Skip to main content
To Customer Support To Customer Support

Hi,

 

I'm not sure how this happened but a trojan has appeared on my computer. I have webroot already installed and even with this popup that appeared webroot didn't detect this trojan. I've downloaded the Microsoft safety scanner and ran a test, it removed a different issue: "VirTool:Win32/DefenderTamperingRestore". However, the popup below is still there:

 

Image

This is a screenshot of my webroot scan, it didn’t detect the trojan:

Please may I ask what I should do?

Kind regards,

Ydn10

Hello @ydn10 

 

Please contact Webroot Support to see if a true infection or a False Positive as you say it was a Pop-up and it could be scareware and they will let you know for sure!

 

Support ticket is best for this!

 

Webroot Support:

Submit a ticket or

Call 1-866-612-4227 during the week Mon - Fri 7 AM to 5:30 PM (MDT)

 

Thanks,

@ydn10  This is interesting! https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:Win32/DefenderTamperingRestore&ThreatID=2147741622

 

From Here: https://answers.microsoft.com/en-us/windows/forum/all/win32defendertamperingrestore-caught-by-windows/8e4db46b-f57c-4d75-982a-859f4cf6677d also I see that you posted here so ignore what they suggested and contact Webroot Support! https://www.windowsphoneinfo.com/threads/trojan-sin2021-detected-how-do-i-remove-it.707974/

 

Published Aug 02, 2019 | Updated Aug 08, 2019
 

VirTool:Win32/DefenderTamperingRestore

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

This detection is for suboptimal configurations that may prevent Microsoft Defender Antivirus from functioning properly.

If you see this detection, a suboptimal configuration was detected, and Microsoft Defender Antivirus will auto-heal by automatically resetting to more secure configurations.

@ydn10  This is interesting! https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:Win32/DefenderTamperingRestore&ThreatID=2147741622

 

From Here: https://answers.microsoft.com/en-us/windows/forum/all/win32defendertamperingrestore-caught-by-windows/8e4db46b-f57c-4d75-982a-859f4cf6677d also I see that you posted here so ignore what they suggested and contact Webroot Support! https://www.windowsphoneinfo.com/threads/trojan-sin2021-detected-how-do-i-remove-it.707974/

 

Published Aug 02, 2019 | Updated Aug 08, 2019
 

VirTool:Win32/DefenderTamperingRestore

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

This detection is for suboptimal configurations that may prevent Microsoft Defender Antivirus from functioning properly.

If you see this detection, a suboptimal configuration was detected, and Microsoft Defender Antivirus will auto-heal by automatically resetting to more secure configurations.

That’s great, so it will auto heal the virtool issue. Yes, I posted on Microsoft here: https://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning-windows_10/trojan-sin2021-detected-how-do-i-remove-it/9792836e-42b5-45ea-9dcb-13c4c0032230

Strange how it is on that other forum, I didn’t post it on windowsphoneinfo. 

Thank you for your help. 

@ydn10  make sure you contact Webroot Support via the Ticket System!

 

This is some info from the Pop-up you posted! https://www.brightcloud.com/tools/url-ip-lookup.php

 

Click on Picture to see full size!

 

 

Reply


Terms & Conditions