Subscribe to Breaking News emails

You have successfully subscribed to the Breaking News email.

Subscribe today to be the first to to know about breaking news and special reports.

Popular Antivirus Program Mistakenly IDs Windows as a Threat, Creating Chaos

by Alex Johnson /  / Updated 
Computer illustrationReuters - file

Breaking News Emails

Get breaking news alerts and special reports. The news and stories that matter, delivered weekday mornings.

An antivirus service used by tens of thousands of businesses and millions of home users shut down an untold number of computers around the world after it mistakenly identified core parts of Microsoft Windows as threats, the company confirmed Tuesday.

Webroot Inc. of Broomfield, Colorado, said it issued an updated detection rule that "identified false positives" for critical Windows operating files Monday afternoon, resulting in those files' being "quarantined" and inaccessible to Windows.

Kristin Miller, a spokeswoman for Webroot, said the program incorrectly classified as "bad" a common folder that is often targeted for malware. She said that the false positives were being rolled back and that Webroot users should leave the program on and connected to the internet to get the fix.

Breaking News Emails

Get breaking news alerts and special reports. The news and stories that matter, delivered weekday mornings.

"Webroot was not breached," she said. "Actual malicious files are being identified and blocked as normal."

The rule was distributed and applied by Webroot systems around the globe for about 13 minutes, the company said — long enough for businesses, users and administrators to be greeted by a red "blocked" screen and to find their files unavailable. Webroot reported serving about 30 million customers last year.

To make matters worse, Webroot's own systems became "overloaded" by a mammoth backlog of customers' requests to restore affected files from its cloud servers, it said.

The glitch first manifested itself as customers complained that Webroot was mistakenly flagging Facebook.com as a dangerous identity-fishing site.

Webroot's customers — including numerous so-called managed service providers, or MSPs, which use Webroot to manage security for multiple clients of their own — flooded social media to complain.

Breaking News Emails

Get breaking news alerts and special reports. The news and stories that matter, delivered weekday mornings.
MORE FROM news

Have feedback?

How likely are you to recommend nbcnews.com to a friend or colleague?

0 = Very unlikely
10 = Very likely
Please select answer

Is your feedback about:

Please select answer

Leave your email if you’d like us to respond. (Optional)

Please enter a valid email address

Thank you!

Your feedback has been sent out. Please enjoy more of our content.

We appreciate your help making nbcnews.com a better place.