Webroot SecureAnywhere Discussion & Update Thread

Hi sg09

Apologies for the late response...Daniel is quite right...I use portable browsers where I can and can advise as to how to get the extensions added (both the Web Filtering & Password Manager for Chrome & its derivatives, and the Web Filtering for Firefox & its derivatives...have not yet figured out how to deal with the Password Manager in the case of Firefox).

Chrome & Chrome Derivatives

Navigate to C:\ProgramData\WRData\PKG...note that this is a hidden folder and so you will either need to adjust the settings using the Control Panel's Folder Options to view such folders, or you can use the \programdata\WRData\ commend in the Search field under the Start Menu and then select the PKG folder from the list provided.

Then, open the Chrome Extensions page in the browser, and at the top of the page check Developer Mode to be 'On'.

After that drag the following file from the from the PKG folder to the Extensions page:

lpchrome.crx

(and for the Web Filtering extension you open the 'Chrome' sub folder, and from within that you drag the following file to the Extensions page:

CHROME_1.n.n.nn.crx

Note that there may be a number of Chrome_ files in the folder so always drag 'n drop the one with the highest version no.)

After each drag 'n drop await the message that one is trying to install a new extension to which you should answer 'Install'.

Once both have been installed uncheck the Developer Mode and enjoy...you should have both extensions now working under Chrome.

Firefox & Firefox Derivatives

I am indebted to one of my fellow members (Shran) over in the Webroot Community Forums who researched and put the following together

This works in both the 32-bit (x86) and 64-bit (x64) versions of Firefox, Palemoon or other Firefox derivatives. Please note, that like the extension being used in Opera, THIS IS NOT OFFICIALLY SUPPORTED BY WEBROOT, and therefore this could stop working at any time.

Please note that you will have to manually update the extension when you install it this way. I will include steps on how to update the extension after the steps on how to install the extension.

Installing the filtering extension in Palemoon is very similar to getting it installed in Opera, except with one extra step, and the fact that we won't be using a .crx file extension.
One more note: this will not work in Waterfox. Despite Waterfox using the same Mozilla base engine, Waterfox does not create a seperate data profile like Palemoon does. Therefore, if you try to use this in Waterfox, it will completely remove the extension from Firefox, and you won't be able to use it in Firefox again.

Browse to "C:\ProgramData\WRData\PKG\Firefox", without the quotes. Again, I recomend you type the folder location manually, rather than unhidding all system files to see it. There should be a folder in there named "WebrootSecure_SocketServer".

This folder contains the files which are unpacked files we need to install the extension. Open this folder, and you should see three folders, named "chrome", "locale", and "skin". Despite saying "chrome" on the subfolder, this is the Firefox extension. There should also be two files, one named "chrome.manifest" and one named "install.rdf". Select all three of the folders and both of the files, then right click and select copy. Copy them to your desktop - it is very important that you either copy them to your desktop, because this will not work if you put them in a folder, then pack the whole folder - you have to make sure you only pack the extension and not the containing folder, even if it is empty.

After you have them copied to the desktop, select the three folders (chrome, locale, and skin) and the two files (chrome.manifest and install.rdf) again, right click them, hover over the "send to" entry, then click "Compressed (zipped) folder. Name the zip file "Webroot filtering extension for Firefox" so that you don't loose track of it, then press enter to save the name and compress the files. After this has completed, right click and select "Rename", then, leaving the main part of the file name the same, move your cursor to the extension, delete the ".zip" ending, and type ".xpi", without the quotes.

The files have now been packed into Firefox's extension file type. Now you can delete the three folders and two files you copied, but don't delete the archive or the originals in Webroot's folder. Now, open Palemoon, and go to the addons manager by selecting it from the menu, or by typing "about:addons", without the quotes, in the address bar. Now just drag and drop the .xpi file into Palemoon's addon manager, and confirm the installation. Palemoon will ask you to restart in order to complete the installation, click "Restart now", and the installation is complete. After the extension is installed, keep the .xpi file that you packed, but you can move it to a folder other than the desktop if you wish.

To update the extension: when a new version of the extension comes out (you will have to check the version number of the extension periodically, probably when WSA is updated, in order to know if you have to update it in Palemoon), remove the old version of the filtering extension from Palemoon, then just browse back to the same folder above, and use the exact same procedure to copy, pack, and install the updated extension files into Palemoon.

None of the above are the official way of getting the extensions installed but I hope that helps? Also, for up to the minute on the above please visit the Webroot Community Forum as that is where the latest on the above is maintained/regularly posted.

Regards, Baldrick

 

"Warn if any process connects to the internet unless explicitly allowed" does not show up in the Advanced Firewall Settings. This is described on the Webroot site. It appears that the trial does not have this function.

Any suggestions?

 

@Baldrick Awesome! Its working. Appreciate your sincere help! Thank you so much!

 

Hi sg09

You are most welcome...as I said in my post a lot of this information is readily available over at the Webroot Community forums, as is a lot more.

