Secure Cloud

I have tried initiating a scan using wrsa -scan="C:" from the agent DOS command. It reports that it executed, but I can't verify it.

I have a PC that I set the polling interval for 15 minutes. It updates the Last Seen every 15 minutes. I then issue an agent command (Scan). The command sits in the Recent & Outstanding Commands window with a status of "Not yet received". No matter the polling interval OR if I go to the PC and right-click the webroot icon and select "Refresh configuration". The agent command never gets run. Tech Support has not been able to help me with this. Any ideas from the community?

Currently have v9.0.10.19.  Is this compatible with MS Server 2008R2?

Hello. I am upgrading 3 pcs at work. Can I transfer my Webroot from the old pcs to the new ones? The old ones will be out of commission after the upgrade.   Thank you.

I need to know the full path name and user name when threats are detected. If I had one I could probably figure out the other... but right now I cannot see a way to find either.

Can someone tell me what the latest version number of Webroot Secure Anywhere Endpoint Protection for Business is? I don't have many MACs on my portal but the ones i do have all list the Agent version as 9.0.2.22 Obviously this doesn't match the agent version of my PCs but i want to make sure that the MACs are updating like they are suppossed to.   Thanks!

Hello, my name is Johnny and I work for Webroot in the Enterprise Support department.  In the past few weeks there has been quite a bit of discussion around encryption software and Webroot.   This topic has been coming up more in the office, on and in forums, and in speaking to customers and prospects though the calls, tickets, etc.     I would like to raise a discussion around the topic and share my findings.   About two weeks ago one of my colleagues ran some tests with Webroot on fully encrypted drives using a variety of encryption software and operating systems. He concluded that there was no negative interaction in any of the cases. Specifically he tested Bitlocker (on 64-bit Windows 7, 8, and 8.1) and Dell Data Protection (on 64-bit Windows 7).   My experience with Webroot has shown Webroot is compatible with all encryption software.  In almost all cases, we work right out of the box without any configura

The endpoint software on each client shows threats have been removed. But, the management console is not picking these up. The status page shows 0 Endpoints need attention, and No endpoints have encountered threats in the last 7 days?    We are currently running the 30 days trial. Is this a limitation in the trial? Or is there some setting that I have not set? The first threat was removed over 24 hours ago. Polling is currently set to every 15 mins at the moment.    Any help anyone can give would be gratefully appreciated.    Other than this slight issue, loving the software. :)   Thanks.

Hey all,   I am cleaning up my system (kinda like summer cleaning), and was looking at where all my drive storage was going. I noticed that my WRData folder is now taking up almost 50GB (48.6 to be exact).   I have two questions:   1. how is journaling data recorded in the WRData folder/what do I look for to see if journaling had taken place at a certain date?   2. Is there a way to safely elimate some of the data in there without putting my system at risk should rollback be required or anythign else that uses the WRData folder?   Thanks John Nerds On Site

I frequently get infection alerts for a particular piece of software that is used at one of our clients. We've already recorded the MD5 in the global overrides Whitelist. Why do we keep getting an alert for it?

Hello - We need to turn off Webroot moentarily while we troubleshhot a computer's slowness - how can I do this?     thanks, Lisa

Can we alert or centrally audit on logon events?   As the console login is not tied to our AD (or AzureAD or federated) we have to manually audit logons to the console.   As anything manual becomes forgotten, can we alert on logons or pass the event to our logging system?   The same goes for policy changes.   Thanks, martin

How do we disable the shutdown agent command?   We want to install Webroot onto our Hyper-v, Exchange and AD servers but we don't want the AV admins to be able to shutdown (or reboot) these servers.   I can see that we can set up sub-administrators who don't have the permissions to issue commands but our global admin can bypass all of the security we have setup in AD to stop them accessing certain servers. And access to these commands (and logging in) does not seem to be alertable nor auditable (outside of the console).    Is there a way we can globally or selectivity disable/remove agent commands?   Is there a way to alert on logons?   Is there a way to alert on command actions?   Is there a way to export the logs?   Thanks, martin

