Is Webroot an Antivirus?

Discussion in 'other anti-virus software' started by Mortal Raptor, Dec 11, 2014.

  1. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Yes I know, I meant "no they are not"...the only ones that are good at it. It's only positive that more vendors take them seriously, I still haven't read any news story about some vendor getting sued for detecting something as a PUA or PUP so I think more vendors should just go for it and stop worry about getting sued.
     
  2. Triple Helix

    Triple Helix Specialist

    Joined:
    Nov 20, 2004
    Posts:
    13,269
    Location:
    Ontario, Canada
    We should just get rid of these terms PUA and PUP and call it what it really is and that's Adware!

    TH :)
     
  3. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    I disagree. A lot of unwanted programs are quite simply not adware. It is certainly annoying when they get installed silenty when you're installing other software, just as it is annoying having to remove multiple unwanted programs from customers computers. But, despite this I am a strong believer in accurately describing these programs. It is ridiculous the amount of times I've seen registry cleaners labelled as "rogue antispyware". Also it is worrying how many websites try to label harmless unwanted software as being malicious in order to scare users into buying some antimalware or antivirus software to remove it, so they make money as an affiliate, when more often than not, the software comes with an uninstaller to remove it. Sure, it's wrong in my opinion how this software is often silently alongside other software, or is promoted with false claims as to its ability, e.g. claiming that a registry cleaner or tuneup software is going to make a computer run like new (it won't), or fix all errors (it also won't), but it's wrong too how many websites try to make money from the removal of these unwanted programs.

    Don't get me wrong, I don't have much time for a lot of these unwanted programs, and actually intend to write my own software to remove them. I like AdwCleaner, but it has a fundamental flaw. There is not way to deselect entire programs found - you can only deselect found registry keys or files one by one, which a hassle if you actually want to keep any of the detected items.

    I just believe that the term adware should be used only to describe actual adware, not just any "unwanted" software.
     
  4. Mortal Raptor

    Mortal Raptor Banned

    Joined:
    Oct 6, 2014
    Posts:
    1,013
    You are absolutely right, I just posted this error on their site and they said it's a bug in the WSA Webfilter. Just my bad luck, after having had stopped using WSA last year due to insane FPs and getting tired of reporting FPs everyday on their forum as I have better things to do in life. I decided to give it another go now to see if it has improved only to discover that it got worse! Will never recommend this product to anyone based on my experience.

    I might consider buying Emsisoft Anti-Malware as it's PUP detection is great I know that, although it does have a high amount of FPs as well but not silly stuff like what I get with Webroot. (no offense, I love how light WSA is, I just can never get it to work right due to its horrible web filter)
     
  5. Mortal Raptor

    Mortal Raptor Banned

    Joined:
    Oct 6, 2014
    Posts:
    1,013
    and to comment on that, what's funny, I've never ever cleaned a computer for any client from viruses. Everytime they come complaining to me, "my computer is so slow" "my computer has a lot of annoying popups", etc. guess what it is? the popular PUP bundle, BAIDU PC Faster + SpeedUpMyPC + Search Protect + TuneUp Utilities + I dunno what....
     
  6. Frank the Perv

    Frank the Perv Banned

    Joined:
    Dec 16, 2005
    Posts:
    882
    Location:
    Virginia, USA
    Ridiculous. Your being a little drama-queenish about an AV that is apparently becoming pretty good.

    I think the Kool-Aide Webroot crowd goes a little overboard sometimes... but the product does seem to be the real deal.

    Just because Kaspersky and Bitdefender didn't happen to work on my setup... I'd never say "Will never recommend...".

    Don't try SEP or G-Data. ..Just don't want to hear unnecessary bitching without proper problem mitigation about a couple of products I like right now.

    That is all.


    -FTP
     
  7. Mortal Raptor

    Mortal Raptor Banned

    Joined:
    Oct 6, 2014
    Posts:
    1,013
  8. clocks

    clocks Registered Member

    Joined:
    Aug 25, 2007
    Posts:
    2,787
    Just uninstall the web filter. It sucks.
     
  9. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    There is "Unblock page and continue" button.....
    What does it do when you press it?
     