Regards, Baldrick

 

9.0.4.8 via internal updater
Filtering Extension 1.2.0.14 Proceed with caution....No worries.

 

Firewall settings don't show up if your using Windows 8 or 10 see here why and what Joe said: https://community.webroot.com/t5/Id...tions-fw-control-in-Win-8-Win-8-1/idi-p/60003 but be sure WSA's firewall will stop any known or unknown malware from calling out to the control center.

Thanks,

Daniel

 

Thanks Baldrick!

Cheers Buddy,

Daniel

 

A new record. WRData grown to an unbelievable 46.7GB in one day (nearly 20% of my SSD).
Will raise ticket.
WSA at 9.0.4.7 and this still happens!
Edit: It's a PITA as this involves a reinstall, resetting preferences, exclusions, etc. Not set-and-forget!
I like WSA, except for this recurring problem.

 

Hi paulderdash,
WRData = Size: 11.4MB, Size on disk: 10.0MB, Contains: 80 Files, 27Folders.
What causes 46.7GB ...?
WSA Antivirus 9.0.5.8

 

No idea, but the same happened two and a half weeks ago. Also my Win 7 machine up to 10.1GB now.
I have submitted WSAlogs for both and they have now whitelisted Win 8.1 logs. Now 6.6MB.
Maybe it's the beta softs I am running e.g. HMPA, etc.? Or possibly all the Nirsoft proggies. I don't know.

 

paulderdash,
Hmm, fwiw. WRLog from 2015-09-02 Begin Installation thru 2015-10-15 End passive write scan = 1,178KB.
Edit: found "Controlling WRData folder size" thread. I'll follow along. Thanks.

 

If that is true, it is dishonest that you don't explain it in your marketing materials. Windows Firewall Control v4.5 has this in Win 8 and Win 10 with pop-ups to Allow or Disallow.

 

WSA keeps logs, copies of modified files etc. of what every untrusted process is doing, so it can reverse it in case it turns out to be malicious. So if your WRData folder size is suddenly very high you likely have a new untrusted process that writes, creates, erases a lot of files.

 

Well, that works for <<What causes 46.7GB ...?>> Thanks! Must be an active un-trusted.

 

Hi, @Triple Helix .
I have a problem on the heuristic option. I apologize if this problem has already been answered (I have not finished reading all the posts in this thread).
I am using Webroot SecureAnywhere Antivirus 9.0.5.8 on win 7 x86 in a virtual machine. I have checked the heuristic option "Warn when any new program executes that is not specifically whitelisted". At first, I wished that this option could make WSA work like an anti-exe. But then I find there might be some problem here.
With this option checked, when I for the first time double-click a bat file (can only output some string), WSA prompts me whether or not to block this bat. Well, this is just what I need.
But, if I allow this bat file run once（only once, not permanently），then there would be no prompt at all when I double-click this file again.
It seems that, although what I want is just "allow once", WSA add this bat file to the whitelist automatically and permanently.
Would this be a feature or a bug?

One more question: Would there be any approach to test the speed of the connection to the cloud server of Webroot?

Thanks.

 

That's one setting I don't use unless all your files are whitelisted in the WIN Cloud: http://www.brightcloud.com/platform/webroot-intelligence-network.php but when you update any of your programs they will most likely be Unknown so you will get a block so I just keep mine at Max heuristics and WSA was never designed to be anti-exe.

And Webroot uses the Amazon Cloud which as you know is worldwide and to pick a specific sever well Webroot does not share that info.

Thanks,

Daniel

 

Hi, @Triple Helix . Thank you for your reply.

Just now, I tried to ping aws.amazon.com. All the requests are timed out...
Does this mean that, my network is not good enough to use WSA?

 

No.

 

aws.amazon.com does not appear to respond to ping requests; many sites do not.

 

Thanks @Triple Helix and @Victek .

 

Try a Traceroute: https://support.microsoft.com/en-us/kb/314868

54.244.240.103

184.72.34.191

HTH,

Daniel

 

I removed some personal info! Also it depends if your Firewall and or Router's Firewall is set to get results.

Daniel

Microsoft Windows [Version 10.0.10240]
(c) 2015 Microsoft Corporation. All rights reserved.

