Webroot SecureAnywhere Discussion & Update Thread

Hi

How to do the test? What am I supposed to see with Process Explorer?

Thanks

 

It didn't happen right away. I think it started to occur around the third day.

 

I will see if I have time later to make you a video so you can see what to look for, and know how to use Processor Explorer. I'm busy with school work at the moment.

 

Another thing you may want to keep in mind is that Eset now uses Windows built in Firewall (Windows Filtering Platform), and they did not until version 9 or 10 (not sure which one). Webroot also uses Windows built in Firewall, and the Firewall functionality comes with Webroot Antivirus, Internet Security Plus, and Internet Security Complete. You may want to check with Webroot to see if they may conflict. I'm interested in knowing this myself. When I tested them together Eset still used their own filtering driver instead of Windows Filtering Platform like they do now.

 

Yes, I'm aware that WSA AV's firewall needs the default Windows firewall to be turned on to provide outbound notification.

But, I'm not using Windows FW nor WSA AV FW and I have both disabled. I'll be using ZoneAlarm Free FW

 

Do you need to save money by using Zone Alarm free? Have you used Eset Firewall? It seems to be pretty good. It offers IDS, botnet, and network exploit protection. It was able to block the CIA exploit that used SMB to spread WanaCry. Very few security products were able to block the exploit.

 

I ran WSA and Nod32 together, without apparent problem, before deciding that WSA alone is very adequate. Here is the recommendation for running 2nd AV alongside WSA.

https://www5.nohold.net/Webroot/ukp.aspx?pid=10&ruleid=1984

 

Did you happen to use Process Explorer, or another Process manager to check to see if NOD 32 was able to inject into browsers while you used WSA? When I ran them together there were no visible problems other than occasional browser freezing which did not happen often. If I had not used Process Explorer to check to see if Eset, and WSA was injecting into the browser properly then I would have never known about the problem. I'm going to run them together again soon, and see if I experience any conflicts.

 

I'm using ESET IS in another set up

 

Ditto for me. However, I never did @Cutting_Edgetech 's test so I'm unable to comment on that question.

 

That was good to know. I just excluded WRSA.exe from third party real-time scans/modules, like ZAM that i run with WSA.

 

I know NOD32 and WSA AV do duplicate in some areas.

Any advise which to disable?

Thanks

 

Firewalls' are not a big deal as they use to be as I run Windows Firewall for inbound and outbound protection along with WSA's outbound Firewall along with Glasswire's outbound Firewall and all behind a NAT Router. I can't advise about NOD32 or ESET IS with WSA but try what @Dermot7 posted and if you come across any issues contact Webroot Support: Webroot Customer Service

 

I think there has been an uptick in interest since the CCleaner supply chain attack, with it's malicious outbound connections to CnC servers.

 

I'm assuming the great majority of users have a 64-bit OS. Meaning that the 'infection' wasn't as news breaking as initially thought.

Since according to an Emsisoft employee. The malicious code wouldn't run if your OS was 64-bit. And I'm maybe wrong but it thought it was meant to target big corporations, not home users.

 

Sure, indeed you are right on both counts.

But one of the only ways of detecting the signed malware would have been to check and block the malicious outbound connections.

But don't want to get further OT here.

 

What I meant was you can use multiple outbound firewalls and most of the good firewalls that did the inbound and outbound protection are now gone like Look'n'Stop and Outpost Pro. As we know since Windows 8 all firewalls have to use the underlying API's of the OS Firewall controls as there is noway around it.

 

It's a pity Webroot can't run next to Windows Defender on Windows 10 like it could on Windows 7.
Malwarebytes added a 'Windows Action Center' option to their settings to address this.

 

Hi

Is it possible to add a Webroot Filtering Extension to Firefox v57 beta like in Chrome browser?

Thanks

 

It did using a registry change but it doesn't work anymore as Microsoft made changes: https://community.webroot.com/t5/We...ws-Defender-on-Windows-8-Windows-8/ta-p/23058 and I'm not sure if it's on Webroot's list to fix it again.

 

Try this to see if it will install: https://community.webroot.com/t5/Te...e-Web-Filter-Extension-in-Firefox/ta-p/265481

 

https://www.wilderssecurity.com/threads/zemana-antimalware-premium-751-days.397230/#post-2712309

try Test 1 at http://amtso.org/feature-settings-check-for-desktop-solutions/
my WSA allows test file to reach my desktop.

 

Giving Webroot another try, bought a 5 computer deal via ebay for £14.99 (about $20)...Still doesn't have a folder exclusion option though, not good.

 

which other AVs allow folder exclusion on Windows 7/10 ?

Thanks for advice

Ska

 

Emsisoft Anti-Malware for one.