Skip to main content
Customer Support Customer Support

Endpoint Protection

Welcome to the Endpoint Protection and management console Discussion Forum!

  • 1,152 Topics
  • 3,752 Replies
1152 Topics
K
Fresh Face
KalannarFresh Face
asked in Endpoint Protection
Chrome keeps crashing

Everytime I try to open up chrome, I get the spinning icon and nothing opens.  If I disable Webroot, I can open it up no problem. I am using windows 10 home edition.

1269355
M
New Voice
H
Popular Voice
hungphamPopular Voice
asked in Endpoint Protection
Mac Xprotect Remediator MRT v3

Just updated to Mac Monterey 12.3 yesterday, and Webroot 9.5.0.139 detects Xprotect Remediator MRT v3 as Keylogger.Refog.1.r. Can anyone verify this, please?Thanks.

2147138
TripleHelix
Moderator
JGiffard
JGiffardRetired Webrooter
posted in Endpoint Protection
Help wanted - what apps do you run on Windows devices?

Folks,   I'm really interested to understand what apps you are running on users Windows computers.  This is for us to better align our test systems with what you have.    Example:-   Windows 7 32bit with Office 365 WSA Chrome  Open VPN Client RMM Agent  Please post below with your replies   Many thanks   Jonathan.giffard Senior Product Manager WSA Business    

27633
M
JimM
JimMRetired Webrooter
posted in Endpoint Protection
What Does Your Company Do?

Hi Everyone,   This topic is for Webroot customers to use to talk about their businesses.  We're always curious to know what kind of companies use Webroot.  We know from experience that Webroot is great for any business - big or small - no matter what industry you're in.  For instance, our reviews page contains some examples of how our security technology has helped a variety of companies - from flying doctors and law firms to beer distributors and on-wafer probe manufacturers.   So when your company isn't worrying about which security products to go with, what else does it do?  Is there anything new going on that you'd like to share with us?  We'd love to get to know you and your company better.

13633
nic
B
New Voice
BeckeyBNew Voice
posted in Endpoint Protection
False report on Mac OS Sierra?

Hi,   We are receiving reports from Webroot of a detection that I am not sure is true... How do I know if it is a false positive?   The report log is below:-   Automated Cleanup Engine Starting Cleanup at 2016-Oct-26 11:40:30 Starting Routine> Detected /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation [Name: "PUA.OSX.TuneUpMyMac.1.r", MD5: 00000000000000000000000000000000] Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallS

25530
Ssherjj
Moderator
S
Popular Voice
Sebastian_ITPSPopular Voice
asked in Endpoint Protection
Firefox and WSA EP trial key issue

Hi Guys   Currently it is not possible to get the trial key for WSA Endpoint Protection in the Firefox browser.  We are redirected to a different subpage and do not get any trial key. Customers are very unhappy with this (over50% are using Firefox) - what can I say to them / when it will be fixed? Regards

23827
Moto
P
New Voice
PatrickBNew Voice
posted in Endpoint Protection
Citrix Provisioning & Webroot

We're implementing/still testing a virtual desktop infrastructure using Citrix XenDesktop 7.6 running atop VMware vSphere 5.5.  The environment is built, support servers running, etc. and we're working on master image deployment via Citrix PVS, but we're running into trouble when it comes to WSA installations.  According to the documentation, running WSA is supported within the virtual environment, either using the -clone or -uniquedevice commandline option.  We're building WSA into our master image and we've tried it both ways (used both command line options), but when we provision our virtual machines, we don't see those registering within the Webroot Admin Console.  When we used -uniquedevice, we saw 1 provisioned VM register in the console but with continual refreshes, that same instance in the Admin Console would change names, our assumption was that we were seeing the last provisioned VM to check in.  When we used -clone, to be honest I'm not exactly sure

102326
R
New Member
M
Fresh Face
mike8497Fresh Face
asked in Endpoint Protection
endpoints not seen

I am having issues with endpoints not being seen in some of our remote location. I have talked to tech support and they told me to go allow it in our filter which is webroot security service. I have done that but with no luck has anyone else had this problem ?

87425
A
nic
nicRetired Webrooter
posted in Endpoint Protection
What sort of bandwidth do you have at work?

I hadn't run a speedtest here at Webroot yet, but when I did I was impressed :) http://www.speedtest.net/my-result/3355512045   How about you guys?  What sort of speeds to you get at your work?

7824
W
New Voice
R
New Voice
RojoLocoNew Voice
posted in Endpoint Protection
Webroot and windows 10

Some observations on installing Webroot endpoint protection (v8.0.8.53) on a Windows 10 (build 10041) test VM....   The endpoint can't / won't check in to the console.  I basically have an extra license now ;)   Since the endpoint won't call home, it has not picked up our default policy.  The GUI will open, all controls are accessible from the user side (no bueno).   In our environment, windows firewall is turned off.  Webroot is most adamant about telling me this.  I click no when it asks if I want WR to keep monitoring the windows firewall.  Then, a few minutes later, it happily tells me that windows firewall is turned off...   Obviously, these are not pressing issues on my side, I just wanted to report the behavior I have seen from testing WR on a new OS.  I did not have WR installed on any previous Win 10 builds, so I have no idea if this was happening on earlier builds. 

