Endpoint Protection

Hello,   I create serval scripts(in AutoIT) that allow me to automate deploying updates to my users, or gathering info, ect...  Every script I create gets flagged as a virus.  My question is, is there a way I can create an override before I deploy the software and get a message that there is a virus?   Thanks for your input.   Rich

I've been hearing lots of good stuff about Meraki and Ubiquiti lately - any of you on those systems?  What's everyone using for APs in their business and what do you think of it?

What is the process for remote desktop environments when it comes to purchasing licenses?  Do you have to purchase a Webroot license for each concurrent user that connects to the server or do you just need 1 license for the server?

We did not purchase/install WRSA.exe until July 2012. We began having these problems when we upgraded to Win7 64bit in November 2012.  Suggestions are welcome!

Deployed several agents in multiple sites. When a threat appears and then goes away (seemingly by itself), how do you know what the disposition of the threat is (e.g. some AV would indicate is it is in quarintine or deleted at least from the agent GUI). If you are managing via GSM, how do you know the disposition?   Is there a log that can be retrieved from the agent? By GSM?

Hi all.   I need to start remotely an application, so I figured that I could do this using the "Run a DOS Command" from the Agent commands. Well, I run the command I want but nothing happens to the endpoint I target. For testing purposes, I tried to run the command "notepad.exe". Although the command is shown as executed, the notepad never opened at the endpoint that I sent the command. Same happens even if I put the full path of the executable. What I am doing wrong? How can I start an application remotely?   Thank you in advance.

Greetings Webroot Community! I wanted to share a recent issue that we have been experiencing with some clients that use both Microsoft Office products, and Webroot Business Endpoint Protection. Recently, some of our users have reported that when they are trying to edit and save documents in Word and Excel they experience a pop up that advises them that they cannot save their changes because “another user” currently has the document open. We tried several different ways to get this error to go away, however each time we have had to uninstall and reinstall the Webroot agent on the client machines. Our working fix for the issue is to deactivate protection in our RMM portal, on the endpoint in the management console, and then uninstall the agent on the system locally through a windows command window using the following command: “C:\Program Files (x86)\Webroot\WRSA.exe” -uninstallWe then reactivate protection through our RMM portal, allow the agent to reinstal

I've been running Webroot SecureAnywhere on 3 PCs for work since the beginning of 2013 and it has worked very well so far. Now suddenly our PC that runs the laser engraving machines came up with errors and must shut down (the standard Windows XP block that comes up when something goes wrong with a program). BUT it doesn't end there! The same block keeps coming up, after 10 seconds or a minute or some other random time. If I kill WRSA.exe in the processes list, it resurfaces again. No sign of the Webroot program icon by the clock on the task bar at any point. Then when I try to uninstall Webroot either through its own uninstaller or through control panel, I'm told I can't do that because I'm not an administrator! Of course I am, I've even double checked! The upgrade/uninstall program from Webroot did nothing to help, it just ran and made empty promises, but the error scren still kept popping up. I installed AVG to check for any viruses - NOTHING. Malwarebyt

I am a software developer.  As such, I may compile and test a progra 20-30 times per day.  Starting this week, I am getting a pop-up from WebRoot that my program is trying to access the internet (its not).  The box gives me 3 options: Block 'Allow Once' or 'Allow Always'.  I picked 'Allow Always'.  I get this almost every time I try to run the program after a compile - very annoying.   Help!

@freydrew @Rob House In the live Q&A post about the new console, you said that friendly names would be shown from the old console but functionality did not yet exist to rename in the new console.I’m disappointed to tell you that friendly names are NOT being shown in the new console.  This is going to make management very difficult.  Is this a bug that you’ll be fixing soon?REF:  

Hello, We have an infection currently spreading through our network. New endpoints are popping up on the SecureAnywhere console every few minutes as infected. Some are 'protected', others are 'need attention'. The infection is reported as W32.BitCoinMiner. The file list is shown below.     I need to determine  a. The point of entry - which computer introduced this and how. Was it via the web? local usb device? etc. b. How the infection is able to spread. So far it has affected two AD sites, spanning two IP subnets. It has not spread to any servers yet.    Does anyone have any tips on how best to understand and investigate the two

I was wondering if someone can guide me in the right direction to find more information about a Threat once it has been found. Does Webroot keep a list of all the threats detects (with a brief description of each and what it does) or do you just have to Google the Filename or Malware Group to find out more information about the threat? I have been searching the forums but can't find an answer. Thanks.

Where did the Business Endpoint Protection forum go? Is this the beginning of the end? The product was absolutely filled with bugs and errors. It was obvious support wasn’t doing anything about the problem. Does anyone have any idea if OpenText was going to fix things or should we all start looking for something new (and a whole lot better)?      

 Hi,   I was wondering why my site is always displaying the "endpoints need attention". I cleaned up the computers. I did many full scans after and all of them said Protected and did not show any infected files anymore. But in my console I see the "endpoints need attention, last threat on 11-16-2016 (2 days before)" for the same 2 computers. Is there a way to reset in the console so that they are now viewed as protected?   I don't know if you understand my issue...<   Thanks !

