Skip to main content
Answer

Webroot failed to remove a Registration.exe threat

  • June 1, 2024
  • 4 replies
  • 115 views

Webroot failed to automatically remove a Registration.exe threat on my Dell Windows 11 PC.   Is this a serious threat?  Any suggestions on how to remove it?

Best answer by TripleHelix

Hello @Saxkat 

 

Please contact Webroot Support and they will sort it out for you because the name means nothing to us as we would need the MD5 hash file from a Webroot Scan Log to check.

 

Webroot Support:

Submit a ticket 24/7/365 it’s the best way!

Call 1-866-612-4227  during the week Mon - Fri 7 AM to 5:30 PM (MST)

 

Also phone numbers from around the world: https://www.webroot.com/us/en/about/contact-us

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,

4 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • Answer
  • June 1, 2024

Hello @Saxkat 

 

Please contact Webroot Support and they will sort it out for you because the name means nothing to us as we would need the MD5 hash file from a Webroot Scan Log to check.

 

Webroot Support:

Submit a ticket 24/7/365 it’s the best way!

Call 1-866-612-4227  during the week Mon - Fri 7 AM to 5:30 PM (MST)

 

Also phone numbers from around the world: https://www.webroot.com/us/en/about/contact-us

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • June 1, 2024

If you save a Scan Log look near the bottom for the lines that show the detection and post them.

 

Example:

 

Sat 2024-06-01 12:28:26.0232    Infection detected: E:\Users\Daniel\Downloads\0.exe\0.exe [SHA256: 09A1C17AC55CDE962B4F3BCD61140D752D86362296EE74736000A6A647C73D8C] [MD5: 2A9D0D06D292A4CBBE4A95DA4650ED54] [3/00080000] [W32.Backdoor.Gen]
Sat 2024-06-01 12:28:26.0232    Infection found in realtime: E:\Users\Daniel\Downloads\0.exe\0.exe [UniqueID: 7AC1A109, MD5: 2A9D0D06D292A4CBBE4A95DA4650ED54, Size: 72704 bytes] [524288/00000003] [W32.Backdoor.Gen]


  • Author
  • Fresh Face
  • June 1, 2024

While online with tech support, I noticed that the Registration.exe file was reported as residing on my DVD-ROM drive, and that it infected a Windows file.  I removed the disc from the drive, tech support ran Webroot again, and this time, the threat was removed.


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • June 1, 2024

Great to hear 👍