|
Plagegeister aller Art und deren Bekämpfung: TR/ATRAPS.GEN auf ext. hdd - wie bekomme ich meine daten zurueck?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
29.06.2011, 13:14 | #1 |
| TR/ATRAPS.GEN auf ext. hdd - wie bekomme ich meine daten zurueck? Hallo zusammen, ich habe mir laut Avira Antivir auf meinem ext. hdd TR/ATRAPS eingefangen - Avira blockiert immer brav autorun und hat meine folder, die inzwischen in .exe umbenannt worden sind, in Quarantaene geschickt. Laut 'properties' ist das hdd noch voll mit meinen daten, ich komme nur nicht an sie ran. gibt es eine moeglichkeit, die daten wiederherzustellen, oder zumindest einen Teil davon, ohne, dass ich den Torjaner auf den Rest meines Systems verteile? Ich koennte im Pronzip das hdd einfach formatieren, aber ich bin im Moment am Reisen, und natuerlich sind da meine ganzen Backups und Unterhaltungsmedien drauf... Antivir performed gerade einen Virus-Check fuer den Laptop, wenn der durch ist, poste ich gerne das Logfile. Mit Spybot S&D habe ich (vielleicht ein bischen voreilig) autorun.inf geshreddert. Wollte nach ANtivir Spybot durchlaufen lassen, aber ich dachte, gleichzeitig ist vielleicht nicht so geschickt...? Hab nur wenig Internetzugang, kann deshalb nicht viele Tools runterladen, aber wuerde mich ueber jede Unterstuetzung freuen. Danke, Kat Hier ist ein Auszug aus Antivirs Quarantaene-Info: Type: File Source: I:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\dmc .1xe Status: Infected Quarantine object: 45ccf41b.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Contains recognition pattern of the WORM/Mabezat.b worm Date/Time: 6/29/2011, 8:05 Type: File Source: I:\.Spotlight-V100.exe Status: Infected Quarantine object: 06769fbf.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\katie's stuff.exe Status: Infected Quarantine object: 1662e39a.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\video.exe Status: Infected Quarantine object: 32049b35.qua Restored: YES Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\Recycled.exe Status: Infected Quarantine object: 47338c9b.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\.Trashes.exe Status: Infected Quarantine object: 25c3fdbc.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\$RECYCLE.BIN.exe Status: Infected Quarantine object: 4c8beaf1.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\System Volume Information.exe Status: Infected Quarantine object: 5e4bb735.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\.TemporaryItems.exe Status: Infected Quarantine object: 6054d082.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\.fseventsd.exe Status: Infected Quarantine object: 542ec5ba.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\for barb.exe Status: Infected Quarantine object: 5ad8cfc6.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\kb's stuff.exe Status: Infected Quarantine object: 6a35a3c9.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 7:57 Type: File Source: I:\video.exe Status: Infected Quarantine object: 4caaf0ab.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:10 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012640.exe Status: Infected Quarantine object: 18008f1d.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012639.exe Status: Infected Quarantine object: 667bf43b.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012638.exe Status: Infected Quarantine object: 12e1dc48.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012635.exe Status: Infected Quarantine object: 2f64b889.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012636.exe Status: Infected Quarantine object: 4a0d93e3.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012637.exe Status: Infected Quarantine object: 19d58021.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012634.exe Status: Infected Quarantine object: 079fe82b.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001080.exe Status: Infected Quarantine object: 1d029a3c.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001083.exe Status: Infected Quarantine object: 1c23fc6b.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012641.exe Status: Infected Quarantine object: 565bfc76.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001077.exe Status: Infected Quarantine object: 562fccbf.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001078.exe Status: Infected Quarantine object: 3e0beb84.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012642.exe Status: Infected Quarantine object: 2d2b8023.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012644.exe Status: Infected Quarantine object: 2c9ef676.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001085.exe Status: Infected Quarantine object: 5013e8d4.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001086.exe Status: Infected Quarantine object: 258090cd.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 Type: File Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001081.exe Status: Infected Quarantine object: 57adcf2c.qua Restored: NO Uploaded to Avira: NO Operating System: Windows 2000/XP/VISTA Workstation Search engine: 8.02.05.24 Virus definition file: 7.11.10.110 Detection: Is the TR/ATRAPS.Gen Trojan Date/Time: 6/29/2011, 8:05 |
29.06.2011, 18:05 | #2 |
| TR/ATRAPS.GEN auf ext. hdd - wie bekomme ich meine daten zurueck? Seit ich die Autorun.inf geshreddert habe findet Antivir den TR/ATRAPS nicht mehr, aber meine Dateien sind immer noch unsichtbar (habe auch versteckte Dateien sichtbar gemacht). Da Malwarebytes sie alle gescannt hat, gehe ich davon aus, dass die Dateien irgendwie noch da sind...?
__________________Hier ist ein logfile von malwarbytes fuer laufwerk I: Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Database version: 6977 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 7/1/2011 3:07:04 AM mbam-log-2011-07-01 (03-07-04).txt Scan type: Full scan (I:\|) Objects scanned: 198005 Time elapsed: 14 minute(s), 53 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Was nun? |
Themen zu TR/ATRAPS.GEN auf ext. hdd - wie bekomme ich meine daten zurueck? |
antivir, auszug, autorun, autorun.inf, avira, avira antivir, avira blockiert, blockiert, daten, driver, einfach, eingefangen, formatieren, gen, gleichzeitig, hallo zusammen, laptop, object, spybot, tools, tr/atraps.gen, usb, usb 2.0, voll, zugang, zusammen, _restore |