Invisible Quarantine

[GG]

Some how I managed to get some of my music files
quarantined, but they aren't showing up in the quarantine
list.
Any ideas on how I can restore them?
Thanks

 

[Engel]

From: "Andre Da Costa" <[email protected]> Sent:
6/6/2005 8:20:38 AM

Restoring Quarantined Programs
If you have accidentally quarantined a program, you can
remove it from quarantine and restore it to its original
state.

How to restore a quarantined item

1. From the main screen, or any of the screens with the
toolbar, click Spyware Scan (this is the product icon).

2.On the top right of the screen under the Take me to...
section, select Spyware Quarantine.

* Open your quarantine window and leave it open UNTIL the
contents appear, COULD BE HOURS, then you can restore
them.*


3. A list of all items in your quarantine is displayed.
Select the item you would like to un-quarantine and when
the item appears in the right details window, select Un-
quarantine Threat. This restores the item to its original
state before it was quarantined.

4. To un-quarantine multiple items in the quarantine,
select each item and click Un-quarantine All Checked
Threats at the bottom of the screen.

5. After you un-quarantine an item you should restart your
computer to make sure the restored application runs.

Windows AntiSpyware may prompt you to remove some peer-to-
peer (P2P) file sharing programs. If you choose to remove
such a program, Microsoft Windows AntiSpyware deletes the
entire contents of the Program Files directory that
relates to the P2P program. Because some P2P programs
store downloaded files in a default directory under
Program Files, this might remove all files downloaded
through the file-sharing program. For example, KaZaA
stores .exe and .dll files at C:\Program Files\Kazaa.
Downloaded files are stored at C:\Program Files\Kazaa\My
Shared Folder. If you use Windows AntiSpyware to remove
KaZaA, all files and folders under C:\Program Files\Kazaa
are removed. If you have installed any P2P file sharing
programs, we recommend that you make a backup copy of your
downloaded files before running Windows AntiSpyware.

Good luck

Engel

 

[Guest]

Great advice but unfortunately the songs won't show up in
my quaratined section so i can't select them and restore.
But I will move my shared folder out of my kazaa folder
and always back-up.
Thanks for the help

 

[Bill Sanderson]

The files in the quarantine folder are renamed--they still play, for
example. I'm told, by MP3 folks, that there are utilities that can rename
an MP3 file based on the content (i.e. back to the original song title,
perhaps.

--

 

[Andre Da Costa]

Would you say they are sort of encrypted Bill when they are quarantined?
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

 

[Bill Sanderson]

As far as I'm aware, nothing gets done except a rename and relocation. It'd
be nice if somebody could figure out how to do a FC to find out, though.

I used to have a kazaa install in quarantine somewhere--I'll see if I can
figure this out more carefully.

--

 

[GG]

Yeah, they still play as MP3's or WMA's and are still
displayed in media player; thats how I found their
location after the quarantine. So I doubt they've been
encrypted if Media Player can still read them, just a
pain in the arse renaming them and relocating them.

I would have thought that if they had been present in the
quarantine folder they would also be picked up my MS A-
spyware by a file scan when it starts up; I guess every
file is logged after every quarantine and if the
quarantining process is interupted then they're not
logged and therefor not registered
Just a thought.

Thanks for the help guys

 

[Bill Sanderson]

I think the key thing you've mentioned is interrupting the quarantine
process. I've seen a couple of posts where that happened, and my guess is
that the registration process that allows the overall removal, isn't done
'til the end, when all files are known, for example.

I hope that the idea of being able to use a batch process to rename the
files bears some useful fruit. I'm told that free utilities to do something
like that are common and easy to find--and I posted some suggestions at some
point somewhere in these groups--but I haven't tried the process out myself.



--