Webroot Spy Sweeper / 2011 Internet Security Suite is creeping on my s

KnowledgeWorker · 10 Jul 2010

Hi there,

I do have a problem with the Webroot beta software I installed for doing them (!) a favor and checking out their software, which I didn’t knew before. Yet they disappointed me:

After using the new Webroot "2011 Internet Security" Beta for a while, I uninstalled it and installed another anti-virus (only) software (Panda Cloud Anti-Virus). I currently don’t know why exactly I did uninstall it back then. Anyways, after uninstalling I noticed it still in the “Software” list and being present as (at least) AEI.exe in the processes tab!
Indeed it did/does suck an amount of RAM. And it does remove *.exe files which it considers dangerous! I find that OK when I would have control over it, but not for a program I actually uninstalled and don’t want to run on my laptop anymore at all! Especially next to another resource-hogging internet security suite (if I’d e.g. re-install my ESET security suite, which I have a licence for).

Also I could not delete the folder neither in "Windows Safe Mode" nor could I unlock the folder! (in normal Windows or "Safe Mode") For this, please see the attached "Unlocker" screenshots.

Thanks to "ESET file inspector" I also found running:

c:\program files (x86)\webroot\security\current\framework\wrctxmenux64.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\aei.exe
c:\program files (x86)\webroot\security\current\plugins\antimalware\antivirus\osdp.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\antivirus\savi.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\antivirus\veex.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\dbghelp.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\lockbox.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\pcre3.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\ssu.exe
c:\program files (x86)\webroot\security\current\plugins\antimalware\ssudll.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\ziptv06.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\ztvcabinet.dll
c:\program files (x86)\webroot\security\current\plugins\antimalware\ztvunrar3.dll
c:\program files (x86)\webroot\security\current\plugins\sync\webrootshellext_64.dll

Attached you also find the same as a screenshot as well as all files I found in the “Webroot” folder (thanks to "TreeSize Free"), not sure if Webroot has left any other folders on my PC!!

Thanks for your help in advance!

Kind regards

Bituser · 10 Jul 2010

I don't know about this...
It seems pretty dangerous. If I were you, I would run it in a Virtual Machine.

edee · 10 Jul 2010

If I understand you correctly , it sounds to me that you were doing some beta testing some software for Webroot correct ?

I would think if you contacted Webroot they should have an uninstall or cleanup script to remove the files you are having trouble with after all it is their beta software or at the very least they can help you remove the files you are having trouble with .

I have used Webroot products extensively and have never run into any problems with any of their software .

If you cannot get in touch with Webroot fast enough I would try this out :
Webroot Removal Tool from - Download - Techworld.com

You will also notice on the download page that the removal tool may not remove beta software , if this is beta software that you are trying to remove you are directed to visit Webroot's support pages in doing so .

KnowledgeWorker · 11 Jul 2010

Thanks edee, I wasn't able to find such a tool before. Yet as you assumed, my version is too new, so it fails.
I contacted them before long weeks ago, yet no one came back to me, so as I had these deletions happening yesterday, I decided it was time to ask for help elsewhere. Yet I notified them again this time, so I hope to get some feedback on monday.