Webroot® Business Endpoint Protection
Welcome to the Endpoint Protection and management console Discussion Forum!
- 1,137 Topics
- 3,618 Replies
Can malicious software uninstall Webroot?
I started getting pop-ups on my browser (Chrome for PC). I looked in the system tray, and the Webroot icon was there. That's curious, I thought. So I clicked on the Webroot icon. It vanished! That's weird, I thought. So I used Explorer to go restart Webroot, and the whole Webroot folder was missing from c:program files and c:program files (x86). Weird. So I visited the GSM console, and found that my endpoint had been deactivated. Oh oh... So I ran a few different malicious software removal programs. Hitman Pro found and deleted a Chrome extension and deleted it. I reinstalled Webroot, and the icon came back.
Hello, Would you please help me with this question? if my computer has hacked and the virus want to encrypt my system files or other files, Does webroot secureanywhere detect this virus and prevent him from encrypting or monitor him untill the encryption happend and then block him? Does heuristics help me with that or not? what if my PC was offline for a long time, all application will be detected as unknown and mybe this applications modified something in my system files or put something in the registry, So, after a long period of time my PC connected to internet what will happen then?
Hello, Would You Please Help Me with this question? If I want My webroot Secureanywhere agent to block all processes or application in my computer or server except the processes identified in the whitelist? How can we do that or how can the agent help me with that? In more details, If I have some processes i want them to still running on my server but the processes except those in whitlist i don't want them to run.
Threat found associated with trusted vendor
SecureAnywhere just quarantined a file named "silentuninstall.exe". The file was supplied by Matrox as a part of their "MIL" product. I keep a copy of their installation CD on this computer's drive, which is where the file came from. I trust this vendor, and without the file I'll have an incomplete installation set for their software. Any suggestions for how to proceeed? Do I trust SecureAnywhere has good reason for the quarantine and leave it there, or remove it from quarantine under the assumption it is a false positive? Thanks!
Scan via web console W7 to W10 remote laptop
Hi I am currently testing WR end point with the intention of introducing it to my customer base. I am a managed provider and will be using the web console (WC) to manage my clients. I have tested on W7 PC's so far all ok but our W10 remote office laptop stopped scanning over a week ago even though I initiated several manual scans to no avail? Any ideas? xT
Hi All, I am going to be looking at reducing the Internet access a number of our servers currently have. Ideally limiting them to the bare minimum of connectivity. In terms of how this affects webroot clearly updates are likely to be a problem. Is there any solution available to deal with this? My initial thought is a proxy with Internet access to distribute the updates, a webroot WSUS basically. If not, are there certain ports/urls etc that I can whitelist and at least heavily reduce connectivity rather than disable it all together. Any suggestions on how to best tackle this would be great.
Webroot forensics questions
Hi Webroot community! I have a few questions about Webroot forensics. [b]Background[/b] User clicks URL in phising e-mail and manually downloads and runs payload from the resulting landing page. First seen (endpoint) 09:42. A minute, or so, after initialization it had run it's course and encrypted about 10GB worth of data across 3 different servers. The server where the webroot client is installed only had a few hundred megs encrypted - the users profile folder and foxit reader install directory. Most of the files being encrypted was a fileserver and an application server (servers without webroot). At 09:48 the process is determined bad (DD). What is expected behaviour after DD? Remediation/rollback? Does the client only report back to the webroot network at set poll interval or does it treat threats differently? How long should I wait for webroot to do it's thing? Is there a way for me to observe webroot remediation in real time (not indirect
locked out of webroot on my work pc
Hi, not sure if I'm in the right place to post a question. I recently paid an IT company to set up my business computers. They have installed webroot and made me an admin but when I try to open webroot on my PC "I get a message saying I need to contact admin to access this program." I can log in to the webroot online portal but can't open the webroot program on my computer. Can anyone help me? Thanks
Webcam locally connected to client connected through Citrix not working anymore
Clients of a customer of us uses Citrix. They have a few webcams connected on different clients. They are locally connected to the clients which connect through a Citrix-receiver. Since we installed Webroot on the network they can't use the webcams anymore. Webroot is only installed on the Citrix-server.
OSX unmanaged configurations
Is there a way I can modify the OSX configurations on a workgroup? I know I cannot do this from the webroot console but are there instructions to run a script? For example, I want to be able to disable or enable scan mounted drives on the osx clients. I don't have the manpower to go to each workstation individually to manually set this. Any help would be appreciated. I have root access on all the machine. I can utilize Apple Remote Desktop or just ssh a shell script. Does webroot have any terminal utilities avaiable or does webroot have a configuration file I can modify? Thank you, Kenny
Endpoints not seen recently, not on latest version
I've seen several posts on this subject already, with no clear resolution. We have 50+ sites, with random endpoints that are "not seen recently" and are all on a previous version of Webroot (not the most current). My assumption is that the endpoints have just stopped "checking in" with the console and are not upgrading as they should. We have hundreds of endpoints in this state. The fix I've seen is "reinstall Webroot" but I have yet to see a solution to the root cause. We're a Continuum partner, so we're not supposed to contact Webroot directly, but I don't see any other way to get this resolved. Can anyone offer advice here? This is a pretty big problem for us (and I'm not the only one, others in the Continuum forums have the same issue).
