Skip to main content

Threat

  • November 10, 2014
  • 2 replies
  • 29 views

msiexec.exe i c:programdata windows genuine advantage{ab682258-9f9e-4cfe-8c38-65c7e67479a1}  Win32.LocalInfect.2
what is itr?
 

2 replies

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • November 10, 2014
@ wrote:
msiexec.exe i c:programdata windows genuine advantage{ab682258-9f9e-4cfe-8c38-65c7e67479a1}  Win32.LocalInfect.2
what is itr?
 
Hello cindy_b,
 
Welcome to the Community!
 
Can you open a support ticket here https://detail.webrootanywhere.com/servicewelcome.asp describing your issue. It is the fastest way to get  it solved. You can also use the "Submit a File" functionality available in WSA under System Tools. However, if you put in a ticket, Webroot support department will investigate and reply straightaway.
 
 
Let us knowif you resolve this issue so that we may help others,
 
Best Regards,
 

shorTcircuiT
Gold VIP
  • Gold VIP
  • November 10, 2014
Hello cindy_b, welcome to the Community!
 
To add to what Sherry said, we have seen a couple of threads over the weekend with malware using that same common file name, and while WSA detects it, it evidently is not able to remove the threat without assitance from Support at this time.  
 
That filename itself is a normal Windows file, but quite often malware will use the same file name as a Windows system file in order to try to remain undetected.  With mulitple posts over a few days with the same file name, while it could well be a different malware in each post, my guess is simply there is a new malware varient that while detected just needs a bit of help to help to rip out :)
 
Submit that Ticket as Sherry suggested ASAP 🙂