Hallo,
nachdem der Avira Viren Scanner gemeldet hat, dass ein Dienst nicht läuft, habe ich einen kompletten System Scan durchgeführt. Und mir die Verzeichnisse angesehen.
Dabei fand er in einer Setupdatei den Trojaner Trash.gen.
Und ich fand in C:\Users\******\AppData\Roaming\webex\ die Datei WbxGTNEx.txt siehe unten, laut google könnte es sich um eine Datei von Cryptowall handeln.
In den Prozessen läuft conhost.exe mit folgender Befehlszeile:
Zitat:
|
conhost.exe \??\C:\windows\system32\conhost.exe "-1876143243300509083-1561476668-1872873460-1810574138-21458812751690571474-38533760
|
Zitat:
|
conhost.exe \??\C:\windows\system32\conhost.exe "14090720574607816721656946083-54636687762681538412866003971945015366121287216
|
Zitat:
Typ: Datei
Quelle: C:\Users\******\AppData\Local\Temp\setup_132.exe
Status: Infiziert
Quarantäne-Objekt: 505c8bca.qua
Wiederhergestellt: NEIN
Zu Avira hochgeladen: NEIN
Betriebssystem: Windows XP/VISTA Workstation/Windows 7
Suchengine: 8.03.28.32
Virendefinitionsdatei: 8.11.215.140
Gefunden: TR/Trash.Gen
Datum/Uhrzeit: 23.03.2015, 15:59
|
Zitat:
|
DTN1=1-650-429-3300@Call-in toll number (US/Canada)@1@0%1-866-469-3239@Call-in toll-free number (US/Canada)@1@1;DTN2=1-650-429-3300@Call-in toll number (US/Canada)@1@0%1-866-469-3239@Call-in toll-free number (US/Canada)@1@1;DTN3=1-650-429-3300@Call-in toll number (US/Canada)@1@0%1-866-469-3239@Call-in toll-free number (US/Canada)@1@1;GTN1=61 2 8518 1927@Australia toll@61_1@0%1800-049-813@Australia toll free@61_1@1%43 125 3021 546@Austria toll@43@0%0800-297-262@Austria toll free@43@1%32 2894 8323@Belgium toll@32@0%0800-77667@Belgium toll free@32@1%0800-892-2407@Brazil toll free@55@1%0080-0118-1144@Bulgaria Toll Free@359@1%+1-416-915-6524@Canada Toll@1_1@0%+1-855-478-2355@Canada Toll Free@1_1@1%10-800-714-1686@China - North tollfree@86@1%10-800-140-1717@China - South tollfree@86@1%0800-80-6154@Croatia Toll Free@385@1%+42-0-22598-6573@Czech Republic Toll@420@0%80070-1496@Czech Republic Toll Free@420@1%45 3272 7727@Denmark toll@45@0%80-887293@Denmark toll free@45@1%8000-10-0392@Estonia Toll Free@372@1%358 931584366@Finland toll@358@0%0-800-9-15116@Finland toll free@358@1%33 170918650@France toll@33@0%0800-91-9327@France toll free@33@1%49 6925511 4402@Germany toll@49@0%0800-189-0551@Germany toll free@49@1%00800-16-122035536@Greece toll free@30@1%852 5808 1924@Hong Kong toll@852@0%800-96-3828@Hong Kong toll free@852@1%36-1700-8869@Hungary Toll@36@0%0680-10-9851@Hungary Toll Free@36@1%800-8304@Iceland Toll Free@354@1%000800 100 8151@India - Tata landline toll free@91@1%000800 100 8152@India - Tata mobile toll free@91@1%0018-0301-93594@Indonesia Toll Free@62@1%353 15260062@Ireland toll@353@0%1-800-947187@Ireland toll free@353@1%1-80-9453552@Israel toll free@972@1%39 023 041 0443@Italy toll@39_1@0%800-875-195@Italy toll free@39_1@1%81 345808165@Japan toll@81@0%00531161210@Japan toll free@81@1%8000-4438@Latvia Toll Free@371@1%88003-1522@Lithuania Toll Free@370@1%352 20881753@Luxembourg toll@352@0%800-28369@Luxembourg toll free@352@1%1-800-815777@Malaysia toll free@60@1%001-800-514-3550@Mexico toll free@52@1%31 207 94 7999@Netherlands toll@31@0%0800-022-3587@Netherlands toll free@31@1%64 99291753@New Zealand toll@64@0%0800-45-9102@New Zealand toll free@64@1%47 21049767@Norway