Need to find out where quarantined items came from

[QWW_Dev]

Malwarebytes found a suspicious item and quarantined it. I need to know WHERE it was found on my drive originally, so I can identify the source. How do I get that information?

[exile360]

Greetings,

You should be able to see where an item was quarantined from by viewing the Quarantine tab and clicking on the Show Quarantine button.  It should display the item that was removed as well as its original location where it was found.  It also might be listed if you check the Reports tab within one of the report entries shown there.  If you recall approximately when it occurred then you may sort the list of reports by date and time by clicking the Date and Time header at the top then locate the date/time closest to when the detection occurred then check each one around that time until you find it.  You may also use the drop-down menu located at the bottom of the Reports tab Filter list by kind and select the relevant entry for the type of event (i.e. detection, scan etc.) to remove unrelated items from the list.

You can find additional information on how to use the software by downloading the official documentation found here.

Please keep in mind that I don't own a Mac so I am only listing information that I discovered in the documentation, so if any of this is incorrect or inaccurate then I apologize.

[alvarnell]

I don't believe that information is available to Mac users. The "Show Quarantine" button simply opens the Quarantine Folder in Finder. The reports tab will probably tell you when the file(s) was/were quarantined, but the report itself cannot be viewed to reveal it's original location. There used to be a log in the User ~/Library/Application Support/Malwarebytes/log.txt, but mine has not had an entry since the end of May.

If you can give us the name of the file and the infection name if you recall, we might be able to give you some clues as to where it originated.