Skip to main content

SecureAnywhere Backup & Sync with regard to Cryptowall/Cryptolocker

  • February 18, 2015
  • 6 replies
  • 41 views

I just upgraded from SecureAnywhere Antivirus to SecureAnywhere Complete to gain access to the Backup & Sync function with the intent of having cloud storage of some of my more critical data in addition to my remote backups.  However, after backing up some of my data, I now see that Webroot Backup shows up under Computer in Windows Explorer.  Doesn't this leave that data exposed to threats such as Cryptowall/Cryptolocker since I didn't have to enter a password or anything to gain access to it?  Are files in the Webroot Backup protected from change unless logged in through the Webroot Console? 
Thanks,
Richard

6 replies

Baldrick
Gold VIP
  • Gold VIP
  • February 18, 2015
Hi RPM
 
Welcome to the Community Forums.
 
A very good question to which I would answer that as WSA will protect against Cryptowall/Cryptolocker thene the issue should not arrive as WSA will prevent the 'nasty' from doing its thing.
 
But just in case it did manage to get through then it would be useful to know and I suspect that this question is one for the likes of @ or @ to give us the low down.  I have pinged them for you so hopefully we will have a learned answer soon.
 
Regards, Baldrick

DanP
Forum|alt.badge.img+35
  • OpenText Employee
  • February 18, 2015
@ wrote:
I just upgraded from SecureAnywhere Antivirus to SecureAnywhere Complete to gain access to the Backup & Sync function with the intent of having cloud storage of some of my more critical data in addition to my remote backups.  However, after backing up some of my data, I now see that Webroot Backup shows up under Computer in Windows Explorer.  Doesn't this leave that data exposed to threats such as Cryptowall/Cryptolocker since I didn't have to enter a password or anything to gain access to it?  Are files in the Webroot Backup protected from change unless logged in through the Webroot Console? 
Thanks,
Richard
Hello Richard, 
 
The local copies can be encrypted by crypto-ransomware, and if those encrypted copies are then backed up to the cloud the cloud copies could also be encrypted. This is something we've unfortunately seen with many different backup solutions and reinforces the importance of remote/offsite backups to any disaster recovery plan. 
 
-Dan
 
 

Baldrick
Gold VIP
  • Gold VIP
  • February 19, 2015
Hi Dan
 
Many thanks for responding and providing the professional point of view.
 
Regards, Baldrick

  • Author
  • Fresh Face
  • February 19, 2015
Yes, thank you for the replies, but it does not answer the question.  If I make a manual, not a synced back up, is the copy on WebRoot Backup secure?  I understand that if I overwrite either manually or through a sync operation that I have successfully archieved a corrupted file.  Is there a "fire wall" between my computer and the current back up on the WebRoot backup?  In other words, if I put a file out there tonight and  I personally don't touch it, will it be there, in tact, if anything happens on my  machine locally?  More simply put, can I trust it as a safe deposit box?

RetiredTripleHelix
Gold VIP
Forum|alt.badge.img+56
@ wrote:
@ wrote:
I just upgraded from SecureAnywhere Antivirus to SecureAnywhere Complete to gain access to the Backup & Sync function with the intent of having cloud storage of some of my more critical data in addition to my remote backups.  However, after backing up some of my data, I now see that Webroot Backup shows up under Computer in Windows Explorer.  Doesn't this leave that data exposed to threats such as Cryptowall/Cryptolocker since I didn't have to enter a password or anything to gain access to it?  Are files in the Webroot Backup protected from change unless logged in through the Webroot Console? 
Thanks,
Richard
Hello Richard, 
 
The local copies can be encrypted by crypto-ransomware, and if those encrypted copies are then backed up to the cloud the cloud copies could also be encrypted. This is something we've unfortunately seen with many different backup solutions and reinforces the importance of remote/offsite backups to any disaster recovery plan. 
 
-Dan
 
 
Hi @ doesn't the Back Up & Sync keep 10 copies if I remember correctly? Tyler said that in this Webinar https://www.brighttalk.com/webcast/8241/127363 so can you look into it I think he said not to re-download the first few but to determine the one before the infection? It could be one of the other Webinars but I remember it was said. https://www.brighttalk.com/channel/8241
 
Thanks,
 
Daniel 😉

DanP
Forum|alt.badge.img+35
  • OpenText Employee
  • February 19, 2015
@ wrote:
Yes, thank you for the replies, but it does not answer the question.  If I make a manual, not a synced back up, is the copy on WebRoot Backup secure?  I understand that if I overwrite either manually or through a sync operation that I have successfully archieved a corrupted file.  Is there a "fire wall" between my computer and the current back up on the WebRoot backup?  In other words, if I put a file out there tonight and  I personally don't touch it, will it be there, in tact, if anything happens on my  machine locally?  More simply put, can I trust it as a safe deposit box?
The backup copy is secure, yes. When a backup is ran the files are securely encrypted and uploaded. The backup keeps the last ten revisions of the files also.
 
-Dan