Hello Don,

 

Welcome to the Community Forum,

 

Instead of me saying anything it's best to read it for yourself: https://community.webroot.com/t5/Webroot-SecureAnywhere-Antivirus/Scanning-PC-suspiciously-fast/m-p/... also the Webroot WIN Cloud does all the work not your PC: http://www.brightcloud.com/platform/webroot-intelligence-network.php

 

 

 

Hope this helps

 

 

Kind Regards,

---

Hi ddiggs

 

Welcome to the Community Forums.

 

As Sherry has correctly pointed out by pointing you to well thumbed thread...this is an oft asked question.  If I may I would like to supplement what she has suggested as reading matter by suggesting this KB Article.

 

Hope that helps and if you have any further questions then please do come back here so that we can look to assist you further.

 

Regards, Baldrick

---

My understanding of your question, after reading the relevant articles, is that it scans the active files and keeps note of any possible threats even if they are currently not in use. Then any changes to the not in use files, will prompt Webroot to offer you the chance to take action, once any kind of threat is perceived. There is plenty of info about all aspects of the program here, hope you are having as much fun as I am, finding out more 🙂

---

Hi ismcd

 

I do not believe that WSA "...scans the active files and keeps note of any possible threats even if they are currently not in use" but rather it keeps an eye on all possible locations or mechanisms by which a filer or app can activate/be activated and checks  any files and apps that do activate or try to.  It then checks the signatures of these against a cloud database which acts as a whitelist.  Of course you can override the determination of WSA but the use of the 'Block'Allow' list and other that one can set up in WSA locally...but I do not believe that there is any mass recording locally of what has been deemed as good.

 

But I may be wrong on that so perhaps @ @ or other knowledgable members would be good enough to comment on this?

 

Regards, Baldrick 

---

Kit's posts in the thread Sherry pointed to is very accurate WSA is a smart AV and a piece of malware just sitting there is no concern unless you click on it then WSA will jump on it like a hound dog, even if you scan the malware WSA will remove it the reason for the Right Click Scan from the Context Menu.

 

Thanks,

 

Daniel ;)

 

---

Thank you Baldrick and TripleHelix for explaining further to me 😃

---

Hi ismcd

 

You are most welcome.

 

Regards, Baldrick

---