What reasons influenced you the most to make you choose Webroot?


Userlevel 4
What are the reasons that influenced you the most to make you choose Webroot considering how many Cyber Security Products there are to choose from these days?  Also do you like using WSA by itself, or do you like using it with other Security Products?  If you are using WSA with other Security Products then which products do you prefer to use with WSA to make up your Layered Security Setup?  Also, how long have you been using Prevx / WSA? 

50 replies

Userlevel 7
Sorry to say but thats also wrong :

The "local engine" (WSA) as you call it doesn't compose the MD5 and the log information is sent as a whole to our servers (and the end of the scan and is encrypted). The client certainly does scan your PC its the determinations that are done in the cloud. The client then does it work based on said determinations. If its good the client will stop monitoring the file, if its bad then the client will make the relevant changes. This is done by the client and the cloud has no input at this level.

A MD5 doesn't contain IP information and it cant be used to trace to a PC. Its a signature hash of a file that's used to determine the integrity of a file.

We don't keep records of customers IP`s, observant people may notice that in the logs there is an IP but its local IP and it cant be used to trace a person. If you want to know more about this if you look at your internal IP and external IP they are vastly different. I would would also look up how DNS works if you want more info.

I am not sure where this scare factor of the "cloud" comes from. People have been using cloud based services for years. Misinformation and scare tactics haven't really helped. Our job is to protect our customers to the best of our ability. What`s the point of us taking private information when that's what the bad guys are trying to do :)

Anyway this is off-topic but I dont like people thinking we are doing something underhanded!
Userlevel 7
The answer to both questions is no.  Though I have to give a nod to Explanoit's answer as well.

The way the data is stored would make it impossible to say, for instance, make a query to the database asking "What are the IP addresses or any other identifying factors for all PC's on which a file with this MD5 hash was run?"

If a user contacts us via support, the support system can identify that a certain list of executable files exists on a particular computer (only executables - not pictures, music files, etc), which is good data to have when troubleshooting.  However, that's a very limited, computer-specific set of information.  As for IP address, every site you visit on the internet can see it because that's how the internet works to be able to show you any information you want to look at.  It's like your home address for snail mail.  You can't get snail mail unless the sender knows the address.  The fact that Webroot knows your IP address is by no means mysterious.  You freely offer it anywhere you choose to go on the internet.  You could, of course, use a proxy or a VPN to hide it if you so choose, and then we'd just have a fake IP address.  If you want to do that, we allow for it in WSA with a proxy settings feature that will let you anonymize yourself as you see fit.

The back end systems have information about particular files and we do store the number of computers on which a file was seen, but they don't store a specific list of all computers from which a file was seen.  So such a query could not be run.  It's just file info about the executable files being queried - not a big list of all of the computers we've ever seen and everything on them.

Hypothetically speaking (and I have to say hypothetically because I'm not aware of any situation in which this has ever actually happened), if law enforcement found some reason to obtain the necessary legal standing to demand assistance with something, it would need to be, firstly, related to an executable file, because WSA doesn't care about any file that doesn't execute and doesn't log anything to do with non-executing files.  Secondly, they would have to know the user uses Webroot.  Thirdly, they would need to provide the user's email address or keycode in order for us to even know who we'd be looking for in our systems.

You can see the log in question for yourself by going to Reports and using Save Log.  As you can see there, it has a list of executable files and their cloud-based determination status (G, B, U, etc).  

So how could this information ever be useful to law enforcement?  They'd have to be looking for a Webroot user they can already identify who is running some kind of executable file that is somehow illegal in and of itself without even being run.  Keep in mind, the fact that a file appears in Webroot's log doesn't mean it was ever run, intentionally downloaded, or ever even presented itself to the user in any way.  In fact, if it's a malicious executable file, Webroot would quarantine it before it can even be run, even if a user tries to run it on purpose.  A log of a file existing is no evidence at all that the file was ever run.  In fact, it may very well serve only to show the file was blocked and never even run on the computer.  So this "law enforcement scenario" just doesn't stack up.

Other question:
It's impossible to "gain access to a computer" via WSA or any of Webroot's other technology.  Even when Support connects to a computer to troubleshoot, it's using LogMeIn.  More generally, is it possible any piece of technology could be hacked?  Basically, yes, always, and there are no exceptions to that, given enough time, resources, skills, and social engineering efforts.  That's a big part of why security services like Webroot exist and why we do everything right to ensure our systems don't get hacked.  They never have been to date, and we keep on top of everything to ensure they never are.
 
Ah, you edited your comment to add more.  Lucky for me I refreshed before posting.  ;)
So, yes, cloud storage poses some different concerns.  I'd suggest if you're doing something illegal that merits a warrant being served against you, you'd probably be wise not to back it up at all, with any service, ever.  Or maybe just don't do stuff that's illegal.
 
And of course it's true that black hat hackers will always try to hack valuable targets.  Again, I'd make the point that we haven't ever been successfully hacked, so we do fit the bill of having the good history of keeping our clients' accounts and data secure.
 
So, back on topic, what made you choose Webroot @ ?
(By the way, this is a fun discussion, but if it's going to keep up would you mind making a new topic please, so as not to derail this one?  Thanks :))
Userlevel 7
"The scan is done in the cloud , so by performing a full PC scan you voluntarily agree to a full PC search"

Where have you got that from??? The scan isn't done in the cloud, the results of the scans (done locally) are sent to the cloud (results are encrypted) and we don't take any personal info only a MD5 hash of the files is taken from your PC (which btw contain no personal info). Webroot as you would expect from a security company takes privacy very seriously and we dont collect data beyond whats needed to determine if a file is good or bad.

Couldn’t be tested by the typical testing entities (AV Comparatives, AV Test, etc) in the past, based on “Webroot works differently” but yet certified later

AV test in my opinion aren't a true reflection on the capability of a AV product (and I am not just talking about our product btw). Its the same way you cant test an electric car in the same way you would test a traditional petrol/diesel power car. They are so vastly different that the testing methods have to be different.
Userlevel 7
Badge +56
@ wrote:
It seemed lighter and easier to deal with than other AV's. So quick and easy. It'd be nice if they'd get rid of all the options and just have modes. Like lock down (Locks down the whole PC to provide absolute max security but still leaves the PC usable even if a little inconvenient) High Medium (normal) and Low if for whatever reason you want Low.
They did make it easier in 2013 they added this page it wasn't in the 2012 version.


 
Daniel
 

Userlevel 7
@ wrote:
Would you be interested to hear why I DID NOT chhose  WSA as my AV?
Please stay on topic of post " What reasons influenced you the most to make you choose Webroot?"
 
If you wish to start a post with your interest, do so. Thank you. ;)
Userlevel 7
@ wrote:
Topor, sorry for the late response! I kept trying to respond to your post all night, and it kept saying I appeared to be a spammer!!!  IBelow is the message I was trying to post most of the night!
 
As long as you do it in a constructive manner, and you give recommendations of what could have been done differently to make you pleased with Webroot's products or services.  No flaming though please!  I want this to be a productive thread.
 
I am moving my reply from above to down here to continue the thread On Topic.  :)
 
Two things here:
 
1) I also got that spamming error earlier.  Not quite sure what happened there, but maybe something is glitching.
 
2) I spent a good bit of time NOT trying Webroot simply because I was not fully sold on how well this new approach would work.  At least I am honest :)
 
I was given the opportunity to try it free, so I took it.  Nothing to lose right?  Well, nothing to lose but a lot to gain.  Webroot has kept me just as protected as all of the other solutions I have tried in the past, far better than some.  I know some people say that with modern computers there is no need to worry about the performance hit of other solutions.  I strongly disagree.  Maybe the performance hit is not as great as it once was, but it is still there and a problem.  And that is for brand new computers.
 
My computer is NOT new.. it is a 2008 laptop that was mid range at best when I purchased it.  The performance of my machine is hugely impacted by just about anything.  Except Webroot that is.  
 
 :)
 
I will be up front and fully honest here: I do NOT reccomend Webroot to everyone.  It depends on the situation.  For those that need strong parental controls, Webroot might not be the right solution.
Userlevel 7
I think you mean Neil Rubenking. That article is actually a great read. It goes a long way towards explaining some possible misconceptions surrounding third party testing.

