Reply to thread

Message

<blockquote data-quote="Can&amp;#039;t Decide" data-source="post: 1069516" data-attributes="member: 106566">Does anyone know what Mpsupport.cab contains?&nbsp; Does it contain personal information (e.g like site I go, what files it scanned before) or just detection logs?Microsoft <a href="https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives?view=o365-worldwide#part-4-submit-a-file-for-analysis" target="_blank">website</a> just put it contains various diagnostic logs without any other information.I want to know what does it contain before I decide whether to submit to Microsoft to analyze whether is a false positive or not. But does it still work after 1 weeks+?Because Microsoft Defender detected Trojan:Script/Wacatac.B!ml &amp; Trojan:Win32/Wacatac.B!ml from Emsisoft Emergency Kit&#039;s temp files and it was blocked &amp; removed when EEK was scanning, I let EEK finished its scan it came out 0 detection. Moreover the files is gone, no files to upload to Virustotal to check and Emsisoft help support said they can&#039;t analyze without the file furthermore it was Microsoft Defender detected it they can&#039;t do much about it. By the way Emsisoft support also said I might be using old version of EEK and try install new version of EEK from Emsisoft webite, I follow their instruction and the detection is gone. But now I&#039;m paranoid whether or not I&#039;m infected and what shoud I do now?If possible can anyone teach me how to use Fabar Recovery Scan Tool logs to analyze/diagnostic myself whether I got infected or not.</blockquote>

[QUOTE="Can't Decide, post: 1069516, member: 106566"] Does anyone know what Mpsupport.cab contains? Does it contain personal information (e.g like site I go, what files it scanned before) or just detection logs? Microsoft [URL='https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives?view=o365-worldwide#part-4-submit-a-file-for-analysis']website[/URL] just put it contains various diagnostic logs without any other information. I want to know what does it contain before I decide whether to submit to Microsoft to analyze whether is a false positive or not. But does it still work after 1 weeks+? Because Microsoft Defender detected Trojan:Script/Wacatac.B!ml & Trojan:Win32/Wacatac.B!ml from Emsisoft Emergency Kit's temp files and it was blocked & removed when EEK was scanning, I let EEK finished its scan it came out 0 detection. Moreover the files is gone, no files to upload to Virustotal to check and Emsisoft help support said they can't analyze without the file furthermore it was Microsoft Defender detected it they can't do much about it. By the way Emsisoft support also said I might be using old version of EEK and try install new version of EEK from Emsisoft webite, I follow their instruction and the detection is gone. But now I'm paranoid whether or not I'm infected and what shoud I do now? If possible can anyone teach me how to use Fabar Recovery Scan Tool logs to analyze/diagnostic myself whether I got infected or not. [/QUOTE]

Verification