Jump to content
navaris42

HADES coming up as ransomware

Recommended Posts

Hades on Steam triggered the ransomware alert and now the .exe is quarantined and says it will be deleted on reboot. But it won't allow a restore because it says an item is marked for DOR and I can't restore until after reboot.  Is there a way to retrieve the exe?  I've attached the service log.

 

 

MBAMSERVICE.LOG

Share this post


Link to post
Share on other sites

I'm not quite sure about how to restore an item marked for DOR. I'll see if I can find someone to assist you with that. 

However, I fixed it so that file should no longer be detected once it's been restored. 

Share this post


Link to post
Share on other sites

I was informed that once a file has been marked for DOR, you have to restart your system in order to restore it from quarantine. 

Also, you may want to add "D:\SteamStuff\steamapps\common\Hades" to your allow list.

Share this post


Link to post
Share on other sites

Right now the status says it needs to be deleted on reboot so is there a way to mark it for recovery before rebooting?

Share this post


Link to post
Share on other sites

Unfortunately, this isn't possible. Your best bet is to reboot the machine and allow the remediation to occur.

Afterwards, you can restore the D:\SteamStuff\steamapps\common\Hades\x64\Hades.exe file from Quarantine.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.