Endpoint Protection

Dear Team, have you seen something like that before? Is it some kind of malware in my browser? I scanned the computer using different scans and I could not find anything. I unistalled the browser and the icons look normal. Is it something to worry about?   Normal look:  

Hello,I’ve got a question. I started my PC and this message poped up. Is it something I should worry about? I tried to remove a potential threat but it was impossible. It got stuck. I restarted my PC, scanned again and there was no such message anymore. I checked the console and it was fine. Could someone explain it? Is it false or sth?Thank you in advance  

Good day,I’m curious if anybody can shed any insight on the deprecation of the old Endpoint Protection Console and what we are to expect in terms of changes as of November 28th? I have reviewed training videos and understand where to perform most functions using the new console and entities.Please understand that we have hundreds of a sites listed in our consoles and I have reviewed the videos.Currently if I wish to go to the console and perform work on a site, I can go to the Sites list and I can search and find the site wether that is ABC company or XYZ, then I can click the little pop out or go to Endpoint Protection and click the “Go to Endpoint Protection Console” and I can access the old console.So what happens when the existing console is deprecated? will this button go away? Will  there be a new button that will jump us to the specific site in Entities?There are also some logs areas that I’m suspect will no longer be available.C

I'm in the process of migrating end points from our old console to WGSM. I'm having issues with a couple of endpoints not accepting the key code changes. I will input the key code manually in the old console, they will appear briefly in the console for the key code they have been changed to, but they still report the old key code, so they eventually reappear in the old console.   I'm also having issues with one endpoint where I'm checking the GUI on the endpoint, sending the command to change the key code, checking in the GUI that the new key code is showing after refreshing the configuration, running a scan, then the key code is reverting back to what it was originally.   I'm starting to tear my hair out. Please can anyone help?

Hello, We are using Webroot alongside Huntress, and we want to use the features of Managed AV of Huntress as it can trigger an analyse of the Huntress ThreatOps Team. So, my question is simple, can we use Webroot and Microsoft Defender actively (as Windows Defender can stop a malware and trigger Huntress) on the same computer.Actually, i have just found some very old article that says it’s possible :SecureAnywhere You want to know if SecureAnywhere is compatible with other antivirus software (webroot.com)SecureAnywhere You want tips for running SecureAnywhere with another antivirus program (webroot.com)But it’s

Hello, Is there a way to integrate Webroot Endpoint Protection with a SIEM like ArcSight or similar ?Thanks.

This should be simple: we run a large multi-site network with a number of admins.I need to see the status of our Admins:Name and email, 2FA status, admin type (all on current console) Most recent login date Any login failure info you can provideI can’t see ANY way to discover which admins haven’t logged in.  Not in the old or new console, not in API reporting. :(How to solve it?

This option is not available to me --> When I select the endpoint the “Move endpoints to another group” option is greyed out. Please let me know if there is a different way to do this. Thanks in advance.

Hi team,I see that there is a feature requirement asking for a tool that forwards logs to SIEM, although I cannot access it.Is there any deadline for the publication of this feature? We have a customer that is asking for it.Thanks!

We have used webroot for many years, without any major hickups. We have a farm of servers running web applications based on Microsoft.net, so nothing particularly fancy but some features in the system are a bit I/O intensive. They are hosted on GCP and AWS, so vms basically.Now when we have (finally) done “in place” upgrades from 2012 R2 to 2019, we notice that everything went to a halt, basically losing about half the performance on average. First I thought, 2019 is a bloat, maybe we need to do clean installs instead of in place upgrades. But no, this doesn’t help. Then I saw that Defender was active next to webroot. This was a bit alarming, and after disabling Defender, we notice an improvement. But still, if we also disable Webroot we gain another 30% in performance and it’s only then it is comparable to 2012 R2 performance.I’ve tried adding exclusions and it does help a bit (but only if I untick “detect if malicious”) but is that really the only way to go?An

With Google announcing that they are now selling registrations for the .zip and .mov top-level domains, we are looking to strengthen our customer's cybersecurity defences by blocking these TLDs.I tried to do this through the Web Overrides section in the Webroot Management Console. However, I got an error indicating that the *.zip and *.mov URLs are invalid. Is it possible to block TLDs through Web Overrides?

Hi,Does Webroot Business Endpoint Protections works in Smartphones/Devices?Thank you! 

