Reply to thread

Message

<blockquote data-quote="Windows Defender Shill" data-source="post: 721761" data-attributes="member: 61421">I&#039;ve not seen anything suggesting they utilize 3rd party signatures. Behavior blocker for Webroot is a complex subject. From my understanding, their method of heuristics is a increasing level of distrust for unknown programs and actions. If a unknown program doesn&#039;t trigger any red flags then it&#039;s changes are simply journaled until confirmed non malicious.&nbsp; if a unknown program starts demonstrating certain bad behavior the user is warned and the action is blocked by default until the program can be determined malicious. If the program is determined malicious at anytime it is quarantined and the changes it made to the system are reversed.&nbsp; *This can also be done manually at any time via control active processes/ stop untrusted processes and rescan the machine. This is not a perfect system but I would say it is highly effective. Webroot does however offer varying degrees of protection to the point of white list only programs are allowed to run.</blockquote>

[QUOTE="Windows Defender Shill, post: 721761, member: 61421"] I've not seen anything suggesting they utilize 3rd party signatures. Behavior blocker for Webroot is a complex subject. From my understanding, their method of heuristics is a increasing level of distrust for unknown programs and actions. If a unknown program doesn't trigger any red flags then it's changes are simply journaled until confirmed non malicious. if a unknown program starts demonstrating certain bad behavior the user is warned and the action is blocked by default until the program can be determined malicious. If the program is determined malicious at anytime it is quarantined and the changes it made to the system are reversed. *This can also be done manually at any time via control active processes/ stop untrusted processes and rescan the machine. This is not a perfect system but I would say it is highly effective. Webroot does however offer varying degrees of protection to the point of white list only programs are allowed to run. [/QUOTE]

Verification