Warning from WSA - any clue?

Hi,

Ever since there are less than 30 days left on my subscription, I see this warning on my WSA console: "Webroot has protected you from 3 threats. Don't put yourself at risk".





Out of curiosity, I tried to find out what these threats were and when they had been detected... but couldn't find anything in my WSA console.

Among other things, I looked under "Scan & Shields" and "Quarantine":





Does anyone has any idea what I should check to find out more about this?

Thanks

 

I'm thinking those 3 threats were some that were detected and fixed sometime in the past?

 

FWIW we have another thread here discussing the renewal info: https://www.wilderssecurity.com/showthread.php?t=361115

 

Yes I think so too.

In the link I posted above we can see the OP have been protected from 8 threats :https://www.wilderssecurity.com/showthread.php?t=361115

 

Indeed, I can see that the same issue was raised at some point in that thread, but I didn't find any answer... except here: (which is not a complete answer yet)

 

That is very bizarre. From what I can tell, these numbers have no relationship with what's actually seen... some users are seeing more and some are seeing less.

Could you (and anyone else seeing this discrepancy) send me your keycode via PM so that I can speak with our backend messaging folks?

Thanks!

 

I don't know if my info can bring any clarification here, but the "5 Threats" referred to in my post here: https://www.wilderssecurity.com/showpost.php?p=2349133&postcount=10 are, as far as i am aware, an accurate count of all threats WSA has acted against to prevent.

Looking back at a few Threat Logs reminded me that one, for example, was a download of a security tool which WSA chose to block. I have heuristics at Max. etc. and it doesn't bother me that I might see e.g. 5 'detections' like this (usually for relatively obscure apps) over a space of time, say one year.

None of the 'threats' listed for me were actual infections detected in the course of a scan.

 

Thanks, could you see what value is shown under your PC Security panel and if it is different to 5 in your UI?

 

From the look of all the three cases, I suspect WSA is reminding the user the total number of threats it has detected in the subscription time period. It tries to show the user how effective WSA was and how vulnerable the computer would be without WSA. Thus trying to persuade the user to go for a renewal. Standard normal tactic in the marketing world for any product. Nothing wrong with it imo. The brown exclamation mark is a little too much though. The message would have been enough.

 

Yes. My understanding is the figure for threats removed applies to items that WSA would have quarantined, and removed if appropriate, rather than all threats detected and blocked.

 

As far as I am concerned, there are no entries in the threat log. The only thing I can remember are a few popups that were triggered by a newly installed image editing software that was checking for updates.

These popups were obviously coming from the firewall component of WSA, which was set as: "Warn if any new, untrusted process connects to the Internet." Could that be enough to explain the "3 threats" I referred to earlier in this thread?

 

I don't think so, and I'm not certain that the number of threats is matching up evenly to the complete list either... I'm still investigating to see if there is any relationship but if anyone else has a keycode where the number shown in the UI is different to the total threats count under the PC Security tab, I'd definitely be interested!

 

I have a wide discrepancy in the threat figures on my UI Joe. One cause of this may be where someone (like me ) has downloaded something like the Spycar testing suite and the "Webroot has protected you from 'x' threats" figure is based on the actual download - ie: one zip file but the threats removed figure is based on the contents of the zip file. I cannot remember how many off hand but there are quite a few individual test files within that one downloaded zip file.
If you want my keycode I'll gladly PM it to you.

 

I'm probably being too simple here, but I had this and was scratching my head until I clocked that it was not my PC that had encountered the items but one of my childrens' laptops that is included in the five device Complete package.

 

That would definitely help - thanks!

 

Sent

 

i guessed the same too