Jump to content

Recommended Posts

Hi,

I'm new to this forum so not sure if this is the correct place to post but I've come across a possible threat and wanted others to be aware of my experience.  I had been using webroot secure anywhere for several PC's for several years with no complaints. In around August 2021 we began to see a significant increase in network traffic with a couple of PC's becoming almost unusable.  I ran all the standard tests and scanned for viruses and malware with no results.  On the worst machine the task manager didn't show anything unexpected. Only by monitoring the network port on a managed switch was I able to confirm that something was going on.  I uninstalled Webroot and installed Malwarebytes. (there is another whole story on uninstalling webroot) Malwarebytes didn't find anything but the PC stopped flooding the network. I have since replaced webroot with Malwarebytes everywhere and our network is back to normal. I have absolutely no firm evidence  that Webroot was the source of the problem, but that the problem went away after I replaced it with Malwarebytes is suggestive.

Link to post
Share on other sites

  • Root Admin

Very difficult to say without more analysis. As you say you'd been using for several years, perhaps there was a build up of updates one on top of another that was somehow causing unwanted behaviors. Perhaps a clean removal and reinstall of Webroot may have corrected it?

I'm glad you're using our product, just want to be sure you look at other possibilities @GeorgeH44

If you like we can take a look at the logs from one of the computers and see if we see anything out of the ordinary that might cause an issue.

 

 

Please do the following so that we can get started and see what's going on.


The Farbar Recovery Scan Tool is a free Windows utility designed to create troubleshooting logs for your computer. These logs help our Support team to identify and resolve issues with your computer.

There are two versions of the Farbar Recovery Scan Tool available for download: 32-bit and 64-bit.
To find which operating system is installed on your computer, refer to Microsoft's article: 32-bit and 64-bit Windows: Frequently asked questions

Download and launch Farbar Recovery Scan Tool

  1. Download the Farbar Recovery Scan Tool
    Do not click on any Ads.
     
  2. Locate the file you downloaded on your computer.
    Downloaded files are often saved to the Downloads folder.
     
  3. Double-click the downloaded file to run the Farbar Recovery Scan Tool.

    DOC-1318-1.png
     
  4. Windows protected your PC notification may appear. This notification is from the Windows Defender SmartScreen Filter which prevents unfamiliar apps from running on your PC.
    Disable smart screen ONLY if it interferes with software we may have to use:  What is SmartScreen and how can it help protect me?

         a.  Click More info.

    https://support.malwarebytes.com/hc/article_attachments/360051190254/DOC-1318-2.png
         b.  Click Run anyway.

    https://support.malwarebytes.com/hc/article_attachments/360051190294/DOC-1318-3.png
  5. When the User Account Control window appears, click Yes.

    image.png

     
  6. To accept the Disclaimer of warranty, click Yes.

    image.png

     
  7. Ensure only the boxes listed below are checked

    image.png

    Registry  Services  Drivers
    Processes  Internet  One month
    Addition.txt

    image.png

     

  8. Disable any Antivirus software you have installed ONLY if it stops software we may use from working.
    Please remember to re-enable any Antivirus software when we are finished running scans

    Click Scan. The scan may take a few minutes to complete.

    image.png
     

  9. When the scan completes, Farbar Recovery Scan Tool shows two messages:

  • Scan completed. FRST.txt is saved in the same directory FRST is located.

    image.png

  • Addition.txt is saved in the same directory FRST is located.

    image.png
     

  • Click OK to close each message window

 

Please attach both of those logs on your next reply, DO NOT copy/paste the contents of the logs directly

https://content.invisioncic.com/Mmalware/monthly_2018_10/_mb_attach.jpg.dbd89b8e360d3763b3bbe33ce83d680d.jpg

 

 

Thanks

 

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.