Hello,Webroot client is stopping us from running certain programs.  How can I allow users to disable webroot on their computers when they are running their program? this will be company wide.  I want to give them right from the webconsole as I’m the admin Thank you

Hi, Is it possible to have something like a “MSP report“ instead of a report för every Site in Webroot?It would be much helpful if the reports could report several/all sites with information per Site.It’s tidious to have 1 report/site and the go throw these 1by1,Some Summerizes Reports would be very helpful...or maybe im missing something here?

We are having an issue with the Business Webroot where users are able to install more Entities than the assigned number of End Point Seats.This is causing issues with us, as we are getting billed for these additional Entities, and do not seem to have any control as to warn users, or stop them doing this.I have raised this in the past, but no solution was provided, other than to get an alert, and then sort out this issue manually.We are finding management of this is requiring more time resource overhead than what is worth reselling the Webroot product for.We simply seek to block sites being able to install and license Entities over and above the assigned number of End Point Seats allocated to the Site.Is there a way to achieve blocking Sites adding more Entities than the assigned number of End Point Seats?

I’ve disabled Show SecureAnywhere in Add/Remove Programs but WR agent is still showing Programs and Features. I’ve already adjusted the polling to 15mns and it’s been 24hrs but nothing has changed. Any tips to resolve this?

Hi,We have a small network of ~50 users all on the same webroot account. I am doing some email safety training and one of the tasks included in Microsoft Defender is a phishing simulation. It sends an email to all users, simulating a typical phishing scam. It logs details of all users who click through and share their credentials on the fake site. When I ran a test to my user, it looks like webroot is blocking the site as suspicious. Our current configuration does not provide users with the option to override this. Is there a way to unblock this site so that I can continue my test?For reference, the site it’s directing me to is https://www.attemplate.com/.Thanks

I use webroot to centrally manage devices for out clients. Our policy is set to poll every 15 minutes. I’ve sent the command to the device that I want to uninstall it on, the command log shows delivered, but the program isn’t uninstalling. I’ve reset the device too and tried to refresh config on it but still webroot remains.  How long does it take for the webroot client to act on the commands it receives? How can i force this to unistall?

Greetings Webroot Community! I wanted to share a recent issue that we have been experiencing with some clients that use both Microsoft Office products, and Webroot Business Endpoint Protection. Recently, some of our users have reported that when they are trying to edit and save documents in Word and Excel they experience a pop up that advises them that they cannot save their changes because “another user” currently has the document open. We tried several different ways to get this error to go away, however each time we have had to uninstall and reinstall the Webroot agent on the client machines. Our working fix for the issue is to deactivate protection in our RMM portal, on the endpoint in the management console, and then uninstall the agent on the system locally through a windows command window using the following command: “C:\Program Files (x86)\Webroot\WRSA.exe” -uninstallWe then reactivate protection through our RMM portal, allow the agent to reinstal

Anyone seen a guide for interpreting the wrlog.log?

Hi All.  Any idea of when we will be able to clean up our consoles by removing sites that has been deactivated, as well as endpoints? We have hordes of these across the years using Webroot, and it is making my OCD itch.  

I am using Management ConsoleCE 22.4. Just created a new site-only admin, and assigned admin permissions on that site only. However, after logging in to the new admin, the new admin can view the list of all other admins.Is it a bug in the Management Console? 

Hi,I was wondering if there was a way to manage individual access control settings via policies. I’m aware that the gui can be locked completely as well as removing the tray icon, but I’m looking for a more focused approach. The specific setting I want to manage and prevent changes to is in the screenshot below:Is there a way to disable this one option from the web console and prevent end users from changing it?

Hi. I’ve seen a few posts about contacting support to remove Deactivated Endpoints, is this still the case or is there a new way to do it?My OCD hates seeing deactivated endpoints for machines I no longer support!Thanks.

Hello,I’ve used Webroot for almost a decade. It absolutely the strongest protection out there. I have never, ever, not even once, had a virus infection that I had to remove. It always blocks it. I love Webroot… except….The bad news… it DOES cause Windows slow down a LOT. This has plagued Webroot for years… really ever since I initially recommended it to a former employer and convinced them to switch to it back in 2013. They now have it deployed to several thousand endpoints.I would really like Webroot to focus on improving the speed. There are unnecessary things that occur in the WR client, such as when there is a directory exclusion set in the console, the WR client re-scans the entire directory every so often, finds all EXEs, and re-determines its status even if the directory is excluded. Many processes are tracked, whether excluded or not, and it still runs through its system, it just doesn’t alert on the issue. This is just one example of unnecessary process