System Analyzer Issues

  • 13 August 2015
  • 5 replies
  • 311 views

Hello, I have the Best Buy version of Webroot; and recently installed it on a fresh install of Windows 10 home.
 
I like the software so far; but I am having a few problems with the System Analyzer. In the software section, I have the alerts "Updates are available for your system and have not been installed" (I have ALL updates installed according to Windows). Also, "An active process has a possible memory leak (explorer.exe)". Finally, I have the alert under the threat section "Windows Automatic Updates are disabled." (Once again, that is wrong because Updates ARE enabled).
 
So, what gives Webroot? 2 of those alerts are definitely false; and the 3rd (explorer.exe) has me leary of this software. Thanks in advance for any assistance provided.

5 replies

Userlevel 7
Hello and welcome to the Community!
 
Have you checked exactly which updates the System Analyzer is thinking are not installed?  Is it possible that it is a hardware driver and not a Windows update?
 
IE pretty much ALWAYS is identified as having a memory leak.. this is because it does and always has 🙂  Most browsers do to some degree though.  Having a leak is not always really bad, it just means it does not always release all memory as it should, though sometimes the amount of memory it fails to release is fairly small.
 
Usually the Analyzer is really quite accurate, though it is always possible that it is not reading correctly.  Possibly a re-install of WSA will help correct it.
Userlevel 7
Badge +62
Hello ?,
 
Welcome to the Webroot Community,
 
? if I may add this KB article here
 
 
 
Kind Regards,
I will check the results and see if I can locate the file WR says isn't installed/updated. As far as the memory leak, while it may not corelate, I have noticed reduced frame rate/performance in games such as Grand Theft Auto 5 since installing Webroot; the game actually stutters at times now. When I had Norton, I put the program on SIlent Mode while gaming - does WR have a silent mode? Or do I just have to disable it while gaming? Thank you.
Userlevel 7
Badge +62
Hi ?,
 
Please check the PC User Guides below. You shouldn't have to disable Webroot to play ths game.
 
Controlling active processes
http://www.webroot.com/En_US/SecureAnywhere/PC/WSA_PC_Help.htm#C10_SystemControl/CH10b_ControllingPr...
Blocking/Allowing files
http://www.webroot.com/En_US/SecureAnywhere/PC/WSA_PC_Help.htm#C5_Quarantine/CH5b_BlockingAllowingFi...
 Managing protected applications
http://www.webroot.com/En_US/SecureAnywhere/PC/WSA_PC_Help.htm#C6_IDProtection/CH6c_ManagingProtecte...
 
games files -> allow
 
You can also submit a Support Ticket if you need files whitelisted.
 
 
Lets try to put into English the essence of the areas where a user can tailor what WSA does to protect the system
 
There are essentially 3 key areas where this can happen/a user can override WSA.  These are essentially reached, from the main WSA panel, as follows:
 
1. PC Security > Quarantine > Detection Configuration
2. Identity & Privacy > Protected Applications
3. Utilities > System Control > Control Active Processes
 
and once there the user usually has the options to:
 
A. "Allow"
B. "Protect/Monitor"
C. "Block/Deny"
 
In the case of 1. Detection Configuration
 
If an item is set to:
 
- "Allow", WSA ignores it during scans and shield actions, meaning if it's a virus that has been allowed, it can continue acting as a virus acts.  Be careful of what you allow in this area and ensure it's something you trust implicitly if you are going to change the status from Block to Allow.
 
- "Monitor", WSA will watch the item to determine if it is legitimate or related to malware.  It is not necessary to add files into this list or set files to monitor manually unless you are changing them from a Block or Allow status.  This might be useful if for example you think Webroot might have had a false positive on something and you want to check again at a later time to see if the determination has changed.  You could set it to Monitor and have Webroot check it again.
 
- "Block", then WSA will treat the items as it would detected malware.  It will not be executed, and it will not be written to your hard drive.  Detected infections are automatically set to a Block status.
 
In the case of 2. Protected Applications (Internet Security & Complete version ONLY)
 
In this case:
 
- "Allowed applications" are not secured against information-stealing malware, and also have full access to protected data on the system. Many applications unintentionally access protected screen contents or keyboard data without malicious intent when running in the background. If you trust an application that is currently marked as "Deny," you can change it to "Allow."
 
- "Protected applications" are secured against information-stealing malware, but also have full access to data on the system. By default, web browsers are assigned to the "protected" status. If desired, you might also want to add other software applications to "protected," such as financial management software. When you run a protected application, the Webroot icon in the system tray displays a padlock.
 
- "Denied applications" cannot view or capture protected data on the system, but can otherwise run normally.
 
And finally, in the case of 3. Control Active Processes
 
If a process is set to:
 
- "Allow" it means WSA allows it to run on the system. It's important to note that if an item is already allowed here, that's because Webroot knows already from seeing the file before that it's ok to allow.
 
- "Monitor" status means WSA will journal what that program is doing and keep a very close eye on it for any suspicious activity.  Basically it would treat it as if it wasn't already sure about it one way or the other, and it wants to monitor it closely until it's sure about it.
 
- "Block" means just that...iWSA does not allow it to run on the syste.  Be very careful about what you block in this area and ensure that anything you decide to block is a non-essential process.  Otherwise, you could be setting yourself up for a lot of grief if you block something critical.
 
 
Hope this helps.
 
Kind Regards,
 
 
 
 
Userlevel 7
OK, we have an update here.  A few of us have done some testing of our own, and it appears that there may be a problem between the System Analyzer and Windows 10.  Several of us are getting the exact same problem you are.  If you view the report details of a Windows 10 system that has been updated, you get something like this:
 


 
As can be seen, the System Analyzer is able to see that automatic updates are indeed durned on, and the update type, but the actual update(s) data is missing.
 
We have advised the Webroot team of this so they can take a further look at it.

Reply