Hi ,
today , my webroot show "iTunesMigration.exe" is malware !!
//
Starting Routine> Removing c:program fileswindowsappsappleinc.itunes_12090.167.37085.0_x86__nzyj5cx40ttqaitunesmigration.exe...#(PX5: 02CB230D38AF11D1630301A58E703B00564B7302 - MD5: 7BC3228884064307AA620A9CC95757CB - UniqueID: 031D1558)... Deleting File> c:program fileswindowsappsappleinc.itunes_12090.167.37085.0_x86__nzyj5cx40ttqaitunesmigration.exe Automated Cleanup Engine Starting Cleanup at 31/10/2018 - 05:15:21 GMT Starting Routine> Removing C:Program FilesWindowsAppsAppleInc.iTunes_12091.4.37126.0_x86__nzyj5cx40ttqaiTunesMigration.exe...#(PX5: 02CB230D38AF11D1630301A58E703B0065474801 - MD5: 1E6A41E43DC68221777BAF4D04A295CB - UniqueID: 0805E058)... Deleting File> C:Program FilesWindowsAppsAppleInc.iTunes_12091.4.37126.0_x86__nzyj5cx40ttqaiTunesMigration.exe
//
Regards ,
Amir
Solved
is iTunesMigration.exe malware
+37Best answer by ProTruckDriver
Apple released security updates yesterday so this may be the reason with the false positive.
https://community.webroot.com/t5/Security-Industry-News/Apple-security-updates-30th-October-2018/m-p/332759#M43516
Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
https://community.webroot.com/t5/Security-Industry-News/Apple-security-updates-30th-October-2018/m-p/332759#M43516
Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
Security Softwares & Antivirus Business & Market Analyzer * Write near 5000 Topics about AntiVirus on my Blog ( Persian Language ) : www.disna.ir ( more than 500 topics about Webroot ) * Do you know Where is Durantash ? my profile picture is part of Durantash ( Ziggurat , Chogha Zanbil )
Apple released security updates yesterday so this may be the reason with the false positive.
https://community.webroot.com/t5/Security-Industry-News/Apple-security-updates-30th-October-2018/m-p/332759#M43516
Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
https://community.webroot.com/t5/Security-Industry-News/Apple-security-updates-30th-October-2018/m-p/332759#M43516
Please submit a Support Ticket or Contact Webroot Support to sort this problem. This service is FREE with a Paid Subscription.
Support Ticket System is Open 24/7
Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
+63Good one @ I check on VirusTotal and they haven't seen this MD5 Hash so far at the time of post but the Webroot Cloud Determination was just today! Also note when it was first seen??
Starting Routine> Removing c:program fileswindowsappsappleinc.itunes_12090.167.37085.0_x86__nzyj5cx40ttqaitunesmigration.exe...#(PX5: 02CB230D38AF11D1630301A58E703B00564B7302 - MD5: 7BC3228884064307AA620A9CC95757CB - UniqueID: 031D1558)... Deleting File
Starting Routine> Removing c:program fileswindowsappsappleinc.itunes_12090.167.37085.0_x86__nzyj5cx40ttqaitunesmigration.exe...#(PX5: 02CB230D38AF11D1630301A58E703B00564B7302 - MD5: 7BC3228884064307AA620A9CC95757CB - UniqueID: 031D1558)... Deleting File
Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 for Workstations 22H2 on my Alienware 17R2 and Windows 11 Pro x64 for Workstations on my Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Samsung Galaxy A16 5G OS 16.
+37Hello ,
yes , it is false positive. and then i send ticket for Webroot support.
I suggestion make a very speed Process for detect false positive and correct it .
Regards ,
Amir
yes , it is false positive. and then i send ticket for Webroot support.
I suggestion make a very speed Process for detect false positive and correct it .
Regards ,
Amir
Security Softwares & Antivirus Business & Market Analyzer * Write near 5000 Topics about AntiVirus on my Blog ( Persian Language ) : www.disna.ir ( more than 500 topics about Webroot ) * Do you know Where is Durantash ? my profile picture is part of Durantash ( Ziggurat , Chogha Zanbil )
Hello Amir,
Glad to see that the false positive was sorted out. Have a nice weekend. ;)
Glad to see that the false positive was sorted out. Have a nice weekend. ;)
Mac Mini, M-4, 24 GB Memory, 1 TB SSD, macOS Sequoia 15.7.2 ~ Backup with: Time Machine & iCloud. PWM: RoboForm. 👁¿👁 Spam Annihilater 👁¿👁
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.