Webroot scan
Author: m | 2025-04-24
Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If Webroot Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If Webroot
To change the scan settings: - Webroot
Was called Webroot Antivirus. Before that, the full name was Webroot SecureAnywhere Antivirus. The app’s appearance has remained the same through these changes for quite a while. It even says Webroot SecureAnywhere across the top still.This app’s green-toned main window features a lighter panel that reports statistics about recent scans and a button to launch an on-demand scan. Even if you never click that button, Webroot makes a full scan during installation and runs a scheduled scan every day. A panel at the right manages access to the rest of this app’s collection of security features.Webroot strongly de-emphasizes running a full scan of your entire computer, on the basis that any malicious apps will be caught before they can do any harm. If you select a full scan, it requires confirmation that you understand it's not necessary. On my standard test system, Webroot’s full scan time took just under two hours, while a subsequent scan finished in an hour and a half. The current average is over an hour and a half, so Webroot is in line with the competition. (Credit: Webroot/PCMag)Online ConsoleAs part of getting started with Webroot, you’ll set up an online profile. The process has a strong emphasis on security. I don’t always use the strongest passwords for profiles used in testing since they’re only needed for the test duration. But Webroot requires a truly strong password, and logging in requires that you pass a standard CAPTCHA.You can further enhance your security by protecting your account with multi-factor authentication. You’d previously set up MFA by scanning a QR code with Google Authenticator or a workalike. Alas, Webroot has switched to using less secure SMS-based authentication.(Credit: WebRoot/PCMag)If you’re installing Webroot on a new device, click the Downloads and Features item from the console’s left-rail menu. Now, you can download the installer appropriate to your operating system or install the included LastPass app, which I’ll discuss below.You can view your protected devices from the console and confirm that their protective shields are active. You can also check your subscriptions and, if necessary, renew them here.(Credit: WebRoot/PCMag)Sharp-eyed users will note
Saving a scan log - Webroot
Webroot secureanywhere internet security 2017 full# Webroot secureanywhere internet security 2017 software# Any drawbacks? Webroot for Windows was fantastically easy to download, the whole process and full system scan took less than five minutes. For home or business, it guarantees speed and affordable protection with minimal space requirements. Webroot tests as a thoroughly secure, reliable and efficient malware protection. This protects your personal information, credit card and banking details when you are making purchases online. The top tier package has the attractive extra 'Identity Shield' which provides anonymous internet browsing. Webroot will also identify potentially unwanted applications and remove programs with adware or unnecessary software. You can choose between the full system scan or specifically for rootkits, trojans or a custom scan. It took 2.26 minutes to scan 7,481 files. After installing Webroot, I followed the simple steps and did a full system scan. Full system scans will take minutes instead of hours. This allows it to perform lightning fast scans. How is it so small? Unlike most malware protection, Webroot operates from the Cloud. At a mere 15 MB, it takes up a fraction of the 500 MB of space most of the alternatives would require. Webroot secureanywhere internet security 2017 software# What sets Webroot apart from all other antivirus software is the size. Is Webroot a worthy competitor to the big players in the online security industry like Norton and McAfee? The most expensive package will eliminate traces of online activity and give you 25GB of secure cloud storage. The second and third tier also protect your smartphone and tablets and protect your logins. Which product is best for you? All three provide anti-ransomware protection, data and identiy security, real-time anti-phishing blocks and a firewall. The next tier is the Internet Security Plus followed by the Internet Security Complete. The cheapest option is the SecureAnywhere Antivirus package. An ultralightweight product that leaves a minimal footprint on your computer without sacrificing efficacy or speed. If you are looking for a light and fast antivirus software, then you should definitely check out Webroot. Webroot: big protection with a small footprint.Change the scan schedule - Webroot
