Webroot Total Protection Scanning for threats

Summary

Your computer's overall protection status causes the Windows system tray icon and the main interface to change colors:

Color state	Cause	Resolution
Green	This means your computer is secure.	N/A
Orange	One or more scans have pending actions.	Click on the notification or the appropriate scanner and review what is pending.
Red	One or more shields are disabled, leaving your system in an insecure state.	Within the notifications, click the button to enable the disabled shield(s).

This article applies to:

Products	Platforms
Webroot Total Protection	Windows and Apple

Solution

On your computer, you can view details about the current status by right-clicking on the Webroot icon in the system tray and then selecting Home.

Note: On Mac, "Open Webroot Total Protection" is displayed when clicking on the Webroot icon in the system tray.

Scans run every day automatically. Based on the time set within Virus Protection > Schedule. For more details, please see the Helpful Links section at the bottom of this article.

The default Quick Scan searches all areas where potential threats can hide, including drives, files, and system memory. It looks for items that match Webroot threat determinations, match descriptions in the Webroot community database, or exhibit suspicious behavior

If Webroot detects a potential threat, it will automatically quarantine the file. If you believe the detected file is a False Positive (FP), you can restore the file from Virus Protection > Quarantine. For more details, please see the Helpful Links section.

Running a manual scan

Open the Webroot User Interface.
Click on Virus Protection.
Click on Quick, Full, or System Scan.

Note: The different scan types are described in the "What is the Virus Protection scanner?" article in the Helpful Links section.

Note: Webroot Total Protection for Mac only offers a Full Scan option. The 'Standard scan' is performed by our Realtime Shield and does not need to be manually run.

After starting a manual scan, the scan progress screen displays the scan status, its duration, and the number of threats detected.

Enabling Split Tunneling

Open the Webroot User Interface.
Click on Virus Protection.
Click on Reports.
Select what is displayed:
- The drop-down options are:
  - PIE Summary - A pie chart indicating the number of threats detected by the Realtime Shield compared to On-Demand (manual) scans.
  - Summary - Summaries for threats found by the Realtime Shield, On-Demand Scans, Application Scans, and the Web Threat Shield.
  - History - Lists scan activity by minutes, hours, days, etc.
Select the period for the reports:
- The drop-down options are:
  - Ever, Last 6 months, Last Month, Last Week, Last 3 days, and the Last Day.
Click on the page icon to the right of the desired report to review the details.
Within the Report Details, you can copy the report and select various actions:
- The drop-down options are:
  - Exclude & Restore from Quarantine - Creates an exclusion for the detected item and restores it from the Quarantine folder.
  - Delete from Quarantine - Deletes the item(s) from the Quarantine folder. We do not recommend using this option without guidance from Webroot Support.
  - Manage Quarantine - This takes you to the Quarantine tab to manage items quarantined by Webroot.
  - Manage Exclusions - This takes you to the Allow/Block Files tab to manage items excluded from Webroot scans.
  - Visit scan reports - This takes you to the Reports tab to view other reports.

Helpful Links

Thanks for your feedback!