Solved

File reported as "Good" by Webroot being monitored

  • 18 June 2018
  • 4 replies
  • 64 views

Userlevel 3
Hi! Today I checked my monitored processes after a windows update and saw that a process named "SearchUI.exe" was being monitored. I calculated the hash of the program and looked it up on Webroot's site and VirusTotal. VT said 0/68 detected and Webroot's site said that the determination was good. Why is it being monitored if Webroot knows that it is good? Here's an image showing it.
 


 
Thanks, Anthony.
icon

Best answer by TripleHelix 18 June 2018, 01:40

View original

4 replies

Userlevel 7
Badge +63
Did you try a scan or two and check after to see if it's still being Monitored? If it is please Submit a Support Ticket and ask them to look into it for you to see why! It could be a communication issue from the WSA client to the Cloud but they would know.
 


 
HTH,
Userlevel 7
Badge +63
In the scan log it shows as good for me [g]! https://docs.webroot.com/us/en/home/wsa_pc_userguide/wsa_pc_userguide.htm#UsingReportsAndViewers/SavingScanLogs.htm%3FTocPath%3DUsing%2520Reports%2520and%2520Viewers%7C_____1
 
Some legitimate files are not included in this log
[g] c:windowssystemappsmicrosoft.windows.cortana_cw5n1h2txyewysearchui.exe [SHA256: 2D878B022ADF849A3EF5350F57D99E09C5C31C5491C6AB470C627E3646860A22] [MD5: B047F60A8E079A0A0D166F353762B378] [Flags: 10191000.13769]
Userlevel 3
Alright, after scanning it wasn't monitored. Thank you for the help!
Userlevel 7
Badge +63
@ wrote:
Alright, after scanning it wasn't monitored. Thank you for the help!
Great to hear! ;)
 
Cheers,

Reply