As I launch any samples not eliminated on sight. In this case, that was just one sample, and Webroot caught it. It ran a scan to detect all the malware bits, removed them, and ran a second scan just to be sure. My post-game analysis revealed that the malware managed to plant a few executable files despite Webroot’s efforts, so it didn’t get full credit.(Credit: Webroot/PCMag)One way or another, Webroot detected 100% of the samples and scored 9.9 of 10 possible points. Avast, AVG, Norton, and UltraAV came close to this feat, also scoring 9.9 points but with 99% detection. For now, Webroot is at the top.Webroot’s scan also quarantined some of my hand-coded testing tools, but I can't really blame it. Consider a program that the cloud analysis system has never seen before, whose purpose is to launch fraudulent URLs. Suspicious, much? I restored my tools from quarantine and proceeded with testing.I use the same set of curated samples for months because the collection process itself takes weeks. To examine protection against the most current threats, I start with a feed of URLs that researchers at MRG-Effitas recently found to be hosting malware. Typically, these are no more than a couple of days old. I launch each and note whether the antivirus prevents browser access to the dangerous URL, eliminates the file upon download, or completely fails to notice the malware download.(Credit: WebRoot/PCMag)Of 100 validated dangerous URLs, Webroot blocked 76% in the browser and wiped out the malware payload of another 21%, for a total of 97% protection. Interestingly, when I tried to launch the few verified malware samples, Webroot caught all but one. Note, though, that launching the samples is not actually part of this test.(Credit: WebRoot/PCMag)Webroot’s 97% is a decent score—only a few competitors have done better. Aura, NordVPN Plus, and Norton reached 99% in their latest tests, while Avira, Guardio, and Sophos Home Premium scored 100%. Yes, each antivirus gets hit with a different selection of malware-hosting URLs, but they’re always the most recent ones.Phishing DetectionThere's nothing innately dangerous about a phishing website. You won’t find. Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If WebrootInventory Scan Settings - webroot scan? - Spiceworks Support
Pack all its discoveries into one notification. When I clicked away its simple notification before it finished, another notification popped up. Copying the files back to their original location seemed to set off another round of detection, so I copied them back and forth a few times. Webroot caught about 80% of the samples at this point.I noticed that somewhere during that process the main window changed to a red-orange warning and requested a full scan. I allowed the scan, which took a few minutes, and found more malware. Upon removing what it found, Webroot asked for a final scan to ensure a totally clean machine. After that last scan, all but one of the malware samples was gone and sent to quarantine.(Credit: WebRoot/PCMag)I maintain a second set of samples that I’ve tweaked by hand, changing the filename, file size, and some non-executable bytes. The initial round of real-time detection missed quite a few of these. That’s not terribly surprising, given that the hand-tweaked files have never been seen before. Even after the full scan, about a third of these remained. That’s actually pretty good for an app that focuses on malware behavior.As always, this test continues as I launch any samples not eliminated on sight. In this case, that was just one sample, and Webroot caught it. It ran a scan to detect all the malware bits, removed them, and ran a second scan just to be sure. My post-game analysis revealed that the malware managed to plant a few executable files despite Webroot’s efforts, so it didn’t get full credit.(Credit: WebRoot/PCMag)One way or another, Webroot detected 100% of the samples and scored 9.9 of 10 possible points. Avast, AVG, Norton, and UltraAV came close to this feat, also scoring 9.9 points but with 99% detection. For now, WebrootInventory Scan Settings - webroot scan? - 9 by thatsperfect0865
Features quite as much.Getting Started With Webroot EssentialsThe Webroot download is tiny, less than 12MB, and installs in a flash. Immediately after installation, it busies itself with a collection of startup tasks, checking off each one as it finishes. Among the listed tasks are scanning for active malware, analyzing installed applications to reduce warnings and prompts, establishing a system baseline, and optimizing performance for your unique system configuration. Even with these added tasks, the process goes quickly. Similar Products (Credit: WebRoot/PCMag)Until recently, Webroot Essentials was called Webroot Antivirus. Before that, the full name was Webroot SecureAnywhere Antivirus. The app’s appearance has remained the same through these changes for quite a while. It even says Webroot SecureAnywhere across the top still.This app’s green-toned main window features a lighter panel that reports statistics about recent scans and a button to launch an on-demand scan. Even if you never click that button, Webroot makes a full scan during installation and runs a scheduled scan every day. A panel at the right manages access to the rest of this app’s collection of security features.On my standard test system, Webroot’s full scan time ran about four minutes at first, but subsequent scans ran steadily faster, down to about a minute and a half. The current average is well over an hour and a half, so that’s a huge difference.Online ConsoleAs part of getting started with Webroot, you’ll set up an online profile. The process has a strong emphasis on security. I don’t always use the strongest passwords for profiles used in testing since they’re only needed for the test duration. But Webroot requires a truly strong password, and logging in requires that you pass a standard CAPTCHA. What Is Two-Factor Authentication? You can further enhance your security by protecting your account with multi-factor authentication. You’dSecureAnywhere run immediate scan - Webroot
