Today, I could not get any of my files to open. Then Webroot showed up.

[CaliforniaPeggy]

I don't know where this came from. I just Googled it and see that it's a security application.

In order to get my computer to work, I had to accept it. So I did and now everything is working well.

Did I make a mistake? I'm a novice at computer security.

What can you good people tell me?

TIA!

[lisa58]

1. I have webroot - it was recommended by the

Person that set up my laptop a few years ago. I think you’re okay

[CaliforniaPeggy]

2. Thank you!

[dchill]

3. It sounds like you didn't have much choice in the matter.

I'd call that hacking and ransomware!

ng-hacks-msps-to-deploy-ransomware-on-customer-systems/#:~:text=A%20ransomware%20gang%20has%20breached,on%20the%20MSPs'%20customers%20systems

[CaliforniaPeggy]

4. I sure did not.

So is this a link to help me? Not sure how to proceed.

[dchill]

5. I messed up the link. Here is the fixed link. It should inform you.

https://www.zdnet.com/article/ransomware-gang-hacks-msps-to-deploy-ransomware-on-customer-systems/

[CaliforniaPeggy]

6. Yes, that link works. I guess I need to talk to my IT guy!

I am a novice at this stuff.

[dchill]

7. I hate it! I gave up personal computers a few years ago.

Too much maintenance, updating and anti viral nonsense. And every new version of Windows slowed my latest hyper speed processor down. Treading water is not progress. Especially when it's so expensive!

I stick to my Android tablet these days.

Good luck!

[LastDemocratInSC]

14. That article is from 2019.

Is the information still accurate?

[dchill]

15. Don't know. But any application that puts itself on your...

...computer then restricts access to your files is, by definition, ransomware. I was just trying to help.

[LastDemocratInSC]

17. I agree.

It appears to be an attack but it should have been detected and stopped by whatever anti-virus software is installed.

[Hugh_Lebowski]

8. What do you mean webroot 'showed up'?

I would say you are in no way in the clear, and no you should not have hit 'accept' in a scenario where you were locked out of your files and some random message came up saying 'accept me', purporting to be from 'Webroot' ... to regain access to them.

Unless you KNOW that you actually installed Webroot (or it came with your PC) this is for sure a worrisome situation afa viruses go.

Other malicious apps can mimic the appearance of known security apps like Webroot in a convincing way, so unless you know your PC has a legit copy of Webroot protecting it ... I'd be concerned.

[CaliforniaPeggy]

9. Webroot's logo appeared on my computer's screen.

It had showed up a few days ago, and I denied it access.

But yes, I am concerned; hence this post.

I could not get any of my files to work without having accepted the Webroot logo.

I have a laptop too, but I didn't check it at that time.

[Hugh_Lebowski]

11. Okay, a few things ...

Is this Windows or Apple or Android (like a tablet or chrome-based laptop)?

Which version of the OS?

What does 'I could not get any of my files to work' actually mean? If literally none of your files 'worked' your computer would not even boot up, because your entire operating system is a collection of files. In order to even see anything but a blank screen, 'files' have to 'work'.

So, what does 'work' mean in this context? What kind of files? Like photos wouldn't open, or no files in a particular directory would open, or programs wouldn't start, etc? Or does this just happen when trying to open specific file(s) you downloaded recently?

Is this a new computer or one you've had a long time, and this Webroot stuff has appeared from nowhere?

And lastly are you sure Webroot was not already on your computer, perhaps pre-installed by the maker of your computer?

[empedocles]

10. I am concerned also. Get daily ads from MalwareBtes & another nuisance.

Several times have had to unplug everything, replug, to get going again.

[Tetrachloride]

12. Backup all your data.

Change your credit cards.

Buy a Mac.

[usonian]

13. Important questions.

If not for you, then for your IT person.

Does your IT person actually manage your computer? (remotely)
The exploit I read relies on remote management.
In any event, I recommend having a virus/malware expert scan the computer.
Did you or the IT person install Webroot anti-virus?
Webroot has been compromised.
Windows defender effectively turns itself off when there is another anti-virus running.

Damage may happen LATER when a start1488 program runs and encrypts files.
You might see a slowdown ( in your process/activity monitor) but that may be advanced for you.

In addition to that link, ask your IT person to watch this video

It is *highly* technical.

But *definitely* have your computer scanned for malware, specificially start1488.exe

If you merely run your own computer "solo" this may not apply.
But it is likely if someone else remotely manages your computer.

HTH

P.S. this is all I know about this. Just pass along to your IT person.

[CaliforniaPeggy]

16. Thanks to all of you for your research and help. I just spoke with my IT guy.

He thinks that this is the genuine article. He sees no cause for alarm.

So I will leave it at that.

Thanks again!