Microsoft safety scanner found malware that Malwarebytes did not?

Ran Microsoft safety scanner and it found an infected file that malwarebytes premium did not. It was a windows defender preventer or something, can't find the log, where would it be?

amancandance said:

Ran Microsoft safety scanner ... can't find the log, where would it be?

It should be here...

Microsoft said:

For detailed detection results, view the log at %SYSTEMROOT%\debug\msert.log.

https://docs.microsoft.com/en-us/win...anner-download

( SYTSEMROOT is normally C:\Windows\ )

Thanks. Apparently it is a false positive. VirTool:Win32/DefenderTamperingRestore

Why is windows security tool still picking it up if Microsoft know it's not malware?

amancandance said:

Thanks. Apparently it is a false positive. VirTool:Win32/DefenderTamperingRestore
Why is windows security tool still picking it up if Microsoft know it's not malware?

Microsoft said:

This detection is for suboptimal configurations that may prevent Windows Defender Antivirus from functioning properly.

If you see this detection, a suboptimal configuration was detected, and Windows Defender Antivirus will auto-heal by automatically resetting to more secure configurations.

https://www.microsoft.com/en-us/wdsi...tID=2147741622

Which in plain language appears to mean...

... this is a catch to reconfigure real-time detection if it has been disabled....

https://answers.microsoft.com/en-us/...a-859f4cf6677d