Webroot Antivirus | How To Fix Webroot Deleted Windows Files
The Problem in the antivirus industry as a false positive (A case where a clean file is flagged as malicious and it is deleted or blocked). A False positive incident can impact form annoying for example, when a program cannot run anymore, where the Operating System is itself affected and no longer boots.
The Webroot incident falls somewhere in the middle because it affected Windows files and sent them to quarantine. This unusual because antivirus firms typically build a white list of Operating System files particularly to prevent false positive detection.
The incorrect identification lasted between 1 PM and 3 PM Mountain Standard Time in the U.S. for two hours, resulting in the flagging of files as W32.Trojan. Gen. This is a standard detection signature, as indicated by the name, intended to capture Trojan programs.
For now, on its community forum, Webroot Secureanywhere Antivirus has provided a solution involving logging into the online console of Webroot and manually creating override rules for all files that have been erroneously blocked.
Users then either have to wait for the endpoint user to the server and restore the files according to the new rules that can take up to 24 hours, or manually cause forced polling from the command line for each device.
While this solution may work with a relatively small number of computers for home users or businesses, it creates problems for large environments, especially for Managed Service Providers (MSPs).
A folder that is known the target for malware was incorrectly classified as bad, and Facebook was classified as a phishing site. Webroot Antivirus Review said in an emailed statement that ” The Facebook issue was corrected and the Webroot team is in the process of creating a comprehensive fix for the false-positive issue.
How To Fix Webroot Deleted Windows File?
Webroot recommended these steps for home users whose Webroot SecureAnywhere Antivirus and security software has mistakenly quarantined Windows files:
- At the bottom of your screen open Webroot by double-clicking the “W” icon.
- Choose “Scan My Computer”.
- Click the cog icon on the webroot home screen (next to PC security) after the scan is completed.
- Click the “Quarantine” tab, find every file from the present date with the time stamp between 12 p.m to 3 p.m MT.
- Click the “Check Box” on the left of each file that you identified in the earlier step.
- Click “Restore”.
- When prompted, choose “Yes”, if you’re sure you want to roll back to the selected entries.
When completed, Re-scan to make sure that issues are resolved, This could take several minutes.