Jump to content
bdmeyer

How to open a quarantine file

Recommended Posts

I ran your tool after running two other utils, and it found what I agree is most assuredly some nasty malware. I chose to quarantine it, so I could move the found files to a thumbdrive and analyse at my (linux) workstation. It appears to be an encrypted file.

What techniques can I use to decrypt and gain access to the quarantined items ?

Thank-you,

Bruce D. Meyer

'

Share this post


Link to post
Share on other sites
I ran your tool after running two other utils, and it found what I agree is most assuredly some nasty malware. I chose to quarantine it, so I could move the found files to a thumbdrive and analyse at my (linux) workstation. It appears to be an encrypted file.

What techniques can I use to decrypt and gain access to the quarantined items ?

Thank-you,

Bruce D. Meyer

'

It's proprietary - you can restore the files and copy them off if needed.

Share this post


Link to post
Share on other sites

Fair enough, so just run your software on any machine, and I can click a restore option, point to my copied quarantine files, and it will restore them to the directory of my choice?

-- Bruce D. Meyer

Analysis & Encryption

Phone numbers edited out

My Key Fingerprint is:

8BC3 14B5 CE77 3C83 F4A7

5353 3F27 97FF 0591 44F9

-------------------------

South Carolina Information Sharing and Analysis Center (SC-ISAC)

Department of State I.T. (D.S.I.T)

~-~-~-~-~-~-~-~-~-~-~-~-~-

Upload your PGP public key, download or verify mine at:

http://keys.cio.sc.gov

Share this post


Link to post
Share on other sites
Fair enough, so just run your software on any machine, and I can click a restore option, point to my copied quarantine files, and it will restore them to the directory of my choice?

-- Bruce D. Meyer

Analysis & Encryption

Phone numbers edited out

My Key Fingerprint is:

8BC3 14B5 CE77 3C83 F4A7

5353 3F27 97FF 0591 44F9

-------------------------

South Carolina Information Sharing and Analysis Center (SC-ISAC)

Department of State I.T. (D.S.I.T)

~-~-~-~-~-~-~-~-~-~-~-~-~-

Upload your PGP public key, download or verify mine at:

http://keys.cio.sc.gov

Currently, you have to restore them to the original location.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×