Stop Batch file deletions

[aseire]

In windows XP a Malwarebytes scan deletes all batch Files in the "%systemdrive%\Documents and Settings\" folder.

I tested this by creating a test batch file in the Documents and Settings folder and then ran Malwarebytes scan and found the test batch file erased. I am unsure of the extent (what folders are targeted) of batch files that are deleted but Malwarebytes does not delete all batch files in all folders.

The reason I do not want batch files deleted is that I wrote the batch files myself. Also, the "%systemdrive%\Documents and Settings\" folder is a very convenient place for batch files that are run as a "cmd" opens directly to this folder.

[shadowwar]

I am moving this to the false positive forum to be investigated. Can you please post a sample batch file that would get deleted and a developer scan log. Also make sure you are fully updated with definitions before posting.

The developer instructions are here:

http://forums.malwarebytes.org/index.php?showtopic=3228

[aseire]

Sample batch file attached (any batch file gets deleted) that would get deleted and a developer scan log.

Also made sure that I am fully updated with definitions before posting. Aseire

submission_20101107.zip

[shadowwar]

Your log doesnt show the detection and i can not duplicate it here. I had that bat file in

c:\documents and settings\

c:\documents and settings\%username%

and neither were detected.

Can you please try to duplicate it and post a scan log showing the detection?

[aseire]

I concede, I cannot replicate any longer, please close "cannot replicate", Aseire

[shadowwar]

Ok let us know if happens again. Generally it's a bad idea to run files from there do to the amount of malware that uses it. You may be battling false positives from a lot of different vendors by using that directory.

Cheers.