C:\Windows\system32>tracert 184.72.34.191

Tracing route to ec2-184-72-34-191.us-west-1.compute.amazonaws.com [184.72.34.19
1]
over a maximum of 30 hops:

1 1 ms 1 ms 1 ms hitronhub.home [192.168.0.1]
2 * * * Request timed out.
3 21 ms 18 ms 27 ms INTEL_CE_LINUX [69.63.242.97]
4 20 ms 16 ms 28 ms INTEL_CE_LINUX [24.153.5.141]
5 29 ms 18 ms 18 ms so-5-1-3.gw02.ym.phub.net.cable [66.1
85.81.178]
6 28 ms 14 ms 28 ms van58-9-230-233.dynamic. [209.1
48.230.233]
7 34 ms 48 ms 28 ms INTEL_CE_LINUX [24.156.144.178]
8 41 ms 48 ms 38 ms ae-32.r05.chcgil09.us.bb.gin.ntt.net [157.238.64
.233]
9 34 ms 40 ms 38 ms ae-6.r21.chcgil09.us.bb.gin.ntt.net [129.250.2.2
6]
10 109 ms 97 ms 99 ms ae-5.r22.snjsca04.us.bb.gin.ntt.net [129.250.5.1
7]
11 102 ms 98 ms 97 ms ae-40.r02.snjsca04.us.bb.gin.ntt.net [129.250.3.
121]
12 102 ms 106 ms 99 ms ae-4.r06.plalca01.us.bb.gin.ntt.net [129.250.4.1
18]
13 95 ms 98 ms 99 ms ae-1.amazon.plalca01.us.bb.gin.ntt.net [140.174.
21.182]
14 99 ms 113 ms 97 ms INTEL_CE_LINUX [205.251.229.40]
15 103 ms 108 ms 108 ms INTEL_CE_LINUX [72.21.222.220]
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 107 ms 107 ms 98 ms INTEL_CE_LINUX [216.182.237.133]
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

______________________________________________________________________________________________________________

Microsoft Windows [Version 10.0.10240]
(c) 2015 Microsoft Corporation. All rights reserved.

C:\Windows\system32>tracert 54.244.240.103

Tracing route to ec2-54-244-240-103.us-west-2.compute.amazonaws.com [54.244.240.
103]
over a maximum of 30 hops:

1 2 ms 1 ms 1 ms hitronhub.home [192.168.0.1]
2 * * * Request timed out.
3 18 ms 21 ms 16 ms INTEL_CE_LINUX [209.148.241.73]
4 19 ms 16 ms 14 ms so-5-1-3.gw02.ym.phub.net.cable [66.1
85.81.178]
5 24 ms 37 ms 37 ms INTEL_CE_LINUX [24.156.144.125]
6 36 ms 26 ms 27 ms van58-9-229-38.dynamic. [209.14
8.229.38]
7 42 ms 47 ms 49 ms ae-32.r05.chcgil09.us.bb.gin.ntt.net [157.238.64
.233]
8 37 ms 38 ms 47 ms ae-6.r20.chcgil09.us.bb.gin.ntt.net [129.250.2.2
4]
9 93 ms 97 ms 97 ms ae-1.r20.sttlwa01.us.bb.gin.ntt.net [129.250.3.4
2]
10 104 ms 117 ms 97 ms ae-1.r04.sttlwa01.us.bb.gin.ntt.net [129.250.5.4
3]
11 103 ms 97 ms 116 ms ae-5.amazon.sttlwa01.us.bb.gin.ntt.net [198.104.
202.190]
12 * * * Request timed out.
13 * * * Request timed out.
14 107 ms 136 ms 108 ms INTEL_CE_LINUX [205.251.232.79]
15 101 ms 97 ms 97 ms INTEL_CE_LINUX [205.251.232.217]
16 110 ms 195 ms 107 ms INTEL_CE_LINUX [205.251.232.222]
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 106 ms 107 ms 117 ms ec2-50-112-0-83.us-west-2.compute.amazonaws.com
[50.112.0.83]
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

 

I'm changing the subject. I have been deleting webroot files that start and end with db in blue. Example dbxxxx.db. So i have a file that is letters and numbers and the db is in blue.
C280BE9F5C004400650076006900630065005C0048006100720064006400690073006B0056006F006C0075006D00650033005C00550073006500720073005C0068006F00770061007200640073005C0041007000700044006100740061005C004C006F00630061006C005C00540065006D0070005C0052006100720053004600580032005C00560065007200730069006F006E002E00740078007400^

So i wrote support and asked if there was any reason not to delete the file and they sent me a tool to scan my computer. I gave them a sample of the file. I already had the file in the recycle bin. I took the file and sent it back to the webroot folder. The wsa tool failed and i tried everything. Turned off firewall and turned off webroot. This is quality support? This is all they do. Send a tool to scan your computer. A BIG JOKE. Anyone know if I'm fine deleting this file? Because who knows what they will want me to do next?

 

FWIW ~ if you're referring to Webroot Log-Gathering Utility aka wsalogs. I had to tweak my router Firewall from Max to Medium. I tried everything too

 

Now they want me to upload I turned my firewall off and my router is not connected. They now want me to upload it with file dropper. I can't find a way to sign up for the free, the file is larger than five mgs and I think i've had it. I bought spysweeper years agao and tech support was terrible, just like this. I'm better off either posting on a forum or using my judgement. They seem to be very limited. Some people say they are great. I'm not impressed. Same old webroot support. I'm going to delte the fire to the recycle bin and hold it for a couple of days. i think it's harmless.