Restore files from quarantine - Decrypt kql

[bibinou]

Hello,

 

I have a huge emails database stuck stored in a *.klq file.

 

*.klq files is the file extension used to quarantine files from a previous version of Kaspersky.

 

I would like to restore the email database and I need to convert the kql file in the original file format.

 

Is there any software able to convert such files ?

 

Thank you

[Berny]

@bibinou Welcome. What is your previous version ?

Also, restoring and trust quarantined objects can be harmful.

 

[bibinou]

@Berny : the quarantined file was created with AVP 18.0.0

The file put in quanrantine is a mail database. Only some email were suspicous and I need to recover them.

[Berny]

@bibinou

Actually the quarantine folder is located here “C:\ProgramData\Kaspersky Lab\AVP21.2\QB\ *.klq”
You could try to disable the interactive Kaspersky protection,
then copy/paste “*.klq” file and reload ⚠ at your own risk ⚠ the suspicious files.

[bibinou]

Here is the quarantined file done with AVP 18.0.0 on another computer

 

 

 

Here the Kaspersky version I use now on another computer

 

 

As you can see the quarantined file doens’t appear on the quarantine tab from the computer I use now.

 

 

My question is: how can I restore the file ? Changing the extension file from *.klq to something else doens’t work

 

thank you

[Berny]

@bibinou

Please try to exit Kaspersky and copy/paste the “*.klq” file here :
“C:\ProgramData\Kaspersky Lab\AVP19.0\QB\”

Also , if copy/paste doesn’t work please see this https://support.kaspersky.com/fr/14756

[bibinou]

Thank you for your answers

 

Here is the result: the file is in the directory but doesn’t appear on the program

 

 

[Berny]

@bibinou Please contact K-Lab Technical Support https://center.kaspersky.com/fr ??

[bibinou]

I just did. I found this    :  hexacorn,com/d/DeXRAY,pl

 

But absolutely no idea how to use perl and launch it.

[Berny]

@bibinou We would like to help you but we don’t provide assistance for third party tools.

Thank you for your understanding.

[bibinou]

Sure. Thank you.