Solved

So many problems


Userlevel 2
This isn't in order because I can't remember the order 1) Webroot had a pop up that covered half my screen saying something about some program. The problem is that it popped up and went away so fast I couldn't read it. I think it said facebook. I don't use facebook. 2) I get pop ups in the lower right corner. They're small and I never get to read them. 3) Apparently something called lodctr.exe keeps trying to install something every time I log in but I was just notified of this a while ago, a good while AFTER logging in. 4) There are no logs of any of this. Why don't you save logs of this crap so I can go and see what happened? 5) I have the program set to not fade messages out and to not force non critical messages into background, yet I do not get to read these messages. Why? 6) Malwarebytes pro now takes forever to start up after logging in. This is after an update caused it to have corrupted files and I had to reload it. 7) I cannot play audio CD's. Media play freezes up when I try. No idea why.
icon

Best answer by EamonF 17 June 2013, 16:40

View original

71 replies

Userlevel 4
Badge +3
@ wrote:

I will later after I remember them. Are these programs legit? Trying to look them up only gets one links to potentially shady sites, so I thought I'd ask. csrss.exe ism.exe mobsync.exe lsass.exe services.exe smss.exe wininit.exe
All of those filenames are legitimate and commonplace programs. Although they are often imitated for the sake of discretion (as malware often attempts), I have checked your license key and can confirm there are no malicious files on your PC - nor have there ever been. 
I have also whitelisted the remaining unknowns on your license key ;)
Userlevel 7
No, but I could see where that might be a feature someone might want to have. You could make an idea in the ideas exchange if you'd like to see it happen, and we could inquire about it with product management.



On the other hand, the same information and more is available in a few other areas. If you go to System Tools -> Reports, you can both access "Execution History," and save a scan log. The combination of these two logs would display the same information you're looking for. You would see the list of executed programs and the classification they have in WSA. That would probably suit your needs. Have you checked out those areas of the program yet?
Userlevel 4
Badge +3
@ wrote:

What? *totally confused*
If you right click on the Webroot tray icon and select "Save a scan log" - you can see all known goods and unknowns on your PC (U representing unknowns). 
Userlevel 7
Badge +56
@ wrote:

When you say keep the stat cables clear of power cables do you mean that the electromagnetic field emanated by the power cable can effect data on the sata cable? How far clear of each other must they be?
Yes very much so, far enough like a few inches and not tied together!

 

Daniel
Userlevel 7
It is common practice to cable tie all POWER cords together, to keep things tidy and away from things like power fans.  This is also often done though to keep those cables away from the data cables.  The power cables are tied together and routed in a way to keep them away from the data cables to avoid the interference they can cause to each other 🙂
Userlevel 7
Cloud,



Well... I am glad it's not Webroot causing the problems! I don't know if anyone else has further ideas that might help, but even with my 15 years experience PC troubleshooting I am about out of ideas that can be done without actually having the computer up on my own workbench 😞
Userlevel 4
Seems like a corrupted install or uninstall of an application damaged the registry.  You could also have an application conflict between Malwarbytes, and WSA as mentioned.  I would suggest uninstalling Malwarebytes, and see if that resolves the issue. If you have the same problem after reinstalling Malwarebyes then it's most likely an application conflict.  I don't recommend deleting registry keys unless you are sure there safe to remove. You could possibly create an even bigger problem than you already have. Regardless, you should start a support ticket as already mention by TrippleHelix. If you still have the same problem after reinstalling Malwarebytes then Webroot support should be able to pinpoint the issue. If it's due to WSA then they should be able to resolve the issue.  If not you could report it to Malwarbytes at their support forum. The strange Pop about Facebook sound strange. I've never seen this before with WSA. It could be due to several things, but can sometimes indicate that you have an infection. Webroot support can also confirm or elimnate that as a possible issue.

 

Here is a little info about lodctr.exe

http://www.processlibrary.com/directory/files/lodctr/28798/

http://greatis.com/vista/Utilities/l/lodctr.exe.htm

 
Userlevel 7
@ wrote:

How do you use regedit?
Cloud, 

 

I am not sure how the others here feel, but I consider it to be an advanced tool that is best used by experienced technicians.  There is a huge potential to accidentally do major damage to your computer in there, including some for which there is no repair other than re-installing Windows.

 

Tread  very very carefully in there please.  

 

 :)
Userlevel 7
Badge +56
I don't recommend it at all I don't even play with my registry or use Registry Cleaners as it does cause more issues than good just contact support and they will help you!

 

Daniel
Userlevel 7
@ wrote:

I don't recommend it at all I don't even play with my registry or use Registry Cleaners as it does cause more issues than good just contact support and they will help you!

 

Daniel

I have 15 years experience in computer build and repair.  I DO use regedit.  There is very little I will do in there 'on my own'.. I almost always seek advice from those with more experience than me before I do much of anything in there.

 

Oh.. and I do not generally use Registry Cleaners.  While they are usually OK and bad results are rare, in the cases that bad results happen they are REALLY bad.

 

 :)
Userlevel 4
I'm fairly experienced working with the registry. Enough so to not recommend doing it since you have not worked with the registry before. There's potential to cause severe damage to your system that may only be fixed by doing a reformat your machine.  If you want to learn how to work with the registry then wait until you have a backup image to restore your PC to incase something goes wrong.  Start doing research on it first, and work your way up from the bottom.  We all had to start with the bottom rung of the ladder at one time. Start a support ticket, and allow Webroot support to assist you.

