Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Please Help __prosschiff@gmail.com_.crypt strikes again...

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 04.09.2015, 16:17   #1
sand0kan333
 
Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Please Help __prosschiff@gmail.com_.crypt strikes again...



Hello

I hope it is ok to post in english.

This forum is the only place in the internet I found mentioning a similar attack.

Last Monday my computer was invaded with some kind of malware.

Almost all files renamed with added "__prosschiff@gmail.com_.crypt" and encrypted.

Malware detected:
PUP Ammy Admin
Win32/Skeey.B!plock
Win32/Skeey.C!plock

Suspect file found already encrypted: RootCrypt.exe

I really need to recover some mdf files and it will be almost impossible to recreate them.



Any information, clues or any help will be very much appreciated.

Thank You

Danke sehr!

Alt 04.09.2015, 16:44   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Please Help __prosschiff@gmail.com_.crypt strikes again...



Hello, sand0kan333
Welcome to the trojaner-board.de Forums. My name is Thomas (Tom is fine), and I will be helping you fixing your problems.



Please take note of some guidelines for this fix:
  • Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
  • If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
  • Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
  • Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
  • Please set your system to show all files.
    Click Start, open My Computer, select the Tools menu and click Folder Options.
    Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
    Uncheck: Hide file extensions for known file types
    Uncheck the Hide protected operating system files (recommended) option.
    Click Yes to confirm.



For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to the desktop.
For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to the desktop.

Please run it and click Scan, post back with the 2 logfiles.
__________________

__________________

Alt 04.09.2015, 17:51   #3
sand0kan333
 
Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Scan Results



Hello Tom,

Thank you for taking the time!

Here goes scan results in attachments.
__________________
Angehängte Dateien
Dateityp: txt FRST.txt (58,0 KB, 198x aufgerufen)
Dateityp: txt Addition.txt (34,9 KB, 100x aufgerufen)

Alt 04.09.2015, 18:37   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Please Help __prosschiff@gmail.com_.crypt strikes again...



Hi,

sorry to say, but there is no way to decrypt your files. The only thing we could try is to cleanup the system.

Do you want to clean it or do you want to reformat it?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 04.09.2015, 18:50   #5
sand0kan333
 
Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Thanks Anyway!



Its ok my hopes were a bit low...

But thank you for taking the time to try anyway.

I think I'll format it or hold it for police to check it and maybe trace the guy who did this..

Anyway I think I can handle the formatting thing and will recover soon from backup trauma



Thanks again cheers!

Danke!


Alt 05.09.2015, 13:52   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Please Help __prosschiff@gmail.com_.crypt strikes again...



You're welcome
__________________
--> Please Help __prosschiff@gmail.com_.crypt strikes again...

Alt 01.10.2015, 19:37   #7
sand0kan333
 
Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

I have good news!!!



I've got my files back!!!

This worked for me:
https://support.drweb.com/new/free_unlocker/?keyno=&for_decode=1&lng=en

I had to buy their av with support around 35 euro but after sending some encrypted doc files they helped me decrypt my files!

I still can't believe it, after 1 month!!!

Best Regards,

Pedro

Alt 02.10.2015, 19:51   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Please Help __prosschiff@gmail.com_.crypt strikes again... - Standard

Please Help __prosschiff@gmail.com_.crypt strikes again...



Thanks for letting me know
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Please Help __prosschiff@gmail.com_.crypt strikes again...
compu, computer, detected, files, formation, forum, found, help, information, inter, interne, internet, please, please help, prosschiff, recover



Ähnliche Themen: Please Help __prosschiff@gmail.com_.crypt strikes again...


  1. ich habe einen Virus eingefangen der aus FRST.txt ein FRST.txt!___prosschiff@gmail.com_ macht
    Log-Analyse und Auswertung - 27.09.2015 (3)
  2. All Programmen und Dateien sind verschlüsselt in einer Datie von 62 Gb mit mail adresse prosschiff@gmail.com_.crypt
    Log-Analyse und Auswertung - 13.09.2015 (3)
  3. __prosschiff@gmail.com_.crypt
    Plagegeister aller Art und deren Bekämpfung - 04.09.2015 (6)
  4. Chrome-Extension verschickt selbstzerstörende Gmail-Mails
    Nachrichten - 27.07.2015 (0)
  5. Encypted files - CRYPTSb@GMAIL.COM.roto
    Plagegeister aller Art und deren Bekämpfung - 07.07.2015 (1)
  6. !helpfiledeskript111@gmail.com.crypt plötzlich an Datei Endung angehangen - Daten unbrauchbar?
    Plagegeister aller Art und deren Bekämpfung - 06.07.2015 (7)
  7. Dateiendung -.CRYPTSb@GMAIL.COM.roto
    Plagegeister aller Art und deren Bekämpfung - 29.06.2015 (16)
  8. HELPFILEDESKRIPT111@GMAIL.COM.roto
    Plagegeister aller Art und deren Bekämpfung - 27.06.2015 (1)
  9. Kaspersky blockt gmail und andere google-Seiten
    Antiviren-, Firewall- und andere Schutzprogramme - 26.06.2014 (1)
  10. phising mail möglw. von gmail account verschickt
    Log-Analyse und Auswertung - 15.05.2014 (15)
  11. Gmail - Diese Verbindung wird nicht Vertraut!
    Plagegeister aller Art und deren Bekämpfung - 22.04.2013 (2)
  12. Gmail Hack-Angriff und manchmal seltsames Verhalten
    Plagegeister aller Art und deren Bekämpfung - 29.03.2013 (1)
  13. Spam-Versand von Gmail-Konto
    Log-Analyse und Auswertung - 14.01.2013 (9)
  14. GMail Account gehackt - Trojaner die Ursache?
    Log-Analyse und Auswertung - 20.01.2012 (5)
  15. Gmail Award Promotional Draw.JPG
    Plagegeister aller Art und deren Bekämpfung - 06.12.2011 (1)
  16. Spam-Versand von GMail-Account
    Log-Analyse und Auswertung - 13.05.2011 (21)

Zum Thema Please Help __prosschiff@gmail.com_.crypt strikes again... - Hello I hope it is ok to post in english. This forum is the only place in the internet I found mentioning a similar attack. Last Monday my computer was - Please Help __prosschiff@gmail.com_.crypt strikes again......
Archiv
Du betrachtest: Please Help __prosschiff@gmail.com_.crypt strikes again... auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.