The post that was removed was removed because the user in question was banned for repeatedly breaking the community guidelines. Hopefully any future posts in this thread will stay on topic, remain civil, and not exist solely for the purpose of creating a disturbance. 🙂
Userlevel 7
Badge +56
@AnorexicHippo wrote:
@ wrote:
I got it that's why I said Details, Details and I was half asleep late at night. :D
 
Thanks,
 
Daniel ;)
Hey Daniel

I believe you are a great guy and I never meant to offend you, it's just that when I see something that I don't think is right I tend to keep at it until I figure it out. Again , I apologize if I offended you.
You never did so no worries just enjoy my funny quirks at times and enjoy the forums. ;)
 
Cheers,
 
Daniel

Userlevel 7
Badge +54
I have used Norton, McAfee, Kaspersky, Avira, Avast, AVG in the past and got the chance to give WSA a go and so far I think it is by far superior to the others. It is light on resources, always up to date, responsive and easy to use, I am really impressed with it so far and I think that this program is for keeps unless the other programs can catch up a bit which may take some doing.
Userlevel 4
The following reason's are what influenced me to use WSA the most.
 
1. Webroot is a Cloud AntiVirus made up of a large community of users from around the World. The cloud analysis Millions to Billions of new files per day. I believe a cloud antivirus operated with such state of the art technology such as Webroot's would discover many threats considerably earlier than many other AntiVirus.
 
2. Webroot has been designed to be compatible with all other major security products. I believe in a layered security approach, and  WSA works well with other security products to further enhance one's security.
 
3. Webroot has a good track record at detecting some threats that many other Antivirus have not been so successful at detecting such as rogues, keysloggers, and screen captures. This makes WSA a good choice to add to one's layered security setup to strengthen those areas that other Antivirus quite commonly fail to perform well at. So WSA compliments other antivirus well to further enhance one's security as already mentioned above.

4. Webroot is the lightest Antivirus I have ever used in terms of both resource usage (CPU Usage, read, and write disk access), and memory usage.  (This does not include applications that do not use scanning techology to identify virues). Usually an antivirus will  have low memory usage, but high resource usage or  have low resource usage, but high memory usage. It's hard to find an AV that has both low resource usage, and low memory usage.
 
5. I prefer Webroot BrightCloud over other similar products to warn me about phishing Sites, and social engineering. I also like how they have made it so easy to report phishing sites, and social engineering. Some other antivirus I use, and have used in the past make this way more difficult than it should be. I have found it very difficult to find information on how, and where to report a phishing site to other vendors. Webroot makes it easy to find where to report a phishing site with Webroot BrightCloud, and they make it very simple to submit a phishing site.

6. More, and more threats are emerging that have been designed by Governments. I believe Webroot Cloud technology would have a better chance at discovering these threats than many other antivirus. The fact that Webroot has such a large community contributing to cloud from around the world with so many new files being anaylized each day would help to discover such threats.
I found the article:
 
http://securitywatch.pcmag.com/security-software/291874-webroot-accused-exonerated
 
 
"In most cases I install the antivirus software using a registration key supplied by the vendor. There's plenty of opportunity to identify my testbed "
Userlevel 7
Badge +56


 
So what influenced me to choose Webroot does everyone have all night? Prevx user since 2004 and my good friend  the Lead Developer then Webroot acquired Prevx and my good friend the V.P. of Development now in Nov 2010. It just plainly works it feels like Prevx it scans like Prevx (fast) and the same great support so what else can I say? Webroot was very, very smart to acquired Prevx and most of there Staff are now and continue to be Webroot Staff.
3 Priceless Combinations! Webroot (Spysweeper) and Webroot (Prevx) and Webroot (Bright Cloud) The End....


 
Daniel 🙂
Userlevel 2
@ wrote:
I got it that's why I said Details, Details and I was half asleep late at night. :D
 
Thanks,
 
Daniel ;)
Hey Daniel

I believe you are a great guy and I never meant to offend you, it's just that when I see something that I don't think is right I tend to keep at it until I figure it out. Again , I apologize if I offended you.
Userlevel 7
I think Daniel is a lot like me... very hard to offend but also a bit of sarcastic humor that doesn't always come out reading it in text the way it is meant: in good humor 🙂
Userlevel 4
Topor, sorry for the late response! I kept trying to respond to your post all night, and it kept saying I appeared to be a spammer!!!  IBelow is the message I was trying to post most of the night!
 
As long as you do it in a constructive manner, and you give recommendations of what could have been done differently to make you pleased with Webroot's products or services.  No flaming though please!  I want this to be a productive thread.
 
