Webroot SecureAnywhere Discussion & Update Thread

Thanks for the help Dan!

So far so good with Webroot. I was really tempted to go with Panda 2016 due to the incredible improvements Panda has made with this new version (very light, and reliable) but elected to roll with Webroot because Panda support is legendary-bad. So far the support has been remarkable all around with Webroot and that's important to me. Trend has weak support. Norton support has always been decent. Panda and Kaspersky have almost zero support. But this level of support almost makes me feel special.

 

Your right Webroot Support is Second to none and I'm a Volunteer so that should tell you how I feel about Webroot SecureAnywhere which is built off of Prevx and I was a long time user of Prevx and Webroot made it much more and better since the first 2012 version of WSA. https://www.wilderssecurity.com/categories/archive-of-prevx-support-forum.104/

Thanks,

Daniel

 

I just tried WSA under Windows 10 64 bit. With web filtering enabled, it was causing a very minor lag between pressing a key on my keyboard, and the letter appearing on the screen when typing posts here at Wilders. With it disabled, the dealy was much less noticable, but there still seemed to be an exceptionally minor lag, so I uninstalled it. After uninstalling WSA and rebooting, the lag is gone.

Having to disable was web filtering was not an issue for me, as I always disable web filtering in any antivirus anyway.

Aside from the keyboard lag, WSA was exceptionally light, apart from the CPU being too high for my liking when doing scans. I really liked that CPU usage remained very low when I opened my downloads folder containing 23GB of files.

 

Web Filter definitely caused me issues as well (all machines win10) so I disabled that but like you I never use web filters on AV products. I found that the enterprise version of Webroot has granular settings for things like CPU/Disk use during scans but the consumer version doesn't. I haven't seen any keyboard lag on any machine (win10) I have installed Webroot on. I will keep an eye out for this. That would cause me to uninstall it if support couldn't fix it. I've done extensive apptimer testing and Webroot is very close to not even having an AV installed in terms of launch times of applications and other aspects. I wonder what would cause key lag? Incompatibility with something? Something being monitored that's crucial on your system?

 

@Handen It's a strange problem. Once I disabled the web filtering, the keyboard lag was barely noticable. Infact I thought maybe I was just imagining it becuase it was so minor. But, after uninstalling WSA I can say for sure that there still was some lag with the web filter disabled, and I can definitely notice the difference with WSA gone.

But, apart from the lag issue, any system impact was negligable.

 

The number of false positives from Webroot web filtering is unbelievable high and obnoxious, I recommended a trial of Webroot to my colleague but I had to remove and install another antivirus solution for him.

 

That along with the webshield extension, are the two biggest weaknesses of an otherwise excellent program.

 

I agree, I always disable web filter for webroot. I dont know how users live with that much FPs in web filtering. Yes, I know I can report that, "Change URL Reputation" and all that stuff, but if I go through that, I would have to spend an hour daily.

 

Exactly! They should offer an easier way to submit False Positives on Sites and Files, preferably by adding an option in the pop-up notification.

 

I would also love to do that, but I dislike the fact that Webroot GUI changes colour when I do this.

 

Regarding FP submissions for URLs...If you're not seeing the option yet, then it must be just in the beta at the moment.

 

Hi Dermot7,
That's as I see with 9.0.4.7
I'll second opinion by VirusTotal and submit website review.
BrightCloud responds in a business day (or two).
I'm Webroot newbie that was impressed with WIN/BrightCloud on paper.
So far, while still trusting of BrightCloud.
I am questioning each page block.
I've also questioned search annotations.
Most have been adjusted to my way of thinking.
Considering BrightCloud near real time dynamic reputation engine.
I was not expecting to question BrightCloud.
Page block where only one VirusTotal engine report malware have been reviewed but, not changed.
YMMV

 

@Dermot7 That's great to know.

 

Sometimes, Brightcloud whitelisted sites are blocked too.

 

We Beta Testers are continuing to test new versions of Browser Extensions and the Web Filter Driver so the BrightCloud Team are working hard on it!

Daniel

 

I find there are far less FPs from the Web Filtering Extension than before, and that seems to have been for quite a few months now. When did you last try it?

 

Funny, I never get to see any FP's....I must be doing something wrong!

 

Um, FP's page blocks. BrightCloud reports tiered reputation. Granted dynamic but, still tiered reputation.
A true False Positive would mean "at the time" site is analyzed. BrightCloud malware/phishing determinant threshold was reached and page block added to database was then later somehow proved wrong. What are the odds.
eg: Dirty at the time, later at some time deemed Clean. Does not mean Dirty was False/Positive.
Hopefully, BrightCloud algorithm is ever improving.
Does BrightCloud employ third party data or is determinate all in-house.

 

This week.

 

About two weeks ago. Some days I can get without much FPs. maybe one or two, but most of the time it seems to be on steroid.

 

Are you on Beta or Regular Consumer Version? Because there has been an excessive block page problem with the new Web Filtering Driver (Beta) similar in some ways to what was being experienced on the Web Filtering Extension and developers are working on resolving this. Mileages may vary of course, but from my side I have seen a significant improvement with the Web Filtering Extension since a few months ago to the extent that I now consider it (for me) to be working entirely satisfactorily.

 

After getting some odd stuff I use around here whitelisted Webroot has been fantastic!

Running apptimer Webroot offers virtually unmeasurable performance hit in compared to no AV at all and actually lighter when Defender is running by itself from a fresh windows install. Support at Webroot has been remarkable. Volunteer support has been superb (Dan). This product went from not on my radar to something I am going to start recommending. Disclaimer: I do not run web filtration on AV products so that's never been an issue for me.

Good stuff!

 

Application Protection Question:
I added KeePass to Application Protection figuring Webroot will protect my login creds.
I get this dialog on first try to add keePass plugin.

but, I also get the following under Application Protection
keepass.exe in c:\program files(x86)keepass password safe 2 = Protect
keepassrpc.dll in c:\users\bjms\appdata\local\keepass\plugincache\morlsbyr-alphanumeric = Deny
domainpublicsuffix.dll in c:\users\bjms\appdata\local\keepass\plugincache\morlsbyr-alphanumeric = Deny

So, with with two plugincache at Deny. KeePass does not connect to plugin. I moved Deny to Protect and KeePass appears to communicate in Firefox.
Question: are my login creds protected or did I simply do a work around (Deny to Protect) that now offers no login creds protection.
Any way to test user "Add Application".

 

Beta version, that could be it. I am going to regular version to try it out.

 

No. Just go to Advanced Settings, select Firewall/Webshield and then disable Web Filtering Driver. However, that may now not be necessary as in the latest Beta version I think they have made those block pages invisible (I don't use internet on my beta machine very much so I can't confirm if that is still true) so as not to hassle us Beta users.