False report on Mac OS Sierra?

  • 26 October 2016
  • 30 replies
  • 249 views

Userlevel 3
Hi,
 
We are receiving reports from Webroot of a detection that I am not sure is true... How do I know if it is a false positive?
 
The report log is below:-
 
Automated Cleanup Engine
Starting Cleanup at 2016-Oct-26 11:40:30
Starting Routine> Detected /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation [Name: "PUA.OSX.TuneUpMyMac.1.r", MD5: 00000000000000000000000000000000]
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/.PKInstallSandboxManager-SystemSoftware/3F5A27F6-09A2-4D3F-8049-A2ABB8F44C32.sandbox/Root/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
Automated Cleanup Engine
Starting Cleanup at 2016-Oct-26 14:52:31
Starting Routine> Detected /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation [Name: "PUA.OSX.TuneUpMyMac.1.r", MD5: 00000000000000000000000000000000]
Quarantining File> Removing /Volumes/Time Machine Backups/Backups.backupdb/User/2016-10-26-053418/Macintosh HD/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation

30 replies

Userlevel 6
Badge +26
? - I'll mention the specific situation to support as it does sound odd and/or isolated. I've checked tickets and haven't seen any other UI oddities mentioned. (PS.. my MBP is running Sierra, 10.12, WSAB 9.0.4.23 and it appears fine. It was an inplace upgrade just like anyone in the field and nothing odd is presenting.)
Userlevel 3
Thank you coscooper. Much appreciated.
Userlevel 3
Just to point out, I've had complete number dyslexia regarding the version number. Have been looking at the end one and not the second number from the right. Doh! But am still hoping that support can sort out the weird missing text for me...!
Userlevel 3
It's fixed! Whoop Whoop!
 
I had this from support and it worked!
 
Below are manual uninstall instructions. Please be aware that the following instructions must be followed exactly as any mistakes can cause negative effects on the machine.

1. Open Terminal and write: Sudo su -

2. Click Enter and then type your password when prompted.

3. Paste in the following:

sudo /usr/local/bin/WSDaemon -u 

4. This will remove Webroot from your MAC machine.

5. Please reboot your machine.

6. Reinstall Webroot.
 
Thank you to everyone that has helped and advised on this issue. Much appreciated :womanvery-happy:
 
Cheers,
Beckey | IT Manager - Helen Moore
Userlevel 7
Badge +62
Hi Beckey!
 
Great news! Thank you so much for letting us know!
 
 
Have a great day!:D

Reply