Denied my attempt to restore a file

[Grimlee]

Im the owner and administrator of this computer and it wont allow me to restore a file it qaruntined which is need for the young ones to play the only game they are allowed to play on the computer.

Why is it not allowing me to do this. i should have this access without issue.

C:\PROGRAM FILES\WINDOWSAPPS\ROBLOXCORPORATION.ROBLOX_2.478.28896.0_X86__55NM5EH3CM0PR\WINDOWS10UNIVERSAL.EXE

[AdvancedSetup]

Hello @Grimlee

Please restart the computer and see if you're able to restore the file or not and let us know

Thank you

 

[AdvancedSetup]

Looking up the game it looks like it has a long history of problems. You might want to simply reinstall it to make sure you get all the latest files and updates for the program.

Via a browser which should then launch the Store you should be able to access it from this link I believe

https://www.microsoft.com/en-us/p/roblox/9nblgggzm6wm?activetab=pivot:overviewtab

 

[Grimlee]

Ok will try. Just restarted and that didnt work so ill do a uninstal then reinstall

[AdvancedSetup]

Okay, sounds good. Let me know if you run into issues getting it installed.

 

[Grimlee]

Ok that worked ty. Should i add the .exe or entire folder to allowed list to keep from future issues?

[AdvancedSetup]

It was probably a false positive. Can you post back the log that detected it?

 

You can find Scan and Protection logs within the Malwarebytes 4 program in the following location

 

 

RTP stands for Real-Time Protection and is where automatic protection operations would normally be logged

 

 

If you click on the View option you should get something similar to the following with other options available.

 

 

 

 

 

[Grimlee]

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/23/21
Scan Time: 12:45 AM
Log File: e38e30e2-bb9a-11eb-9f00-7085c2d40f7e.json

-Software Information-
Version: 4.3.3.116
Components Version: 1.0.1292
Update Package Version: 1.0.40806
License: Premium

-System Information-
OS: Windows 10 (Build 19041.985)
CPU: x64
File System: NTFS
User: sutmit\mephi

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 303631
Threats Detected: 3
Threats Quarantined: 0
Time Elapsed: 2 min, 37 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
Malware.Heuristic.1001, C:\PROGRAM FILES\WINDOWSAPPS\ROBLOXCORPORATION.ROBLOX_2.478.28896.0_X86__55NM5EH3CM0PR\WINDOWS10UNIVERSAL.EXE, No Action By User, 1000001, 0, , , , , DCC6EF2A419B6704271F3207C7610E1D, A58D91D5E7D81E3D1608A14819FC89361F6CFF7BCE78B34677A9279514E4ADC2

Module: 1
Malware.Heuristic.1001, C:\PROGRAM FILES\WINDOWSAPPS\ROBLOXCORPORATION.ROBLOX_2.478.28896.0_X86__55NM5EH3CM0PR\WINDOWS10UNIVERSAL.EXE, No Action By User, 1000001, 0, , , , , DCC6EF2A419B6704271F3207C7610E1D, A58D91D5E7D81E3D1608A14819FC89361F6CFF7BCE78B34677A9279514E4ADC2

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.Heuristic.1001, C:\PROGRAM FILES\WINDOWSAPPS\ROBLOXCORPORATION.ROBLOX_2.478.28896.0_X86__55NM5EH3CM0PR\WINDOWS10UNIVERSAL.EXE, No Action By User, 1000001, 0, 1.0.40806, 0000000000000000000003E9, dds, 01257507, EC3FE676A12FA37245211921ECC9F0A9, CC5BEED5F32DD8048C9FFA1815A08D58FE442CC6AB27F2F9DC4EA50826437D3E

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[Grimlee]

Is that what you are needing?

[AdvancedSetup]

I've moved your topic to the False Positive forum. Someone will review and get back to you but it sure looks like it was a false positive to me, but they will confirm for you.

Cheers and have a good one

I'm  heading out to get some rest soon

 

[Grimlee]

Ok thank you very much for the help. Rest well and stay safe.

[AdvancedSetup]

You're quite welcome

Take care

 

[TwinHeadedEagle]

@Grimlee Could you ZIP and attach this file for our review?

[Grimlee]

The file it is trying to quarantine or the text file?

[AdvancedSetup]

I believe he is asking for you to zip and provide this file. But due to it's location you will not be able to zip it up I don't believe as you won't have rights to do it.

If you have a program like 7-Zip you can launch it with Admin rights and see if you can create a new zip file by adding it to a new archive on your desktop.

C:\PROGRAM FILES\WINDOWSAPPS\ROBLOXCORPORATION.ROBLOX_2.478.28896.0_X86__55NM5EH3CM0PR\WINDOWS10UNIVERSAL.EXE

 

Please give that a try @Grimlee and let me know.

Thanks

 

[Grimlee]

Yeah i have 7 zip but your right in that i dont have access into windowsapps file

[AdvancedSetup]

I'm sure it was a False Positive. Since the game is once again working I'd just ignore it and move forward.

Just make sure you keep this setting off.

[Grimlee]

Ok i will be sure to do that. I think i may have toggled that so ill have to check and turn off if so. Thank you for all the help

[AdvancedSetup]

You're quite welcome.

Take care and stay safe out there and enjoy your time with the Grand kids.

Have a great week