11320
nic
M
New Voice
msalynn371New Voice
posted in Endpoint Protection
wssyncmlnps com.wssnps risk message samsung s4

Webroot say I am at risk for the following: wssyncmlnps com.wssnps and I cant uninstall it, it safe?

50220
nic
AdamCMorgan
Popular Voice
AdamCMorganPopular Voice
posted in Endpoint Protection
Labtech plugin broken since 3.0 update in Nov 2017

Anyone else's Labtech plugin been broken since the 3.0 update?    When we updated the plugin from 2.5 to 3.0, the plugin dashboard showed most agents as "non-GSM" and lacked information for them.  After 3 months working with support on the issue, we're still nowhere, and can't reliably monitor our ~5,000 agents. 

33419
AdamCMorgan
Popular Voice
M
New Voice
msmith-442New Voice
asked in Endpoint Protection
How do I disable Webroot on a single endpoint for testing?

Hello!  New Webroot SecureAnywhere user here.  I recently started at a company that uses this software however I have no experience with it.  Dumb question, but we are troubleshooting some software issues on a PC that has Webroot SecureAnywhere installed on it.  I have access to the Admin console but am unable to disable the software locally. How do I disable this software on a single PC for testing purposes?

397219
E
Fresh Face
B
Popular Voice
bbtechPopular Voice
posted in Endpoint Protection
Endpoints not seen recently, not on latest version

I've seen several posts on this subject already, with no clear resolution.   We have 50+ sites, with random endpoints that are "not seen recently" and are all on a previous version of Webroot (not the most current). My assumption is that the endpoints have just stopped "checking in" with the console and are not upgrading as they should.  We have hundreds of endpoints in this state.   The fix I've seen is "reinstall Webroot" but I have yet to see a solution to the root cause.   We're a Continuum partner, so we're not supposed to contact Webroot directly, but I don't see any other way to get this resolved.  Can anyone offer advice here?  This is a pretty big problem for us (and I'm not the only one, others in the Continuum forums have the same issue).

208918
J
B
New Voice
bgavinNew Voice
asked in Endpoint Protection
Not Happy. Install Killed my RADMIN Remote Access Software

I just purchased your 3-device product. During the initial installation on the client's server, it KILLED my radmin remote software as a "threat". This server is 600+ miles away. Sign me VERY not happy right now.

13818
B
New Voice
P
pcswa
posted in Endpoint Protection
Windows 10 with microsoft wireless keyboards

Hello   We are having problem's with Windows 10, Microsoft Wireless Keybaord and Webroot causing Blue screen errors. It Seems very random, no changers were being made?    It just happens on one PC and they are all from the same image. Uninstalling Web root or pluging in a wired keybaord fixes it.   Does anyone know why only on some PC's?   Andrew

8517
R
New Voice
A
New Voice
AmandaJayneNew Voice
asked in Endpoint Protection
Problem with Key Code change

I'm in the process of migrating end points from our old console to WGSM. I'm having issues with a couple of endpoints not accepting the key code changes. I will input the key code manually in the old console, they will appear briefly in the console for the key code they have been changed to, but they still report the old key code, so they eventually reappear in the old console.   I'm also having issues with one endpoint where I'm checking the GUI on the endpoint, sending the command to change the key code, checking in the GUI that the new key code is showing after refreshing the configuration, running a scan, then the key code is reverting back to what it was originally.   I'm starting to tear my hair out. Please can anyone help?

63717
A
New Member
B
Popular Voice
BrianB23Popular Voice
posted in Endpoint Protection
2 Factor Authentication for Global Site Manager?

Are there plans to add 2 factor authentication to the SecureAnywhere Global Site Manager (GSM)?  Even if it's just a code via SMS or Email, that would suffice.  The secondary password is good, but feels inadequate.

27117
S
R
New Voice
robertellis991New Voice
asked in Endpoint Protection
Webroot Client possibly (probably) causing App crash

We have a legacy VMware Thin App virtualised application which has been working until quite recently, i.e. just in the last day or so, users are experiencing app crashes when launching the virtualised app.We have found that removing the Webroot client from a sample computer eliminates the symptoms of the application crashing and therefore we believe that the Webroot client is interfering with execution.We have added Global Whitelists entries for the Application executable and for the UNC from where the Application executable is run and streamed, but this has not resolved the issue.I suspect that somehow the Webroot client is interfering with the data streaming process upon which the ThinApp virtualisation framework depends.This affected application is business critical, so I need to find a way to correct this behaviour, or we will be forced to abandon Webroot in favour of an alternative AV solution for all affected users. I have a raised a Support ticket today and currently awaiting a

