Skip to main content
To Customer Support To Customer Support

Secure Cloud

The future of cybersecurity for SMBs

1238 Topics
A
Fresh Face
andy_loughlinFresh Face
asked in Endpoint Protection
Can you clarify what "Infected" really means against an endpoint

Hi,   I am currently conducting a trial of Webroot installed at a remote office in Malaysia, from Australia.  Yesterday I received an email that one of the PC's there had been "Attacked", and checking the console this morning I see the message :   Alert 1 Endpoint needs attention We recommend you check whether this endpoint has automatic remediation enabled on the assigned policy.   The endpoint shows as "Infected" by Malware called "W32.Rogue.32".   The PC was last seen yesterday afternoon, a few minutes after the Malware was detected.   There is no clean scan recorded.    My question is : How do I know what action was taken by Webroot, or do I have to assume the file was quarantined ?   There does not seem to be any way to see a log of the actions performed either successfully or not.   I find the message "Infected" rather alarming as it implies there is still an infection .....   Thanks

1574
Shawn
Webroot Employee
12 years ago
D
New Voice
Dick99999New Voice
asked in Endpoint Protection
Can I expect the same functioning & issues as with the 'complete' version?

I am trying the Endpoint product, and already had bought the Complete product. The endpoint version seems very similar, and same UI etc. So can I expect roughly the same functioning and  issues compared with Complete?   For example I could not paste a password into a VPN connection (nothing happened, while in notepad it was pasted). And I could not copy a value manually inserted in a login dialog (the clipboard remained unaltered). I know about identity protection>protected applications, and have set all entries there to allow. These are examples, the main question is how similar are the 2 products? (except getting the data/info/protection out of the cloud, I understand that difference)

401
browell
Webroot Employee
12 years ago
B
New Member
badkinsNew Member
asked in Endpoint Protection
Performance gone to hell with Browsers

After installing the Endpoint Protection, my browsers (firefox and chrome) seem to be using 15-20 % of the each  (each) while I'm not doing anything...  As soon as I uninstall the webroot endpoint, those numbers frop to 0-1 % for both firefox and chrome.   Are we doing something wrong, or is this just a byproduct of the webroot endpoint?   -Brian

352
YegorP
12 years ago
J
New Member
JamesHeraclitusNew Member
asked in Endpoint Protection
Re: Exclude folders from scanning?

Ugh..well I was trying to get my company off of AVG/Norton/Panda . I personally run Webroot on 5 personal machines. Unfortunately the inability to exclude folders ie e:SupportSecurityTools on our customer servers/Terminalservers from scans is a show stopper. In the real world..users forget passwords to outlook,zip files.. Download crap which does strange things.... We also store software/misc tools for decoding passwords... scanning networks/packet sniffers; Nirsoft tools.... most of which can be considered hacker tools in the wrong hands. My Techs now hate Webroot because it munches their tools on remote servers. They have to disable Webroot completely (VERY BAD) download the deleted tools... run 'em and then re-enable Webroot.. This costs time/money and frustration. Only they (techs) have administrator access and Administrator read/execute is required for those special "Tools" directories. If Hacker/virus gets admin access... server is pretty much screwed anyway so the &quo

1642
JimM
12 years ago
T
Fresh Face
tjwhitejrFresh Face
asked in Endpoint Protection
Numerous Problems with SecureAnywhere and Mobile

I purchased a 5 user license for SecureAnywhere Complete a few days ago. I have installed it on 5 PC's and one Droid Bionic.   3 of the PC's are Windows XP, 1 is Windows 7 32 Bit and the final is Windows 7 64 bit.   All 3 of the XP Boxes lose the ability to cut and paste. Rebooting fixes it for a while, but it happens again within 10 minutes. Shutting down Secure Anywhere fixes the problem immediately without reboot and it works fine until I restart Secure Anywhere. And it will happen again in a few minutes. It will come and go.   On the 32 Bit Windows 7 PC, the CPU stays neat 100% when I am using Chrome. The mouse movement becomes "sticky" and I end up shutting down Chrome and restarting it. Within 5 minutes with 3 or 4 tabs open, it happens again. I only have a couple of extentions. When I shut down SecureAnywhere, the CPU does not hit 100%.   On this same PC, the number keys change to arrow keys so the cursor jumps all over the screen when I try to enter numbers. The regul