Userlevel 4
Ok, if it can stay on topic without user's responding to Topor's post instead of what the topic is about then i'm fine with that. I suggest Topor start his own thread to keep the thread on topic.
Userlevel 4
This is an interesting discusion that Topor has started about the cloud, and privacy. It is not related to this thread though. I would suggest allowing Topor to start a separate thread for this, and continue this discussion in a separate thread. I'm interesting in listening to this discussion as long as it can be done in a respectful manner. Then when someone else has the same concerns about privacy we could refer them to Topor's thread. I may have a few question about this myself.
Userlevel 7
Badge +54
Thank you for your honesty Rakanisheu, I hope that will put peoples minds at rest.
 
Userlevel 7
Roy,

Great response, and thank you for taking the time to clarify that!
Userlevel 7
Badge +56
Thanks Roy as I already knew that are privacy is well protected and for everyone else this is the clearest answer for our Members, Users and New Prospective users reading the forum so many Kudo's to you!
 
Cheers,
 
Daniel
 

I would be interested to hear your comments about the previous post (deleted) ; was something about Neil Rubick??? saing that webroot can identify a pc based on activation code and IP.
 
Thank you!
Hi JimM,
 
So, if Webroot is asked by an enforcing entity to identify a file on a certain PC, is it possible or not?
 
For example , an enforcing agency will ask Webroot to provide a list of all IP/ users who have the file  abc.exe on their computers.
 
Is this possible or not?
Userlevel 7
Badge +6
Even if Webroot doesn't keep that information, they could easily modify the backend to log it all with the request of a government. Any cloud-enabled AV that checks in about MD5s (which is most of them) makes that possible. But getting a list of all the computers that run Microsoft Word doesn't really help the government. MD5s don't give you content.
 
If a company can run executable code on your computer with an update mechanism there's no limit to what can be done, in theory. If you're going up against the government, you really shouldn't be using cloud-anything. You shouldn't even be using Windows.
 
In the end you just have to accept you're not that interesting, and that if you are then you should be a lot more careful about your information security practices. Like using throw-away laptops running Linux in a RAMdisk that routes everything through Tor.
 
If you consider a government tyrannical and all-powerful and coming after you - then yes, Webroot SecureAnywhere probably isn't the product for you. Which is just one in a long-line of products not for you. :cathappy:
Well, thanks!
 
The whole idea is why use something which can facilitate loss of privacy when you can use something else?
 
In theory, can the cloud be hacked without Webroot knowledge?The cloud is a very important centralized source of information, rather than hacking 1000000 pc's is more efficient to hack the cloud to get access to all 1000000 pc's.
 
So, in theory is this possible?
 
see this:http://computer.howstuffworks.com/cloud-computing/files-safe-in-the-cloud.htm
 
 
  • Hackers usually want the most information for the least effort. This means they will likely attack the heart of a cloud storage service rather than its individual users. Thus, you probably want to find a service provider with a good history of keeping its clients' accounts and data secure.
  • Your data isn't always immune to search and seizure by local government entities. In the U.S., for example, any cloud storage company could be served a subpoena requiring them to open their clients' data for government examination.
Userlevel 2
One of the things that convinced me to give WSA a try was my familiarity with prevx, I knew about prevx for years before Webroot bought them out and I thought it was a great app. I could go on and on but I will try to boil it down to a few salient points:

1 WSA is one of the lightest apps on this planet. What other anti malware app have you ever heard of that, after installation, takes up less than 1 MB on the hard drive?

2 WSA has been designed to maximize compatibility with other security software. You don't have to run it alongside a traditional AV, but you can if you want to.

3 As with any good AV, there are plenty of configuration options.

4 RAM usage is so minimal I hesitated to mention it.

5 Customer support that is second to none, if you get infected while running WSA, Webroot will help you remove the malware, free of charge.

6 My PC is clean, and WSA excels at keeping a clean PC clean.

An Excellent Choice
Webroot SecureAnywhere AntiVirus 2013 gives you speedy scanning and excellent malware blocking in a ridiculously small package. The whole product would fit on a 3.5" diskette, if you could find one. Its detection technology differs greatly from virtually all the competition, but it sure seems to work.

The above was stolen from this review: http://www.pcmag.com/article2/0,2817,2410545,00.asp
 
I do not intend to imply that WSA is perfect, because it is not, I have had some problems with the web threat shield and I don't believe it is fully compatible with Firefox, but overall I think WSA is a fine program and I still intend to purchase it when my trial is over.

Reply