You may see a "Virus Scan Failed" message if you try to download a file using Chrome on a device with the Webroot Business agent installed. This can be caused by the Webroot Identity shield blocking the Windows Defender file MpoAv.dll.WorkaroundCreating an ID Shield override for the file MpoAv.dll has been shown to resolve the issue. This workaround is effective until this file is updated. When that happens, a new override needs to be created to cover the new version.+Using the Webroot agent to create the ID Shield overrideNote: In order for the agent to allow these actions, the Unmanaged endpoint policy needs to be applied. For help with endpoint policies, see: Modifying policies Applying policies Open the Webroot agent. Click the gear icon next to Identity Protection. Select the Application Protection tab. Find MpoAv.dll in the Application list and change the setting to Allow. You may be prompted with a CAPTCHA window. Provide the required input and click Continue. The override becomes active immediately, no reboot is needed.+Adding the ID Shield override using the Webroot Management console Log in to the Webroot Management console. Find the site that you want to modify. On the right side of the screen under Subscriptions, hover your mouse over the E to open the Endpoint Protection call-out, then click the box and arrow icon to open the Endpoint Protection console. In the Endpoint Protection console, select the Group Management sub-tab, then click the Group that contains the devices that need ID Shield overrides. Check the boxes for the devices, click the Agent Commands drop-down menu, choose Identity Shield, then Allow Application. Enter the MD5 for MpoAv.dll and click Submit. To find the MD5 of a file Right-click the file and select Scan with Webroot. When the Scan Results window appears, click Save Scan Log in the bottom left. Name the file and save it to the desired location. This log contains the MD5 value of the file scanned. Agent commands are received and processed by devices as they check-in. For information on forcing a device to check-in, click here. To be notified onceViewing PC Scan Information - Webroot
On tests from three labs.Malware ProtectionFor many years, Webroot scored high in my own hands-on malware protection tests. In its most recent previous review, it still did very well but not quite up to previous standards. This time, it’s topping the charts again.As noted above, the scan that Webroot ran as part of the installation found a handful of files, none from my main collection of malware and ransomware samples. It’s not uncommon for this kind of initial scan to miss static, never-launched malware. My main malware-blocking test starts when I open folders containing my samples. For many antiviruses, the tiny access Windows Explorer performs to display the file and its properties is enough to trigger an on-access scan. That’s not the case with Webroot, but copying the samples to another location started the ball rolling.By observation, when Webroot makes numerous malware discoveries in quick succession, it doesn’t stack up multiple notifications or pack all its discoveries into one notification. When I clicked away its simple notification before it finished, another notification popped up. Copying the files back to their original location seemed to set off another round of detection, so I copied them back and forth a few times. Webroot caught about 80% of the samples at this point.I noticed that somewhere during that process the main window changed to a red-orange warning and requested a cleanup scan. I allowed the scan, which took a few minutes, and found more malware. Upon removing what it found, Webroot asked for a final scan to ensure a totally clean machine. After that last scan, all but one of the malware samples was gone and sent to quarantine.(Credit: WebRoot/PCMag)I maintain a second set of samples that I’ve tweaked by hand, changing the filename, file size, and some non-executable bytes. The initial round of real-time detection missed quite a few of these. That’s not terribly surprising, given that the hand-tweaked files have never been seen before. Even after the full scan, about a third of these remained. That’s actually pretty good for an app that focuses on malware behavior.As always, this test continues. Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If Webroot Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If Webroot
SecureAnywhere Changing scan settings - Webroot
