Penulis Topik: Cara Mengembalikan File Qarantina  (Dibaca 1223 kali)

Offline Z-TIN

  • Pro3
  • **
  • Tulisan: 3
  • Reputation: 0
    • Lihat Profil
Cara Mengembalikan File Qarantina
« pada: Desember 03, 2017, 11:23:52 AM »
Gan bisa minta tolong cara balikin file qarantinanya?

Offline Ki@mhu

  • MoMod
  • Pro500
  • *****
  • Tulisan: 1.544
  • Reputation: 789
  • Jenis kelamin: Pria
  • Bodoh + Belajar = Pintar; Pintar - Belajar = Bodoh
    • Lihat Profil
    • My Blog
Re:Cara Mengembalikan File Qarantina
« Jawab #1 pada: Desember 03, 2017, 12:47:36 PM »
Klik kanan dan pilih Restore.

Offline Z-TIN

  • Pro3
  • **
  • Tulisan: 3
  • Reputation: 0
    • Lihat Profil
Re:Cara Mengembalikan File Qarantina
« Jawab #2 pada: Desember 03, 2017, 03:07:19 PM »
sudah saya restore. namun file nya tidak kembali seperti semula.

Offline Ki@mhu

  • MoMod
  • Pro500
  • *****
  • Tulisan: 1.544
  • Reputation: 789
  • Jenis kelamin: Pria
  • Bodoh + Belajar = Pintar; Pintar - Belajar = Bodoh
    • Lihat Profil
    • My Blog
Re:Cara Mengembalikan File Qarantina
« Jawab #3 pada: Desember 03, 2017, 03:56:28 PM »
sudah saya restore. namun file nya tidak kembali seperti semula.

Bisa infokan file jenis apa yang terhapus itu? Bisa Upload kemari log hasil Scan Smadav yang terakhir yang mencatat bahwa Smadav menghapus file yang Anda cari itu?

Lokasinya ada di: C:\Program Files\Smadav\Logs\Smadav.log atau C:\Program Files (x86)\Smadav\Logs\Smadav.log

Offline Z-TIN

  • Pro3
  • **
  • Tulisan: 3
  • Reputation: 0
    • Lihat Profil
Re:Cara Mengembalikan File Qarantina
« Jawab #4 pada: Desember 03, 2017, 04:11:52 PM »
file yang terhapus .doc dan foder..... saya restore kembali filenya kembali menjadi ekstensi  .ink dan .dav dan dalam bentuk shorcut...

==============================
Log File of Smadav 2013 Rev. 9.4
==============================

Scanning Results :
=> Time & Date : 20:59:08, on 01-01-2018
=> Finishing Time : 1 second
=> Folder Scanned :3
=> File Scanned : 4
=> File Detected : 0
=> File Cleaned : 0
=> File Skipped : 0
=> Value Scanned : 0
=> Value Detected: 0
=> Value Fixed: 0
=> Path Scanned: 3
=> Path Hidden: 1
=> Path Unhidden: 0

==============================
Before Scanning
==============================
Suspected Paths :
=> Fine(Level 2) as  : 2 Process
   -C:\Program Files\Internet Explorer\iexplore.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\igfxtray.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\hkcmd.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\igfxpers.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\igfxsrvc.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CyberLink\YouCam\YCMMirage.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CyberLink\YouCam\YouCamTray.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\conhost.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\WUDFHost.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\ASUS\AppData\Roaming\yxuquucg\uxbudcue.exe
=> Fine(Level 1) as  : 1 Startup
   -c:\programdata\{6593baf6-b750-3d48-f426-5ba65d4282db}\c82c6a69.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Windows\System32\GfxCUIServiceInstall.vbs

Running Processes :
=> N/A
=> N/A
=> C:\Windows\System32\smss.exe
=> C:\Windows\System32\csrss.exe
=> C:\Windows\System32\wininit.exe
=> C:\Windows\System32\csrss.exe
=> C:\Windows\System32\services.exe
=> C:\Windows\System32\lsass.exe
=> C:\Windows\System32\lsm.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\winlogon.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\spoolsv.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\dwm.exe
=> C:\Windows\System32\taskhost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\SearchIndexer.exe
=> C:\Windows\System32\igfxtray.exe
=> C:\Windows\System32\hkcmd.exe
=> C:\Windows\System32\igfxpers.exe
=> C:\Windows\System32\igfxsrvc.exe
=> C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
=> C:\Program Files\CyberLink\YouCam\YCMMirage.exe
=> C:\Program Files\CyberLink\YouCam\YouCamTray.exe
=> C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
=> C:\Windows\System32\cmd.exe
=> C:\Windows\System32\conhost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\notepad.exe
=> C:\Windows\explorer.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Smadav\SMΔRTP.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Internet Explorer\iexplore.exe
=> C:\Program Files\Internet Explorer\iexplore.exe
=> C:\Windows\System32\audiodg.exe
=> C:\Windows\System32\WUDFHost.exe
=> C:\Program Files\Smadav\SMΔRTP.exe

