These are the actual files that WR wanted to delete. I had to tell the antivirus/malware client to not delete these two files and simply disabled notifications for when the same ones are found. Here are the actual locations of the two files that WR decided were an issue all though they're not.
[u] c:program filesoraclevirtualbox guest additionsuninst.exe [MD5: 4C323F927A737127B387ED6DB0826544] [Flags: 00081000.8464]
[u] f:vboxwindowsadditions.exe [MD5: B2F0AC13471A917289D1C83D5C96DCFA] [Flags: 00081000.8503]
Please mark these in the overall WR heuristics/definitions database.
Thank you!
---Roman
Solved
Another false positive for W32.Malware.Gen - This time for files pertinent to VirtualBox software
Best answer by DanP
Both of those files have been whitelisted for some time. Please Submit A Support Ticket.@ wrote:
These are the actual files that WR wanted to delete. I had to tell the antivirus/malware client to not delete these two files and simply disabled notifications for when the same ones are found. Here are the actual locations of the two files that WR decided were an issue all though they're not.
[u] c:program filesoraclevirtualbox guest additionsuninst.exe [MD5: 4C323F927A737127B387ED6DB0826544] [Flags: 00081000.8464]
[u] f:vboxwindowsadditions.exe [MD5: B2F0AC13471A917289D1C83D5C96DCFA] [Flags: 00081000.8503]
Please mark these in the overall WR heuristics/definitions database.
Thank you!
---Roman
-Dan
Hi rzavolly
Welcome to the Community Forums.
The best thing to do in the situation is to Open a Support Ticket to inform the Support Team of this so they can do the updating of the Webroot Cloud database re. these files.
This is not something that we can do here in the Community.
Regards, Baldrick
Welcome to the Community Forums.
The best thing to do in the situation is to Open a Support Ticket to inform the Support Team of this so they can do the updating of the Webroot Cloud database re. these files.
This is not something that we can do here in the Community.
Regards, Baldrick
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2
+35- OpenText Employee
- 514 replies
- Answer
Both of those files have been whitelisted for some time. Please Submit A Support Ticket.@ wrote:
These are the actual files that WR wanted to delete. I had to tell the antivirus/malware client to not delete these two files and simply disabled notifications for when the same ones are found. Here are the actual locations of the two files that WR decided were an issue all though they're not.
[u] c:program filesoraclevirtualbox guest additionsuninst.exe [MD5: 4C323F927A737127B387ED6DB0826544] [Flags: 00081000.8464]
[u] f:vboxwindowsadditions.exe [MD5: B2F0AC13471A917289D1C83D5C96DCFA] [Flags: 00081000.8503]
Please mark these in the overall WR heuristics/definitions database.
Thank you!
---Roman
-Dan
Webroot Threat Research
Reply
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.