Of test would align well with Webroot’s journal-and-rollback system. Unfortunately, it’s been some years since Webroot participated.Researchers at SE Labs use a capture and replay system to package up real-world malware attacks and unleash them on multiple antivirus apps simultaneously. This lab certifies antiviruses at five levels: AAA, AA, A, B, and C; Webroot earned an impressive AAA certification. To be fair, all apps in the latest test report came in at the AAA level.I use an algorithm to derive an aggregate lab score for antivirus utilities tested by at least two labs. With just one result, Webroot doesn’t have an aggregate score. Avast has the best overall score, 9.9 points, based on tests from all four labs. Also tested by four labs, Norton and Microsoft came in with 9.6 and 9.5 points, respectively. Like Avast, ESET NOD32 Antivirus scored 9.9 points, but that score was based on tests from three labs.Malware ProtectionFor many years, Webroot scored high in my own hands-on malware protection tests. In its most recent previous review, it still did very well but not quite up to previous standards. This time, it’s topping the charts again.As noted above, the scan that Webroot ran as part of the installation found a handful of files, none from my main collection of malware and ransomware samples. It’s not uncommon for this kind of initial scan to miss static, never-launched malware. My main malware-blocking test starts when I open folders containing my samples. For many antiviruses, the tiny access Windows Explorer performs to display the file and its properties is enough to trigger an on-access scan. That’s not the case with Webroot, but copying the samples to another location started the ball rolling.By observation, when Webroot makes numerous malware discoveries in quick succession, it doesn’t stack up multiple notifications orSecureAnywhere Scan hangs or ends - Webroot
For a ransomware attack to get past all the other layers of protection. Because Webroot wiped out all my ransomware samples either on sight or the moment they launched, I had to scramble to figure out how to test its ransomware protection.The scariest ransomware is the zero-day type that’s never been detected before. I don’t have the coding skills (or the inclination) to create that sort of threat for testing. I made several attempts to create a simpler test program that would be unknown to Webroot, like a zero-day threat, and would perform dangerous actions, actions worthy of being rolled back. I’ve managed this in past reviews. However, I just couldn’t find the sweet spot this time.In the end, I used a test program supplied by Webroot, one that, by design, isn’t detected as malware. I ran it and let it perform encryption on files in the Documents folder. I verified that the encryption happened. I clicked Utilities, chose the System Control tab, and launched the list of active processes. As expected, the test program was listed as one being monitored.(Credit: Webroot/PCMag)Emulating Webroot’s cloud-based brain, I manually blocked the sample program as dangerous, confirmed immediate termination, and launched a scan. The scan removed the file and reversed its actions, restoring the encrypted files.Yes, given that the test program came from Webroot, it’s no surprise that the protection system worked as expected. But again, in past reviews I’ve managed this demonstration using a program I wrote myself, with no involvement by the company.For past reviews, I’ve performed limited real-world ransomware testing by creating never-before-seen tweaked versions of the ransomware samples I normally use in testing. I’ve been able to see that Webroot restored originals but didn’t delete encrypted versions of files and didn’t clean up ransom notes. Hey, if you got. Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If Webroot Webroot SecureAnywhere launches a scan. When the scan completes, the main interface of Webroot SecureAnywhere opens (see Using the main interface on page 5). If WebrootSecureAnywhere Saving a scan log - Webroot
As a control. Then, during the scans, I looked at how the same numbers were impacted.This table demonstrates the control CPU, control disk utilization, and memory usage during a quick scan. Test TypeControl CPU Utilization % (no scan)Control Memory Utilization % (no scan)Control Disk Utilization (MB/s) (no scan)Quick Scan CPU Utilization %Quick Scan Memory Utilization %Quick Scan Disk Utilization MB/sQuick Scan Time (seconds) AVG51861213679122722 Webroot2567103178971Webroot records lower CPU, memory, and disk utilization compared to AVG. During a quick scan, AVG’s CPU utilization and memory utilization actually reduce, making the numbers match up closely with those of Webroot. The biggest difference is seen in disk utilization during the quick scan, with AVG at 1,227 MB/s compared to 97 MB/s for Webroot.The table below shows the performance impact during the full scans of each product. Test TypeFull Scan Time (minutes)Full Scan items scannedControl CPU Utilization % (no scan)Control Memory Utilization % (no scan)Control Disk Utilization (MB/s)Full Scan CPU Utilization %Full Scan Memory Utilization %Full Scan Control Disk Utilization (MB/s) AVG3540316751861213571425 Webroot72119382567109563721AVG takes just 35 minutes to complete its full scan, which is faster than Webroot’s 72 minutes, and faster than the majority of other antivirus scanners I’ve tested.AVG’s scan time may be quick, but it covers a lot of files in that time, looking at 403,167 items. In comparison, in the 72 minutes it takes to complete a full scan, Webroot only checks 11,938 items.Compared with the control numbers, AVG’s full scan numbers show a reduction in CPU and memory utilization during a full scan, just as they did on the quick scan setting. Control disk utilization increases from 121 MB/s to 425 MB/s.As already mentioned, the control numbers for Webroot show less use of system resources, but once the full scan is running, Webroot’s demand on the PC jumps above that of AVG for CPU and disk utilization.Next, to back up my own findings, I looked at some recent tests run by AV-Comparatives. The performance test from April 2020 measured how PC performance is impacted by antivirus programs during eight common tasks:Downloading filesBrowsing websitesFile copying: first and subsequent runInstalling and uninstallingComments
