At least one file was modifed.
I recommend that you provide protection for Setup.exe to prevent this kind of attack.
reply requested.
Ro
= = =
I recently got hacked, and WR did not protect. Hacker modified Setup.exe to enable remote turn-on. A
Hello ERA2000, welcome to the Community!
The problem here is that pretty much EVERY program uses a setup.exe file as the installer... or a part of installers. ALL setup.exe files are already scanned upon download and execution, but if there is a new variant it is possible that it has not yet been identified. Please submit a Trouble Ticket to have Webroot Support take a look at your log files and the specific setup file in question. This is a free service to you with your valid WSA license.
The problem here is that pretty much EVERY program uses a setup.exe file as the installer... or a part of installers. ALL setup.exe files are already scanned upon download and execution, but if there is a new variant it is possible that it has not yet been identified. Please submit a Trouble Ticket to have Webroot Support take a look at your log files and the specific setup file in question. This is a free service to you with your valid WSA license.
Hi ERA2000
Welcome to the Community Forums.
Just to add to what David has said/recommended, would you please have a look under the Settings for PC Security (click on cog/gear symbol to the right of that tab), and then click on the 'Block/Allow Files' tab. 0
Once in the new tab please check in the list on the left hand side of the panel and see if you can find reference to the Setup.exe you are referring to, and if you do find it then check which of the statuses (Allow, Block or Monitor) it is set to. If set to 'Monitor' then the Support Team should be able to use the journalling of its activities to rollback any actions/changes to your system that it has made). WSA should normally start monitoring any file/app that it cannot determine whether it is good or bad, so in this case there is a chance that this may have happened.
Do let us know what you find, and how you get on with the Support Ticket...all feedback is good and helps us to help others in the future.
Regards, Baldrick
Welcome to the Community Forums.
Just to add to what David has said/recommended, would you please have a look under the Settings for PC Security (click on cog/gear symbol to the right of that tab), and then click on the 'Block/Allow Files' tab. 0
Once in the new tab please check in the list on the left hand side of the panel and see if you can find reference to the Setup.exe you are referring to, and if you do find it then check which of the statuses (Allow, Block or Monitor) it is set to. If set to 'Monitor' then the Support Team should be able to use the journalling of its activities to rollback any actions/changes to your system that it has made). WSA should normally start monitoring any file/app that it cannot determine whether it is good or bad, so in this case there is a chance that this may have happened.
Do let us know what you find, and how you get on with the Support Ticket...all feedback is good and helps us to help others in the future.
Regards, Baldrick
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.