Hi,
We are receiving reports from Webroot of a detection that I am not sure is true... How do I know if it is a false positive?
The report log is below:-
Automated Cleanup Engine
Starting Cleanup at 2016-Oct-26 11:40:30
Starting Routine> Detected /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation [Name: "PUA.OSX.TuneUpMyMac.1.r", MD5: 00000000000000000000000000000000]
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
Automated Cleanup Engine
Starting Cleanup at 2016-Oct-26 14:52:31
Starting Routine> Detected /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation [Name: "PUA.OSX.TuneUpMyMac.1.r", MD5: 00000000000000000000000000000000]
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
+26? - I'll mention the specific situation to support as it does sound odd and/or isolated. I've checked tickets and haven't seen any other UI oddities mentioned. (PS.. my MBP is running Sierra, 10.12, WSAB 9.0.4.23 and it appears fine. It was an inplace upgrade just like anyone in the field and nothing odd is presenting.)
Shane Cooper | Manager, Channels Sales (RMM & Strategic Partners)
Just to point out, I've had complete number dyslexia regarding the version number. Have been looking at the end one and not the second number from the right. Doh! But am still hoping that support can sort out the weird missing text for me...!
1 person likes this
It's fixed! Whoop Whoop!
I had this from support and it worked!
Below are manual uninstall instructions. Please be aware that the following instructions must be followed exactly as any mistakes can cause negative effects on the machine.
1. Open Terminal and write: Sudo su -
2. Click Enter and then type your password when prompted.
3. Paste in the following:
sudo /usr/local/bin/WSDaemon -u
4. This will remove Webroot from your MAC machine.
5. Please reboot your machine.
6. Reinstall Webroot.
Thank you to everyone that has helped and advised on this issue. Much appreciated :womanvery-happy:
Cheers,
Beckey | IT Manager - Helen Moore
I had this from support and it worked!
Below are manual uninstall instructions. Please be aware that the following instructions must be followed exactly as any mistakes can cause negative effects on the machine.
1. Open Terminal and write: Sudo su -
2. Click Enter and then type your password when prompted.
3. Paste in the following:
sudo /usr/local/bin/WSDaemon -u
4. This will remove Webroot from your MAC machine.
5. Please reboot your machine.
6. Reinstall Webroot.
Thank you to everyone that has helped and advised on this issue. Much appreciated :womanvery-happy:
Cheers,
Beckey | IT Manager - Helen Moore
1 person likes this
+62Hi Beckey!
Great news! Thank you so much for letting us know!
Have a great day!:D
Great news! Thank you so much for letting us know!
Have a great day!:D
Windows Insider, iMac 2021 27 in i5 Retina 5, iMac OS Sequoia (15.3.2}, Security: iPads, W 10 & (VM:15), ALIENWARE 17R4, W10 Workstation, ALIENWARE 15 R6, W11, Webroot® SecureAnywhere™ Internet Security Complete (Android Samsung Galaxy Ultra Note 23, Webroot Beta Tester. Security
1 person likes this
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.