How would I quarantine the file again? In threat report it says "file restored by user" but no options to put back into quarantine or delete:
The item hkey_users\.default\software\microsoft\windows nt\currentversion\appcompatflags\compatibility assistant\store\c:\windows\temp\rarsfx0\installer.exe was restored at user request.
I see no such file in \windows\temp to manually delete. There are a bunch like that. It may be a registry infection, how to scan just registry? I see no option for that.
