Warning from WSA - any clue?

Discussion in 'Prevx Releases' started by Pierrequiroule, Mar 16, 2014.

Thread Status:
Not open for further replies.
  1. Pierrequiroule

    Pierrequiroule Registered Member

    Joined:
    Mar 21, 2009
    Posts:
    44
    Location:
    Quebec, Canada
    Hi,

    Ever since there are less than 30 days left on my subscription, I see this warning on my WSA console: "Webroot has protected you from 3 threats. Don't put yourself at risk".

    WSA3.JPG



    Out of curiosity, I tried to find out what these threats were and when they had been detected... but couldn't find anything in my WSA console.

    Among other things, I looked under "Scan & Shields" and "Quarantine":


    WSA4.JPG


    Does anyone has any idea what I should check to find out more about this?

    Thanks
     
    Last edited: Mar 16, 2014
  2. FreddyFreeloader

    FreddyFreeloader Registered Member

    Joined:
    Jul 23, 2013
    Posts:
    527
    Location:
    Tejas
    I'm thinking those 3 threats were some that were detected and fixed sometime in the past?
     
  3. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
  4. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    Yes I think so too.

    In the link I posted above we can see the OP have been protected from 8 threats :https://www.wilderssecurity.com/showthread.php?t=361115
     
  5. Pierrequiroule

    Pierrequiroule Registered Member

    Joined:
    Mar 21, 2009
    Posts:
    44
    Location:
    Quebec, Canada
    Indeed, I can see that the same issue was raised at some point in that thread, but I didn't find any answer... except here: (which is not a complete answer yet)

     
  6. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    That is very bizarre. From what I can tell, these numbers have no relationship with what's actually seen... some users are seeing more and some are seeing less.

    Could you (and anyone else seeing this discrepancy) send me your keycode via PM so that I can speak with our backend messaging folks?

    Thanks!
     
  7. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,196
    Location:
    Surrey, England.
    I don't know if my info can bring any clarification here, but the "5 Threats" referred to in my post here: https://www.wilderssecurity.com/showpost.php?p=2349133&postcount=10 are, as far as i am aware, an accurate count of all threats WSA has acted against to prevent.

    Looking back at a few Threat Logs reminded me that one, for example, was a download of a security tool which WSA chose to block. I have heuristics at Max. etc. and it doesn't bother me that I might see e.g. 5 'detections' like this (usually for relatively obscure apps) over a space of time, say one year.

    None of the 'threats' listed for me were actual infections detected in the course of a scan.
     
  8. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    Thanks, could you see what value is shown under your PC Security panel and if it is different to 5 in your UI?
     
  9. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    From the look of all the three cases, I suspect WSA is reminding the user the total number of threats it has detected in the subscription time period. It tries to show the user how effective WSA was and how vulnerable the computer would be without WSA. Thus trying to persuade the user to go for a renewal. Standard normal tactic in the marketing world for any product. Nothing wrong with it imo. The brown exclamation mark is a little too much though. The message would have been enough.
     
  10. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,196
    Location:
    Surrey, England.
    Yes. My understanding is the figure for threats removed applies to items that WSA would have quarantined, and removed if appropriate, rather than all threats detected and blocked.
     

    Attached Files:

  11. Pierrequiroule

    Pierrequiroule Registered Member

    Joined:
    Mar 21, 2009
    Posts:
    44
    Location:
    Quebec, Canada
    As far as I am concerned, there are no entries in the threat log. The only thing I can remember are a few popups that were triggered by a newly installed image editing software that was checking for updates.

    These popups were obviously coming from the firewall component of WSA, which was set as: "Warn if any new, untrusted process connects to the Internet." Could that be enough to explain the "3 threats" I referred to earlier in this thread?
     
  12. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    I don't think so, and I'm not certain that the number of threats is matching up evenly to the complete list either... I'm still investigating to see if there is any relationship but if anyone else has a keycode where the number shown in the UI is different to the total threats count under the PC Security tab, I'd definitely be interested!
     
  13. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    703
    I have a wide discrepancy in the threat figures on my UI Joe. One cause of this may be where someone (like me :D ) has downloaded something like the Spycar testing suite and the "Webroot has protected you from 'x' threats" figure is based on the actual download - ie: one zip file but the threats removed figure is based on the contents of the zip file. I cannot remember how many off hand but there are quite a few individual test files within that one downloaded zip file.
    If you want my keycode I'll gladly PM it to you.
     

    Attached Files:

  14. SOG

    SOG Registered Member

    Joined:
    Mar 9, 2009
    Posts:
    33
    I'm probably being too simple here, but I had this and was scratching my head until I clocked that it was not my PC that had encountered the items but one of my childrens' laptops that is included in the five device Complete package.
     
  15. PrevxHelp

    PrevxHelp Former Prevx Moderator

    Joined:
    Sep 14, 2008
    Posts:
    8,242
    Location:
    USA/UK
    That would definitely help - thanks!
     
  16. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    703
    Sent :thumb:
     
  17. Umbra

    Umbra Registered Member

    Joined:
    Feb 10, 2011
    Posts:
    2,146
    Location:
    in a remote land :)
    i guessed the same too
     
Thread Status:
Not open for further replies.