Question About Deleting An Infection From Quarantine

[lordpuffer]

I'm running Windows 7 Pro, 64 bit. I ran the free version 1.41 and it found an infection. I deleted it and it went into Quarantine. After that, every time I would restart my computer, the UAC would pop up and say that Malwarebytes wanted to change my system. Before I found the fix to that in this Forum, I was a little frustrated, so I tried stopping it by deleting the infection from Quarantine. I know that it said "Hijack" and it was a Registry Key, but don't remember anything else about it.

Could I have hurt my system by deleting this from Quarantine? Everything seems fine, but I thought I would ask. Thanks.

[Swandog46]

This sounds to me like this bug:

http://www.malwarebytes.org/forums/index.php?showtopic=29158

which has been identified and will be fixed in version 1.42.

[Marcus]

Hello lordpuffer; welcome to the Malwarebytes' forum.

If you are unsure about whether to delete an item from the quarantine folder it's better to leave it in there for a time; say, a few weeks or even months just to see whether a file has been wrongly identified as an infection.

[lordpuffer]

Hello lordpuffer; welcome to the Malwarebytes' forum.

If you are unsure about whether to delete an item from the quarantine folder it's better to leave it in there for a time; say, a few weeks or even months just to see whether a file has been wrongly identified as an infection.

Thanks Marcus....Since I already deleted it from the quarantine folder and my system seems to be running fine, does it seem that I'm ok?

[lordpuffer]

Sorry...Didn't see an "Edit" function for my last post. I looked at my log and this is what I deleted:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

[Marcus]

lordpuffer,

1. "Edit" button is hidden until you've made a certain number of posts.

2. What you deleted was not an infection; it's a policy change that is not the windows' default which just might possibly be caused by an infection. This is why MBAM flagged it up.

[lordpuffer]

lordpuffer,

1. "Edit" button is hidden until you've made a certain number of posts.

2. What you deleted was not an infection; it's a policy change that is not the windows' default which just could possibly be caused by an infection. This is why MBAM flagged it up.

Thanks Marcus....Will it affect my computer in any negative way by my deleting it? It hasn't seemed to.

[Swandog46]

No, that one you can leave gone.

[lordpuffer]

Thank you very much....Next time (I hope there isn't one) I find an infection, I'm going to just leave it quarantined until I am sure it is a nasty. Thanks to Marcus too.