Endpoint Protection

Just updated to Mac Monterey 12.3 yesterday, and Webroot 9.5.0.139 detects Xprotect Remediator MRT v3 as Keylogger.Refog.1.r. Can anyone verify this, please?Thanks.

I have an endpoint that is not functioning.  It will not speak to the portal but locked in central management mode.   I need to remove it to reinstall it but it will not allow me, saying I have to contact the admin, I am the admin :)   I cannot get the console to speak to the endpoint though.    Is there an uninstaller?   Thanks.

Everytime I try to open up chrome, I get the spinning icon and nothing opens.  If I disable Webroot, I can open it up no problem. I am using windows 10 home edition.

Igor pavlov 7 zip - what is this and is it safe?

Webroot secureanywhere endpoint protection   doesn't show up in program  list to uninstall.   running manual command to uninstall giives error that  the service is centrally managed and must be uninstalled from webconsole.   The customer  does not have this info.  The customer does NOT have contact with last IT vendor (relationship ended badly).   How do I uninstall this borderline-malware, garbage software without formatting and reinstallinng windows?

I can not remove this from our 2003 Sp2 server. Please advise, thanks.

I searched first, but didn't find this topic. However, I think there must be more people with this problem.   I am trying to deploy via GPO, but several of the machines never accept the installation. The logs show error %%1274, and verbiage like this: "Failed to apply changes to software installation settings.  The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon.  The error was : %%1274" "The assignment of application Webroot SecureAnywhere from policy AV Deploy failed.  The error was : %%1274"   "The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may resu

Hello. I have loaded the software and have scanned my PC's. When I click the icon in the task bar and then try to open I recieve the following.   "Please contact your network administrator to access the user interface of secure anywhere."   I am the administrator I am logged in as administrator. Any Ideas?   Regards from Dave.

MSP here.  I’ve seen other posts that discuss Webroot with Windows Defender, but now that it’s 2021, Windows 10 has changed a bit.Why other posts don’t apply anymore: Disable periodic scans in Windows Defender is no longer an option According to this article, you can set a DWORD value in the registry to enable Passive Mode for Defender, however, upon setting it, is has no effect on issue #1 belowTwo issues:With Webroot + Windows Defender enabled, Windows Defender is still actively scanning data in real-time.  I ran a test and saw the Microsoft Anti-Malware service spike up to 30-40% CPU usage.  Webroot is installed and functioning correctly, but Webroot doesn’t seem tell Windows Defender to tur

I went in to the GSM console 3 days ago and whitelisted several a couple for a site yet when I look at Webroot on one of those endpoints nothing shows up under Block/Allow files. It is all done via the GSM because when I try and and "allow" files on the endpoint it says I can't and that they must be added via the console. So.... what am I doing wrong?

Hello, I’m attempting to remove this software from our endpoints. The manual removal fails indicating it requires wsasme.msi, I do not have this file nor is it located on the endpoint.An attempt to remove them displays a missing msi file. further to this removal from WMIC errors out with “ ReturnValue = 1603;” 

  I need to remotely uninstall Webroot SecureAnywhere from 135 devices on a domain.  I do have the ability to do this via a RMM so if there are any scripts or software that can accomplish this with silent or no reboot switches that would be great.  Thank you!

Hello!  New Webroot SecureAnywhere user here.  I recently started at a company that uses this software however I have no experience with it.  Dumb question, but we are troubleshooting some software issues on a PC that has Webroot SecureAnywhere installed on it.  I have access to the Admin console but am unable to disable the software locally. How do I disable this software on a single PC for testing purposes?

Is there a Webroot secureanywhere removal tool?  I seem to have a broken install.  I was messing with deployment tools testing the msi deployment.   Webroot secureanywhere is running, I see the icon and can open it.  It's not showing up in the console online though. I tried using the msi /x option to remove it but it tells me that it's only valid for products that are currently installed.

Hi guys, I am looking for resources on making exclusions for files, extensions, and folder paths please. We are implementing Global Shop Solutions here at work and they are requesting some exclusions/whitelisting.   Thanks!

I have a few Windows 2012 servers running Webroot SecureAnywhere 8.0.8.x. They've stopped communicating with the console, so I can't send them any commands to scan, refresh, uninstall, or anything from there. When I try to uninstall from the server's Programs and Features, I get this message:   SecureAnywhere is currently managed by the Web Console and all changes need to be applied centrally. Please refer to the SecureAnywhere documentation for further information.   My question is, how do I uninstall the product on a machine that is managed centrally but not communicating?

All of the sudden, webroot reported W32.Trojan.Gen on my database server and shut off access.  I ran another scanner and it reported all was well.  I uploaded logs to Webroot.  There appears to be no one I can speak to and I have no idea if Webroot knows what is going on with my Production server.   I'm strongly thinking of manually overriding.  Any ideas?

Hi All    Haviing a very strange issue with some of our users when performing a search on www.google.com. When searching, users are randomly getting the following error message.   "Our systems have detected unusual traffic from your computer network. This page checks to see if it's really you sending the requests, and not a robot"    We dont think this is an issue with our network as when we switch off webroot we no longer get the error message.    Anyone have any idea? Go easy on me i am a noob.      James.    

When Webroot performs the scheduled scan of a Windows Server 2012 R2 VM it appears to get stuck and uses all the CPU.   Server is the domain controller and is running a couple of SQL based applications and hosting shared data for a small business.   I have tried reinstalling the programme, renaming the WRData directory etc. Most times when I reinstall or restart Webroot and do the initial scan it completes in around 10 minutes. About every two days I get a call from the customer advising they cannot work. Restarting the server appears to clear the issue. I have looked at other threads relating to similar issues but have not yet found a permanent solution.    Any thoughts on what I can try next to get this issue fixed please?

Beginning this morning, our SonicWall gateway antivirus has started blocking the endpoint upgrade to 9.0.11.70 - clearly a false positive signature in the SonicWall AV database.   What are the IP address ranges for the Business Endpoint Protection service so that I can add them to my firewall exclude list?

We have a legacy VMware Thin App virtualised application which has been working until quite recently, i.e. just in the last day or so, users are experiencing app crashes when launching the virtualised app.We have found that removing the Webroot client from a sample computer eliminates the symptoms of the application crashing and therefore we believe that the Webroot client is interfering with execution.We have added Global Whitelists entries for the Application executable and for the UNC from where the Application executable is run and streamed, but this has not resolved the issue.I suspect that somehow the Webroot client is interfering with the data streaming process upon which the ThinApp virtualisation framework depends.This affected application is business critical, so I need to find a way to correct this behaviour, or we will be forced to abandon Webroot in favour of an alternative AV solution for all affected users. 

It would be great if there was a document which had the complete list of command-line options/switches for both Windows and Mac as well as documenting the functions of each option/switch. I know the existence of https://docs.webroot.com/us/en/business/wsab_endpointprotection_adminguide/Content/ManagingEndpoints/IssuingCommandsToEndpoints.htm and https://download.webroot.com/WSAB-EP_GettingStartedGuide.pdf. These pages aren't enough as they are either incomplete with information or don't display commands for Mac. The reason why I say the second link is incomplete is because other than not displaying Mac specific/only/non-functional commands, it doesn't show the -si