MY FILES HAVE BEEN ENCRIPTED HOW DOES THIS HAPPEN WITH WEBROOT
FILES HAVE BEEN ENCRIPTED AND WHERE WAS WEBROOT
Hi feinamerican
Welcome to the Community Forums.
I am sorry to hear that you have fallen foul of ransomeware.
Whilst WSA does protect against ransomware and does have the feature that if the nature of an executing file or app cannot be determined as 'Good' or 'Bad' so that the relevant action can be taken, i.e, files or apps that are of 'undertimed' nature are monitored and their actions journalled, allowing the possibility that any damage done could be 'undone' by using the journal files to power the rollback, no one can ever truthfully say that any AV is 100% proof against threats.
The Threat Researchers at Webroot are constantly trying to keep the WSA Client and the Cloud Network updated in relation to new versions and variants but it may be that one of these has managed to slip through.
Therefore, I would recommend that (i) you reboot your system as little as possible for the time being as variants of some ransomware are known to replicate themselves into different areas of the syste on each reboot, so s to make removal more difficult, & (ii) that you Open a Support Ticket ASAP, to let the Support Team know of your issue. They should then be in a position to investigate the infection and advise as to what if anything they can do to clear it up for you.
I should point out that it may not be possible in some circumstances for them to do anything but it is always worth contacting them ASAP in case they can.
Please keepo us posted as to how you are getting on once you have contact them or if you have any further questions.
Regards, Baldrick
Welcome to the Community Forums.
I am sorry to hear that you have fallen foul of ransomeware.
Whilst WSA does protect against ransomware and does have the feature that if the nature of an executing file or app cannot be determined as 'Good' or 'Bad' so that the relevant action can be taken, i.e, files or apps that are of 'undertimed' nature are monitored and their actions journalled, allowing the possibility that any damage done could be 'undone' by using the journal files to power the rollback, no one can ever truthfully say that any AV is 100% proof against threats.
The Threat Researchers at Webroot are constantly trying to keep the WSA Client and the Cloud Network updated in relation to new versions and variants but it may be that one of these has managed to slip through.
Therefore, I would recommend that (i) you reboot your system as little as possible for the time being as variants of some ransomware are known to replicate themselves into different areas of the syste on each reboot, so s to make removal more difficult, & (ii) that you Open a Support Ticket ASAP, to let the Support Team know of your issue. They should then be in a position to investigate the infection and advise as to what if anything they can do to clear it up for you.
I should point out that it may not be possible in some circumstances for them to do anything but it is always worth contacting them ASAP in case they can.
Please keepo us posted as to how you are getting on once you have contact them or if you have any further questions.
Regards, Baldrick
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.