==============================
After Scanning
==============================
Suspected Paths :
=> Fine(Level 2) as  : 2 Process
   -C:\Program Files\Internet Explorer\iexplore.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\igfxtray.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\hkcmd.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Windows\System32\igfxpers.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\igfxsrvc.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CyberLink\YouCam\YCMMirage.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CyberLink\YouCam\YouCamTray.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\conhost.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\WUDFHost.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\ASUS\AppData\Roaming\yxuquucg\uxbudcue.exe
=> Fine(Level 1) as  : 1 Startup
   -c:\programdata\{6593baf6-b750-3d48-f426-5ba65d4282db}\c82c6a69.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Windows\System32\GfxCUIServiceInstall.vbs

Running Processes :
=> N/A
=> N/A
=> C:\Windows\System32\smss.exe
=> C:\Windows\System32\csrss.exe
=> C:\Windows\System32\wininit.exe
=> C:\Windows\System32\csrss.exe
=> C:\Windows\System32\services.exe
=> C:\Windows\System32\lsass.exe
=> C:\Windows\System32\lsm.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\winlogon.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\spoolsv.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\dwm.exe
=> C:\Windows\System32\taskhost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\SearchIndexer.exe
=> C:\Windows\System32\igfxtray.exe
=> C:\Windows\System32\hkcmd.exe
=> C:\Windows\System32\igfxpers.exe
=> C:\Windows\System32\igfxsrvc.exe
=> C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
=> C:\Program Files\CyberLink\YouCam\YCMMirage.exe
=> C:\Program Files\CyberLink\YouCam\YouCamTray.exe
=> C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
=> C:\Windows\System32\cmd.exe
=> C:\Windows\System32\conhost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\notepad.exe
=> C:\Windows\explorer.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Smadav\SMΔRTP.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Google\Chrome\Application\chrome.exe
=> C:\Program Files\Internet Explorer\iexplore.exe
=> C:\Program Files\Internet Explorer\iexplore.exe
=> C:\Windows\System32\audiodg.exe
=> C:\Windows\System32\WUDFHost.exe
=> C:\Program Files\Smadav\SMΔRTP.exe

Hidden Files/Folders
=> E:\{65ca385d-bb3a-60b6-0e37-c3fcf06bfd6a}
   -Folder, Hidden

Offline Ki@mhu

  • MoMod
  • Pro500
  • *****
  • Tulisan: 1.544
  • Reputation: 789
  • Jenis kelamin: Pria
  • Bodoh + Belajar = Pintar; Pintar - Belajar = Bodoh
    • Lihat Profil
    • My Blog
Re:Cara Mengembalikan File Qarantina
« Jawab #5 pada: Desember 03, 2017, 05:23:02 PM »
Seperti yang Saya duga, Anda terkena virus Symmi/Zusy: http://smadaver.com/konsultasi-virus/all-about-bundpil-(virus-shortcut-dengan-folder-tanpa-nama-di-flashdisk)/msg246181/#msg246181

Virus ini bisa menghapus file yang ada di FD, jadi bukan dihapus oleh Smadav. Smadav hanya menghapus Shortcutnya saja, bukan filenya.

Banyak sekali User yang menyangka Smadav yang menghapusnya sampai-sampai kabar ini tersebar di User lain yang belum pernah memakai Smadav sama sekali. Dan menjadi tantangan tersendiri bagi Smadav untuk mengembalikan kepercayaan User.

Solusinya, hapus virus ini dulu dari sistem Anda. Masuk ke Safe Mode dan Scan dengan Smadav (centang Detect Unknown Apps).

Setelah sudah bersih, baru coba Recovery kembali data Anda dengan Software seperti Recuva.
« Edit Terakhir: Desember 03, 2017, 10:22:55 PM oleh Ki@mhu »

Offline Manggolo

  • MoMod
  • Pro500
  • *****
  • Tulisan: 716
  • Reputation: 623
  • The other side of me
    • Lihat Profil
Re:Cara Mengembalikan File Qarantina
« Jawab #6 pada: Desember 03, 2017, 08:56:47 PM »
Bisa tolong jelaskan seacara detail kronologis hilangnya file tersebut ?
colok flasdisk ke laptop / pc => dan seterusnya dan seterusnya ?