This site needs to use cookies to function correctly.

Please click the button to accept our cookies. Some may have been set already. Read about our cookies and how to manage them.

Allow Cookies

About Cookies

Cookies are files stored in your browser and are used by most websites to help personalise your web experience.

They enable this website to remember you, either for the duration of your visit using a Session Cookie or for repeat visits using a Persistent Cookie.

Some features on this site will not function if you do not allow cookies.

Our Cookies

We only use "First party cookies" that are set or read by this website.

We do not use "Third party cookies" where your information is passed to other websites, such as where advertising is targeted to you across the web based upon your browsing habits.

Managing Your Cookies

Most web browsers allow some control of most cookies through the browser settings.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.


Close Up

Setting heuristics

With Heuristics settings, you can adjust the level of threat analysis that Webroot SecureAnywhere performs when scanning your computer. Heuristics can be adjusted for separate areas of your computer, including the local drive, USB drives, the Internet, the network, CD/DVDs, and when your computer is offline. We recommend that you keep Heuristics at their default settings, unless you are an advanced user and understand how changing settings will impact threat detection.

Note: If you want to adjust Heuristics settings for all the computers managed in your SecureAnywhere account, go to the PC Security page.

Webroot SecureAnywhere includes three types of heuristics:

  • Advanced Heuristics. Analyzes new programs for suspicious actions that are typical of malware.

  • Age Heuristics. Analyzes new programs based on the amount of time the program has been in the community. Legitimate programs are generally used in a community for a long time, but malware often has a short lifespan.

  • Popularity Heuristics. Analyzes new programs based on statistics for how often the program is used in the community and how often it changes. Legitimate programs do not change quickly, but malware often mutates at a rapid pace. Malware may install as a unique copy on every computer, making it statistically "unpopular."

To change Heuristics settings:

  1. Open the main interface.

  2. At the bottom left, click Settings.  

    SettingsLink.png

  3. In the Settings panel, click Heuristics.

    SettingsHueristicsDialog.png

  4. Select the tab for the area you want to change heuristics settings: Local, USB, Internet, Network, CD/DVD, or Offline.

  5. Select the radio buttons and slide bars to adjust the settings, which are described in the following tables. When you're done, click the Save All button.

Radio buttons - additional heuristic options

Disable Heuristics

Turns off heuristic analysis. Not recommended.

Apply advanced heuristics before Age/Popularity heuristics

Warns against new programs as well as old programs that exhibit suspicious behavior.

Apply advanced heuristics after Age/Popularity heuristics

Warns against suspicious programs detected with Advanced Heuristics, based on Age/Popularity settings.

Warn when new programs execute that are not trusted

Warns when malicious, suspicious, or unknown programs try to execute. (This setting may result in false detections.)


Slider - Advanced Heuristics

Disabled

Turns off Advanced Heuristics for the area selected in the tab, leaving it vulnerable to new threats. (However, it will still be protected against known threats.)

Low

Detects programs with a high level of malicious activity. This setting ignores some suspicious behavior and allows most programs to run.

Medium

Balances detection versus false alarms by using our tuned heuristics in the centralized community database.

High

Protects against a wide range of new threats. Use this setting if you think your system is infected or at very high risk. (This setting may result in false detections.)

Maximum

Provides the highest level of protection against new threats. Use this setting if you think that your system is infected or at very high risk. (This setting may result in false detections.)


Slider - Age Heuristics

Disabled

Turns off Age Heuristics for the area selected in the tab, leaving it vulnerable to new threats. (However, it will still be protected against known threats.)

Low

Detects programs that have been created or modified very recently.

Medium

Detects programs that are fairly new and not trusted, preventing zero-day or zero-hour attacks. We recommend using this setting if you do not install unpopular programs and want an extra degree of security to prevent mutating threats.

High

Detects programs that have been created or modified in a relatively short time and are not trusted. This setting is recommended only if you rarely install new programs and if you feel that your system is relatively constant. This setting may generate a higher level of false alarms on more obscure or unpopular programs.

Maximum

Detects all untrusted programs that have been created or modified fairly recently. You should only use this setting if your computer is in a high-risk situation or if you think that it is currently infected.


Slider - Popularity Heuristics

Disabled

Turns off Popularity Heuristics for the area selected in the tab, leaving it vulnerable to new threats. (However, it will still be protected against known threats.)

Low

Detects programs that have been seen for the first time. This setting is recommended if you frequently install new programs, beta programs, or you are a software developer who frequently creates new programs.

Medium

Detects unpopular and mutating programs, preventing zero-day and zero-hour attacks. This setting is recommended if you do not frequently install new programs and want an extra level of protection over standard settings.

High

Detects programs that a significant percentage of the community has seen. This setting is recommended if you do not install new programs and suspect that your system is infected.

Maximum

Detects programs that a large percentage of the community has seen. This setting is recommended if you think your system is at a very high risk and are willing to accept that you may receive false alarms because of the strict heuristic rules.



CNTOPT:7