  10. 142395

    142395 Guest

    Mixpanel is annoying but I don't count it in spyware. Even Avira officially implemented mixpanel in their browser addon, which IMO bad, but not spyware according to my definition.
    I know your point is in the way those anti-PUP software to make money, but actually some of PUPs are "malicious" in different way with common malware. It is on the subject of privacy, this is why there's no complete consensus about what spyware is, and on mobile what matters is not malware but those PUPs though they're included in more wide category "greyware" on mobile.
    And I don't know you're aware of this, some PUP implements anti-sandbox analysis, I think it's also kind of malicious behavior, though it don't harm your machine.

    [EDIT: corrected mistype.]
     
    Last edited by a moderator: Dec 12, 2014
  11. 142395

    142395 Guest

    BTW, can any of you explain how 2 AV (e.g. Kaspersky & Bitdefender on the same machine) scan a file "at the same time" in current Windows implementation?
    It's not sarcasm, it's serious question and any answer will be appreciated.

    In my understanding, those AV uses mini-filter to scan a file, and mini-filter have unique altitude assgined previously by MS.
    So I wonder how 2 AV with different mini-filter can scan a file at the same time.

    Or I'm wrong and those AV actually uses its own filter driver with callback, namely Interrupt Service Routine?

    I'm not asking about the possibility of conflicts, as long as their kernel driver are loaded in same memory space their can be conflict, but just asking about "scan a file at the same time".
     
  12. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,065
    Location:
    DC Metro Area
    Although there are a few consistently better on Fps, Emisoft not that bad on FPs. Guess it depends on how you define "high amount". Had one bad month ( September-9fps) during the past 6 months of AV Comparative Real World Tests. Maybe a price paid for excellent detection.

    http://www.av-comparatives.org/wp-content/uploads/2014/07/avc_prot_2014a_en.pdf

    http://www.av-comparatives.org/wp-content/uploads/2014/09/avc_factsheet2014_08.pdf

    http://www.av-comparatives.org/wp-content/uploads/2014/10/avc_factsheet2014_09.pdf

    http://www.av-comparatives.org/wp-content/uploads/2014/11/avc_factsheet2014_10.pdf

    Avg. is 2 Fps-thrown way off by September's 9.

    Received AV Comparatives Advanced A+++ Rating in 4-month marathon real world test with %99.7 detection and 4 Fps Total. (March-June, 2014)
     
    Last edited: Dec 12, 2014
  13. bigc73542

    bigc73542 Retired Moderator

    Joined:
    Sep 21, 2003
    Posts:
    23,934
    Location:
    SW. Oklahoma
    I run them together because I like both products and they run flawlessly together. Before cloud antivirus it was not advisable at all.
     
  14. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Haha yeah some of them can surely be a pain in the back. :thumb:
    It's a while since I tested WSA so I don't know what detection categories that are user optional these days. But in ESET both PUA and PUP are user optional and can be enable/disabled as the user wish. But Adware is not a user optional category and is enabled for all users, I assume it is seen as a more serious category compared to the "potentially unwanted/unsafe" stuff. Though, I think it is important to not mix the three categories up as some may be clear Adware and should be detected as that, while others may fit the unwanted/unsafe categories better. But sometimes the vendors are unsure what it should be detected like, and puts in in the category that fits best.

    Not sure how other vendors does it, but at ESET PUAs are handled on a case by case basis, so the chance of a PUA FP is pretty small.

    Of course all three categories Adware, PUA and PUP is annoying in one way or the other so I don't care how they are detected only that they get detected. :)
     
  15. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Don't buy whatever you are going to try next right away, use the trial until its close to end, then you can decide whether to buy it or not, that way you don't need to go through some refund procedure after a week or two.
     
  16. hawki

    hawki Registered Member

    Joined:
    Dec 17, 2008
    Posts:
    6,065
    Location:
    DC Metro Area
    You also get an free extra month's license :)
     
  17. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,627
    Yes, that's true in some cases. But a lot of time these PUPs are harmless - although quite often highly intrusive, e.g. if they run a scan for junk files and registry errors every time you start Windows and then try to get you to part with your money to fix the problems.[/QUOTE]
    I was not aware of this. I've installed probably hundreds of unwanted programs over the years, but I've never used any sandbox software.
     
