We have webroot business, managed inside the portal. A user is running AutoCAD 2018 software and I've followed AutoCAD's recommendation on AV exclusions and configured those under "Override". However, there is no option to exclude specific file extensions within Webroot business, such as excluding *.dwg or *.dwf files from being scanned when they get launched via AutoCAD. This is a major flaw... how is a product in the magic quadrant not having a classic AV software feature?! The whole system basically bogs down with CPU seriously spiking due to Webroot getting and scanning at the file. The problem is obviously Webroot because once I unload Weboort, AutoCAD runs at a swift pace.
If anyone has any suggestions, please advise. thanks.
Webroot affecting AutoCAD 2018 performance severely
This topic has been closed for comments
Hello @ronnieshih and Welcome to the Webroot Community!
The best thing for you to do is to Submit a Business Support Ticket and ask them to check things out for you as it could be some files need to be whitelisted in the Webroot Cloud Database especially if there was a recent update to AutoCAD 2018.
Thanks,
The best thing for you to do is to Submit a Business Support Ticket and ask them to check things out for you as it could be some files need to be whitelisted in the Webroot Cloud Database especially if there was a recent update to AutoCAD 2018.
Thanks,
![Product Help: Posted 1 topic! Badge](https://uploads-us-west-2.insided.com/webroot-en/attachment/a41f7167-917f-4de9-b001-05506c17a021_thumb.png)
I already submitted a ticket. I thought maybe there is something support doesn't know, which happens all the time.
So you're aware, our agent is not a "traditional scanning" engine, so traditional methods of "overriding" do not always apply. Also, my guess is more inline with the agent monitoring a process that is "unknown" and has nothing to do with the file types. The best course of action was as
If you have one of the problematic systems still installed, simply capture the "undetermined" software report at the site level or now at the main Admin console level above the sites, "Devices with undetermined software on last scan" under "Reports". This will include all the data our central threat team needs to craft an appropriate rule to insure it's not effecting your customers endpoint performance.
Please reach out to me directly through DM here on the community or you're welcome to email me directly at: scooper@webroot.com to discuss further and/or review.
Thanks,
![Product Help: Posted 1 topic! Badge](https://uploads-us-west-2.insided.com/webroot-en/attachment/a41f7167-917f-4de9-b001-05506c17a021_thumb.png)
Here is the funny part. There are 2 other pc's with identical version of AutoCAD 2018, also with identical version of Webroot installed. And those 2 pc's don't have issues AT ALL. This problem apparently started 2 weeks ago for this guy. I worked on this pc for 4 hours yesterday. The only time the pc sped up was when I shut down Webroot, the problem is nice and clear, it is something with Webroot. CPU would crank to 13% each for 8 logical CPU's, resulting in 100% CPU time, when any AutoCAD related files are launched. He is now shutting down Webroot in order to get his AutoCAD graphs edited, then opening up Webroot again to stay protected.
Support would like me to run wsalogs.exe, I will to get this done today without disrupting too much of the user's time and see where we get.
Support would like me to run wsalogs.exe, I will to get this done today without disrupting too much of the user's time and see where we get.
That log will help, but it will only capture data while WR is running and AutoCad is running, so make sure they're both running and the issue is present.
You can also look at the WR UI to see what process is being monitored. Open WR on the endpoint in question, select the icon on the right of Utilities. When that comes up, goto the System Control Tab and start "Start" button. This will show you what is being monitored. From there you may be able to determine which process is causing issues.
Logs should capture this as well, but this is a quick method for sussing out a monitored process.
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.