Was called Webroot Antivirus. Before that, the full name was Webroot SecureAnywhere Antivirus. The app’s appearance has remained the same through these changes for quite a while. It even says Webroot SecureAnywhere across the top still.This app’s green-toned main window features a lighter panel that reports statistics about recent scans and a button to launch an on-demand scan. Even if you never click that button, Webroot makes a full scan during installation and runs a scheduled scan every day. A panel at the right manages access to the rest of this app’s collection of security features.Webroot strongly de-emphasizes running a full scan of your entire computer, on the basis that any malicious apps will be caught before they can do any harm. If you select a full scan, it requires confirmation that you understand it's not necessary. On my standard test system, Webroot’s full scan time took just under two hours, while a subsequent scan finished in an hour and a half. The current average is over an hour and a half, so Webroot is in line with the competition. (Credit: Webroot/PCMag)Online ConsoleAs part of getting started with Webroot, you’ll set up an online profile. The process has a strong emphasis on security. I don’t always use the strongest passwords for profiles used in testing since they’re only needed for the test duration. But Webroot requires a truly strong password, and logging in requires that you pass a standard CAPTCHA.You can further enhance your security by protecting your account with multi-factor authentication. You’d previously set up MFA by scanning a QR code with Google Authenticator or a workalike. Alas, Webroot has switched to using less secure SMS-based authentication.(Credit: WebRoot/PCMag)If you’re installing Webroot on a new device, click the Downloads and Features item from the console’s left-rail menu. Now, you can download the installer appropriate to your operating system or install the included LastPass app, which I’ll discuss below.You can view your protected devices from the console and confirm that their protective shields are active. You can also check your subscriptions and, if necessary, renew them here.(Credit: WebRoot/PCMag)Sharp-eyed users will note
2025-04-19Webroot secureanywhere internet security 2017 full# Webroot secureanywhere internet security 2017 software# Any drawbacks? Webroot for Windows was fantastically easy to download, the whole process and full system scan took less than five minutes. For home or business, it guarantees speed and affordable protection with minimal space requirements. Webroot tests as a thoroughly secure, reliable and efficient malware protection. This protects your personal information, credit card and banking details when you are making purchases online. The top tier package has the attractive extra 'Identity Shield' which provides anonymous internet browsing. Webroot will also identify potentially unwanted applications and remove programs with adware or unnecessary software. You can choose between the full system scan or specifically for rootkits, trojans or a custom scan. It took 2.26 minutes to scan 7,481 files. After installing Webroot, I followed the simple steps and did a full system scan. Full system scans will take minutes instead of hours. This allows it to perform lightning fast scans. How is it so small? Unlike most malware protection, Webroot operates from the Cloud. At a mere 15 MB, it takes up a fraction of the 500 MB of space most of the alternatives would require. Webroot secureanywhere internet security 2017 software# What sets Webroot apart from all other antivirus software is the size. Is Webroot a worthy competitor to the big players in the online security industry like Norton and McAfee? The most expensive package will eliminate traces of online activity and give you 25GB of secure cloud storage. The second and third tier also protect your smartphone and tablets and protect your logins. Which product is best for you? All three provide anti-ransomware protection, data and identiy security, real-time anti-phishing blocks and a firewall. The next tier is the Internet Security Plus followed by the Internet Security Complete. The cheapest option is the SecureAnywhere Antivirus package. An ultralightweight product that leaves a minimal footprint on your computer without sacrificing efficacy or speed. If you are looking for a light and fast antivirus software, then you should definitely check out Webroot. Webroot: big protection with a small footprint.
