Solved

WRSkyClient.x64.exe

  • 11 April 2020
  • 10 replies
  • 1449 views

Badge +5

I just notices this file and was unaware that this had been added to my Webroot folder.   Can any one tell me what this does or what it is for ?

icon

Best answer by TripleHelix 13 April 2020, 19:46

Hello @Joseph1973 

 

Yes they were added but not much info on them.

 

New files will be added in these locations:

C:\ProgramData\WRCore\CoreService

C:\ProgramData\WRCore\SkyClient\DB

C:\Program Files\Webroot\Components

C:\Program Files\Webroot\Core

C:\Windows\System32\drivers (WRCore.x64.sys)

And two new processes will run:

WRCoreService.x64.exe

WRSkyClient.x64.exe

There are no changes to the existing agent installation on your system.

 

Thank you to those who have confirmed receipt of the new files and processes to your systems.  

I’m not in a position to provide information about the new files and processes at this time.

I do recommend you let these new files and processes communicate in the same way you let the WSA agent itself communicate.

Thanks!

Brad

 

Thanks,

View original

10 replies

Userlevel 7

Hello @Joseph1973 

 

Yes they were added but not much info on them.

 

New files will be added in these locations:

C:\ProgramData\WRCore\CoreService

C:\ProgramData\WRCore\SkyClient\DB

C:\Program Files\Webroot\Components

C:\Program Files\Webroot\Core

C:\Windows\System32\drivers (WRCore.x64.sys)

And two new processes will run:

WRCoreService.x64.exe

WRSkyClient.x64.exe

There are no changes to the existing agent installation on your system.

 

Thank you to those who have confirmed receipt of the new files and processes to your systems.  

I’m not in a position to provide information about the new files and processes at this time.

I do recommend you let these new files and processes communicate in the same way you let the WSA agent itself communicate.

Thanks!

Brad

 

Thanks,

Badge +5

Triple Helix.  Thanks so much for your response.  I will do as you advised but will continue to monitor.

Thanks again !

Userlevel 7

You’re very welcome!

We have Webroot installed on more than 400 machines. All was working fine until few days ago. It seems that since an update, WRSkyClient process is running on some of our machines. We have regularly up to 100% usage on these machines as following:

https://uploads-us-west-2.insided.com/webroot-en/attachment/0345b2e6-dc15-42b9-8d44-c338b3aa6b05.png

 

The 100% CPU usage can stay for easily few minutres and occasionaly 30 minutes or more, practicly hanging the work on the PC meanwhile.

Can we disable this process from running on these machines and from installing on the other machines until this issue is resolved?

 

Another exemple after lauchung the Snip tool who took 30 second to run:

 

Userlevel 7

Hello @hani 

 

Personally I have not seen this so it’s best to Submit a Support Ticket and by the sounds of it you are a Business user or an MSP so you can contact Business Support via there Ticket System.

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue and support can take up to 48 hours to reply or a little longer because of COVID-19.

 

@PVaddi  @BradW  @coscooper 

 

You can call as well: https://www.webroot.com/us/en/business/support/contact

 

HTH,

Userlevel 7

Just to add two others also have the same issue: https://community.webroot.com/community-101-2/webroot-using-90-cpu-343818

Userlevel 6
Badge +29

Hey All,

 

Here is a description of each of the new components

  • SkyClient is a new service used to communicate from the agent to our cloud backend. 
  • WRCoreService is a new companion service that provides the foundation for our modular architecture.   
  • WRCore.x64.sys secures inter-process communications and provides hash calculations.
  • Files in C:\ProgramData are shared across users.  This includes determination database and logs.
  • Files in C:\Program Files are the primary executables and libraries

    here is a description of each

    Cheers

Userlevel 7

Thanks @jhartnerd123 

Userlevel 2
Badge +6

Hello

I was checking my Windows 10 home pc using the Sysinternal Autoruns64.exe which 

check for registry items and found that the following registry key exist

HKLM\System\CurrentControlSet\Services\WRCore

but the file

C:\Program Files\Webroot\Core\WRCore.x64.sys  is missing ?

 

What can cause this behavior ?  I have uninstall and reinstalled webroot but to no avail?

 It still says that WRCore.x64.sys  is missing

I then check the folder C:\Program Files\Webroot and found that there is no sub folder

C:\Program Files\Webroot\Core 

Could this registry key be caused by an old installation of Webroot?

 

Userlevel 7

Hello @anthoncom 

 

I’m not sure but you can do to things: Try a clean reinstall of WSA and or Submit a Support Ticket and ask them and they will sort you out!

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue and support can take up to 48 hours to reply.

 

Please follow the steps closely!

  • Make sure you have a copy of your 20 Character Alphanumeric Keycode! Example: SA69-AAAA-A783-DE78-XXXX
  • Be sure you add your Keycode to your Online Console: Webroot SecureAnywhere Online Console
  • KEEP the computer online for Uninstall and Reinstall to make sure it works correctly
  • Download a Copy Here (Best Buy Geek Squad Subscription PC users click HERE) Let us know if it is the Mac version you need
  • Uninstall WSA and Reboot
  • Install with the new installer, enter your Keycode
  • Let it finish it's install scan
  • Reboot once again
  • DO NOT import any old settings as you can set it up as you like once it's done

Please let us know if that resolves your issue?

Thanks,

 

Reply