Skip to main content
Solved

Webroot failed to remove a Registration.exe threat


Webroot failed to automatically remove a Registration.exe threat on my Dell Windows 11 PC.   Is this a serious threat?  Any suggestions on how to remove it?

Best answer by TripleHelix

Hello @Saxkat 

 

Please contact Webroot Support and they will sort it out for you because the name means nothing to us as we would need the MD5 hash file from a Webroot Scan Log to check.

 

Webroot Support:

Submit a ticket 24/7/365 it’s the best way!

Call 1-866-612-4227  during the week Mon - Fri 7 AM to 5:30 PM (MST)

 

Also phone numbers from around the world: https://www.webroot.com/us/en/about/contact-us

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,

View original
Did this help you find an answer to your question?

4 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • 8901 replies
  • Answer
  • June 1, 2024

Hello @Saxkat 

 

Please contact Webroot Support and they will sort it out for you because the name means nothing to us as we would need the MD5 hash file from a Webroot Scan Log to check.

 

Webroot Support:

Submit a ticket 24/7/365 it’s the best way!

Call 1-866-612-4227  during the week Mon - Fri 7 AM to 5:30 PM (MST)

 

Also phone numbers from around the world: https://www.webroot.com/us/en/about/contact-us

 

Note: When submitting a Support Ticket, Please wait for a response from Support. Putting in another Support Ticket on this problem before Support responses will put your first Support Ticket at the end of the queue.

 

Thanks,


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • 8901 replies
  • June 1, 2024

If you save a Scan Log look near the bottom for the lines that show the detection and post them.

 

Example:

 

Sat 2024-06-01 12:28:26.0232    Infection detected: E:\Users\Daniel\Downloads\0.exe\0.exe [SHA256: 09A1C17AC55CDE962B4F3BCD61140D752D86362296EE74736000A6A647C73D8C] [MD5: 2A9D0D06D292A4CBBE4A95DA4650ED54] [3/00080000] [W32.Backdoor.Gen]
Sat 2024-06-01 12:28:26.0232    Infection found in realtime: E:\Users\Daniel\Downloads\0.exe\0.exe [UniqueID: 7AC1A109, MD5: 2A9D0D06D292A4CBBE4A95DA4650ED54, Size: 72704 bytes] [524288/00000003] [W32.Backdoor.Gen]


  • Author
  • Fresh Face
  • 1 reply
  • June 1, 2024

While online with tech support, I noticed that the Registration.exe file was reported as residing on my DVD-ROM drive, and that it infected a Windows file.  I removed the disc from the drive, tech support ran Webroot again, and this time, the threat was removed.


TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • 8901 replies
  • June 1, 2024

Great to hear 👍