Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 956720" data-attributes="member: 32260">I am not sure. I deleted mpenginedb.db many times in the past. After your post, I added my Desktop folder (located also on OneDrive) to CFA and made a test:<ol>
<li data-xf-list-type="ol">Downloaded file1 by using Edge to Desktop folder (no CFA block).</li>
<li data-xf-list-type="ol">Tried to delete the file1 from Desktop by using PowerShell - action blocked by CFA.</li>
<li data-xf-list-type="ol">Stopped the Windefend service, deleted the file mpenginedb.db, and started the service again.</li>
<li data-xf-list-type="ol">Tried to delete the file1 from Desktop by using PowerShell - action blocked by CFA.</li>
<li data-xf-list-type="ol">Downloaded file2 by using Edge to Desktop (no CFA block).</li>
<li data-xf-list-type="ol">Tried to delete the file2 from Desktop by using PowerShell - action blocked by CFA.</li>
</ol>This test was done on Windows 10 Pro 21H1 64-bit.I suspect, that in your case the Edge was updated and Microsoft did not whitelist the new executable on time in CFA.</blockquote>

[QUOTE="Andy Ful, post: 956720, member: 32260"] I am not sure. I deleted mpenginedb.db many times in the past. After your post, I added my Desktop folder (located also on OneDrive) to CFA and made a test: [LIST=1] [*]Downloaded file1 by using Edge to Desktop folder (no CFA block). [*]Tried to delete the file1 from Desktop by using PowerShell - action blocked by CFA. [*]Stopped the Windefend service, deleted the file mpenginedb.db, and started the service again. [*]Tried to delete the file1 from Desktop by using PowerShell - action blocked by CFA. [*]Downloaded file2 by using Edge to Desktop (no CFA block). [*]Tried to delete the file2 from Desktop by using PowerShell - action blocked by CFA. [/LIST] This test was done on Windows 10 Pro 21H1 64-bit. I suspect, that in your case the Edge was updated and Microsoft did not whitelist the new executable on time in CFA. [/QUOTE]

Verification