We welcome the Webroot scanner to VirusTotal.

Discussion in 'Webroot' started by greenebola, Feb 15, 2017.

  1. greenebola

    greenebola Level 4

    Jun 30, 2014
    180
    1,194
    Windows 10
    Webroot
    Official Website:
    http://blog.virustotal.com/2017/02/virustotal-webroot.html
    We welcome the Webroot scanner to VirusTotal. This is a machine learning engine from the US. In the words of the company:



    "Webroot SecureAnywhere Business Endpoint Protection is a cloud-driven anti-malware solution and was the first next generation solution to offer a full replacement to conventional AV when launched in 2011.

    Rather than rely on static signatures to identify malicious files and process, Webroot uses real-time monitoring and analysis of the events occurring within a device. Then, by using the extensive resources of cloud-based computing, threat and behavioral intelligence, Webroot is able to predict with negligible false positives any signs of malicious behavior. Windows PE files submitted to VirusTotal will be processed by the Webroot PE Scanner, non-PE files will not be scanned.”


    Webroot has expressed its commitment to follow the recommendations of AMTSO and, in compliance with our policy, facilitates this review by MRG Effitas, an AMTSO-member tester.

    VirusTotal Blog: VirusTotal += Webroot


    Webroot Community Forum:
    Webroot added to VirusTotal - Webroot Community
     
    davisd, Wave, Yash Khan and 15 others like this.
  2. In2an3_PpG

    In2an3_PpG Level 11

    Nov 15, 2016
    505
    8,353
    IT Jr. Network Admin
    United States
    Windows 10
    Default-Deny
    That's cool.

    Glad they joined in.
     
    Wave, Yash Khan, Mr.Pr and 3 others like this.
  3. Winter Soldier

    Winter Soldier Level 25

    Feb 13, 2017
    1,466
    10,344
    PLC programmer - Robotics industry
    Wormhole
    Windows 10
    Emsisoft
    Good news.
    Glad to see a new kid in town :)
     
    Wave, Yash Khan, Mr.Pr and 1 other person like this.
  4. Mr.Pr

    Mr.Pr Level 5

    Apr 6, 2016
    227
    1,165
    iran
    Windows 10
    Doctor Web
    good for who?

    it's bad for Webroot users : ))
    the only way which Webroot was able to protect their users was their Database, and now that's published too! good for Malware Writers xDD

    of course Webroot anti-phishing is impressive, but yet they have nothing but their Database. ( i need a budyguard to protect me against Webroot fanboys after posting this reply ))) )
     
    lyldz and Wolfie like this.
  5. amir 957

    amir 957 Level 4

    Jan 9, 2017
    150
    644
    Iran
    Windows 10
    ESET
    Why do you say that's good for Malware writers?
     
    davisd and Wave like this.
  6. Mr.Pr

    Mr.Pr Level 5

    Apr 6, 2016
    227
    1,165
    iran
    Windows 10
    Doctor Web
    the only Webroot weapon against them was its Database, now its published, they can easly found out their malware will catch by Webroot or not :D
     
    amir 957 likes this.
  7. Azure Phoenix

    Azure Phoenix Level 19

    Oct 23, 2014
    923
    2,471
    Puerto Rico
    Well, this is weird... Considering that they left Virustotal more than a year ago (I believe).
     
    davisd and Wave like this.
  8. Mr.Pr

    Mr.Pr Level 5

    Apr 6, 2016
    227
    1,165
    iran
    Windows 10
    Doctor Web
    even themselves believed that it would be not good for them to join VT :D what changed their believes? God knows!
     
    Wave likes this.
  9. KGBagent47

    KGBagent47 Guest

    Scanning through VirusTotal detection's (Only this site will understand why that is amusing) I noticed the addition of a new AV engine Webroot. As a Webroot fan I'm glad to see this.

    Perhaps somehow they can utilize this to improve their static detection.
     
    Nevi, davisd and MalwareBlockerYT like this.
  10. Wave

    Wave Guest

    You do not understand how VirusTotal works, let me direct you to the FAQ where you can do some research: FAQ - VirusTotal
    The engine submitted to VirusTotal may not necessarily be identical to the engine implementation in the end-user or enterprise product. This means that the VirusTotal engine version may cause more false positive detection's, or have a worse detection compared to the actual product itself.

    Regarding the "good for who?" part, it's good for normal people with safe browsing habits who scan downloads at VirusTotal prior to running them on their systems, since now they're will be an extra engine to scan the files with -> each engine may work differently therefore Webroot may help someone out there scanning a download that other vendors may not detect.

    Business? Marketing?
     
    Winter Soldier likes this.
  11. Winter Soldier

    Winter Soldier Level 25

    Feb 13, 2017
    1,466
    10,344
    PLC programmer - Robotics industry
    Wormhole
    Windows 10
    Emsisoft
    Agreed @Wave :)
    Webroot is a great addition on VT but antivirus products include many technologies: behavior blockers, heuristic behavior analyzers, dynamic heuristic engines, used to mitigate the gap between the creation of malware and the release of signatures.
    If, when analyzing a file to VirusTotal, it comes out some heuristics detections, this doesn't necessarily mean that all the heuristic technology of a certain product was included in the on-demand scanners. Simply, there are some technologies that may not be included in an on demand scanners. These technologies play a crucial role in the interception of 0day malware attacks.
     
    davisd and Wave like this.
  12. Umbra

    Umbra From Emsisoft
    Developer

    May 16, 2011
    17,169
    29,702
    Community manager
    Vietnam & France
    Windows 10
    Emsisoft
    because VT's new rule enforce vendors to submit their engines if they want use VT in their software?

    maybe they need VT after all ?
     
  13. FleischmannTV

    FleischmannTV Level 7
    Trusted

    Jun 12, 2014
    316
    1,160
    Windows 10
    That's what I am thinking, probably a lot more than they'd care to admit.
     
    askmark and davisd like this.
  14. greenebola

    greenebola Level 4

    Jun 30, 2014
    180
    1,194
    Windows 10
    Webroot
    WR_Paul wrote:
    Product Manager

    Hi Everyone,

    We decided to launch the VirusTotal scanner to provide the wider community the ability to get our opinion on files, it's taken us a little while to get here as we've been heads down focussing on servicing the needs of our customers, via our product portfolio.

    Also, it should be noted that the engine we published on VT is different to our engine in the Webroot SecureAnywhere product portfolio. The engine will statically scan files submitted to VT leverage our Threat Intelligence backend to provide classifications. As you all may know, in oue SecureAnywhere agent have classification for good, bad and unknown files returned ( our log files highlight this), VT focussed purely on the Bad (malicious) classifications, so you will not be able to see whether a submitted file is Good (whitelisted) via VT, please use our SecureAnywhere agent if you'd like to verify if files are whitelisted.

    If you have any questions, feel free to post here or PM me.

    Regards,

    Paul
    Product Strategy

    Webroot added to VirusTotal - Page 2 - Webroot Community
     
    Exterminator and Spawn like this.
Loading...
Similar Threads Forum Date
Hello and thank you so much for the kind welcome! New Member Introductions Dec 19, 2017
Hey Guys! Hope you will welcome me to this forum. :) New Member Introductions Oct 7, 2017
Welcome to 2017: Pacemaker Patients Told to Visit Doctors to Receive Security Patches Security News Aug 30, 2017