XP Zip Hijacked My Files

[g.unit01]

I was working with a large iso file (mounted with daemon tools) when my
Norton antivirus started a scheduled scan and a couple of clicks here
and there and it was froze. I tried at the moment to resurrect via
Ctrl+Alt+Del but had to resort to the power switch. Turn back on and my
iso has moved to quarantine zip file under CA PestPatrol (on my system
but never use nor is active protection on) (C:\Program Files\CA\eTrust
PestPatrol\Quarantine\20060715003157.zip).

Problem: I can view all files in the zip including my beloved iso but
its password protected. I have never set a pw for the zip so I don't
know it. The zip also managed to somehow steal a bunch of other random
files. Tried: Uninstall/reinstall pestpatrol as per tech support,
freeware password finder, system restore. No luck. Is there any way I
could do some sort of registry thing and inactivate passwords
altogether? It seams that the problem is now with Windows XP home and
figuring out what pw I might have unknowingly entered when my computer
crashed. Ideas?

 

[Dbben]

have you tried the restore feature to the time before zipping that file? it
might restore the file and reset that malicious program.

 

[Tim Judd]

I was working with a large iso file (mounted with daemon tools) when my
Norton antivirus started a scheduled scan and a couple of clicks here
and there and it was froze. I tried at the moment to resurrect via
Ctrl+Alt+Del but had to resort to the power switch. Turn back on and my
iso has moved to quarantine zip file under CA PestPatrol (on my system
but never use nor is active protection on) (C:\Program Files\CA\eTrust
PestPatrol\Quarantine\20060715003157.zip).

Problem: I can view all files in the zip including my beloved iso but
its password protected. I have never set a pw for the zip so I don't
know it. The zip also managed to somehow steal a bunch of other random
files. Tried: Uninstall/reinstall pestpatrol as per tech support,
freeware password finder, system restore. No luck. Is there any way I
could do some sort of registry thing and inactivate passwords
altogether? It seams that the problem is now with Windows XP home and
figuring out what pw I might have unknowingly entered when my computer
crashed. Ideas?

I am thinking MOST SOFTWARE that does any kind of quarantines, from past
experience, when it makes the quarantine, the Antivirus/Antispyware
application zips it up and defines it's own password, so OTHER
applications and resources (or humans) can't reinfect the system.

Logically, the password may be stored in some index file, but it also
might be in some binary file that only the application software can make
sense of. Use CA PestPatrol application, get into it's quarantine
information, and pull your file out. This is the only logical way I can
see to get your data back.

Good luck,