Webroot SecureAnywhere Discussion & Update Thread

More recent info here to read of a new ransomware ZeroLocker: http://www.webroot.com/blog/2014/08/14/zero-locker/

TH

 

@Drifter104
And this (see also discussion posts following):
"WSA currently doesn't reverse the changes on a network drive because of the risk with data loss if another user changed a file. The best scenario would be to install WSA everywhere, including the system hosting the network drive if possible. Even if gigabytes of data are encrypted, WSA will continue happily journaling it."
Joe Jaroch, Webroot VP of Engineering

 

one thing that still annoys me to no end is the lack of information that its going to expire. i again last week had a client who did not know their 5 pc's had all expired and one got infected. i asked them if they saw any notification and they said they saw it but only one time then they forgot about it because they never saw a pop up again?? imo this needs to be handled better not to the point of being annoying but at least once each time the pc is turned on and maybe even off as a reminder, or maybe after sleep for those who dont shut down. at least for the last week if nothing more.

on a better note i DID see webroot's rollback feature do its thing this past week. it actually worked VERY well. took me back by surprise a bit. the system i spoke of above had a new key entered in and back to working and the "49" detections it found webroot removed and repaired everything. the desktop icons came back (they had disappeared) ie11 was fixed the add on's removed and all the pop up ads for "russian brides" were gone and everything was put nicely back. even the files that became hidden after the infection came back. the desktop backround was back from being a black screen etc. and some of the registry keys i found were actually fixed and not removed.

after a scan with both hitman pro and malwarebytes just to check only hitman found a few items that were in fact not infections but just a few leftover non malicious things. also the 2 rouges that were listed in the add/remove program list were easily uninstalled now. it did a fantastic job overall. if only every virus call went this easy i was done in total in less than maybe 30-45 (and that was only waiting for scans and restarts). for those wondering about real world use it was great, the only fault i can see is it left those 3 files which were not malicious and it cleared the customers ie history and cache etc so they now had to re-enter all their passwords which as many who work on systems know a lot of people do not actually know their own passwords and just lets the browser enter them. so the client had to reset them all (which i had to explain was a really good idea anyway but they were a bit ticked off at having to do it regardless).

so a huge kudos to webroot and this is exactly why its one of my primary 3 recc and sold av's in our shop. if they could fix the expiration thing i dont think there is much else i could ask for.

 

Since Webroot got the new web filtering extension my browser wasnt smooth as before in Chrome, and in Internet Explorer 11 it is a lot worse.

As you can see I am not the only one suffering this slowdown:

https://community.webroot.com/t5/We...-causes-quite-noticeable-slowdown/td-p/138137 (my situation is the same)

https://www.wilderssecurity.com/threads/browser-lag.357544/

 

maybe this has something to do with the slowdowns at least for ie??

http://www.pcmag.com/article2/0,2817,2462799,00.asp

 

For me the problem is just with Webroot, Norton and Kaspersky doesn't have any impact in browser performance in my machine.

 

The latest version of WSA has been really bad for me. The GUI doesn't open. The Firefox web-extension would allow me to disable it. And every time I try to uninstall the program it says I need to login as an Admin, even though I am using an admin account.

Does anyone know if there is a recent removal tool? I found one, but it seems a few years old, and didn't work.

 

I just installed the hotfix for the KB2976627 recent update for IE9. IE9 seems to be faster now since 6627 update a few days ago.

 

Hi clocks have a look at this and try the Command Prompt or the Run Dialog to remove: https://community.webroot.com/t5/We...ssing-from-Control-Panel-and-Start/ta-p/34688

TH

 

Doesn't work. Says I need to login as Admin.

I'm starting to worry I'm going to have to do a windows "refresh" to get rid of this.

 

Can you try to uninstall in Safe Mode with Networking as WSA needs to be connected to the Internet to be able to uninstall correctly as the same when installing.

Thanks,

Daniel

 

If that doesn't work Download a fresh copy here http://anywhere.webrootcloudav.com/zerol/wsainstall.exe and install over top then reboot and try to uninstall again.

Thanks,

Daniel

 

I tried both of those this morning. In safe mode I got the same "not an admin" issue. And when I try the installer, nothing happens.

 

It's best then to Submit a Support Ticket and they will help you get it uninstalled. It's very odd to be that stubborn to uninstall!

Daniel

 

A word of caution on this program. If the uninstaller doesn't work, and I have two cases this week where is has not, the program is harder to remove than any virus I have dealt with. I've tried File Assassin, safe mode, manually removing registry keys, etc.. I finally got to the point where it is mostly uninstalled, but I still have drivers in my windows folders I cannot delete.

Webroot really needs to create a removal tool, similar to Norton, Avast, and others.

 

Well as I said it's very unusual to be that difficult for WSA to uninstall, also you can't kill WRSA.exe processes because of it's awesome self protection! So did you contact support like I asked you? Because if you did they would see the problem for themselves and help them correct it. And also I never had this issue as I uninstall and reinstall many times on my Laptop and my 5 VM's from XP to Win 8.1 testing different versions of WSA.

Daniel

 

While I was sitting on hold waiting for support, I finally was able to kill WRSA. So by the time I got a rep, I told them I fixed it. The "self protection" is a little too heavy handed for me. It shouldn't take me a hour, and multiple unlocking/deleting utilities, manually deleting registry entries, several reboots, etc. to remove a program I no longer want on my machine. Again, I recommend Webroot create a removal tool similar to the other vendors.

Something is either wrong with the latest build of WRSA, or the last batch of Windows updates a week ago did something in regards to WRSA. Normally the program doesn't cause me many problems, but this week it's been a nightmare.

 

Did you ask them about a removal tool? If not I would start a topic in the Idea's Exchange where the Developers look at always. https://community.webroot.com/t5/Ideas-Exchange/idb-p/Ideas also that could be true the part I highlighted you never know but no one has reported issues such as yours.

 

When I got the rep on the phone, I suggested it.

The odd thing was, I thought maybe I had a bad install. So after the issues yesterday, I tried re-installing it again today. Worked ok until I rebooted. After that, the GUI was gone from my system tray. I couldn't open the GUI. Trying to uninstall gave the same "need to login as admin" error. All the same issues as yesterday. And trying to remove it today was even more difficult than yesterday. File Assassin no longer worked. I had to download another app that was finally able to kill WRSA.exe.

I like the program, but it's going to be a while before I try it again.

 

Leave it installed and contact support via the Ticket System then they can get some logs from you! https://www.wilderssecurity.com/thre...ion-update-thread.364655/page-10#post-2400881

 

if you are running windows 8 ms pulled most of the updates from the last batch otherwise known as the august update there are major issues with it....

 

Not only Win 8 but others as well: https://www.wilderssecurity.com/thre...fication-for-august-2014.366927/#post-2400353

 

It's back for the 2015 season Win Signed Broncos Gear, Season Tickets, 6 Months Free WSA-AV just for Signing Up!

Cheers,

TH

 

Can we do something similar when hockey season starts? Here in Dallas-Ft Worth, the Stars are our only winner! LOL

 

I thought about removing the rent windows update, but I am not sure how, and did feeling like researching it since my computer has not really had any issues from it.