Restoring quarantined files after formating and reintalling OS

[Ralee]

If i backup the quarantine and logs folder and then i format my computer, reinstall windows and Malwarebytes, and then copy and paste the backed up quarantined and logs folder in the same location...would i be able to restore them. If not, then what is the right way to do it? Thanks!

[Firefox]

Hello and Welcome...

Not sure you can do that... Why would you actually want to do it that way?  Why don't you restore the items first, then back them up before you format?

Besides, if you format you would have to reinstall any programs that may have gotten detected in the first place

Can you explain in a little more detail what it is your trying to do?

[Ralee]

1 hour ago, Firefox said:

Hello and Welcome...

Not sure you can do that... Why would you actually want to do it that way?  Why don't you restore the items first, then back them up before you format?

Besides, if you format you would have to reinstall any programs that may have gotten detected in the first place

Can you explain in a little more detail what it is your trying to do?

 

Alright, this is what happened: After running a scan, over 1000 PUP were detected and quarantined. All good...BUT, Microsoft Office now stopped working. It says "this action is only valid for products that are currently installed" whenever i try to open any MS Office program. I did try restoring the files and opening Office, but same thing happens, still. I dont get it, since i was using Office just fine literally seconds before installing Malwarebytes and running a scan, and it happened right afterward. I feel my computer is running slower too since installing Malwarebytes, but then i've also installed a firewall program at the same time so that could be the reason for the slowness.

Anyway, i want to completely uninstall Malwarebytes to see if that is the cause of my computer running slow but i am worried that i will lose the quarantined files and the ability to restore them. I dont want to lose the quarantined files in case i later discover that there is something else that i need missing and part of the quarantined files.

[Aura]

Uninstalling Malwarebytes will delete the quaratine folder. You could always copy it elsewhere and copy it back to its original location after reinstalling Malwarebytes, though I cannot tell you for sure if it'll be able to restore the files from the quarantine of a "previous" installation.

It would help if you could attach the log with the 1,000 PUPs detections. Maybe we can help you identify what might have broken Office in the removal process.

[Ralee]

17 minutes ago, Aura said:

Uninstalling Malwarebytes will delete the quaratine folder. You could always copy it elsewhere and copy it back to its original location after reinstalling Malwarebytes, though I cannot tell you for sure if it'll be able to restore the files from the quarantine of a "previous" installation.

It would help if you could attach the log with the 1,000 PUPs detections. Maybe we can help you identify what might have broken Office in the removal process.

 

 

How do i do that?

Is the log here?: C:\ProgramData\Malwarebytes\MBAMService\logs

Is it this file?:

Edited February 16, 2017 by Ralee

[Aura]

Follow the instructions below, under "Reports". Grab the latest Scan Log, save it somewhere, and attach it in your next post.

https://www.malwarebytes.com/support/guides/mb/

[Ralee]

I dont see it

[Aura]

I don't have Malwarebytes 3.0 at work, so I can't tell you exactly where they are located on the system. I'll have to check tonight, unless @Firefox can check right now.

[Telos]

29 minutes ago, Ralee said:

I dont see it

Any chance it's further down the list? Like this:

[Firefox]

Since your using MB3 and we are trying to see what was quarantined, lets get that scan log so we can see the results.

To get the scan log lets do this:

In the Malwarebytes GUI click on Reports
In the Reports section scroll through the reports and find the Scan Report that you ran when the items were detected and removed

You can click on the Date and Time (title bar) to sort the reports by Date to find it easier
To view the report (and export it) double click on the one you want to view/export
Click on Export (bottom left) and choose to export into Text File (*.txt)

Give it a name and save to your desktop
Upload the txt file here for review

 

[Ralee]

Telos...you're right. It was at the bottom of the list.

Here it is

 

Log.txt

Edited February 16, 2017 by Ralee

[Aura]

This is a lot of detections. It's very likely that your system is still infected. Before working on restoring Microsoft Office, you should get it checked out in the Malware Removal section. Follow the instructions in the thread below, and open a new thread over there.

https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

 

[Ralee]

Just now, Aura said:

This is a lot of detections. It's very likely that your system is still infected. Before working on restoring Microsoft Office, you should get it checked out in the Malware Removal section. Follow the instructions in the thread below, and open a new thread over there.

https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

A new thread saying what?

 

 

[Aura]

Create a new thread requesting a check-up/clean-up, because I'm sure there are still malicious remnants or active infections left on your system.

[Ralee]

1 hour ago, Aura said:

Create a new thread requesting a check-up/clean-up, because I'm sure there are still malicious remnants or active infections left on your system.

Yeah, ill do that. Although im more concerned about the OP atm

[Aura]

It's useless to try to troubleshoot an issue that might be related to malware, if the system is still infected and/or not totally clean.

[Ralee]

Just now, Aura said:

It's useless to try to troubleshoot an issue that might be related to malware, if the system is still infected and/or not totally clean.

Got'cha. Just posted on that forum "am i clean now?" with the above log attached