Skip to main content

Webroot failed to automatically remove a Registration.exe threat on my Dell Windows 11 PC.   Is this a serious threat?  Any suggestions on how to remove it?

Hello @Saxkat 

 

Please contact Webroot Support and they will sort it out for you because the name means nothing to us as we would need the MD5 hash file from a Webroot Scan Log to check.

 

Webroot Support:

Submit a ticket 24/7/365 it’s the best way!

Call 1-866-612-4227  during the week Mon - Fri 7 AM to 5:30 PM (MST)

 

Also phone numbers from around the world: https://www.webroot.com/us/en/about/contact-us

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,


If you save a Scan Log look near the bottom for the lines that show the detection and post them.

 

Example:

 

Sat 2024-06-01 12:28:26.0232    Infection detected: E:\Users\Daniel\Downloads\0.exe\0.exe .SHA256: 09A1C17AC55CDE962B4F3BCD61140D752D86362296EE74736000A6A647C73D8C] DMD5: 2A9D0D06D292A4CBBE4A95DA4650ED54] D3/00080000] 0W32.Backdoor.Gen]
Sat 2024-06-01 12:28:26.0232    Infection found in realtime: E:\Users\Daniel\Downloads\0.exe\0.exe eUniqueID: 7AC1A109, MD5: 2A9D0D06D292A4CBBE4A95DA4650ED54, Size: 72704 bytes] 524288/00000003] 0W32.Backdoor.Gen]


While online with tech support, I noticed that the Registration.exe file was reported as residing on my DVD-ROM drive, and that it infected a Windows file.  I removed the disc from the drive, tech support ran Webroot again, and this time, the threat was removed.


Great to hear 👍


Reply