Kaspersky put container in Quarantine

Discussion in 'other anti-malware software' started by darkw2010, Aug 3, 2010.

Thread Status:
Not open for further replies.
  1. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    I need help.I have 1 container of 60GB in my PC .Last night during a scan,was detected this object in the folder that has the container:HiddenObject.MultI.Generic.
    After reboot it was said that the files in the folder would be moved to quarantine.But they dont appear in Quarantine tab.What can i do to recover my container?Im using KIS 2011.
    I hope someone can help me.
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    Is the whole container gone? You have no backup? Contact their tech support, it could be a bug
     
  3. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    Yes,its apparently gone.Several recover files softwares dont show my container.I dont have a backup.I downloaded this program Winhex,mas dont have a clue how to use it.Other people told me that i could recover my container through this program.
     
  4. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
  5. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
  6. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    No luck with this software.Im desperate.
     
  7. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,727
    Location:
    Texas
  8. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
  9. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,727
    Location:
    Texas
    I would check with Kaspersky to see if they have any suggestions.
     
  10. Yanix

    Yanix Registered Member

    Joined:
    Jul 3, 2009
    Posts:
    34
    Location:
    Switzerland
    Hi,

    Try with Recuva one of the best recovery software I've tried,
    download it here: http://www.piriform.com/recuva/download/standard, when you installed it go in option>actions tick deep scan and select the drive where your deleted container was and scan.
    If your file is in the list tick the case beside it and click Recover.
     
    Last edited: Aug 3, 2010
  11. Rampastein

    Rampastein Registered Member

    Joined:
    Oct 16, 2009
    Posts:
    290
    If you click Quarantine in KIS main window and select "All" from the drop-down list below the "Detected threats" tab, is the container listed there?
     
  12. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    Its not in thre.The strange thing is after the restart it was said that it would be moved to quarantine.I tried Recuva,too,without luck.
     
  13. Rampastein

    Rampastein Registered Member

    Joined:
    Oct 16, 2009
    Posts:
    290
    KIS should put any deleted files to it's backup, but for some reason it doesn't seem to always do so with version 2011. I also had a bug like this with a false positive, but the file was easily recovered.

    You could try asking the Kaspersky forums or contacting support, I'd do both.
     
  14. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    How did you recovered your file?
     
  15. darkw2010

    darkw2010 Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    8
    There is any data recovery software who recognize a truecrypt file?
     
  16. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    1,732
    maybe the container - but aifair not inside. thats why it is called true"crypt".
    all found solutions concern the container itself, eg:
    https://www.wilderssecurity.com/showthread.php?t=232599

    the only hope i have for you that your container is fixed size like a hdd
    not growing or shrinking with content - that may answer an expert here.
     
  17. Enigm

    Enigm Registered Member

    Joined:
    Dec 11, 2008
    Posts:
    188
    Truecrypt-volumes can not be positively identified ..
    Also, most data-recovery software has a real hard time with files with no extension and no header .


    In the future :
    1 : Always keep a backup of your important data
    2 : NEVER allow antivirus or any other "security"-programs to make changes to your system on their own .
    They ALL suck and are 150-200% dumber than wet cardboard .
    3 : DO NOT "try" all sorts of things, if you don't know what you are doing you will destroy the "missing" data !!

    PS : System-restore DOES NOT restore user-files .. IT IS NOT A BACK-UP FUNCTION !!
    Any chances of recovering the file probably vanished when you did that .
     
    Last edited: Aug 7, 2010
Loading...
Thread Status:
Not open for further replies.