  18. Mayahana

    Mayahana Banned

    Joined:
    Sep 13, 2014
    Posts:
    2,220
    Wait, you mean Avira is USING Mixpanel?!?!? That's extremely worrysome, and to me it was a great shame that a password manager like Passwordbox was using Mixpanel and 'secretly' calling back to Mixpanel everytime you used it - and all during the use of the product. It's incredible to think an Antivirus is using what I deem spyware in their product. Do some research on Mixpanel, and you will change your mind - I'm betting.

    Mixpanel is right up there with a lot of big, and malicious data mining firms.
     
  19. PatsSoxBruins

    PatsSoxBruins Registered Member

    Joined:
    Dec 14, 2014
    Posts:
    25
    I also received the same warning as Mortal Raptor once when I was using WSA. It even blocked FB. WSA was also breaking Chromes green padlock for site security. I gave up on WSA awhile back. And yes I am fully aware of how it works. They do not offer a bootable recovery system for starters. Everything they claim is smoke and mirrors. I was told over a year ago that they would be tested on AV C and AVTest.org. Still hasn't happened. Lot's of FP such as MBAE, Easeus, System Explorer, the list goes on. Every time I opened up WSA I was finding legit processes being monitored. I also do not like the idea of malware remaining on your pc for days or weeks till WSA confirms it as malicious. Yes they claim the malware cannot harm your system. But when you upload the file to VT and every av out there detects it but WSA does not then that is a huge flaw in my eyes. On the plus side it has fast scans, fast installs and fast uninstalls. But very poor detection rates.
     
  20. Charyb

    Charyb Registered Member

    Joined:
    Jan 16, 2013
    Posts:
    679
    You say that WRSA has very poor detection rates. Will you please show evidence of this?
     
    Last edited: Dec 14, 2014
  21. zfactor

    zfactor Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    6,102
    Location:
    on my zx10-r
    about poor detection: i have literally hundreds of clients who will tell you otherwise. i have had less return av calls with webroot than almost any other av i have ever used. in fact sometimes i question installing it because its less money i make in the long run. but thats not the way i run my business i would much rather the client be happy than have to always go out to remove a virus.
     
  22. Muddy3

    Muddy3 Registered Member

    Joined:
    May 31, 2010
    Posts:
    415
    Location:
    Belgium
    Out of interest, which AV's have had even less return calls?
     
  23. Rakanisheu

    Rakanisheu Guest

    Thank you for the feedback. We do have a bootable recovery disk but we only use it for emergencies and to be honest we don't need it that often. Normally we use it for a pre-existing infected PC that is so badly infected that its easier to use it to fix the damage done to the OS first. I used it last week for the first time in about a month and that was due to a failing HDD and not a malware related issue!

    In regard to malware sitting on your PC for weeks most of the malicious files are marked very quickly and that's why we have journalling data to roll back changes. As for the testing part of your post I will only say that the tests don't really demonstrate our products full functionality. In the same way testing a electric car in the same way you would test a traditional ICE isn't really fair.

    I would also say if I had a penny for every time a file was bad in our database for weeks when a new "zero" day infection gets reported I could probably retire very young :)
     
  24. 142395

    142395 Guest

    Avira browser safety addon includes mixpanel, and don't worry, I know what mixpanel is. I agree that mixpanel is worse than Google Analytics when it comes to privacy, but still it's not spyware for me, just an analytics. But the matter is there's no general consensus about what the spyware is.
     
  25. Mayahana

    Mayahana Banned

    Joined:
    Sep 13, 2014
    Posts:
    2,220
    Agreed. But there seems to be some level of consensus to keep Mixpanel out of the public eye. Attaching Mixpanel to a password manager, and Antivirus seem like pretty bad ideas. These are security products after all, and if you can't trust security not to data mine, what trust is there? Passwordbox was NOT friendly about my disclosure of their use of Mixpanel. How much Mixpanel? Roughly every 60-90 seconds it was dialing home with Passwordbox to Mixpanel. That's alarming to me.. I have Mixpanel blocked at the router level, but it's still ridiculous.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.