 

In the future I highly recommend making backup images of your drive before installing new software. For example:  I myself had to role back my Laptop yesterday due to Microsoft's updates locking my PC at shutdown. At shutdown it continued to say installing updates, and not to shut down the computer untill the updates had completed installing. It continued to say this almost 2 hours later. I had to hold the power button in, and do a hard shut down. At reboot windows informed me the update installed correctly, but I did not want to take any chances since potential problems from a corrupt install may not arrise until later. I rolled my disk back with an image I created 2 days prior to this. In my experiance making backup images is always the best route to go whether it be from a corrupt install, application conflict, or an infection.
Userlevel 1
DavidP is right. You DO need to know what you`re doing as regards the registry. It is basically an index that tells the Windows OS where everything on your PC is. Remove the wrong thing, and that process/program will never run. As stated, I`m a fully qualified Comptia A+ IT Tech. I have had to guide customers through this process over the phone when I worked for Virgin Media IT Tech Support, when they had problems with Virgin`s AntiVirus software. It`s not easy, especially when they don`t know what they`re doing. If you do not know how to run Regedit in the first place, then PLEASE stay away from it! Unless you want to reinstall your whole OS again! I only mentioned using Regedit and CCleaner  as I know from personal experience that removing any entries relating to uninstalled programs/antivirus software can cure a lot of problems. Not all entries are removed when you uninstall a program. Norton and Kaspersky are classic examples. Over time these can clutter the registry or even affect fresh reinstalls of the programs themselves. But please, in this instance,  play it safe. Personally, I don`t think your problems are due to WSA but raise a Support ticket as suggested in previous posts, uninstall Malwarebytes (you don`t really need it with WSA installed), and go from there...Hope this helps.

George
Userlevel 7
Badge +56
@ wrote:

Alright, but reloading windows probably wouldn't work as I've had problems in the past and it never fixes them. The install is never perfect.
 

@ wrote:

Any new advice?
When was the last time you did a clean reinstall of the OS? If I had continued issues that's the first thing I would do IMHO! And why do you have problems when doing so it could be some bad hardware? Only Guessing

 

Daniel
Userlevel 7
Badge +56
@ wrote:

I'm not reinstalling the OS. I had so many problem with another AV, worse than this, and have reloaded my OS so many stupid times that I'm just no doing it any longer. What hardware could cause such issues?
I don't think it's because of WSA unless you're blocking certain files or what ever so my advice would be do a complete reinstall of the OS like I said if I was having continued issues that's the first thing I would do. And I have been Beta Testing WSA since very early 2011 even before it's release so I don't think WSA would be the cause or I and other Beta testers would of seen them.

 

Regards,

 

Daniel
Userlevel 7
I have to agree with Daniel.  I have been involved in computers and repair for years, and given the multitude of different issues a clean OS install is most likely where I would be heading if I was working on it.
Userlevel 7
Badge +56
Thanks Eamon for chiming in! ;)

 

Cheers,

 

Daniel
Userlevel 7
That might have been from the Web Threat Shield. It has a larger warning window, and sometimes it can disappear if the site is closed. I've heard reports of it sitting behind the windows it's trying to block as well. The Web Threat Shield is being overhauled in the 2014 version of WSA, so I would suspect that concern is being addressed already.
Userlevel 2
You'd think there'd be a way to use some sort of heuristical behavioral firewall to block such attempts. One that monitors behavior on computers. Maybe that will be webroot's next product?
Userlevel 2
Posted in the wrong thread.
Userlevel 5
There are 3rd party firewalls that have the function of behavioral monitoring and one that comes to mine is Private Firewall. It is ruled based.
Userlevel 2
7za.exe, pv.exe, whoami.exe, dumpevt.exe or pmdump.exe Could webroot's monitoring of any of those files cause any problems? Like not allowing me to play cd's?
Userlevel 7
Badge +56
@ wrote:

7za.exe, pv.exe, whoami.exe, dumpevt.exe or pmdump.exe Could webroot's monitoring of any of those files cause any problems? Like not allowing me to play cd's?
File names don't help! If you can save a scan log and look for the lines of those files names with the MD5 Hash and please post them.

 

Example:

Some legitimate files are not included in this log

[u] c:program files (x86)urnaware premiumurnimage.exe [MD5: 0DCE782067620D10380D01F8D2B3CEE8] [Flags: 00081001.6816]

 

Thanks,

 

Daniel
Userlevel 2
What? *totally confused*
Userlevel 2
I started a webroot scan last night. It stuck at 44% for over 10 minutes. I could start more webroot scans under pc security tab. After about 9 minutes i started looking in the execution history under the system tools tab. I was taken out of the execution history for some reason some how, and the scan had stopped. Still don't know how to use that execution history. This scan was apparently not added into the average scan time statistics as it is still quite low and hasn't changed any that I can tell. The scan statistics seem to have gone down from about 29 scans to 21 scans for no apparent reason. In protected websites windows there were no websites or http or https being protected. No twitter no face book no nothing. That had all disappeared. It returned when I reset it to defaults. Could this be because of firefox updating, or actually because of installing the newest firefox from scratch? It was odd for this to be changed since I had it under password protection. And for some reason the system cleaner... I recall that it had cleaned 1800 something MB but now it says 1600 something MB. Could be wrong though.
Userlevel 7
Badge +56
Hi cloud,

 

Can you please do a clean reinstall? If you do go Here to download a fresh copy and make sure you have a copy of your Keycode as you will need during the reinstall then please Uninstall Reboot and install and let it finish it's install scan and please report back.

 

Thanks,

 

Daniel

Reply