This caused our customers who subscribe to your services or one of your partners (Cisco) to lose access to our site.  We reviewed our servers and found nothing to indicate we had a problem.   The canned  response (see below) provieded is not enough to justify the interupption to our business.  We want specific justification for your actions.   "Our automated evaluation system uses a machine learning algorithm to determine the reputation of an IP, to which the experience of a Web and Threat Analysis team is added when further research on a website is requested.  Unfortunately we cannot disclose the proprietary intelligence data collected regarding this site. If further details are needed you may elect to contact the IP owner in order to request more information about any recent changes to the site source code that may have triggered the scanners to flag the site as malicious. Best, Webroot BrightCloud Threat Intelligence Support

I was told the following by tech support today:   "Unfortunately the file (669.f70p53_i_b.dot) is NON-PE. This means the file is a file which does not contain a portable executable header i.e. .dot extension. Webroot is currently only capable of PE malware detection, however the program also contains a heuristics engine for some NON-PE files. In the future, this detection feature will be added." "Malware downloaders are commonly re-obfuscated and soon all antivirus will not detect examples of the document you have supplied. This is also true for malware in general." This was not verbatim but basically that non-PE files that are manually scanned (Right click, Scan with WebRoot) are not actually scanned or are scanned but WebRoot is mostly unable (depends on the exact file and type) to detect if the file is infected.  The proof is that the log file doesn't include an MD5 for the file."Re. #3, this means that even though the applicati

Agent Commands Download and Run is hit or miss. On some machines it will download the file, an exe and run it no issue. On other machines it just doesn't work.    1) where does the file get downloaded  so I can verify that part is working? 2) is there any log on the client to see what is going on? 3) any detailed information on this feature is greatly appericated.   Thanks, Brad

Hey All,   I have a client that has WSA installed on all their endpoints as well as their server.   There are roughly 10-20 simultaneous logged in users to the RDP server at any given time and we have gotten alerts that there was action taken against malware being executed on the server.   I have the alert setup to display the current user, but when they are logged into the RDP session, the alert comes through but doesn't show the logged in user in the alert email.   Is there a way to tell in the GSM or tweak the alert to show who is logged into the RDP server and triggered the malware alert?   Thanks John Nerds On Site

There are dozen different Webroot Application versions showing in my console.  How do I instruct the Console to update the user Webroot versions?  (Nothing to do with updating the Threat Signatures.)

Do I have the ability within my MSP WSA console, to assign the ability to make changes to the endpoint user interface?  In other words, I've allowed the endpoint GUI in a specific policy but when the end user opens the GUI, they cannot make any changes.  I get the attached message below.

I'm looking for a command line switch to see the version number of the currently installed version of Webroot SA without having to wait for a poll to the console.  I know that I can do WRSA.exe -poll and force an update, but it's very hard to see the version number when you have the system tray icon hidden from the end user.

My Company is considering switching to Webroot so we are testing it.   We have a problem in that Cisco Anyconnect VPN is not detecting Webroot so we can't VPN into network as it requires a valid updated and support Antivirus.   Any ideas would be appreciated..  

i am unable to reach /my.webrootanywhere.com/home.aspx. Is there a site outage? If so is there a place to check the sites status?

Hi, I have a Windows 2012 Essentals Server with a single Windows 10 PC connected . I also have a Windows 8 laptop and Windows 7 Media PC.   What I wanted to ask is that if I get the 5 device license would I be able to use/install it in my Laptop and PC which are NOT connected to the server or do I have to get seperate 'non-endpoint' licenses   Thanks Steve

Windows Backup failed while trying to read from the shadow copy on one of the volumes being backed up. Please check in the event logs for any relevant errors. (0x81000037). I get this error when I try to run a backup.  I have removed the quarentined files, at great hardship, and I am not sure that I removed them completely. I really could use some help on this.  

I just ran a scan and can no longer access Chrome- I get a sad face icon on the tab. Doesn't matter which site I try to access.