Controlling WRData folder size - help needed

Hi paulderdash
 
You are most welcome...that is what the Community is here for. :D
 
Unfortunately, there is no way to link the large .db[numbers].db files to specific [u] prefixed scan log entries...I believe that it has been requested of Webroot...but not forthcoming (but I may be wrong re. that assertion so do not auote me on that ;)).
 
What I tend to do is only delete those .db files if can relate them to apps that are set to 'Monitor' under 'Block/Allow', etc. (what I sometimes also do if I have found some files set as 'Monitor' is to switch these to 'Allow', especially if I know the app in question, and then check to see which .db files have NOT increased in size since...i.e., not been jornalled since the change in status...and in my view that gives a reasonable indication of which file is linked to which .db file, etc.),
 
Also I run a manual Deep Scan to try to make as sure as I can ghat the system is clean...can never be 100% sure but that is the best I can do.  I do also carry out an on-demand scan with another, trusted, security app that I use for just this sort of eventuality.  If that comes up clean then I usually go ahead.
 
Well, may seem convoluted but it does not happen often...and does not take long.
 
Hope that helps?
 
Have a great rest of weekend.
 
Regards
 
 
Baldrick
 

@ wrote:
Is it just me or is it exceptionally poor to force a user to uninstall the app, delete the WRData folder and then reinstall (in a particular manner - i.e. not accepting importing prior settings) to deal with this bloat issue??  Also it opens you up to being UNABLE to recover if something bad is in play during this evolution. 
 
Also, why is it the interface doesn't list those [u] files it is journaling in the GUI like a few other files so you can say "that's a good file, stop watching it"??

Hello and Welcome to the Webroot Community! Well for one you don't have to as WSA is self cleaning of the journaling dbxxxxx.db files in WRData. 
 

 
 
Also if you look here you can set from Monitored to Allow if you know the processes are safe then the journaling will stop and in a few days the dbxxxxx.db files will be gone and it's best is to Submit a Support Ticket to get the [u] files Whitelisted in the Cloud database. Also if you set to allow you can delete the dbxxxx.db files but again it's best to contact support unless you know for sure the processes are safe. Also if someone does have an issue and suggested to do a clean reinstall and asked not to import prior settings the reason is it keeps some info as well as the settings so we ask them not to import settings and do it clean and set it up as you like afterwords but again only under direction from one of the Webroot Staff or us Expert Product Advisors.

 
HTH,
 
Daniel ;)
 
EDIT: To add as this was fix since the last post in this thread.

The only reason Webroot isn't on 2 of my 3 PC's is that if you use either beta & or not common software WSA will monitor & log all changes, the major problem occurs if the program happens to either delete data or makes changes to your system the data folder can quickly become huge with huge bells on - The small size of the install file is made a mockery of when WSA is motoring a program that is totally benign & the data file can reach many GIG's in size & use up space far, far in excess of the most bloated traditional AV.

 
Today on my daughters PC WSA is monitoring for example the latest update to Spotify, a rare program? Actually it was on deny, which for me was the final straw with WSA & why I've written this post. And do Webroot really think uninstalling & reinstalling an AV is a reasonable solution to a growing data file, for the average user? - I've read all the arguments for and against a cloud based AV & I've finally decided the cons are far greater than the pro's - I've supported & defended WSA for some time over on Wilders while there was a Prevx / WSA section - For some users who have Office, & the basic programs that are common WSA is a good solution but if you use beta software or use programs that are not the most common it’s not a good solution.
 
 It's OK saying get support to whitelist your files but most people don't feel that their AV should require such major maintenance or have no idea there is the data folder or usually just wonder why C: is getting larger & larger - I no longer recommend WSA & have a cupboard full of unused licenses & have gone back to ESET SS.
 
Even relatively common programs such as ones from ‘Stardock’ & common ripping software for example don't get whitelisted - And I for one will be moving the last PC away from WSA, this isn't a rant but as a user of Prevx for some time & then WSA I'm moving back to ESET which is a fit & forget solution & frankly that’s what most of the people who use my services want. - The monitoring system may be at times WSA’s ace card but for some it’s a pain in the rear - Other may disagree with me & that's fine but this is my opinion.

Balders: The thread has peope in whose Data folder is over a GIG + in size:
 
Quote just one:
 
'In spite of Roy's whitelisting I still see my WRData .db files climb to a couple of GBs (currently WRData folder > 6GB) every couple of weeks. I can do a clean install every time, but it this hardly makes it a set and forget solution'
 
I admire your spirited defence of WSA, but for example 'Softmaker Suite' (an office suite) my daughter also has on had a SP today & is unlikely to get whitelisted (it never has been before in last 3 SP’s until I sent the files off) I use 'DB Power Amp' & associated programs, never did get whitelisted until I sent off the 'U's' - It is a major flaw in the AV, As I've installed WSA on quite a few systems (20 ish) the WSA folder on some have been huge - I maintain most people don't realise there is a even is a Data folder & as they don't image regularly have no idea how big C: is - I can’t be the only user who has ‘Stardock Window Blinds’ on, yet those remained unknown until a few weeks back when I send all my daughters unknowns off & frankly I have better things to do.
 
 What I will do is use WSA on this PC for one month from today & monitor in all honestly my WRData folder - Fair enough? ( I may be proven wrong?)
 
