Author Topic: quarantine folder on hard disk  (Read 28471 times)

0 Members and 1 Guest are viewing this topic.

coco3117

  • Guest
quarantine folder on hard disk
« on: April 03, 2011, 01:57:42 PM »
hello,

I'm french. After updating AVAST to the version 6.0, my computer can't restart because the new version has detected viruses on files used to the start the computer.
I would see the quarantine folder on the hard disk to see the infected files, but i can't enter in WINDOWS XP. I see the hard disk on an other computer.

Please can you tell me in what folder the infected files are stocked ?


thank's for your response and sorry for my english



   

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: quarantine folder on hard disk
« Reply #1 on: April 03, 2011, 02:02:15 PM »
hello,

I'm french. After updating AVAST to the version 6.0, my computer can't restart because the new version has detected viruses on files used to the start the computer.
I would see the quarantine folder on the hard disk to see the infected files, but i can't enter in WINDOWS XP. I see the hard disk on an other computer.

Please can you tell me in what folder the infected files are stocked ?

thank's for your response and sorry for my english



  

Here
C:\ProgramData\AVAST Software\Avast\chest
But they don't have extensions, so you will cannot access them.

And Can you please tell me what files/folders are detected and what infection was found?
Can you access to safe mode? (when booting start pushing F8 and choose safe mode)

So
1) Enter the Safemode WITH INTERNET
2) Restore quarantined files to it's original location
3) Pack the folder with detected files to *rar extension
4) Open explorer and type in ftp://ftp.avast.com/incoming/
5) Send the archive to this address
« Last Edit: April 03, 2011, 02:09:29 PM by danny96 »
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

coco3117

  • Guest
Re: quarantine folder on hard disk
« Reply #2 on: April 03, 2011, 02:09:03 PM »
thank's for your response.

i haven't the folder "chest" in C:\ProgramData\AVAST Software\Avast\

i have :
C:\ProgramData\AVAST Software\Avast\1036
C:\ProgramData\AVAST Software\Avast\chrome
C:\ProgramData\AVAST Software\Avast\defs
C:\ProgramData\AVAST Software\Avast\flash
C:\ProgramData\AVAST Software\Avast\setup
C:\ProgramData\AVAST Software\Avast\WebRep

but no chest

an other idea ?

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: quarantine folder on hard disk
« Reply #3 on: April 03, 2011, 02:12:42 PM »
thank's for your response.

i haven't the folder "chest" in C:\ProgramData\AVAST Software\Avast\

i have :
C:\ProgramData\AVAST Software\Avast\1036
C:\ProgramData\AVAST Software\Avast\chrome
C:\ProgramData\AVAST Software\Avast\defs
C:\ProgramData\AVAST Software\Avast\flash
C:\ProgramData\AVAST Software\Avast\setup
C:\ProgramData\AVAST Software\Avast\WebRep

but no chest

an other idea ?

Wow, I don't have any of these files you listed me.
C:\ProgramData\AVAST Software\Avast\

So, access to safe mode, open avast! GUI, open maintenance and Chest.
Then restore files to original location, pack the files to archive and send them to
ftp.avast.com/incoming/
Don't forget to name the package like coco3117 infected.rar. BTW don't forget to enter password "Infected"
« Last Edit: April 03, 2011, 02:15:33 PM by danny96 »
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

coco3117

  • Guest
Re: quarantine folder on hard disk
« Reply #4 on: April 03, 2011, 02:19:03 PM »
sorry, i make a mistake, these folders are in C:\Program Files and not in c:\ProgramData like this :
C:\Program Files\AVAST Software\Avast\1036
C:\Program Files\AVAST Software\Avast\chrome
C:\Program Files\AVAST Software\Avast\defs
C:\Program Files\AVAST Software\Avast\flash
C:\Program Files\AVAST Software\Avast\setup
C:\Program Files\AVAST Software\Avast\WebRep


no folder c:\ProgramData in my disk, it's normal ?

 

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: quarantine folder on hard disk
« Reply #5 on: April 03, 2011, 02:20:38 PM »
sorry, i make a mistake, these folders are in C:\Program Files and not in c:\ProgramData like this :
C:\Program Files\AVAST Software\Avast\1036
C:\Program Files\AVAST Software\Avast\chrome
C:\Program Files\AVAST Software\Avast\defs
C:\Program Files\AVAST Software\Avast\flash
C:\Program Files\AVAST Software\Avast\setup
C:\Program Files\AVAST Software\Avast\WebRep


no folder c:\ProgramData in my disk, it's normal ?

