Endpoint Protection

Hello,   Would You Please Help Me with this question?   If I want My webroot Secureanywhere agent to block all processes or application in my computer or server except the processes identified in the whitelist?   How can we do that or how can the agent help me with that?   In more details, If  I have some processes i want them to still running on my server but the processes except those in whitlist i don't want them to run.

Is there a way for Webroots firewall to block outgoing traffic to tor network automatically?   Reason is to stop potential downloads of ransomeware payloads.   Regards Ronny Andreassen

SecureAnywhere just quarantined a file named "silentuninstall.exe". The file was supplied by Matrox as a part of their "MIL" product. I keep a copy of their installation CD on this computer's drive, which is where the file came from. I trust this vendor, and without the file I'll have an incomplete installation set for their software.   Any suggestions for how to proceeed? Do I trust SecureAnywhere has good reason for the quarantine and leave it there, or remove it from quarantine under the assumption it is a false positive?   Thanks!

Hi I am currently testing WR end point with the intention of introducing it to my customer base. I am a managed provider and will be using the web console (WC) to manage my clients. I have tested on W7 PC's so far all ok but our W10 remote office laptop stopped scanning over a week ago even though I initiated several manual scans to no avail? Any ideas? xT

Hi All,   I am going to be looking at reducing the Internet access a number of our servers currently have. Ideally limiting them to the bare minimum of connectivity.    In terms of how this affects webroot clearly updates are likely to be a problem. Is there any solution available to deal with this? My initial thought is a proxy with Internet access to distribute the updates, a webroot WSUS basically.   If not, are there certain ports/urls etc that I can whitelist and at least heavily reduce connectivity rather than disable it all together.   Any suggestions on how to best tackle this would be great.

Hi Webroot community!   I have a few questions about Webroot forensics.   Background User clicks URL in phising e-mail and manually downloads and runs payload from the resulting landing page. First seen (endpoint) 09:42. A minute, or so, after initialization it had run it's course and encrypted about 10GB worth of data across 3 different servers. The server where the webroot client is installed only had a few hundred megs encrypted - the users profile folder and foxit reader install directory. Most of the files being encrypted was a fileserver and an application server (servers without webroot).   At 09:48 the process is determined bad (DD).   What is expected behaviour after DD? Remediation/rollback? Does the client only report back to the webroot network at set poll interval or does it treat threats differently? How long should I wait for webroot to do it's thing? Is there a way for me to obser

Hi, not sure if I'm in the right place to post a question. I recently paid an IT company to set up my business computers. They have installed webroot and made me an admin but when I try to open webroot on my PC "I get a message saying I need to contact admin to access this program." I can log in to the webroot online portal but can't open the webroot program on my computer. Can anyone help me? Thanks

Clients of a customer of us uses Citrix. They have a few webcams connected on different clients. They are locally connected to the clients which connect through a Citrix-receiver. Since we installed Webroot on the network they can't use the webcams anymore. Webroot is only installed on the Citrix-server.

 Is there a way I can modify the OSX configurations on a workgroup?  I know I cannot do this from the webroot console but are there instructions to run a script?  For example, I want to be able to disable or enable scan mounted drives on the osx clients.  I don't have the manpower to go to each workstation individually to manually set this.    Any help would be appreciated. I have root access on all the machine. I can utilize Apple Remote Desktop or just ssh a shell script. Does webroot have any terminal utilities avaiable or does webroot have a configuration file I can modify?   Thank you, Kenny

I've seen several posts on this subject already, with no clear resolution.   We have 50+ sites, with random endpoints that are "not seen recently" and are all on a previous version of Webroot (not the most current). My assumption is that the endpoints have just stopped "checking in" with the console and are not upgrading as they should.  We have hundreds of endpoints in this state.   The fix I've seen is "reinstall Webroot" but I have yet to see a solution to the root cause.   We're a Continuum partner, so we're not supposed to contact Webroot directly, but I don't see any other way to get this resolved.  Can anyone offer advice here?  This is a pretty big problem for us (and I'm not the only one, others in the Continuum forums have the same issue).

I am trying to get this setup. I have the module downloaded although i'm not sure what to do next. Please help.

