The potentially malicious contents of the drive would have to execute in order to be a threat, and Webroot would still protect you against the threat, regardless of it initiating from a non-system drive. It would be the same as protecting you from threats originating from a secondary, internal SATA hard drive. Even a hot-swapped SATA drive is going to act like a regular SATA hard drive in these respects. All of the shields still apply (realtime, behavioral, core system, offline, zero day).



Unknowns are still monitored and journaled as well, but they are not blocked outright as the question asks.

---

Thanks for the quick response and info.  😃

---

Thanks Jim. It's always pleasure to be reading posts which confirm WSA's capabilities in protecting us against threats regardless of the way they could try to infiltrate  ;)

---