toll@47@0%800-16940@Norway toll free@47@1%+48-22295-3596@Poland Toll@48@0%00800-112-4420@Poland Toll Free@48@1%80082-7743@Portugal Toll Free@351@1%080089-5898@Romania Toll Free@40@1%+7-49598-13968@Russia Toll@7_2@0%88-00100-9442@Russia Toll Free@7_2@1%65 31581417@Singapore toll@65@0%800-101-2599@Singapore toll free@65@1%080060-6565@Slovakia Toll Free@421@1%+27-11019-7060@South Africa Toll@27@0%080099-9609@South Africa Toll Free@27@1%00798-14-203-5535@South Korea toll free@82@1%34 91791 1286@Spain toll@34@0%900-93-7924@Spain toll free@34@1%46 8505 13567@Sweden toll@46@0%020-79-9553@Sweden toll free@46@1%41 43 456 9566@Switzerland toll@41@0%0800-552-949@Switzerland toll free@41@1%00801-12-7313@Taiwan toll free@886@1%0018-00156206-3126@Thailand Toll Free@66@1%44-203-478-5288@UK toll@44@0%0800-206-1176@UK toll free@44@1;GTN2=61 2 8518 1927@Australia toll@61_1@0%1800-049-813@Australia toll free@61_1@1%43 125 3021 546@Austria toll@43@0%0800-297-262@Austria toll free@43@1%32 2894 8323@Belgium toll@32@0%0800-77667@Belgium toll free@32@1%0800-892-2407@Brazil toll free@55@1%0080-0118-1144@Bulgaria Toll Free@359@1%+1-416-915-6524@Canada Toll@1_1@0%+1-855-478-2355@Canada Toll Free@1_1@1%10-800-714-1686@China - North tollfree@86@1%10-800-140-1717@China - South tollfree@86@1%0800-80-6154@Croatia Toll Free@385@1%+42-0-22598-6573@Czech Republic Toll@420@0%80070-1496@Czech Republic Toll Free@420@1%45 3272 7727@Denmark toll@45@0%80-887293@Denmark toll free@45@1%8000-10-0392@Estonia Toll Free@372@1%358 931584366@Finland toll@358@0%0-800-9-15116@Finland toll free@358@1%33 170918650@France toll@33@0%0800-91-9327@France toll free@33@1%49 6925511 4402@Germany toll@49@0%0800-189-0551@Germany toll free@49@1%00800-16-122035536@Greece toll free@30@1%852 5808 1924@Hong Kong toll@852@0%800-96-3828@Hong Kong toll free@852@1%36-1700-8869@Hungary Toll@36@0%0680-10-9851@Hungary Toll Free@36@1%800-8304@Iceland Toll Free@354@1%000800 100 8151@India - Tata landline toll free@91@1%000800 100 8152@India - Tata mobile toll free@91@1%0018-0301-93594@Indonesia Toll Free@62@1%353 15260062@Ireland toll@353@0%1-800-947187@Ireland toll free@353@1%1-80-9453552@Israel toll free@972@1%39 023 041 0443@Italy toll@39_1@0%800-875-195@Italy toll free@39_1@1%81 345808165@Japan toll@81@0%00531161210@Japan toll free@81@1%8000-4438@Latvia Toll Free@371@1%88003-1522@Lithuania Toll Free@370@1%352 20881753@Luxembourg toll@352@0%800-28369@Luxembourg toll free@352@1%1-800-815777@Malaysia toll free@60@1%001-800-514-3550@Mexico toll free@52@1%31 207 94 7999@Netherlands toll@31@0%0800-022-3587@Netherlands toll free@31@1%64 99291753@New Zealand toll@64@0%0800-45-9102@New Zealand toll free@64@1%47 21049767@Norway toll@47@0%800-16940@Norway toll free@47@1%+48-22295-3596@Poland Toll@48@0%00800-112-4420@Poland Toll Free@48@1%80082-7743@Portugal Toll Free@351@1%080089-5898@Romania Toll Free@40@1%+7-49598-13968@Russia Toll@7_2@0%88-00100-9442@Russia Toll Free@7_2@1%65 31581417@Singapore toll@65@0%800-101-2599@Singapore toll free@65@1%080060-6565@Slovakia Toll Free@421@1%+27-11019-7060@South Africa Toll@27@0%080099-9609@South Africa Toll Free@27@1%00798-14-203-5535@South Korea toll free@82@1%34 91791 1286@Spain toll@34@0%900-93-7924@Spain toll free@34@1%46 8505 13567@Sweden toll@46@0%020-79-9553@Sweden toll