238416
R
New Voice
M
Fresh Face
marc_hiltonFresh Face
asked in Endpoint Protection
Webroot integration with Labtech RMM

Hi folks,   I've been attempting to integrate Webroot SecureAnywhere with our Labtech RMM, however as Webroot is like no other antivirus whatsoever I cannot do this successfully. It's a fantastic piece of kit and we'd love to have it picked up by our Labtech setup as we're currently rolling Webroot out throughout our client base.   The issues we currently face are: 1. Labtech looks for a definition file, which I'm fairly sure Webroot does not store locally, so we cannot supply one. 2. Labtech looks for a command line scan function, which we cannot locate. 3. Labtech looks for an update command, which again Webroot does not require as we keep it updated with GPO   Has anyone managed to successfully integrate Webroot with Labtech? We're currently on Labtech 2012.1 (CC and Agent v51.155)   Thank you in advance for your assistance.   Marc Hilton Network Engineer Spector

30716
DTMT
Popular Voice
nic
nicRetired Webrooter
posted in Endpoint Protection
Anyone use Spiceworks and know about SpiceRex, their community mascot?

If you're not familiar with him, he is the mascot invented by the Spiceworks community.  He travels around visiting IT pros and seeing the sights.  He stopped by the Webroot office, so I gave him a tour and posted a bunch of photos.  You can see them in the SpiceRex group on the Spiceworks community here.

9515
nic
MikeR
MikeRRetired Webrooter
published in Endpoint Protection
CryptoLocker Malware: What you still need to knowKnowledge Base

  What is CryptoLocker?CryptoLocker is most often spread through booby-trapped email attachments and uses military grade encryption. The malware can also be deployed by hacked and malicious web sites by exploiting outdated browser plugins.    Webroot's Threat Brief on CryptoLocker  Can Webroot Protect Customers Against It?  Encrypting ransomware (Cryptolocker, CTB Locker, Crtroni, Cryptowall, ect.) is a very difficult infection to remediate because it uses the RSA public-key encryption algorithm to encrypt user files using unique encryption keys for each computer. Once a user’s files are encrypted this way, it is next to impossible to decrypt them without access to the private key that is stored on the remote servers in use by the malware author(s). There are no tools currently that are capable of decrypting these files without the private key. As long as SecureAnywhere is installed prior to infection, All encrypting ransomware should be detec

15115
MikeR
Y
New Voice
YellowdieNew Voice
asked in Endpoint Protection
HTML/CSS Rendering issues

Hey guys, I moved my company onto Webroot Endpoint Protection a few months ago and since installing it across the board, I get a ton of complaints about websites not loading properly.  They'll come up with the HTML screwed up and the user has to refresh the page one or two times for it to load properly.  It's sporadic--but some users have it happen a lot more than others.  It's sites that use SSL and sites that don't.  I have not been able to narrow down the cause.  When I remove WSA, it goes away, so it's clearly something in the settings.  I've been beating my head against the wall for too long...  Does anyone know what option is causing this?   Screenshots: Page with issues: https://www.dropbox.com/s/nzdu1pejq4xils2/Webroot.png After reloading the page: https://www.dropbox.com/s/zc508asgislsnky/Webroot_After.Refresh.png   Another example page: https://www.dropbox.com/s/za1yzslg5qa0pkp/Webroot2.png   Do you need me to post screen

36215
nic
G
Popular Voice
GyozoKPopular Voice
asked in Endpoint Protection
Why do we have 5700+ undetermined software for months?

Hi,   I wish to mention here my problem with Webroot Threat Research:   I have a customer who has 5700+ undetermined software in the 'All undetermined software seen' report for months. (And some more customers with 1000+ undetermined software)   First of all, I do not understand how this can happen? Actually, I expect Webroot Threat Research to classify all undetermined software as soon as possible, otherwise how could Webroot guarantee that there are not any malware among them --- that are being able to run on the endpoint thanks to the way WSA client is developed, it will run just until the client receives the BAD classification from the cloud. But it looks like many thousand software are simply never gets classified. So in my reading, a malware can simply run anytime for quite a long time (eg. for month as in our case).   I think the expected approach from Webroot is that in case of undetermined objects added to the list and the reported to the cloud then Webroot shall process it AS

16615
explanoit
Silver VIP
A
New Voice
AmandaJayneNew Voice
asked in Endpoint Protection
Behaviour after .msi deployment

I am testing msi deployment as we are about to roll this out to an enterprise client. I am using a "live" test environment of various server and client operating systems. When I first deployed this to a client machine, the webroot icon in the system tray had a warning triangle stating that a scan was required. Is there anyway to get Webroot to scan immediately anyway, as with 200 + machines to roll this out to, we could do without manual intervention.   TIA

7915
explanoit
Silver VIP

Badges

  • News: Posted 10 comments!
    jhartnerd123has earned the badge News: Posted 10 comments!
  • Posted 100 comments!
    SXR6has earned the badge Posted 100 comments!
  • Most Wanted
    Tarnakhas earned the badge Most Wanted
  • Beta To The Max
    Tarnakhas earned the badge Beta To The Max
  • Most Wanted
    Muddy7has earned the badge Most Wanted
Show all badges

Join the Conversation

Terms & Conditions