Knowledge Base

Mysterious Randomly Named File Attributed to Webroot

  • 22 May 2012
  • 0 replies
  • 971 views
Mysterious Randomly Named File Attributed to Webroot
Userlevel 7
  • Retired Webrooter
  • 2146 replies

Question

Task Manager shows a process made of randomized letters that is identified as a Webroot Process, but I could not find a reference to it on search engines.  Also, sometimes there would be 2 of these processes running.  The program is stored in C:Program Files*random letters**random letters*.exe -ul.  What is this?

Answer

The installer for Webroot SecureAnywhere has an option to randomize its installation in order to avoid being blocked by certain infections that know how to block files that are conventionally named.  If there is cause to believe that there is such an infection present or if the user manually selects the option, Webroot SecureAnywhere will install with a randomized file name into a randomized directory.  So while typically the executable file is called WRSA.exe, in such cases it will be called *some random series of letters*.exe. 

0 replies

Be the first to reply!

Reply