ginalfa

The exclusion dialog box lets me to read the foder content and the file was really removed. The exclusion can't be set cause the file is not present and MBARW does not restore the original file (see attached screenshot). May I try to restore in safe mode?

I tried to restore the file but MBARW reported an error and was unable to un-quarantine it. I guess it doesn't have the write permissions to that folder, so I think the file was not really removed. It's a M$ Office related file... I don't have Office installed but only "Obtain Office" Windows 10 App. Bye.

Today MBARW reported HxTsr.exe as a ransomware and quarantined it. The file was located in c:\Program Files\WindowsApps\windows.communicationapps...(and many other chr)...\HxTsr.exe. A web serch about that file name reports as a windows 10 regular file. Due to the restricted access to the folder, I will not be able to attach the file I restore it. I attach the quarantined file instead. I was not doing anything on PC when MBARW has quarantined the file and the original location appears as regular. Maybe a false positive? Can I restore the file? Bye Malwarebytes Anti-Ransomware.zip logs.zip Quarantine.zip

MBARW detects emule.exe ( v. 05a) as a ransomware, but it's a false positive. That's an old and ultra-tested installatione of emule. attached the requested files. Bye logs.zip Malwarebytes Anti-Ransomware.zip emule.zip