WSA Antivirus - a huge dissapointment!!!!

Hi,

Disclaimer: I am not an antimalware specialist; I have a 5 year University Degree in Computer Science and over 15 years dealing with computers; I consider myself an educated consumer

After the initial hype (I bought 5 licences!!!) I decided to test myself WSA capabilities regardless of various reviews.

1. "Scan my computer" :contrary to any other AV's , WSA decided to label a "Quick Scan" as " "Scan my computer"; this scan is 60-90 sec (as any other "Quick Scan") but will only scan a bunch files here and there.
Webroot deliberately wants to maintain the perception that WSA is "extremely fast" compared with any other AV. I was able to store an infected file in different locations in my PC and this file was never detected during " Scan my computer"

2. Downloading an infected RAR file: i found a PUP in compressed in RAR and I save it on my desktop; this did not trigger any detection from WSA ; scanning that particular file with WSA will trigger a detection but not during download. Most if not all AV's will not allow you to download an infected file in a RAR or ZIP. (MSE for example)
This is an extremely dangerous thing; you can download and manipulate, attach to email or copy on a memory stick a malware in RAR format and WSA will not trigger any alert.

3.Online/Offline detection; I scanned the same file disconnected from internet; WSA did not report any malware detected; connecting back to internet triggered a detection from WSA; offline detection provided by WSA ,based on heuristic and behavior is extremely pour; look at the following scenario; you download a manual from internet in a RAR format which contains a malware (no detection from WSA in RAR file) ;you take the laptop with you in an airplane / park to read the manual; WSA is offline there and when you unRAR the file there will be no detection--->you are screwed!!!

4. Cloud database: WSA doesn't monitor its connection with the cloud database; if you have an unreliable internet connection and you perform a FULL scan (which is around 1h and a half) you can end up scanning only on heuristic and behavior without any warning from WSA ( any AV will let you know if something is wrong with the resident signature database but WSA will continue scanning like nothing happened)

What should be done::
- upon installation WSA should perform a FULL computer scan ,not a Quick Scan to be sure that you start with a clean PC (some users scan their PC with another AV's and complained about lack of WSA detection )
- WSA should monitor the internet connection and should ping "the cloud" for connectivity every 5 sec; if the connection is lost ,a big WARNING should pop up on your screen
-"Scan my computer" should be replaced with "Quick Scan"; doesn't help anybody to create the illusion that the whole computer was scanned in 60sec.

I contacted WSA developers on their forum and I was told that:

- WSA is different than any other AV's
- I do not understand how WSA works
- WSA uses a revolutionary technology
- we know better what to scan and what not

After few weeks I decided to dump WSA and to return to a classic AV.

Thanks,
Claudiu

 

I have similar thought's Claudiu.

Being completely honest, I have had the product for about half a year and have maybe effectively had one week worth of use, the rest of the time it was disabled or removed. I think the problem is not with webroot but with all cloud based solutions. It seems logical but in practice has a lot of pitfalls in the technology. I do agree very much though with what you say of webroot trying everything they can to maintain the "illusion" of fast / lightest.

 

Did you not trial WSA first before buying 5 licenses? Did you go through the help files or contact support with any questions? If you felt you needed a deeper scan you could of done one with WSA by going into settings. Honestly I have been running WSA and prior to that Prevx for 5 years, never been infected and never had a problem and I don't have a Computer Science degree.

 

Sound like venting time in here
But if you already made your points on several boards, you had several kind explanations about all your points, you moved to another product why keeping posting the same again?

Sounds like you have an hidden agenda in here or simply engaged in a personal crusade.

Just my personal opinion or as they say "my 2 cents"

 

If you still have problems, open a support ticket with Webroot. They will be very happy to help you.

 

Hi Mongol,

I got a deal 5$ /licence and I couldn't resist!!!

I was running my PC without any AV for 3 months and I did not get infected.
Not getting infected whileyou are running an AV or another is not an indication of how efficient is that particular AV.

You can reproduce yourself whatever I said in my post and you can judge yourself!

Regards,
claudiu

 

Hi Thankful,

Oppening a ticked will not help; I do not have an issue:WSA is defective in its core and there is nothing which can be done!

Thanks,
Claudiu

 

Hi Fax,

is not venting time but I do not like to be "Seven Day Fool"!!!

http://en.wikipedia.org/wiki/Seven_Day_Fool

Thanks,
Claudiu

 

Claudiu why are over here now saying the same things as you were at the Webroot Community Forums and DSLR security! Kit already tried to explain how WSA works and still you don't understand if he can't nobody can so stop it with the trash talk!

TH

 

And here you are again!

 

I'm going to close this thread till further notice and please don't start a new one!

TH