Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unquarantine isn't working


  • Please log in to reply
4 replies to this topic

#1 area655

area655

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:55 AM

Posted 11 May 2005 - 04:11 PM

I chose to quarantine Kazaa on my computer because I don't like it. But along with taking out kazaa, it took out all my music that I've stored on my music from CD's I've legally purchased, as well as anything I've downloaded.
So I go into the quarantine section, check of kazaa, and tell it to unquarantine kazaa. Once I do that, it freezes. And then I get really angry. I've written microsoft, but they won't respond. So I'm hoping someone here can help. I can send anyone my error log from the program if you want it. Just ask here or write to (Mod Edited to remove email so spambots do not use it - Leurgy) with the subject "error log for microsoft antispyware". Please help, cause this is reallllly annoying.

Edited by Leurgy, 11 May 2005 - 05:14 PM.


BC AdBot (Login to Remove)

 


#2 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:08:55 AM

Posted 12 May 2005 - 12:21 PM

I'll take a couple of shots at this, but they are just guesses.

1) Its not really freezing, but if you have a lot of music and incomplete downloads then the unquarantine will take some time. When you try to unquarantine, is your hard drive light on or flashing? If so you will need to wait until it stops.

2) Incomplete downloads with kazaa are .dat files. Do a search for *.dat or *.mp3 or *.mpg and see what you come up with. Chances are the completed tunes are in the same place. Set your computer to show hidden files.

3) Browse to Program Files/Microsoft AntiSpyware folder and look in there to see if your files are there. Again you need to be able to see hidden files.

4) MS Spyware can't unquarantine kazaa because it has seperately removed and deleted the spyware components and therefore the installation is incomplete.

HTH, but as I said, I'm guessing.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#3 St_Anger

St_Anger

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Location:UK
  • Local time:08:55 AM

Posted 14 May 2005 - 05:49 AM

I had the exact same problem, i lost about 400 songs including a few episodes of some t.v. programmes. Kazaa was quarantined and i tried to unquarantine it and that worked fine, however after a reboot the kazaa folder was missing along with all my songs. I no longer use Kazaa as it has caused me too many problems and my new downloading program i use is not picked up as Adware by Microsoft Antispyware or anything else for that matter, so im assuming its ok.

#4 area655

area655
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:55 AM

Posted 15 May 2005 - 09:48 PM

Leurgy:
Here are my responses to your suggestions in order:

1) I'm pretty sure it's freezing, because the un-quarantine process doesn't even start; when i click to un-quarantine checked items after checking off kazaa, it stops moving before even bringing up the un-qauarantine status, and reports to be unresponsive in the task manager.

2) The files aren't in their original folder. They are all in Microsoft antispyware's quarantine folder, as I explain in the next part.

3) Under Microsoft's Antispyware quarantine folder, all the files have names that can't be identified to what their original names were. Examples of the names include

72D9638C-BBBC-4782-9063-F38140
F42D6054-CCD9-4F61-8259-8C2349

Obviously these names are changed and their real names are stored somewhere else so they couldn't damage my computer if they really were harmful. But these are definitely them, because the file sizes range from 500 KB (which i had some files of) to 600 MB (which i also had some files of).

4) Well, why would it delete anything if it's gonna go ahead and quarantine it? that just sucks... but as I said, there is a one folder in the quarantine section, and I only have Kazaa quarantined.

What does "HTH" mean? you wrote that at the end of your message. Anyway, thanks so far and try to get back to me. :thumbsup:

#5 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:08:55 AM

Posted 16 May 2005 - 07:39 AM

HTH = Hope that helps.

Well, why would it delete anything if it's gonna go ahead and quarantine it? that just sucks


I'm still guessing but here is what I think is going on, based on what I know about Kazaa.

When you install Kazaa you are really installing more than one program. Whatever malware is bundled with Kazaa is installed seperately so it runs all the time, whether Kazaa is running or not. MS Beta (Anti-Spyware) detects the seperate programs and deletes them. When Kazaa got quarantined it was done without the malware and I think that it won't restore without the malware.

I have used programs like Ad-Aware and Spybot to uninstall the Kazaa bundled spyware and then if you want to uninstall Kazaa you can't because of a missing file, cd_clint.dll. This is a file associated with CyDoor spyware. So in that case I reinstalled Kazaa, then uninstalled it and THEN I removed the spyware and that worked. This may work in your case. If you reinstall Kazaa you will need to disable the real time protection in MS Beta.

What I would do in this case is download the dummy cd_clint.dll (it fools the program into thinking its the real one but is not spyware capable) from here. Place it in C:\Winnt\System32 folder. Try the unquarantine.

This dummy file is a drop-in replacement for unwanted spyware modules that may be violating your privacy. It allows you to execute a spyware-dependent program to recover data if its modules have been deleted, without worrying about unwanted connections being made behind your back. The dummy files can also be used without ad-supported software, to prevent such spyware files from being installed in the future.


If that doesn't work then I would reinstall Kazaa, try unquarantining (you may have to allow files to be over written), recover your files, move them somewhere else, uninstall Kazaa and then run the anti-spyware programs (MS Beta, Ad-Aware and Spybot) to get rid of the spyware.

HTH :thumbsup:

Edited by Leurgy, 16 May 2005 - 07:48 AM.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users