I wanted to check and see if checking the heuristic setting: warn when any new program executes that is not specifically whitelisted, would block crytpo locking types of malware? It seems to block updaters for fairly common programs.
Page 1 / 1
Hello and Welcome to the Webroot Community Forums!
'Warn when any new program executes that is not specifically whitelisted' would get extremely annoying and is not necessary with advanced Webroot Intelligence Network and journaling capabilities.
Journaling will log the behaviors of any .exe that has not yet been identified by Webroot as 'Good'. Unknown files will be journaled for possible remediation in any case.
"WSA can detect and block Cryptolocker, and if an unknown variant happens to slip through, WSA should be able to roll back the changes as part of the cleanup routine using journalling as long as WSA was installed prior to the files being encrypted. WSA can not decrypt files encrypted by Cryptolocker on a system that was infected prior to WSA being installed. We have improved and continue to improve WSA in order to handle these types of threats."
https://community.webroot.com/t5/Security-Industry-News/How-To-Avoid-CryptoLocker-Ransomware/m-p/63647#M2466
'Warn when any new program executes that is not specifically whitelisted' would get extremely annoying and is not necessary with advanced Webroot Intelligence Network and journaling capabilities.
Journaling will log the behaviors of any .exe that has not yet been identified by Webroot as 'Good'. Unknown files will be journaled for possible remediation in any case.
"WSA can detect and block Cryptolocker, and if an unknown variant happens to slip through, WSA should be able to roll back the changes as part of the cleanup routine using journalling as long as WSA was installed prior to the files being encrypted. WSA can not decrypt files encrypted by Cryptolocker on a system that was infected prior to WSA being installed. We have improved and continue to improve WSA in order to handle these types of threats."
https://community.webroot.com/t5/Security-Industry-News/How-To-Avoid-CryptoLocker-Ransomware/m-p/63647#M2466
Thanks for the response.
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.