Massimiliano Posted June 21, 2020 ID:1389307 Share Posted June 21, 2020 I have performed a complete custom scan of the System Disk and it would seem that Malwarebytes has quarantined all the files related to the pre-installed Windows 10 apps contained in the c:\program files\windowsapps folder In total 70 elements. Obviously everything is in quarantine and I don't delete it until you give me the OK I attach all the reports that you may need to evaluate the situation. Don't hesitate to ask for anything else that was needed report.txt mbst-grab-results.zip FRST.txt Addition.txt AdwCleaner[S00].txt I await your response Good evening Massimiliano Link to post Share on other sites More sharing options...
Staff tetonbob Posted June 21, 2020 Staff ID:1389310 Share Posted June 21, 2020 (edited) Hi @MAXBAR1 - it would seem you have enabled the 'Use expert system algorithms to identify malicious files' setting, which is not enabled by default. Do you see the same detections if you disable that setting? I'm going to move this topic to our False Positives section of the forum. Please do not quarantine these items. If you have already quarantined them, do NOT delete them. Edited June 21, 2020 by tetonbob Link to post Share on other sites More sharing options...
Porthos Posted June 21, 2020 ID:1389311 Share Posted June 21, 2020 2 minutes ago, MAXBAR1 said: it would seem that Malwarebytes has quarantined all the files related to the pre-installed Windows 10 apps contained in the c:\program files\windowsapps folder You have the following new feature turned on. I would restore the quarantine and disable that feature until the kinks are worked out. Also it will seem the toggle does not work(another bug) but if you close the GUI and reopen it will be off. Link to post Share on other sites More sharing options...
Massimiliano Posted June 22, 2020 Author ID:1389389 Share Posted June 22, 2020 Yes, I had put the files in quarantine, waiting to know how to behave (as I wrote above) This morning I deactivated the new safety option (of which I confirm that the switch does not work correctly, neither in activation nor in deactivation) but the recovery from quarantine does not work (see screenshot attached). In previous scans (versions where this option did not exist) it never detected these files. I would add that the number of items scanned and the scan time have increased exponentially with this latter configuration. In the PopUp it is written Unable to restore one or more quarantined items: access denied I await your response Good day Massimiliano Link to post Share on other sites More sharing options...
Porthos Posted June 22, 2020 ID:1389394 Share Posted June 22, 2020 35 minutes ago, MAXBAR1 said: In the PopUp it is written Unable to restore one or more quarantined items: access denied I await your response Have you restarted the computer before trying to restore? If not, do that please. Link to post Share on other sites More sharing options...
Massimiliano Posted June 22, 2020 Author ID:1389397 Share Posted June 22, 2020 (edited) On 6/22/2020 at 7:46 AM, Porthos said: Have you restarted the computer before trying to restore? If not, do that please. Same behavior even when restarting the machine. Anyone know how to get me to restore the items? However the apps all work Edited June 23, 2020 by MAXBAR1 changed information Link to post Share on other sites More sharing options...
Massimiliano Posted June 24, 2020 Author ID:1389877 Share Posted June 24, 2020 @Porthos @tetonbob is there no possibility to restore these files? Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 24, 2020 Staff ID:1389907 Share Posted June 24, 2020 If all the apps still work then i would leave it alone. I would backup the quarantine folder in case you find something that doesnt work later on. Two things why you may not be able to restore. Windows protects these files so even though we quarantined which involves copying windows may not allow any file to be deleted from there. This would explain why the apps still work. The files already exist because they werent actually deleted so we wouldnt be able to copy them back if they exist already. This directory is protected by windows and would take a bunch of permissions changes to write any file into there. If everything still works it is best to leave it alone. Link to post Share on other sites More sharing options...
Massimiliano Posted June 24, 2020 Author ID:1389992 Share Posted June 24, 2020 @shadowwar Thanks for the tips. I checked the folder and in fact nothing is missing. At this point I would say that I can empty the quarantine? Correct? I await your confirmation Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 24, 2020 Staff ID:1390024 Share Posted June 24, 2020 (edited) I would just make a copy of the quarantine folder and save it in case but i think it should be fine if you verified everything is still there. C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine Edited June 24, 2020 by shadowwar 1 Link to post Share on other sites More sharing options...
Massimiliano Posted June 25, 2020 Author ID:1390086 Share Posted June 25, 2020 Actually I had a restore point prior to the scan and by performing the restore the quarantine disappeared and everything returned as before. I noticed that the Malwarebytes feature is no longer available. Link to post Share on other sites More sharing options...
Staff shadowwar Posted June 25, 2020 Staff ID:1390130 Share Posted June 25, 2020 In the latest beta it is temporarily disabled till we can better evaluate whats going on with it and revise it. Link to post Share on other sites More sharing options...
Massimiliano Posted July 8, 2020 Author ID:1392933 Share Posted July 8, 2020 Update of 08 July 2020 Retried the function Nothing was detected. No false positives. WindowsApps has not been touched. Scan time compared to the other time reduced by 2/3 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now