App Review Webroot Secure Anywhere (Rollback Test Day 5)

[Petrovic]

Checking back in to see if Webroot can undo the changes made be the Malware in the first test.

 

[FleischmannTV]

I thought it was interesting that, despite the removal of all monitored processes and hence the rollback of all their actions, there still was a start-up entry for a removed file remaining. This start-up entry should have been removed as well. In my opinion he should ping Webroot with on issue, so they can take a look at it.

The part I strongly disagree with was his comments after the HitmanPro scan, because he said there was still malware on the system. He should have pointed out that none of those were actually running or had an associated registry key, so that they could run at a later time. These were possibly just inactive remnants which would have stayed in active until removal.

 

[Behold Eck]

Good review as per usual.

The deal breaker for me is the detection rate plus the time taken to roll back.It will be interesting to see what if anything gets detected in pt3.

Enjoy your vacation.

Regards Eck

 

[FleischmannTV]

@Behold Eck

I don't think @Petrovic made the video, he just posted it here.

 

[Petrovic]

@Behold Eck

I don't think @Petrovic made the video, he just posted it here.

Video by: MAXCyberDefense

 

[Behold Eck]

@Behold Eck

I don't think @Petrovic made the video, he just posted it here.

Should have spotted that,maybe need my eyeball sharpened ?

Regards Eck

 

[Warrior]

I not a fan of Webroot Secure Anywhere Rollback, I think they are om the wrong track with this.
prevention , detection , removal , I think most people would be looking for something else to find and get rid of the malware if the thought it was on the system, format or image restore come to mind ,
so I really don't see the point of this Rollback feature.
interesting test all the same.