Webroot SecureAnywhere by Webroot Inc. (Signed)

Remove WRSA.exe
Warning 10 antivirus scanners has detected malware in various versions of WRSA.exe.


There are 14 versions of wrsa.exe in the wild, the latest version being It is started as a Windows Service with the name 'WRSVC' and described as “Webroot SecureAnywhere Antivirus v8.0.2.118”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 727.46 KB. The file is a digitally signed and issued to Webroot Inc. by VeriSign. Some variations of the file have been seen to be installed with the program Webroot SecureAnywhere from Webroot. During the process's lifecycle, the typical CPU resource utilization is about 0.0007% including both foreground and background operations, the average private memory consumption is about 42.74 MB. Addionally, typically read and write I/O disk operations is about 3.17 MB per minute for reads and 216.22 KB per minute for writes.

About wrsa.exe (from Webroot Inc.)

You need the best protection against viruses, spyware and malware. That's why we've improved the protection found in Spy Sweeper and created Webroot® SecureAnywhere™ AntiVirus, giving you online prote


File name:wrsa.exe
Product name:Webroot SecureAnywhere
Typical file path:C:\Program Files\webroot\wrsa.exe
Issued to:Webroot Inc.
Authority (CA):VeriSign
Expiration date:Thursday, January 9, 2014
Windows Service
Service name:WRSVC
Description:“Webroot SecureAnywhere Antivirus v8.0.2.118”

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of Webroot SecureAnywhere.)
25% remove
Webroot SecureAnywhere uses a radically new cloud-based approach to online security that protects you against the latest threats as soon as they emerge. And it does so at blazing fast speeds, typicall...


(Note, the behaviors below are for all versions of wrsa.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WRSVC'
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'WRSVC' → "C:\Program Files\Webroot\WRSA.exe" -ul

MalwareMalware detections

Based on 40+ industry antivirus scanners, 10 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
AegisLab 1.5 W32.W.Mabezat
Norman 6.08.06 W32/Sality.AKHL
Rising Antivirus Suspicious
Rising Antivirus Suspicious
Rising Antivirus PE:Stealer.Zbot!1.6524
Rising Antivirus Suspicious
Rising Antivirus Suspicious
Rising Antivirus Suspicious
Rising Antivirus Suspicious
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.RCBH1LM

VersionsAll file variations of wrsa.exe

MD5SHA-1File size
8de9f9ca33ff3b793c2188489bfdf0f9 dd457f5735de79bc10cd5e8822b492a9e86915e1 745.62 KB
4158b19a9bf089a7a655106a8c1be508 91459e342e2586ea1471b2c9f4266273bb7b4477 746.12 KB
ab5b36586944ba96fd64c3f6fa1080c7 f52fa196a3d33ec95753be92be2c86b7dc109825 748.09 KB
80d518cf06b34630fb610ccc98d1ad1b e21c620e9cb04859a035f10897e806b65e8f8d44 747.59 KB
232e78fcdc8aef780edb5f1ae4c77934 8b37503a59e4e689ebca157d5652d7f2b4efdf16 739.1 KB
d72e3f7e98f81a688a12b3b6871936ff 7ef79fddbf23ae627691b26321b675309b8b83ce 734.05 KB
85770292072cbbe8998c3757d123037a 2035c3784395a07b0d9c3a88a11c3eaf092904ad 724.95 KB
6d5ca39d2b6e99f6389ac3471232e58c c09be7de6da83926a6f192a3779bf311e7bae0a5 725.01 KB
c5609a2aba676026d0a412fe46fa78b6 c52893e4c6c1bdabd31593ff080028f0141f0e37 722.98 KB
fe6e128a3b0e45c41c7106d811d1cf50 1f9083e77d9fdc4a745e2f63bfc43e8eb12fa6cc 712.43 KB
97a3cae53d09eab9198290bf4d86b8c5 0c46a06960872f3215e4128bbe59ba54c65dac70 710.41 KB
62b525f881795f8f3efac5fe1ad5d8bc 7be06f40fa12c40eb5366ce6a7327147b60d31d0 716.11 KB
0ccecf60739be286de82f6a5cfce0a21 5cad39be159d34153d1fda5627c1884b964c68f7 716.61 KB
56eae94d7c283f362ef66fe851b7c00b dd549ff87c84fddcdea956d16eb13ced7154b78d 695.35 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 28.57%
Windows Seven Black Edition 19.05%
Windows 8 19.05%
Windows 8.1 9.52%
Windows Vista Ultimate 4.76%
Windows 8 Pro with Media Center 4.76%
Windows Vista Home Premium 4.76%
Windows 7 Ultimate N 4.76%
Windows 7 Ultimate 4.76%

Distribution by countryDistribution by country

United States installs about 95.24% of Webroot SecureAnywhere.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 52.94%
Acer 11.76%
Dell 11.76%
Lenovo 11.76%
ASUS 11.76%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE