Skip to main content
I have had Replay Video Capture on my computer for a long time. In fact there were 3 versions. I have not used any of the programs for quite some time. But this evening, Webroot suddenly told me that I was infected and it needed to scan my pc. It removed the exe for the 3 versions of the program as well as an .ink file for the same program. Then it scanned again and found one more exe belonging to this same application.

 

Maybe it really is infected and needed to be removed. Or maybe it was false positive? A long time ago, it also identified a program belonging to Cinema 4D as being infected. I'm sure that was a false positive but I never pursuded it as I called Maxon, the maker of Cinema 4D and they said the file was a utility for exporting from their program to LightWave. They said if I wasn't doing that, then I didn't need the file. Cinema 4D is a very expensive program so I doubt they would have a virus on their installation disc. But it's always possible.

 

The files are all in my quarantine folder.

 

I was wondering if there is any way to go back and check to see what the virus was suppose to be after the file is quarantined. Usually when it says I'm infected...only a couple of times thank goodness...I'm too excited to write anything down. I'm not sure if the virus in this case was suppose to be PUB.DownloadAdmin or PUP.DownloadAdmin. Couldn't find anything for PUB but I found some things for PUP when searching the web.
HEllo Kev914, welcome to the Webroot Community!

 

PUP stands for Potentially Unwanted Program, though here on the Community we generally use PUA (Potentially Unwanted Application).  These are not generally true malware in terms of being a virus, but they are often things that you don't want either.  They might be ad servers, they might be simply tracking where you go on the internet to serve you custom ads, sometimes they are something like network computing or BitCoin miners.  Regardless, they tend to be things that either you do not know are there, or they may be slowing down your computer.

 

You have a couple of options here.  You can submit a Trouble Ticket to have Webroot Support take a look at the files to see if they can be globally "Whitelisted", or if you are 100% postive that they are safe, you can manually over-ride the files for just your own computer.  

 

It sounds like you would like to verify just what it is and if it is really safe, so I would suggest you leave the files alone for the moment and take the Trouble Ticket route.

 

Let me know if any of this helps!
Thanks. I will submit a trouble ticket and see what webroot says.
Hi there,

 

Alternatively you may attach your scan logs up here for me to look into to see if it's a legimate detection or a false positive.

 

You may right click on the Webroot SecureAnyhere icon in the tray > Save a scan log > Save this to Desktop.

 

Thanks!

Eamon F
Just wanted to update that Tech Support has determined that this was a false positive. They have instructed me to uninstall and then reinstall webroot. Then I am suppose to uninstall and reinstall the affected programs. The affected progams are suppose to be whitelisted now. I think that's the term.
Yes Kev, I have fixed this FP. You shouldnt get any more alerts about this detection if you do just let us know. 
Thanks for all your help!

Reply