Skip to content

Python script to extract quarantined files from Symantecs VBN file structure.

Notifications You must be signed in to change notification settings

kingaling/unquarantine

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 

Repository files navigation

Changes/Info:

4/1/2014 - April Fools!
For a complete explanation as to how I traversed the VBN file to make this script work: http://dofir.net/post/81425257003/a-study-of-symantecs-vbn-file-format - Team Dofir FTW! :)

Issues:

7/28/2014: Got a syntax error on line 73 due to not enough parameters being passed to the function "dataread".
This is due to the fact that not all VBN files contain the file that was quarantined.
There is a check in the script that looks for the VBN file size being smaller than the quarantined
file size (which is obviously impossible) but this particulr VBN file eluded that check.
Still a work in progress. :)

About

Python script to extract quarantined files from Symantecs VBN file structure.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages