Solved

w32.malware.gen what is it?


Userlevel 1
i was downloading a game i used to play and webroot said it was a virus. The game i was downoading is called dragonnest.
is it cause i have pup checkbox checked?
icon

Best answer by RetiredTripleHelix 3 August 2017, 20:41

@Fedaygin wrote:
Hi.
 
@I have similar problem & was found@Teamspeak 3 .exe 😮 Soon after 14d trial to buy year license for this Software is turns out to be lightweight enough, not disruptive & offers good protection 🙂 When googled that which would be best lightweight Antivir software this was praised quite a lot on places i adventured in. Assistance Required. Kind Regards: Terry


 
 

Hello and Welcome to the Webroot Community!
 
Please Submit a Support Ticket and they will be happy to sort this out for you! Also it looks like the detection is Adware or others call PUA's and PUP's see here for more info: https://community.webroot.com/t5/Techie-KB/How-to-Remove-Potentially-Unwanted-Applications/ta-p/40744
 
Thanks,
 
Daniel ;)

View original

22 replies

Userlevel 7
Badge +55
WELCOME TRYANT!! As @shorTcircuiT states: False positives do not seem to be a problem for most users, but please  Submit a Support Ticket as that is the best way to report such issues. Hopefully @RetiredTripleHelix or @Baldrick can help us out here further...;)
Userlevel 7
Please do not run the program until you have filed a Trouble Ticket and Support has answered.  While False Positives do happen, this is not a PUP or PUA: the detection would be something like pup.gen  This is flagged as malware and not a PUA.
 
Userlevel 1
ty david i sent in a ticket.
 
Userlevel 1
now how do i look at the ticket and the progression of it?
Userlevel 7
I see the ticket, one second and I`ll check that file determination!
Userlevel 7
OK I have fixed this determination, it was actually a false positive.
 
You may un-quarantine and restore the file that was quarantined by the Webroot SecureAnywhere software if you have not already done so. To restore the file:

1. Open on the cog icon next to PC Security.
2. Click the Quarantine tab.
3. Click the check box next to the filename, then click Restore.

Now that this change is in effect, we request that you run another scan of your computer (click "Scan My Computer" on the main overview window). If the same detection occurs, please let us know immediately.
Userlevel 7
Thanks Roy!
Userlevel 7
Badge +55
Wonderful Roy, Thanks for the assistance ....;)
Userlevel 1
 False positive meaning? im not that good with virus deffinitions
 
Userlevel 7
Hi Tyrant :D

A "False Positive" or "F/P" is when a good, clean file gets detected as malicious by signature or heuristically detected as malicious by an anti-virus or anti-malware program. It means the file isn't really bad, but the anti-virus thinks it is.

Hope this helps :D
Shran
 
 
Edit
I am giving the Commamder a Solution Credit here for the question/answer of what is an FP   David
Userlevel 7
FP or False Positive is when WSA shows something as being malware that is actually safe. The file in question is actually safeand sshould not have produced a warning from WSA.
 
At this point, if you try the same file again, WSA should ignore it, but it also would be safe for you to ignore a warning, but only for that one specific download/file that you reported.
 
 
Refer to the directions above on removing it from the Quarantine, and let us know if it shows a problem again when yoy run it.
 
Go play :-)
Userlevel 1
thanks guys for the help! im glad i came here you are a very helpful community
Userlevel 2
I have been using Rejetto's tiny hfs http file server for years. It's a great little program. Today Webroot reported it as being in the W32.malware.gen group.
 
The program is open source. You can get the source code and check it yourselves.
Userlevel 7
Badge +32

@silvanet wrote:
I have been using Rejetto's tiny hfs http file server for years. It's a great little program. Today Webroot reported it as being in the W32.malware.gen group.
 
The program is open source. You can get the source code and check it yourselves.

Hello,
 
I just downloaded this from www.rejetto.com and did not see any file detections. I did see the URL being blocked, and will have that investigated and corrected though - was that what you were seeing? If you did see files being detected please Submit A Support Ticket so that we can investigate what was detected. 
 
Thanks,
 
-Dan
Userlevel 2
Yes, thanks so much, but I also began using it with stunnel to be able to encrypt and use SSL. Maybe you can check that program too, please because WRSA alerted me to the referenced malware and on a scan it said it detected it in three hfs http files that were in my computer. One the original download, and the other two updates done directly to Rejetto from within the program. I did submit all three files. So thanks again.
Userlevel 2
Yes, they sure are. They're the best.
i got this when i get the launcher Setup for NexonLauncher  
so i can just skip the virus notice??? and run the setup?
i have the same problem with the NexonLauncher for a game as well. same website as the previous user having this problem. by "false positives" i take it you mean its diagnosed as a virus but is safe??
Userlevel 7
Hi Corsye
 
Welcome to the Community Forums.
 
If you believe that you have suffered a false positive detection then the best approach is to Open a Support Ticket to advise the Support, so that they can investigate the veracity of the report and if they agree they can then whitelist the file in question in the Webroot Cloud...et voila...no more problem.
 
Hope that helps?
 
Regards, Baldrick
Hi.
 
I have similar problem & was found@Teamspeak 3 .exe 😮 Soon after 14d trial to buy year license for this Software is turns out to be lightweight enough, not disruptive & offers good protection 🙂 When googled that which would be best lightweight Antivir software this was praised quite a lot on places i adventured in. Assistance Required. Kind Regards: Terry


 
 
Userlevel 2
Maybe new thread since this one is marked [solved], but Webroot team is great. Follow their advice.
Userlevel 7
Badge +55

@Fedaygin wrote:
Hi.
 
@I have similar problem & was found@Teamspeak 3 .exe 😮 Soon after 14d trial to buy year license for this Software is turns out to be lightweight enough, not disruptive & offers good protection 🙂 When googled that which would be best lightweight Antivir software this was praised quite a lot on places i adventured in. Assistance Required. Kind Regards: Terry


 
 

Hello and Welcome to the Webroot Community!
 
Please Submit a Support Ticket and they will be happy to sort this out for you! Also it looks like the detection is Adware or others call PUA's and PUP's see here for more info: https://community.webroot.com/t5/Techie-KB/How-to-Remove-Potentially-Unwanted-Applications/ta-p/40744
 
Thanks,
 
Daniel ;)

Reply

    Cookie policy

    We use cookies to enhance and personalize your experience. If you accept or continue browsing you agree to our cookie policy. Learn more about our cookies.

    Accept cookies Cookie settings