To Customer Support To Customer Support
Solved

Another false positive for W32.Malware.Gen - This time for files pertinent to VirtualBox software

  • 21 April 2017
  • 2 replies
  • 288 views
R
These are the actual files that WR wanted to delete.  I had to tell the antivirus/malware client to not delete these two files and simply disabled notifications for when the same ones are found.  Here are the actual locations of the two files that WR decided were an issue all though they're not.  
 
[u] c:program filesoraclevirtualbox guest additionsuninst.exe [MD5: 4C323F927A737127B387ED6DB0826544] [Flags: 00081000.8464]
[u] f:vboxwindowsadditions.exe [MD5: B2F0AC13471A917289D1C83D5C96DCFA] [Flags: 00081000.8503]
 
Please mark these in the overall WR heuristics/definitions database.
Thank you!
---Roman
 
icon

Best answer by DanP 21 April 2017, 21:52

View original

2 replies

Baldrick
Rank
Userlevel 7
Hi rzavolly
 
Welcome to the Community Forums.
 
The best thing to do in the situation is to Open a Support Ticket to inform the Support Team of this so they can do the updating of the Webroot Cloud database re. these files.
 
This is not something that we can do here in the Community.
 
Regards, Baldrick
Webroot SecureAnywhere Complete Beta Tester v9.0.24.49, imaged by Macrium Reflect v7.2
DanP
Rank
Userlevel 7
Badge +35
@ wrote:
These are the actual files that WR wanted to delete.  I had to tell the antivirus/malware client to not delete these two files and simply disabled notifications for when the same ones are found.  Here are the actual locations of the two files that WR decided were an issue all though they're not.  
 
[u] c:program filesoraclevirtualbox guest additionsuninst.exe [MD5: 4C323F927A737127B387ED6DB0826544] [Flags: 00081000.8464]
[u] f:vboxwindowsadditions.exe [MD5: B2F0AC13471A917289D1C83D5C96DCFA] [Flags: 00081000.8503]
 
Please mark these in the overall WR heuristics/definitions database.
Thank you!
---Roman
 
Both of those files have been whitelisted for some time. Please Submit A Support Ticket.

 
-Dan
Webroot Threat Research

Reply


Terms & Conditions

© 2004 - Webroot Inc.

We have recently updated our Privacy Policies. We encourage you to read the full terms here.