allesok

OK, glad if I can help. But a strange observation: I get notes to my e-mail address about a new post here, and when I open the link I get: We could not locate the item you are trying to view. Error code: 2S136/C How about being noticed by the Anti-Ransomware when there is an update or upgrade? I did not see that option...

Yet the setup file offers to choose where to install... I like to have a certain order, such as all antimalware in one folder, all office-related applications in another, etc. It appears that Anti-Ransomeware somehow marks the file to be "quarantined", so that it no more works. My question actually was about how such a mark can be reversed, even in a case like mine, where it accidentally (don't know how) was also marked for deletion (but was not deleted...). Restoring a somewhat older restore point may also change some other things back to earlier states which would not happen if the "mark" can be reversed. Unless a restore point is made with each startup. Anyway it here appears that Anti-Ransomware "marked" the wrong file, the main file of the file manager, rather than the file that it was trying to open. As I reported earlier it once even wanted to quarantine explorer.exe, probably in a similar manner. How could I have restarted at all if that had happened? But luckily it was not quarantined.

I suppose that it should make no difference that I installed it in C:\_ANTIMALWARE\Anti-Ransomare...

I did it and it runs. Still a question is not answered: What could I have done if I could not replace that file? Except what I least want: reinstall the application...

Silent i shame? Such a thing should not happen! But I could copy PDExploNXP.exe from my laptop to the desktop after renaming the blocked one to PDExploNXP.0xe. Then it worked. But Anti-Ransomware still does not work. I will have to reinstall it. It will have occurred when I tried to open a PDF with PowerDesk that for some reason did not want to run. That PDF should then have been blocked and not the PDExploNXP.exe!! If there is something wrong with it ... But I checked it with Emsisoft, MalwareByte and SuperAntispyware. Nothing suspicious found. Yet PLEASE let me know what I should do if this happens again and I have nowhere from where to take a file to replace with. By the way: The PDF is in a Slavic language and contents in strange letters could have caused a false alarm.

Now I need help!! Your bad beta disabled PDExploNXP.exe from my PowerDesk 9.0 Professional that is most certainly not ransomware!!! If there would be one in the folder I tried to open, a PDF-file, it should in that case have disabled only that file and not the filemanager - but that file will be also safe. I wanted to restore the quarantined file, but got the message that a file marked for deletion cannot be restored. I then entered it as exclusion and restarted. PDExploNXP.exe did not work. Neither did you anti-ransomware!..The latter told me: " Problem Event Name: APPCRASH Application Name: mbarw.exe Application Version: 1.0.0.135 Application Timestamp: 56bbbad8 Fault Module Name: MSVCR120.dll Fault Module Version: 12.0.21005.1 Fault Module Timestamp: 524f7ce6 Exception Code: 40000015 Exception Offset: 000a7676 OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1033 Additional Information 1: 8690 Additional Information 2: 8690a2e0519270605497ca6ca59a233e Additional Information 3: 4046 Additional Information 4: 404608b3896d7071cacbb501e2377863" Now I urgently need to know how to make it work again!!! Quickly, please! Quickly please!!!

By the way, that alarm never came back. even after several restarts.

This must be a false positive. explorer.exe was reported but not quarantined. I wonder what would have happened if it had been... Log attached. MBAMSERVICE.zip

Yes, it can be clicked down to the tray, but it could in a new version also be given a "Settings" window where one could choose the option to start in the try right away,

OK, done, didn't seem to change anything. Tried again with starting the portable application Tweaking.com Technicians Toolbox with my Power Desk file manager and this time got no ransomware alarm.

The one zip is obviously too big to get through... 58.6 MB...

Somehow one zip got lost ...

Here they come. I have installed the application in C:\_ANTIMALWARE\Anti-Ransomware and not in C:\Program files. MBAMSERVICE.zip

I started the portable application Tweaking.com Technicians Toolbox with my Power Desk file manager and got the alarm for ransomware. The alarm referred to PDExploNSP.exe in Power Desk but did not quarantine it. I clicked the alarm away and it did not return. Definitely a false alarm.

It would be nice if this application would reside only in the task tray, when running, and not occupy space in the toolbar.