 
Yes It's normal, you don't have Windows 7. But please follow my previous post.

-->
1) Enter the Safemode WITH INTERNET
2) Restore quarantined files to it's original location
3) Pack the folder with detected files to *rar extension, name the *rar "coco3117 infected" and enter name infected
4) Open explorer and type in http://ftp://ftp.avast.com/incoming/
5) Send the archive to this address
« Last Edit: April 03, 2011, 02:22:25 PM by danny96 »
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

doktornotor

  • Guest
Re: quarantine folder on hard disk
« Reply #6 on: April 03, 2011, 02:22:12 PM »
And the purpose of this excercise is? Restore infected files so that you can boot and get more of them infected, or what?  ??? ??? ??? You need to restore the files from a known clean source, NOT from the chest.

YoKenny

  • Guest
Re: quarantine folder on hard disk
« Reply #7 on: April 03, 2011, 02:23:18 PM »
Look in C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\chest

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: quarantine folder on hard disk
« Reply #8 on: April 03, 2011, 02:24:26 PM »
And the purpose of this excercise is? Restore infected files so that you can boot and get more of them infected, or what?  ??? ??? ???
Stop entering your stupid notes and give him some help  >:(
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

doktornotor

  • Guest
Re: quarantine folder on hard disk
« Reply #9 on: April 03, 2011, 02:26:32 PM »
And the purpose of this excercise is? Restore infected files so that you can boot and get more of them infected, or what?  ??? ??? ???
Stop entering your stupid notes and give him some help  >:(

You know what? Stop giving stupid "advice". Restoring infected system files required for boot makes no sense. Either they will immediately get deleted again or they will be missed by avast! and infection will spread. I gave him correct non-stupid advice.

Offline danny96

  • Malware Fighter
  • Advanced Poster
  • **
  • Posts: 668
  • No-malware!
Re: quarantine folder on hard disk
« Reply #10 on: April 03, 2011, 02:27:51 PM »
And the purpose of this excercise is? Restore infected files so that you can boot and get more of them infected, or what?  ??? ??? ???
Stop entering your stupid notes and give him some help  >:(

you know, stop giving stupid "advice". Restoring infected system files makes no sense. Either they will immediately get deleted again or they will be missed by avast! and infection will spread. I gave him correct non-stupid advice.

I want to let him restore files, send them to avast lab to check
Real-time protection and Firewall: COMODO Internet Security 12.0.0.6810 -- Additional Protection: Web Of Trust, Ublock, NoScript, Malwarebytes Premium, Avast! Online Security, Hitman Pro -- OS: Windows 10

YoKenny

  • Guest
Re: quarantine folder on hard disk
« Reply #11 on: April 03, 2011, 02:28:10 PM »
And the purpose of this excercise is? Restore infected files so that you can boot and get more of them infected, or what?  ??? ??? ???
Stop entering your stupid notes and give him some help  >:(
Then I offer help as you are running Windows 7 x64 and I am running XP!

doktornotor

  • Guest
Re: quarantine folder on hard disk
« Reply #12 on: April 03, 2011, 02:28:38 PM »
I want to let him restore files, send them to avast lab to check

And how is it going to help with his unbootable system? Uh. And it is irrelevant which system you are using. Infected system files need to be replaced from known clean source, instead of restoring the infection.  ::)

Hermite15

  • Guest
Re: quarantine folder on hard disk
« Reply #13 on: April 03, 2011, 02:32:45 PM »
I don't think he wants to restore the files... well I hope not. But as he cannot boot anymore as a result of these files being quarantined, he just wants to see them in the chest folder from another OS install (or networked computer).
« Last Edit: April 03, 2011, 02:34:19 PM by Logos »

coco3117

  • Guest
Re: quarantine folder on hard disk
« Reply #14 on: April 03, 2011, 02:33:12 PM »
i have find the folder F:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\chest with 33 files named "0000000A" to "00000020" and ondex.xml.

what can i do ? Send the folder to avast lab ?