2025-04-14Pack all its discoveries into one notification. When I clicked away its simple notification before it finished, another notification popped up. Copying the files back to their original location seemed to set off another round of detection, so I copied them back and forth a few times. Webroot caught about 80% of the samples at this point.I noticed that somewhere during that process the main window changed to a red-orange warning and requested a full scan. I allowed the scan, which took a few minutes, and found more malware. Upon removing what it found, Webroot asked for a final scan to ensure a totally clean machine. After that last scan, all but one of the malware samples was gone and sent to quarantine.(Credit: WebRoot/PCMag)I maintain a second set of samples that I’ve tweaked by hand, changing the filename, file size, and some non-executable bytes. The initial round of real-time detection missed quite a few of these. That’s not terribly surprising, given that the hand-tweaked files have never been seen before. Even after the full scan, about a third of these remained. That’s actually pretty good for an app that focuses on malware behavior.As always, this test continues as I launch any samples not eliminated on sight. In this case, that was just one sample, and Webroot caught it. It ran a scan to detect all the malware bits, removed them, and ran a second scan just to be sure. My post-game analysis revealed that the malware managed to plant a few executable files despite Webroot’s efforts, so it didn’t get full credit.(Credit: WebRoot/PCMag)One way or another, Webroot detected 100% of the samples and scored 9.9 of 10 possible points. Avast, AVG, Norton, and UltraAV came close to this feat, also scoring 9.9 points but with 99% detection. For now, Webroot
2025-04-04Features quite as much.Getting Started With Webroot EssentialsThe Webroot download is tiny, less than 12MB, and installs in a flash. Immediately after installation, it busies itself with a collection of startup tasks, checking off each one as it finishes. Among the listed tasks are scanning for active malware, analyzing installed applications to reduce warnings and prompts, establishing a system baseline, and optimizing performance for your unique system configuration. Even with these added tasks, the process goes quickly. Similar Products (Credit: WebRoot/PCMag)Until recently, Webroot Essentials was called Webroot Antivirus. Before that, the full name was Webroot SecureAnywhere Antivirus. The app’s appearance has remained the same through these changes for quite a while. It even says Webroot SecureAnywhere across the top still.This app’s green-toned main window features a lighter panel that reports statistics about recent scans and a button to launch an on-demand scan. Even if you never click that button, Webroot makes a full scan during installation and runs a scheduled scan every day. A panel at the right manages access to the rest of this app’s collection of security features.On my standard test system, Webroot’s full scan time ran about four minutes at first, but subsequent scans ran steadily faster, down to about a minute and a half. The current average is well over an hour and a half, so that’s a huge difference.Online ConsoleAs part of getting started with Webroot, you’ll set up an online profile. The process has a strong emphasis on security. I don’t always use the strongest passwords for profiles used in testing since they’re only needed for the test duration. But Webroot requires a truly strong password, and logging in requires that you pass a standard CAPTCHA. What Is Two-Factor Authentication? You can further enhance your security by protecting your account with multi-factor authentication. You’d
2025-04-08On tests from three labs.Malware ProtectionFor many years, Webroot scored high in my own hands-on malware protection tests. In its most recent previous review, it still did very well but not quite up to previous standards. This time, it’s topping the charts again.As noted above, the scan that Webroot ran as part of the installation found a handful of files, none from my main collection of malware and ransomware samples. It’s not uncommon for this kind of initial scan to miss static, never-launched malware. My main malware-blocking test starts when I open folders containing my samples. For many antiviruses, the tiny access Windows Explorer performs to display the file and its properties is enough to trigger an on-access scan. That’s not the case with Webroot, but copying the samples to another location started the ball rolling.By observation, when Webroot makes numerous malware discoveries in quick succession, it doesn’t stack up multiple notifications or pack all its discoveries into one notification. When I clicked away its simple notification before it finished, another notification popped up. Copying the files back to their original location seemed to set off another round of detection, so I copied them back and forth a few times. Webroot caught about 80% of the samples at this point.I noticed that somewhere during that process the main window changed to a red-orange warning and requested a cleanup scan. I allowed the scan, which took a few minutes, and found more malware. Upon removing what it found, Webroot asked for a final scan to ensure a totally clean machine. After that last scan, all but one of the malware samples was gone and sent to quarantine.(Credit: WebRoot/PCMag)I maintain a second set of samples that I’ve tweaked by hand, changing the filename, file size, and some non-executable bytes. The initial round of real-time detection missed quite a few of these. That’s not terribly surprising, given that the hand-tweaked files have never been seen before. Even after the full scan, about a third of these remained. That’s actually pretty good for an app that focuses on malware behavior.As always, this test continues
2025-04-07