Webroot integration with Labtech RMM
Hi folks, I've been attempting to integrate Webroot SecureAnywhere with our Labtech RMM, however as Webroot is like [b]no other antivirus whatsoever [/b]I cannot do this successfully. It's a fantastic piece of kit and we'd love to have it picked up by our Labtech setup as we're currently rolling Webroot out throughout our client base. The issues we currently face are: 1. Labtech looks for a definition file, which I'm fairly sure Webroot does not store locally, so we cannot supply one. 2. Labtech looks for a command line scan function, which we cannot locate. 3. Labtech looks for an update command, which again Webroot does not require as we keep it updated with GPO Has anyone managed to successfully integrate Webroot with Labtech? We're currently on Labtech 2012.1 (CC and Agent v51.155) Thank you in advance for your assistance. Marc Hilton Network Engineer Spector
Clients can't be queried by SBS2008
When viewing network computers in the SBS console all webroot secureanywhere clients show up as critical under the security status column. Scans are occurring fine and all clients show up nicely in the Webroot console but when I go to the Security tab in SBS Console I see under Virus protection for file system: - Client computers that cannot be queried. All clients are Win7 x64 and have the the default windows firewall policy applied. All DNS entries are solid and all other columns show up accurately in the SBS console. Any suggestions? Thanks
Windows 7 stuck in endless reboot loop
Today we experienced a serious issue that was caused by WebRoot. Approximately 60% of our systems were stuck in an endless reboot cycle: Starting Windows .. Starting Windows .. .. Some systems showed the following BSOD: [b] IRQL_NOT_LESS_OR_EQUAL[/b] [b] ..[/b] [b] STOP: 0x0000000A (0x00000018, 0x00000002, 0x00000000, 0x82EBC11C)[/b] After we identified the problem, which took a very long time, we rolled out the following solution: - Boot from Windows installation CD - SHIFT-F10 to start a dos prompt - From the dos prompt - Rename C:WindowsSystem32WRusr.dll to WRusr.dll.org - Rename C:WindowsSystem32drivers WRkrn.sys to WRkrn.sys.org The above fixed the problem (60% of my users can work again) but of course effectively disables webroot antivirus How to proceed from here on!
Print jobs blocked from Citrix Receiver
I have just implemented Webroot for one of my clients. As soon as Webroot was installed people started reporting printer related issues. I thought there was no way this could be related, but after disabling webroot on a few machines and seeing the print jobs start going through with no problem, I have to lament. My clients primary software runs on a Citrix Xenapp server. My clients connect using Citrix Reciever. They print constantly throughout the day, so I have temporarily disabled Webroot till I can resolve this. The software provider is of little to no help with these issues as the technical support team has all but been completely segmented off to another part of the company. The weirdest part is it does not block all jobs for all individuals. When we first installed it people seemed to be printing with no issues, then the next day people started complaining. So it isnt like it is blanket blocking these print jobs. &nb
need removal tool
Is there a Webroot secureanywhere removal tool? I seem to have a broken install. I was messing with deployment tools testing the msi deployment. Webroot secureanywhere is running, I see the icon and can open it. It's not showing up in the console online though. I tried using the msi /x option to remove it but it tells me that it's only valid for products that are currently installed.
Hello All, We have a new client who got hit with Cryptolocker ransomware to the point where their VHDs are decrypted. They've paid the ransom but instead of receiving the decryption key, they are being asked for more money. Any and all assistance with helping us decrypt would be greatly appreciated. M
Please help explain Endpoint protection - Antivirus vs Firewall
If a company has Webroot SecureAnywhere installed without the firewall feature enabled on all domain computers. Is it acceptable/Best practice to disable the windows firewall? Basically, leaving endpoints without any type of firewall? In this scenerio there is a Sonicwall NSA at the network edge and the company is considered a HIPAA covered entity.
Does Webroot have a response for the test results described in the Q3 2016 MRG-Effitas test report?
See the report at [url=https://www.mrg-effitas.com/wp-content/uploads/2016/11/MRG-Effitas-360-Assessment-Q3-2016.pdf]https://www.mrg-effitas.com/wp-content/uploads/2016/11/MRG-Effitas-360-Assessment-Q3-2016.pdf[/url] . Thanks.
Does Webroot protect and scan Microsoft SQL Server?
I have a client that is using a Thomson Reuters product call Web Organizer that allows tax clients to upload files into a portal. The program then integrates the attachments into the SQL database on the staff office SQL server. The CPA office is concerned about viruses in the SQL server from these attachments. Thomson Reuters themselves disclaim liability and advise that the attachments should be scanned for viruses. However, the attachments are imported into the database automatically.
webroot executable file on a usb drive
Is there a way to possibly get the Webroot .exe file to download without a specific client key so I can install it on other machines? We have a site where we cannot seem to get the installer to load, so we want to try the process manually. Please advise.
Already have an account? Login
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.