 
EDIT: Not a good start this PC has not has WSA on before & Spotify latest in on deny, this update has been rolled out over the last 2 weeks + (I'm not on the beta channel)  (Version: 0.9.11.27.g2b1a638c) 
 
Sat 19-07-2014 14:59:13.0999 Blocked process from accessing protected data: C:UsersPaulAppDataRoamingSpotifyspotify.exe [Type: 1]
Sat 19-07-2014 14:59:56.0263 Determination flags modified: c:userspaulappdata
oamingspotifyspotify.exe - MD5: 52FD61AFC3D2BF55226A7E5AC8C06673, Size: 6162488 bytes, Flags: 00240000 (Manually changed) 
 
 
Neither can I paste into Textmaker, which is also on deny - (I only know from experience this is WSA stopping this function, others would probably would wonder what was happening & probably reinstall this program to no avail, as no warning has been given that or why cut & paste doesn't work (I've had several phone calls from users of WSA wondering why cut & paste don't work &  none assumed it was WSA) - This was the subject of a thread months ago yet still is an issue. (Manually changed)
 
Determination flags modified: c:program files (x86)softmaker office professional 2012 extmaker.exe - MD5: 2C97CD6F088D396034071268FB847DE7, Size: 15562288 bytes, Flags: 00000100 (Manually changed)
 
See the problems in ten minutes I have had with WSA, that just do not occur with other AV's, those are 2 issues those who no nothing about WSA or PC's in general would have problems with, try telling my mother-in-law or my neighbour /sister-in-law how to change settings in ‘Control Active Processes' ~
 
 
 

This is not a personal attack on you Baldrick, if it seems like that I am very sorry !
 
It's just issues with WSA that were there 2 years ago are still around, I've had WSA on 10 mins & had to change 2 programs from deny, this should not still be happening, just as an example when ‘cut & paste’ don't work most users will have no idea why, some sort of warning should be given & a fix it option, this has been an issue for 2 years or more.
 
BTW Spotify was on deny on 2 PC's in this house not just one, my daughter did not know why her playlists would not work, I guessed it was WSA.
 
It's no good me ditching WSA & getting a heap of others to do the same without saying why I think, WSA has some great advantages, I'm not here to troll, I'm actually interested in getting some things in WSA fixed.
 

Also you can't compare WSA with any other AV's as it's completely new technology and it's the future and sorry but it's here now! Do you know there are over 120,000 new malware released dally and the other AV's how are they going to keep up with the WIN Cloud? Definitions? You could be infected already but with WSA it can rollback to the pre-infection state see this simple video: https://community.webroot.com/t5/Webroot-Education/What-Happens-if-Webroot-quot-Misses-quot-a-Virus/ta-p/10202 and it can also rollback CrytoLocker and if you have an hour watch this informative video: https://www.brighttalk.com/webcast/8241/95617
 
Daniel ;)
 

@ wrote:
I have been in this thread before. I had gone through a whitelist process and reinstall then, and some reinstalls since.
Does the auto-cleanup keep 1 month data? I notice my oldest .db file is a month old.
But it does get to 6GB in that time! Not that space is an issue for me, though it would lengthen imaging times.
So I guess I also deserve that badge for running a lot of cool, obscure programs :-)

Correct and if you are "running a lot of cool, obscure programs" then it's best to send in scan logs to support and get them whitelisted and ask them why it's not removing my old Rollback dbxxxx.db files then let us know maybe it got broken and I would like to see there reply, because I don't have this issue.
 
Thanks,
 
Daniel

OK - will send a latest scan log and ask the question (tomorrow).

Rgds - Paul

@ wrote:

@ wrote:
OK - will send a latest scan log and ask the question (tomorrow).

Rgds - Paul

Sure and I would like to see @ do so as well and see his reply from support!
 
Thanks,
 
Daniel ;)

Ditto, that, Daniel...as whilst we might be having problems with the WRDATA size it is clear that Martians & pualderdash still are...which needs to be investigated. :(

No cap if you had and unknown infection it (could) fill your whole C drive but highy unlikely.
 
Daniel

To add what Solly said the WIN network also looks at how many users are using a certain unknown program and I have seen at times when in contact with support I'm the only 1 as I do Beta Testing as well and even for Microsoft Products, so I know I need to get them Whitelist I find it no big deal to get [u] unknown files whitelisted and support is happy to do so and again WSA should be clearing out old Monitoring dbnumbers.db files.
 
Daniel 😉

It never is a problem to get support to whitelist files I agree entirely, but my point was I did an install on a fairly new PC & within 10 minutes of install Spotify would not work & I could not cut & paste out of a well known German office suite - That was the beginning, I also had problems with DB Power Amp Ripper & with Ashampoo Photo Commander 12, & of course all the other modules in the office suite would not allow cutting & pasting either, that's when I decided I'd had enough of WSA yet again.
 
Now if I was a new customer or indeed a person I'd recommended WSA too how do these people know it's the AV program that's preventing copy & pasting, or stopping Spotify working I’ve highlighted the part from the scan log that showed Spotify being blocked & the results of my moving it to allow.
 
My simple point is WSA can be a high maintenance AV, people generally don't know or want to know about scanning, saving or viewing the log then sending the 'U's to support to be whitelisted - To prevent monitoring & issues today I would have had to contact support to get files whitelisted, (and more importantly known it was WSA causing the issues)  the far simple solution was to image C: back to earlier today & use ESET - If people don't understand the implications of this small & far shorter experiment than was intended I give up - ESET doesn’t use 250 meg of space & certainly never ever half a gig.
 
It seems some of the marketing & or when tested the fact that as WSA would fit on an old floppy the end result is (by implication?) also little that space used, this is all to often not the case esp. if the person uses slightly uncommon programs, & from my experience most users of WSA have never seen the size of the DATA folder, which may explain why it isn’t as larger issue as it could be IMO - I realise many files are whitelisted a day but my little experiment I feel showed rather quickly why I’ve given up on WSA.
 
In all the time I've used ESET not once have I had to contact support., ever. As for WSA being new I’ve used to since the end of Prevx so it hardly new technology?
 
EDITED