Skip to main content
Solved

"Enhanced" Ransomware protection

  • May 24, 2016
  • 10 replies
  • 92 views

Forum|alt.badge.img+1
What's different / new about the "Enhanced" Ransomware protection mentioned on the product website?

Best answer by Baldrick

Understand where you are coming from but even the slightesst indication of exactly what the defense do can give the malwaare writers a foothold with which to try to circumvent the defenses...so I suspect that Webroot will not change its policy on this one.
 
And as for reports 'that some ransomware has slipped by'...well, no security app is 100% effective 100% of the time...not even WSA.
 
Your best bet to try to illicit answers is to open a support ticket...good luck with that.
 
Regards, Baldrick.

10 replies

Baldrick
Gold VIP
  • Gold VIP
  • May 24, 2016
Hi cavehomme
 
I am afraid that we will never know as Webroot are no about to tip their had to the malware writers by letting them know what defenses WSA includes to counter/protect us from their nefarious endeavours.
 
We just have to trust in WSA and Webroot when they say that WSA has 'Enhanced Ransomware Protection'.
 
Regards, Baldrick

Forum|alt.badge.img+1
  • Author
  • Popular Voice
  • May 25, 2016
I understand the lack of transparency to a certain extent but hope there would be some explanation. Putting our trust into one product or company is not something I would do personally, especially as there are reports on this forum that some ransomware has slipped by WRSA or caused damage that was monitored by WRSA but which could not be reverted.

Baldrick
Gold VIP
  • Gold VIP
  • Answer
  • May 25, 2016
Understand where you are coming from but even the slightesst indication of exactly what the defense do can give the malwaare writers a foothold with which to try to circumvent the defenses...so I suspect that Webroot will not change its policy on this one.
 
And as for reports 'that some ransomware has slipped by'...well, no security app is 100% effective 100% of the time...not even WSA.
 
Your best bet to try to illicit answers is to open a support ticket...good luck with that.
 
Regards, Baldrick.

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • May 25, 2016
If you look, for example, at the results WSA has achieved in the MRG 360 tests, particularly against ransomware, you will see supporting evidence of how effective WSA is.  
 
I was trying to find a post I made about how positive MRG's findings(and comments) were in this respect, but could not find exactly what I sought....wish one could make a detailed search of one's posts. If I find the comments, I'll post the reference.
 
 

Forum|alt.badge.img+1
  • Author
  • Popular Voice
  • May 25, 2016
OK thanks

Dermot7
Gold VIP
Forum|alt.badge.img+3
  • Gold VIP
  • May 25, 2016
@ wrote:
OK thanks
Still can't find the forum post, but part of it (from memory} can be found on page 5 of the Q2 2015 report, where they said that in internal tests WSA was able to undo the encryption etc.  MRG – Our Projects    
 
And I think it's fair to say that WSA has even improved since then ;) 
 
 

Forum|alt.badge.img+1
  • Author
  • Popular Voice
  • May 25, 2016
Their latest 2016 Q1 reports look very good for for Webroot.

Baldrick
Gold VIP
  • Gold VIP
  • May 25, 2016
Indeed, Dermot...but even Webroot would admit that they cannot guarantee 100% remediation of ransomware activity 100% of the time...specifically because as quick as Webroot are in updating ENZO there is very occassionally a 'gap'...but even with that WSA has your back for the very vast majority of the time...;) 

Forum|alt.badge.img+1
  • Author
  • Popular Voice
  • May 25, 2016
Interesting that in finalcial malware detection according to those MRG 2016 Q1 tests, Webroot and Microsoft are essentially neck and neck. Where Webroot pulls way ahead and becomes a winner is with the monitoring and isolation as well as locking down the banking connection. Perhaps one day MS might buy Webroot 😉

Baldrick
Gold VIP
  • Gold VIP
  • May 25, 2016
Well, anything is possible...assuming that the offer/money is right...but let us hope thatsuch a things is a long, long, long way off. ;)