Hi folks,   I've been attempting to integrate Webroot SecureAnywhere with our Labtech RMM, however as Webroot is like no other antivirus whatsoever I cannot do this successfully. It's a fantastic piece of kit and we'd love to have it picked up by our Labtech setup as we're currently rolling Webroot out throughout our client base.   The issues we currently face are: 1. Labtech looks for a definition file, which I'm fairly sure Webroot does not store locally, so we cannot supply one. 2. Labtech looks for a command line scan function, which we cannot locate. 3. Labtech looks for an update command, which again Webroot does not require as we keep it updated with GPO   Has anyone managed to successfully integrate Webroot with Labtech? We're currently on Labtech 2012.1 (CC and Agent v51.155)   Thank you in advance for your assistance.   Marc Hilton Network Engineer Spector

 When viewing network computers in the SBS console all webroot secureanywhere clients show up as critical under the security status column. Scans are occurring fine and all clients show up nicely in the Webroot console but when I go to the Security tab in SBS Console I see under Virus protection for file system: - Client computers that cannot be queried.    All clients are Win7 x64 and have the the default windows firewall policy applied. All DNS entries are solid and all other columns show up accurately in the SBS console.   Any suggestions?   Thanks

Today we experienced a serious issue that was caused by WebRoot. Approximately 60% of our systems were stuck in an endless reboot cycle: Starting Windows .. Starting Windows .. .. Some systems showed the following BSOD:    IRQL_NOT_LESS_OR_EQUAL    ..    STOP: 0x0000000A (0x00000018, 0x00000002, 0x00000000, 0x82EBC11C) After we identified the problem, which took a very long time, we rolled out the following solution: - Boot from Windows installation CD - SHIFT-F10 to start a dos prompt - From the dos prompt - Rename C:WindowsSystem32WRusr.dll to WRusr.dll.org - Rename C:WindowsSystem32drivers WRkrn.sys to WRkrn.sys.org The above fixed the problem (60% of my users can work again) but of course effectively disables webroot antivirus How to proceed from here on!

I have just implemented Webroot for one of my clients.  As soon as Webroot was installed people started reporting printer related issues.  I thought there was no way this could be related, but after disabling webroot on a few machines and seeing the print jobs start going through with no problem, I have to lament.    My clients primary software runs on a Citrix Xenapp server.  My clients connect using Citrix Reciever. They print constantly throughout the day, so I have temporarily disabled Webroot till I can resolve this.   The software provider is of little to no help with these issues as the technical support team has all but been completely segmented off to another part of the company.    The weirdest part is it does not block all jobs for all individuals.  When we first installed it people seemed to be printing with no issues, then the next day people started complaining.  So it isnt like it is blanket blocki

Is there a Webroot secureanywhere removal tool?  I seem to have a broken install.  I was messing with deployment tools testing the msi deployment.   Webroot secureanywhere is running, I see the icon and can open it.  It's not showing up in the console online though. I tried using the msi /x option to remove it but it tells me that it's only valid for products that are currently installed.

Hello All,   We have a new client who got hit with Cryptolocker ransomware to the point where their VHDs are decrypted.  They've paid the ransom but instead of receiving the decryption key, they are being asked for more money.  Any and all assistance with helping us decrypt would be greatly appreciated.   M

If a company has Webroot SecureAnywhere installed without the firewall feature enabled on all domain computers. Is it acceptable/Best practice to disable the windows firewall? Basically, leaving endpoints without any type of firewall? In this scenerio there is a Sonicwall NSA at the network edge and the company is considered a HIPAA covered entity. 

My Webroot Secure Anywhere keeps popping up that it quit unexpectedly and tells me to reopen to make the problem go away but it just pops back. It says that an automatic notice of the problem will go to Apple.

See the report at https://www.mrg-effitas.com/wp-content/uploads/2016/11/MRG-Effitas-360-Assessment-Q3-2016.pdf . Thanks.

I have a client that is using a Thomson Reuters product call Web Organizer that allows tax clients to upload files into a portal. The program then integrates the attachments into the SQL database on the staff office SQL server. The CPA office is concerned about viruses in the SQL server from these attachments. Thomson Reuters themselves disclaim liability and advise that the attachments should be scanned for viruses. However, the attachments are imported into the database automatically.

Is there a way to possibly get the Webroot .exe file to download without a specific client key so I can install it on other machines?  We have a site where we cannot seem to get the installer to load, so we want to try the process manually.  Please advise.

  I need to remotely uninstall Webroot SecureAnywhere from 135 devices on a domain.  I do have the ability to do this via a RMM so if there are any scripts or software that can accomplish this with silent or no reboot switches that would be great.  Thank you!

We want to remove webroot from the company wide endpoints. How to accomplist this via centralized solution? Either by GPO, Power shell or task schedular or any other solution provided by you? We don't want to do this manually on each computer. Can we do this via running commants on each individual computers? Please send this solution asap.  Thanks.

Hi Community!   well my question is clear, does Webroot offering a product or something like safe router for DDos prevention ? its important for my business so if there is anything like that in Webroot offers , let me know please :)   and another question, as i heard Webroot still is in On Hold situation on offering protection for Linux servers ... any update?