WEBROOT DISCOVERS POTENTIAL WEAKNESSES IN VISTA MALWARE PROTECTION

Boulder, Co. — Webroot Software, Inc., a leading provider of security software for the consumer, enterprise and SME markets, today unveiled evidence of potentially ineffective blocking capabilities in Windows® Defender, slow definition updates, and weak anti–virus capabilities in the default anti–spyware and anti–virus components of Microsoft’s Windows Vista™ operating system and Live OneCare™ suite.

"We applaud Microsoft for the substantive improvements and exciting new features offered in Windows Vista. The various built–in applications, networking enhancements, and improved graphics support make for an impressive product," said Gerhard Eschelbeck, CTO and SVP of engineering for Webroot Software. "However, we want to make sure that users understand the Vista operating system’s limitations, and caution them that Microsoft’s default malware blocking application and anti–virus programs may not fully protect them. With the continued increase in the ingenuity and tenacity of cyber criminals and malware publishers, it is crucial for users to additionally deploy a proven computer security solution that provides real–time protection against all forms of spyware and viruses."

Weak Spyware Blocking Capability
As part of the ongoing testing performed by Webroot’s Threat Research team, it was discovered that Windows® Defender failed to block 84 percent of a testing sample–set that included 15 of the most common variations of existing spyware and malware. In evaluating its ability to block spyware and malware before it has infected a user’s machine, Webroot’s Threat Research Team found the Windows® Defender program’s performance was not in keeping with many third–party security applications, including Webroot’s own award–winning anti–spyware program, Spy Sweeper®. Threats of various types – including adware, Potentially Unwanted Programs (PUPs), system monitors, keyloggers and trojans – were able to reside on the testing environment undetected by Windows Vista™. One PUP tested was able to install under administrator privileges, run and capture keystrokes without any adaptation from its Windows® XP operating environment, and Defender did not detect the installation or the running application.

Slow Definition Updates Create Vulnerability
Deficiencies in the Windows Vista™ security system extend beyond its spyware blocking problems. Microsoft currently issues spyware definition updates for its Windows® Defender product every week to ten days. While this may sound adequate, Webroot’s Threat Research Team, on average, identifies 3,000 new traces of spyware and other unwanted applications in a single month and issues spyware definition updates on an hourly or daily basis as needed.

Susceptible Anti-Virus Costs Extra
Webroot also cautions that security weaknesses in the Windows Vista™ operating system are not exclusive to spyware, but could expose users to the dangers of viruses and other forms of malware as well. According to research from industry–leading anti–virus companies and leading analysts, the Microsoft Windows Vista™ operating system is susceptible to some of the most common virus and malware threats due to issues with its user access controls and inability to detect some common viruses. In addition, anti–virus protection is not free for Windows Vista™ users. They must purchase the Microsoft Live OneCare™ suite for $49.95 for anti–virus protection.

"We understand that Microsoft’s main goal is to provide a new operating system that generally improves users’ computing environments, and we genuinely feel that Windows Vista accomplishes this," adds Eschelbeck. "However, as a company that serves on the front lines in the battle against spyware and cyber crime, we feel strongly that in order to provide the best protection for Internet users, security must be your top – and only – priority. We hope that by providing information on possible security weaknesses in the Windows Vista OS, users will be able to make informed decisions about their computing security needs."

To learn more about Webroot products and user security needs when upgrading to Vista, please visit www.webroot.com/vista

ABOUT WEBROOT
Webroot Software, Inc. provides industry–leading security software for consumers, enterprises and small and medium–sized businesses worldwide. Globally recognized for its award–winning Spy Sweeper® line of anti–spyware products, Webroot recently incorporated anti–virus protection into two new products for consumers and SMBs, respectively: Spy Sweeper® with AntiVirus and Webroot® SME Security. The company also recently expanded into the parental controls software market with the introduction of Webroot® Child Safe®. The Boulder, Colorado based company is privately held and backed by some of the industry's leading venture capital firms, including Technology Crossover Ventures, Accel Partners and Mayfield. Webroot's software consistently receives top review ratings by respected third–party media and has been adopted by millions globally. Available as either branded solutions or on an OEM basis, Webroot products can be found at www.webroot.com and on the shelves of leading retailers worldwide. To find out more about Webroot, visit the website or call 1–800–772–9383.