Controlling WRData folder size - help needed

Well I for one will say WSA is much more than the other product you mentioned any day so how can we help you or you just come here to promote ESET?
 
Daniel

 

 

 
 

Reply:
As you can't seem to let this go I will reply - My user name on Wilders is frankly none of your business & as Webroot no longer have a presence on there I’m surprised you asked. But I continue to use that forum as I use other security solutions etc & been a member for many years.
 
As you don't seem to believe a word I say further typing is a waste of effort - I have a fixed IP with Virgin Media & have no intention of returning to this forum under another persona & as you are a mod I assume you have it.
 
I have not compared your (WSA) solution to ESET,  I installed WSA today on this machine to see basically if I could replicate the issue on my daughters PC upstairs (that had WSA on) with Spotify after Baldrick replied - I used this thread as her WR Data folder was very large hence the connection with this thread & you ought to have poined the issue of forum rules out earlier but you didn't,  you replied.
 
Feel free to delete any or all of my posts that you feel transgress the forum rules - I will if I feel inclined comment on any aspects of WSA on other forums but that is unlikely as I do have a life. I've obviously ruffled your feathers but as I've said I wont reply again so feel free to have the last word...
 
 

Opened the followingti cket with Support:
Hi

This support call is as a result of a conversation in the Webroot Community https://community.webroot.com/t5/Webroot-SecureAnywhere-Complete/Controlling-WRData-folder-size-help-needed/td-p/69357/page/5

My WRData folder is just short of 6GB. I have previously un/reinstalled WSA to fix this but was wondering if sending the logs again and maybe another round of whitelisting could help prevent having to do this.

I (in the interests of perhaps being able to improve WSA from the info in my logs), and the Community, would like to know why the WRData folder is getting so large and why the older .db files (two of which are over 2GB) are not being cleaned out. I see my oldest .db files are from 18 June.

I have uploaded the logs using wsalogs.exe. Does this also how the scan log [u] files for whitelisting or do I have to send this separately? My system is clean according to Malwarebytes Pro.

Rgds - Paul
 
They whitelisted my apps and asked me to reinstall. Will monitor WRData - now
Will monitor WRData - now at 35MB after reinstall and custom deep scan.

Hi @ !
Did you check the WRLog file in order to find out what processes are gettng logged? It's a good idea to open a support request so that the team can look at the files and whitelist them, if needed. If you already know that the logged processes are good you can also manually stop the monitoring process; in the WSA GUI go to Utilities, System Control and check Control Active Processes

Hi newuser123
 
Welcome to the Community Forums.
 
Do you by any chance keep you apps up to date or try out recently released apps as the norm?  The reason I ask is because, as I suspect that you know, what causes that folder to 'bloat' is that it is the storage folder for the output files that resilt from the journaling and monitoring of behavior that WSA instigates when it comes across a file/apps for which it cannot determin if 'good' or 'bad'.  So these files are important to protect/ensure against permanent damage to a user’s machine.
 
They should get cleared when a files i/app is determined as 'good' but there have been some issues here and I believe that Webroot is working on the issue, or at least they were.
 
There is a manula way to determine what journal-related files are no longer required, etc. but that involves a voyage into the Registry, review of Registry keys, cross referencing with the 'dbnnnnn.db files, and then manually deleting thos that are not required. And I would not advise this to anyone not feeling technically confident, etc.
 
Therefore the quickest way to reduce the size of that folder is to uninstall WSA and then reinstall it without importing previous settings...buut whilst this is easy it will remove the journalling files some of which are covering current monitoring of files/apps yet to be determined as 'good or 'bad' and if evenyaully found to be 'bad' then, by the uninstall/reinstall action, the journalling informastion will have been 'lost' and WSA will be unable to perform the rollback action.
 
The other approach is to pursue that SUpport Ticket that you have opened making sure that you explain the criticallity of your space problem and see if the Support Team can assist in cleaning out the WRDATA folder appropriately.
 
Apologies that I cannnot be of more help.
 
Regards, Baldrick

Hi newuser123
 
You are most wellcome...and you are most wise to err on the side of caution here.
 
As to whether there is maybe an option to determine manually whether a file/app is good or bad...well, Yes, there is but not that either you or I could use although if one checks on whether there are any files currently being monitored by WSA, and there are none flagged as such then it is a pretty safe bet that one can uninstall/reinstall WSA which should clean/remove the 'dbnnnnn.db' files in WRDATA as a result.
 
But IMHO you have done the best thing to open a support ticket and get the professionals to help.
 
Please do keep us posted on what they come back with and how this turns out for you.
 
Regards, Baldrick
 

Hi newuser123
 
As a quick check to see if WSA is monitoring any apps/files look in the following places
 
1. PC Security > Quarantine > Detection Configuration
2. Identity & Privacy > Protected Applications
3. Utilities > System Control > Control Active Processes
 
If there are no apps/files set to 'Monitor' then you should be OK with an uninstall/clean reinstall.
 
And just in case you have not already picked up on the uninstall/clean reinstall procedure then please find it below:
 

• Make sure you have a copy of your Keycode
• KEEP the computer online for Uninstall and Reinstall to make sure it works correctly
• Download a Copy Here (Best Buy Subscription PC users click HERE)
• Uninstall WSA and Reboot
• Install with the new installer, enter your Keycode and don't import any settings as you can set it up as you like once it's done
• Let it finish it's install scan
• Reboot once again

Hope that helps...and be sure to keep us posted on how things go.
 
Regards, Baldrick

Hello and Welcome to the Webroot Community!
 
Just in case Baldrick isn't around no it will not take another seat you can uninstall and reinstall on the same OS as much as you like but if you do a OS reinstall all you have to do is remove it from the online console: Webroot SecureAnywhere Online Console and install WSA on the new OS or even a New PC or Device. Here is more info to read: http://live.webrootanywhere.com/wsawebsitehelp
 
HTH,
 
Daniel 😉

Always Buddy!
 
Daniel :D
 
http://www.gifbin.com/bin/032010/1267612173_teachers_call_it_cheating_we_call_it_teamwork.gif

Thanks Baldrick and Daniel! I've reinstalled the program and now have 100GB free space :)
I just hope that this is a permanent solution... Otherwise I believe that it could get quite annoying, as it filled those 100GB in just one or two weeks...
Either way, thanks not only to you but to this kind community!
I hope you'll be seeing more of me as a contributor and helper rather than a problem reporter in the future!
Best regards.

Hi newuser123
 
Glad to hear that worked for you and that you have some usable capacity.  May I suggest that you consider a second drive as (i) data storage is relatively cheap & (ii) the amount of drive sapce that you have is rather meagre by current standards. IT is always good to havea bit extra...as a backup...;)
 
I suggest that you keep an eye on the WRData folder but also periodically check in those places within WSA that I have previously mentioned and check whether apps/files have been set as 'Monitor', etc...as that will be a good indicator if the folder is likely to be increasing and you may be able to look at the monitored apps/files and decide whether it is justified, etc. I have on ocassion decided that the app being monitored was 'good' and switched the 'Monitored' to 'Allow', etc., but in most cases I leave wwell alone.
 
Glad to hear that you are looking to contribute...the more the merrier...so lhope to see you around.
 
Regards, Baldrick