How do I restore a quarantined object in Kaspersky Anti-Virus 2012?
I normally know how to do this. From the main program window you just click on the Quarantine button from the lower part of the window.
There are two tabs in the new window that appears, one is Quarantine and one is Storage. I think the Quarantine tab lists objects that the user adds manually to the quarantine, and the Storage tab lists objects that the program adds when an infection is detected.
But the problem is that the Restore button is greyed out so I can't click on it. Why is that?
To give you an idea of what the dialog box looks like, see the link below.
What is Quarantine in Kaspersky Anti-Virus 2012?
I have totally 8 objects under the Storage tab and none under the Quarantine tab. All of these objects have been added here by the program. They all have the Restore button active when I mark them except for 2 of them where the button is greyed out.
The file I want to restore was not stored on the system partition, so I don't have a shadow copy of it, and I don't keep a backup of this partition.
The quarantined objects are stored at %ALLUSERSPROFILE%Kaspersky LabAVP12QB and I have precisely 8 files there, which is the same number as shown in the dialog. They have the KLQ file extension.
This means that the file is not completely lost, but it is saved in a format that is not easy to restore from. But why is the Restore button greyed out for some of the files in the program dialog, but not for all of them?
Where are the quarantine and the backup located? In what format are the files stored there?
Not all of the detected files are malicious programs. How do I restore these files? If not from the program dialog, how do I restore them from the Kaspersky binary format?
anti-virus kaspersky
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
add a comment |
I normally know how to do this. From the main program window you just click on the Quarantine button from the lower part of the window.
There are two tabs in the new window that appears, one is Quarantine and one is Storage. I think the Quarantine tab lists objects that the user adds manually to the quarantine, and the Storage tab lists objects that the program adds when an infection is detected.
But the problem is that the Restore button is greyed out so I can't click on it. Why is that?
To give you an idea of what the dialog box looks like, see the link below.
What is Quarantine in Kaspersky Anti-Virus 2012?
I have totally 8 objects under the Storage tab and none under the Quarantine tab. All of these objects have been added here by the program. They all have the Restore button active when I mark them except for 2 of them where the button is greyed out.
The file I want to restore was not stored on the system partition, so I don't have a shadow copy of it, and I don't keep a backup of this partition.
The quarantined objects are stored at %ALLUSERSPROFILE%Kaspersky LabAVP12QB and I have precisely 8 files there, which is the same number as shown in the dialog. They have the KLQ file extension.
This means that the file is not completely lost, but it is saved in a format that is not easy to restore from. But why is the Restore button greyed out for some of the files in the program dialog, but not for all of them?
Where are the quarantine and the backup located? In what format are the files stored there?
Not all of the detected files are malicious programs. How do I restore these files? If not from the program dialog, how do I restore them from the Kaspersky binary format?
anti-virus kaspersky
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
add a comment |
I normally know how to do this. From the main program window you just click on the Quarantine button from the lower part of the window.
There are two tabs in the new window that appears, one is Quarantine and one is Storage. I think the Quarantine tab lists objects that the user adds manually to the quarantine, and the Storage tab lists objects that the program adds when an infection is detected.
But the problem is that the Restore button is greyed out so I can't click on it. Why is that?
To give you an idea of what the dialog box looks like, see the link below.
What is Quarantine in Kaspersky Anti-Virus 2012?
I have totally 8 objects under the Storage tab and none under the Quarantine tab. All of these objects have been added here by the program. They all have the Restore button active when I mark them except for 2 of them where the button is greyed out.
The file I want to restore was not stored on the system partition, so I don't have a shadow copy of it, and I don't keep a backup of this partition.
The quarantined objects are stored at %ALLUSERSPROFILE%Kaspersky LabAVP12QB and I have precisely 8 files there, which is the same number as shown in the dialog. They have the KLQ file extension.
This means that the file is not completely lost, but it is saved in a format that is not easy to restore from. But why is the Restore button greyed out for some of the files in the program dialog, but not for all of them?
Where are the quarantine and the backup located? In what format are the files stored there?
Not all of the detected files are malicious programs. How do I restore these files? If not from the program dialog, how do I restore them from the Kaspersky binary format?
anti-virus kaspersky
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
I normally know how to do this. From the main program window you just click on the Quarantine button from the lower part of the window.
There are two tabs in the new window that appears, one is Quarantine and one is Storage. I think the Quarantine tab lists objects that the user adds manually to the quarantine, and the Storage tab lists objects that the program adds when an infection is detected.
But the problem is that the Restore button is greyed out so I can't click on it. Why is that?
To give you an idea of what the dialog box looks like, see the link below.
What is Quarantine in Kaspersky Anti-Virus 2012?
I have totally 8 objects under the Storage tab and none under the Quarantine tab. All of these objects have been added here by the program. They all have the Restore button active when I mark them except for 2 of them where the button is greyed out.
The file I want to restore was not stored on the system partition, so I don't have a shadow copy of it, and I don't keep a backup of this partition.
The quarantined objects are stored at %ALLUSERSPROFILE%Kaspersky LabAVP12QB and I have precisely 8 files there, which is the same number as shown in the dialog. They have the KLQ file extension.
This means that the file is not completely lost, but it is saved in a format that is not easy to restore from. But why is the Restore button greyed out for some of the files in the program dialog, but not for all of them?
Where are the quarantine and the backup located? In what format are the files stored there?
Not all of the detected files are malicious programs. How do I restore these files? If not from the program dialog, how do I restore them from the Kaspersky binary format?
anti-virus kaspersky
anti-virus kaspersky
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
edited Aug 23 '12 at 22:02
Samir
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
asked Aug 23 '12 at 21:54
SamirSamir
11.4k57144205
11.4k57144205
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
It seems that you can just delete the first 52 bytes in the quarantine file and you will restore the original file with that. it seems that the scanner adds a small header of this size to the file.
worked for me to restore two zip files.
answered Sep 27 '13 at 10:02
reoxreox
4281416
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f465598%2fhow-do-i-restore-a-quarantined-object-in-kaspersky-anti-virus-2012%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
It seems that you can just delete the first 52 bytes in the quarantine file and you will restore the original file with that. it seems that the scanner adds a small header of this size to the file.
worked for me to restore two zip files.
answered Sep 27 '13 at 10:02
reoxreox
4281416
add a comment |
It seems that you can just delete the first 52 bytes in the quarantine file and you will restore the original file with that. it seems that the scanner adds a small header of this size to the file.
worked for me to restore two zip files.
answered Sep 27 '13 at 10:02
reoxreox
4281416
add a comment |
It seems that you can just delete the first 52 bytes in the quarantine file and you will restore the original file with that. it seems that the scanner adds a small header of this size to the file.
worked for me to restore two zip files.
answered Sep 27 '13 at 10:02
reoxreox
4281416
It seems that you can just delete the first 52 bytes in the quarantine file and you will restore the original file with that. it seems that the scanner adds a small header of this size to the file.
worked for me to restore two zip files.
answered Sep 27 '13 at 10:02
reoxreox
4281416
answered Sep 27 '13 at 10:02
reoxreox
4281416
answered Sep 27 '13 at 10:02
reoxreox
4281416
answered Sep 27 '13 at 10:02
reoxreox
4281416
4281416
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f465598%2fhow-do-i-restore-a-quarantined-object-in-kaspersky-anti-virus-2012%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