CEO goes to a website that the company pays to use and gets a blocked access. after spending a couple of hours back and forth with their administrators, come to find out that the IP our requests were coming from (webroot IP) was what was being blocked. They opened access from the IP but in no uncertain terms said  that Webroot may also get blocked in the future. Now before you asked about support, i went there and all i got for my troubles to create a ticket was "There seems to be a problem" window. Theres a problem alright.

I have tried initiating a scan using wrsa -scan="C:" from the agent DOS command. It reports that it executed, but I can't verify it.

Hi,   Has anyone noticed such a issues so far?   We just saw one of our endpoints updated to the new Endpoint Protection client v8.0.4.24.   So far we experience 2 issues now: 1. any setting of the WSA client can be modified manually, however, this should not be so 2. the WSA client does not apply policy settings at least we did some tests with: - System Cleaner settings - Firewall settings - Core Systems Shield settings and none of the policy settings were applied on the client.   After each change in the policy we clicked "Update configuration" on the client popup menu and that showed the ususal message that configuration was updated successfully.  

We use G Suite for Business and have force-installed extensions/apps and whitelisted extensions/apps for Chrome. Today, several users experienced installation of the Webroot Filtering Extension, at which time all other extensions and apps in the Chrome managed profiles disappeared and cannot be reinstalled. In other Chrome profiles on the same computers, the Webroot extension was added without impacting existing Chrome extensions and apps.   We have tried updating the Webroot policy to disable the extension; however, even after uninstalling and resinstalling the Chrome managed profiles and restarting the computers, the previously-required/allowed extensions cannot be installed. The Chrome store error message is "Ooops. [Extension] is blocked by the administrator." I am the administrator, and I have checked that the extension is not blocked and is whitelisted. How can I fix this?   Edited to add: our product is Webroot SecureAnywhere.

Openfire.com is a redirecting website. Sometimes to HP, sometimes to a reputable website but more often than not your speakers will announce you have a virus along with a pop-up that directs you to call tech support to remove it. Obviously bogus! The pop-up is difficult to remove and you have to end task. This happens on all browsers so far.   On a home instalation the whole screen is blocked by webroot,   On my clients Webroot installation there is the occasional pop-up. It doesn't always work!

I’ve tried rebooting and reinstalling multiple times.  I’m testing the business endpoint protection free trial out for my company, we really can’t have two antivirus programs running at once. From other posts it seems like I will need to leave the windows firewall running, that is fine. Web Root is running, I can perform scans and there is a green system tray icon. Windows is not recognizing Web Root as antivirus software though and it’s not appearing in the drop down for providers. The only provider appearing under antivirus is Windows itself (see screen shot). Any assistance would be appreciated, I’m hoping to switch all our licenses from Symantec to Web Root but only if it cleanly installs and runs with Windows.  

We have a online application. Users internally / externally receive this error when using Chrome:   Error code: ERR_CONNEC?TION_ABORT?ED   I have: 1. Uninstalled / reinstalled Chrome 2. Uninstalled Malware Bytes, CC Cleaner and Spybot 3. Updated OS (windows 7) 4. Deleted Cookies and History 5. Uncheck "auto apply" within Chrome advanced settings.   Obviously posting here means we do not use Kaspersky, which I am finding is the issue, it isn't.   Thanks in advance!

Hi. I’ve seen a few posts about contacting support to remove Deactivated Endpoints, is this still the case or is there a new way to do it?My OCD hates seeing deactivated endpoints for machines I no longer support!Thanks.

Hello,I’ve used Webroot for almost a decade. It absolutely the strongest protection out there. I have never, ever, not even once, had a virus infection that I had to remove. It always blocks it. I love Webroot… except….The bad news… it DOES cause Windows slow down a LOT. This has plagued Webroot for years… really ever since I initially recommended it to a former employer and convinced them to switch to it back in 2013. They now have it deployed to several thousand endpoints.I would really like Webroot to focus on improving the speed. There are unnecessary things that occur in the WR client, such as when there is a directory exclusion set in the console, the WR client re-scans the entire directory every so often, finds all EXEs, and re-determines its status even if the directory is excluded. Many processes are tracked, whether excluded or not, and it still runs through its system, it just doesn’t alert on the issue. This is just one example of unnecessary process

Hi One thing is not quite clear to me. What is the difference between agent commands Scan and Cleanup. It seems to me that they both will launch the scan and quarantine malicious files. And one more thing - is it possible to pernamently delete files from quarantine using console? Thanks

Hi Could you assist me we these two questions: 1st scenario I use 10 keycodes within one console. Each of them is valid fo 10 devices. In the console I see that I have 48/50 agents installed. How can I check on which keycode (or on which 2 keycodes) I have two installation slots available?   2nd scenario I use 10 keycodes witihin one console but after a while I decided that it's more convenient for me to create a separate console for each keycode. Can I still do it? If yes is the procedure the same as usuall (registering new account withe same customer details but different keycode)?   I'd appreciate any help