vdi files gone

[kobolds2]

Hi,

I have host win10 and guest win 10

today i have strange problem today, the guest vm suddenly while using close and when I try start the vm , I get file not found. I check and found vdi file missing from the folder.

VBOX version 7.04
I don't remember the space of host , because of that , i don't know if the free space more or less
the size of vdi is 120GB

I try use testdisk but nothing
I try use windirstat to search any big file also nothing
I try use chkdsk also no nothing.

I suspect ssd faulty, but no disk error in even viewer.
Samsung magician also not return error

what going on ? this never happen before ?

[scottgus1]

This will probably have happened because host antivirus scanned the vdi, found something virus-ish in it, whether correctly or not, and quarantined the vdi file.

Host AV should not scan Virtualbox or the VM folders. Instead, each VM that accesses the internet should have its own antivirus.

[kobolds2]

no antivirus installed in my machine plus how can antivirus remove a file that in use

This will probably have happened because host antivirus scanned the vdi, found something virus-ish in it, whether correctly or not, and quarantined the vdi file.

Host AV should not scan Virtualbox or the VM folders. Instead, each VM that accesses the internet should have its own antivirus.

[scottgus1]

how can antivirus remove a file that in use

Easily. AV does that all the time. And a few Virtualbox users have reported host AV quarantining a running VM's disk file.

no antivirus installed in my machine

Host or VM?

host win10

How did you get rid of Windows Defender to achieve "no antivirus installed in my machine"?


BTW the AV suggestion was a guess. There's not enough data in your posts to offer a better guess.

[kobolds2]

thanks. found the file in protection history .
Trojan:JS/Flafisi.E

[BillG]

Pretty good guess, Scott! I have never seen Defender put anything in there. He must have something nasty in the vms.

[scottgus1]

Thanks, Bill!

It could be a false positive, too, Kobolds. After you get it unquarantined, suspend host Defender's scanning for a bit and run a deep virus scan in the VM.