfere with protection.
Android TV
On Android TV, Dr.Web Mobile Security provides scanning, a firewall, Security Auditor and an events view for TVs, media players and game consoles using that platform. The phone’s complete collection of communication and access controls does not carry over to the TV interface. A license is required for all components in the Android TV edition.
