AVLab.pl Advanced In-The-Wild Malware Test results for March 2025

Disclaimer
  1. This test shows how an antivirus behaves with certain threats, in a specific environment and under certain conditions.
    We encourage you to compare these results with others and take informed decisions on what security products to use.
    Before buying an antivirus you should consider factors such as price, ease of use, compatibility, and support. Installing a free trial version allows an antivirus to be tested in everyday use before purchase.

simmerskool

Level 41
Verified
Top Poster
Well-known
Apr 16, 2017
3,094
I do apologize ahead of my upcoming comment but it does have to be made: I question validity of any test and it's method that scores Webroot at 100%; 100% of the time it's tested.

I know I am a single datapoint but come on my own personal experience with the product was not so great. The only time within the last 15 years that I came across an infection that I had to remedy from my system was when that system was running webroot.
you are not alone! see my short macOS comment above, I could elaborate but won't -- just know BAD! I cannot comment re webroot on windows -- I ran it on win for awhile but then no more.
 

Andy Ful

From Hard_Configurator Tools
Verified
Honorary Member
Top Poster
Developer
Well-known
Dec 23, 2014
8,916
Maybe @Shadowra needs to re-test Webroot??

I do not think Webroot can do better than in this test (without WHHLight):

Against evasive threats, Webroot needs additional protection (like WHHLight, CyberLock, etc.). The result could probably be OK, even when WHHLight was used without WDAC (only SimpleWindowsHardening restrictions for non-EXE threats).

If Shadowra wants to make another test, it would be interesting to test EXE files separately. Unfortunately, the rollback feature can be triggered after some minutes. So, after the test, it would be necessary to wait an hour or more (depending on the number of executed samples) and restart the system before checking for possible infections.:(

The "wait-and-see approach" of Webroot is hard to test when the samples are executed one after the other. Many samples are actually executed in the system and are allowed to make many suspicious changes. So, the samples executed later are more evasive as compared to the test when each sample is executed on a clean machine, like in AVLab and SE Labs tests. This issue is not so important to other AVs, which have much better malware signatures (local and in the cloud) and pre-execution detection.
 
Last edited:

simmerskool

Level 41
Verified
Top Poster
Well-known
Apr 16, 2017
3,094
I do not think Webroot can do better than in this test (without WHHLight):

Against evasive threats, Webroot needs additional protection (like WHHLight, CyberLock, etc.). The result could probably be OK, even when WHHLight was used without WDAC (only SimpleWindowsHardening restrictions for non-EXE threats).

If Shadowra wants to make another test, it would be interesting to test EXE files separately. Unfortunately, the rollback feature can be triggered after some minutes. So, after the test, it would be necessary to wait an hour or more (depending on the number of executed samples) and restart the system before checking for possible infections.:(

The "wait-and-see approach" of Webroot is hard to test when the samples are executed one after the other. Many samples are actually executed in the system and are allowed to make many suspicious changes. So, the samples executed later are more evasive as compared to the test when each sample is executed on a clean machine, like in AVLab and SE Labs tests. This issue is not so important to other AVs, which have much better malware signatures (local and in the cloud) and pre-execution detection.
@Andy Ful & @Shadowra IIRC Prevx was ok to run with MS Defender & any other 3d-party AV, that was years ago, so is Webroot still compatible with 3d-party AV or with MS Defender. I can visualize that Webroot with Defender & Cyberlock might be a good combo with no slowdowns if compatible. IIRC @danb said Webroot was good with VS/CL but that was also in times past.
 

simmerskool

Level 41
Verified
Top Poster
Well-known
Apr 16, 2017
3,094
Webroot reply was minimally responsive imo: "Yes, You can install Webroot if Windows Defender is already on your computer. Just make sure to turn off the periodic scanning if you have issues installing Webroot." Most likely I'll take a pass...
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top