Webroot Quarintine file

MarMontero4 wrote:

Hello there,

My Antivis protection WebrootCarbonite detects a similar file:

/private/var/db/SystemPolicyConfiguration/XProtect.app/Contents/MacOS/XProtectremediatorMRTv3

I keep removing it using the WebrootCarbonite app but every time I run a new Scan it gets detected again, indicating that I should be removing it safely. How do I do this? What kind of threat is this one?

Your add-on anti-malware is malfunctioning.

macOS is recovering from the attempted corruption.

Remove the add-on anti-malware, and use the built-in anti-malware.

Or contact the third-party app vendor, and request they fix their error.

This is just a hilarious error in this third-party app, too.

There are no known Windows-like Viruses in the wild that self replicate and affect macOS, because of the underling UNIX  Foundation and Permission Limitation. 

The Operating System resides in a Sealed and Read Only Volume that can not be opened by the User nor by Third Party Applications.

The only Entity that can open and modify or alter this Volume is Apple.

That would occur when a update or UpGrade is performed.

The Only thing this Antivirus software is protecting is the Bank Account of the Developers and for zero return to the User aside from the problems this software creates.

AntiVirus Developers purposefully Market their product to create a “ Fear Factor “. In so doing, creating a False Need for their Product.

Security. Built right in

Mac app security enhancements

The The Built in Security  is all that is required to protect the computer.

Are you aware that your Antivis protection WebrootCarbonite is attempting to remove a required macOS component that prevents the installation of malicious software?

Protecting against malware in macOS - Apple Support

Rule 1 of Macs is don't install junk.

Be prepared for the need to completely erase the Mac, because that's what I had to do after installing "Webroot".

Jbob5841 wrote:

Webroot keeps finding the same file; Library/Apple/System/Library/InstallerSandb...p/Contents/MacOS/XProtectremediatorMRTv3

Can I remove this permenately??

No.

What is it?

It is part of the operating system's own anti-malware software.

You will remove the annoying and useless message from Webroot by removing Webroot.

It is likely identifying a signature within Apple’s Malware Removal Tool (MRT).

Can I remove this permenately??

Webroot? I don't know. When I installed it for evaluation purposes not only did I determine its uninstallation instructions were ineffective, it proved so difficult to eradicate I completely erased the affected Mac.

Contact its developer, but when I did that even they were unable to help. Subsequent to that time, others reported a method that worked for them: WS daemon - Apple Community

Hello there,

My Antivis protection WebrootCarbonite detects a similar file:

/private/var/db/SystemPolicyConfiguration/XProtect.app/Contents/MacOS/XProtectremediatorMRTv3

I keep removing it using the WebrootCarbonite app but every time I run a new Scan it gets detected again, indicating that I should be removing it safely. How do I do this? What kind of threat is this one?

Any of the below should be removed as per Developers Instructions 

2  - Third Party Security Software 

 Webroot

Read some of the posting and arrive at your own conclusions.