1564
JimM
12 years ago
E
New Voice
EldanNew Voice
asked in Endpoint Protection
XP woes

I have one XP machine left, fully patched. It had WSAEP deployed to it with Group Policy. Ever since, it's been freezing hard after a random number of minutes. No mouse, no keyboard. I tried starting a scan on C: from the context menu then left the machine alone, it froze up soon after.   Another strange thing: The machine has a Run entry in the registry, WRSA.exe -ul. But there is also an entry in Services, WRSVC, which points to WRSA.exe -service. The service is disabled, and I can't enable it. If I try I get a modal dialog that says "0x13d." On my Windows 7 machines this service is Automatic and started.   I'm looking for tips on what to try.   UPDATE: I uninstalled WSAEP from the XP box and forced a group policy update. After a reinstall the service is running. However I'm still getting the complete hang. The box has passed a full suite of Dell memory and system diagnostics.

543
E
New Voice
12 years ago
V
Fresh Face
VI-jasmanFresh Face
asked in Endpoint Protection
Remediation of found viruses.

When WebRoot 'cleans' a found virus does it remove the virus from the executable or does it just block the file?

704
V
Fresh Face
12 years ago
V
Fresh Face
VI-jasmanFresh Face
asked in Endpoint Protection
Runouce removal

I have computers that are infected with Runouce.  When I run the scan it finds the virus it just doesn't remove it.  The virus keeps coming back.

431
Shawn
Webroot Employee
12 years ago
J
New Member
jreedNew Member
asked in Endpoint Protection
Concerned about uncaught infections

I recently migrated to WSAE and had a computer start acting up  yesterday.  I ran the scan and it found.  So, I installed the free malwarebytes scanner and ran a full scan which found 50 infections!  Below is the log from mb.   This concerns me as it seems that WSAE missed these.  Any ideas or could I have my software set up wrong?  I am using the recommended defaults.   Windows XP Service Pack 2 x86 NTFS Internet Explorer 8.0.6001.18702 mwilt :: SHP06 [administrator] 6/14/2012 2:27:29 PM mbam-log-2012-06-15 (08-32-04).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 517869 Time elapsed: 2 hour(s), 52 minute(s), 11 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 18 HKCRCLSID{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (PUP.MyWebSearch) -> No action

951
Kit
12 years ago
P
Fresh Face
pqarauFresh Face
asked in Endpoint Protection
Re: Webroot client connection error

Hi Guys    yea thanks for the heads up..   We currently have Webroot Anti Spyware with Antivirus on Corporate Edition. Im not sure to sure of the exact agent details. how do i get that?

1074
Shawn
Webroot Employee
12 years ago
Virtualpb
Popular Voice
VirtualpbPopular Voice
asked in Endpoint Protection
Any thoughts on a Server based version?

Are there any plans of introducing a server based version to complement endpoint protection?   I'm thinking more from a small business medical practice perspective that would want a quick, low resource usage, protection on their file server or application server, even though the endpoints have an antivirus solution.

371
mholley
12 years ago
J
JENDRESRetired Webrooter
posted in Endpoint Protection
Research: Enterprise Antivirus Security: How does your solution stack up?

More than 55,000 new malicious software programs are registered each day by AV-Test an independent antivirus (AV) research institue.  Any one of these can have a mild to devastating impact on the organization, randing from wasted IT staff hours to damages to consumer confidence or losses of dollars in the instance of a regulatory violation.    In fact, the average organization experiences a malware attack every 73 days, Osterman Research found in a 2011 study, in which 44% of participants said that a single malware attack had cost them as much as $10,000, while another 27% reported financial impacts as high as $50,000.  Too few IT decision-makers address malware threats adequately, chalking up security breaches as a cost of doing business, the researchers noted, adding, "The costs [of malware] are typically higher than many organizations realize, but with the right knowledge and technologies, it is possible to reduce the impacts of malware."  Canalys Research has likewise con

260
J
12 years ago
R
New Voice
robertNew Voice
asked in Endpoint Protection
Clean infected machine?

I'm getting an alert   "1 Endpoint needs attention We recommend you check whether this endpoint has automatic remediation enabled on the assigned policy."   I've checked the settings and I see nothing called "Automatic remediation".    I've tried running another scan and it still just says it's infected.  I've also tried using the cleanup command but that doesn't work either.  If I click on the actual threat, the only option is "Create override".  What am I supposed to do?  So far it's not very straight forward. Where is the clean command?  How can I make sure it's been quarantined?

4596
P
Webroot Employee
12 years ago

Badges

Show all badges

Join the Conversation

Terms & Conditions