free@46@1%41 43 456 9566@Switzerland toll@41@0%0800-552-949@Switzerland toll free@41@1%00801-12-7313@Taiwan toll free@886@1%0018-00156206-3126@Thailand Toll Free@66@1%44-203-478-5288@UK toll@44@0%0800-206-1176@UK toll free@44@1;GTN3=61 2 8518 1927@Australia toll@61_1@0%1800-049-813@Australia toll free@61_1@1%43 125 3021 546@Austria toll@43@0%0800-297-262@Austria toll free@43@1%32 2894 8323@Belgium toll@32@0%0800-77667@Belgium toll free@32@1%0800-892-2407@Brazil toll free@55@1%0080-0118-1144@Bulgaria Toll Free@359@1%+1-416-915-6524@Canada Toll@1_1@0%+1-855-478-2355@Canada Toll Free@1_1@1%10-800-714-1686@China - North tollfree@86@1%10-800-140-1717@China - South tollfree@86@1%0800-80-6154@Croatia Toll Free@385@1%+42-0-22598-6573@Czech Republic Toll@420@0%80070-1496@Czech Republic Toll Free@420@1%45 3272 7727@Denmark toll@45@0%80-887293@Denmark toll free@45@1%8000-10-0392@Estonia Toll Free@372@1%358 931584366@Finland toll@358@0%0-800-9-15116@Finland toll free@358@1%33 170918650@France toll@33@0%0800-91-9327@France toll free@33@1%49 6925511 4402@Germany toll@49@0%0800-189-0551@Germany toll free@49@1%00800-16-122035536@Greece toll free@30@1%852 5808 1924@Hong Kong toll@852@0%800-96-3828@Hong Kong toll free@852@1%36-1700-8869@Hungary Toll@36@0%0680-10-9851@Hungary Toll Free@36@1%800-8304@Iceland Toll Free@354@1%000800 100 8151@India - Tata landline toll free@91@1%000800 100 8152@India - Tata mobile toll free@91@1%0018-0301-93594@Indonesia Toll Free@62@1%353 15260062@Ireland toll@353@0%1-800-947187@Ireland toll free@353@1%1-80-9453552@Israel toll free@972@1%39 023 041 0443@Italy toll@39_1@0%800-875-195@Italy toll free@39_1@1%81 345808165@Japan toll@81@0%00531161210@Japan toll free@81@1%8000-4438@Latvia Toll Free@371@1%88003-1522@Lithuania Toll Free@370@1%352 20881753@Luxembourg toll@352@0%800-28369@Luxembourg toll free@352@1%1-800-815777@Malaysia toll free@60@1%001-800-514-3550@Mexico toll free@52@1%31 207 94 7999@Netherlands toll@31@0%0800-022-3587@Netherlands toll free@31@1%64 99291753@New Zealand toll@64@0%0800-45-9102@New Zealand toll free@64@1%47 21049767@Norway toll@47@0%800-16940@Norway toll free@47@1%+48-22295-3596@Poland Toll@48@0%00800-112-4420@Poland Toll Free@48@1%80082-7743@Portugal Toll Free@351@1%080089-5898@Romania Toll Free@40@1%+7-49598-13968@Russia Toll@7_2@0%88-00100-9442@Russia Toll Free@7_2@1%65 31581417@Singapore toll@65@0%800-101-2599@Singapore toll free@65@1%080060-6565@Slovakia Toll Free@421@1%+27-11019-7060@South Africa Toll@27@0%080099-9609@South Africa Toll Free@27@1%00798-14-203-5535@South Korea toll free@82@1%34 91791 1286@Spain toll@34@0%900-93-7924@Spain toll free@34@1%46 8505 13567@Sweden toll@46@0%020-79-9553@Sweden toll free@46@1%41 43 456 9566@Switzerland toll@41@0%0800-552-949@Switzerland toll free@41@1%00801-12-7313@Taiwan toll free@886@1%0018-00156206-3126@Thailand Toll Free@66@1%44-203-478-5288@UK toll@44@0%0800-206-1176@UK toll free@44@1
|
Systemdaten:
Betriebssystem: Windows 7 64 Bit
Viren-Scanner: Avira Pro
24.03.2015, 07:50
![Verdacht auf [TR/Trash.Gen] infektion und Cryptowall - Standard](images/icons/icon1.gif){kind=icon}
![Verdacht auf [TR/Trash.Gen] infektion und Cryptowall](iconimages/plagegeister-aller-art-deren-bekaempfung/verdacht-tr-trash-gen-infektion-cryptowall_ltr.gif)
Baum-Darstellung