Today, I could not get any of my files to open. Then Webroot showed up.
I don't know where this came from. I just Googled it and see that it's a security application.
In order to get my computer to work, I had to accept it. So I did and now everything is working well.
Did I make a mistake? I'm a novice at computer security.
What can you good people tell me?
TIA!
lisa58
(5,779 posts)Person that set up my laptop a few years ago. I think youre okay
CaliforniaPeggy
(152,469 posts)dchill
(40,767 posts)I'd call that hacking and ransomware!
ng-hacks-msps-to-deploy-ransomware-on-customer-systems/#:~:text=A%20ransomware%20gang%20has%20breached,on%20the%20MSPs'%20customers%20systems
CaliforniaPeggy
(152,469 posts)So is this a link to help me? Not sure how to proceed.
dchill
(40,767 posts)CaliforniaPeggy
(152,469 posts)I am a novice at this stuff.
dchill
(40,767 posts)Too much maintenance, updating and anti viral nonsense. And every new version of Windows slowed my latest hyper speed processor down. Treading water is not progress. Especially when it's so expensive!
I stick to my Android tablet these days.
Good luck!
LastDemocratInSC
(3,863 posts)Is the information still accurate?
dchill
(40,767 posts)...computer then restricts access to your files is, by definition, ransomware. I was just trying to help.
LastDemocratInSC
(3,863 posts)It appears to be an attack but it should have been detected and stopped by whatever anti-virus software is installed.
Hugh_Lebowski
(33,643 posts)I would say you are in no way in the clear, and no you should not have hit 'accept' in a scenario where you were locked out of your files and some random message came up saying 'accept me', purporting to be from 'Webroot' ... to regain access to them.
Unless you KNOW that you actually installed Webroot (or it came with your PC) this is for sure a worrisome situation afa viruses go.
Other malicious apps can mimic the appearance of known security apps like Webroot in a convincing way, so unless you know your PC has a legit copy of Webroot protecting it ... I'd be concerned.
CaliforniaPeggy
(152,469 posts)It had showed up a few days ago, and I denied it access.
But yes, I am concerned; hence this post.
I could not get any of my files to work without having accepted the Webroot logo.
I have a laptop too, but I didn't check it at that time.
Hugh_Lebowski
(33,643 posts)Is this Windows or Apple or Android (like a tablet or chrome-based laptop)?
Which version of the OS?
What does 'I could not get any of my files to work' actually mean? If literally none of your files 'worked' your computer would not even boot up, because your entire operating system is a collection of files. In order to even see anything but a blank screen, 'files' have to 'work'.
So, what does 'work' mean in this context? What kind of files? Like photos wouldn't open, or no files in a particular directory would open, or programs wouldn't start, etc? Or does this just happen when trying to open specific file(s) you downloaded recently?
Is this a new computer or one you've had a long time, and this Webroot stuff has appeared from nowhere?
And lastly are you sure Webroot was not already on your computer, perhaps pre-installed by the maker of your computer?
empedocles
(15,751 posts)Several times have had to unplug everything, replug, to get going again.
Tetrachloride
(8,486 posts)Change your credit cards.
Buy a Mac.
usonian
(14,617 posts)If not for you, then for your IT person.
Does your IT person actually manage your computer? (remotely)
The exploit I read relies on remote management.
In any event, I recommend having a virus/malware expert scan the computer.
Did you or the IT person install Webroot anti-virus?
Webroot has been compromised.
Windows defender effectively turns itself off when there is another anti-virus running.
Damage may happen LATER when a start1488 program runs and encrypts files.
You might see a slowdown ( in your process/activity monitor) but that may be advanced for you.
In addition to that link, ask your IT person to watch this video
It is *highly* technical.
But *definitely* have your computer scanned for malware, specificially start1488.exe
If you merely run your own computer "solo" this may not apply.
But it is likely if someone else remotely manages your computer.
HTH
P.S. this is all I know about this. Just pass along to your IT person.
CaliforniaPeggy
(152,469 posts)He thinks that this is the genuine article. He sees no cause for alarm.
So I will leave it at that.
Thanks again!