TR/ATRAPS.GEN auf ext. hdd - wie bekomme ich meine daten zurueck?
 

Hallo zusammen,

ich habe mir laut Avira Antivir auf meinem ext. hdd TR/ATRAPS eingefangen - Avira blockiert immer brav autorun und hat meine folder, die inzwischen in .exe umbenannt worden sind, in Quarantaene geschickt. Laut 'properties' ist das hdd noch voll mit meinen daten, ich komme nur nicht an sie ran. gibt es eine moeglichkeit, die daten wiederherzustellen, oder zumindest einen Teil davon, ohne, dass ich den Torjaner auf den Rest meines Systems verteile? Ich koennte im Pronzip das hdd einfach formatieren, aber ich bin im Moment am Reisen, und natuerlich sind da meine ganzen Backups und Unterhaltungsmedien drauf...

Antivir performed gerade einen Virus-Check fuer den Laptop, wenn der durch ist, poste ich gerne das Logfile. Mit Spybot S&D habe ich (vielleicht ein bischen voreilig) autorun.inf geshreddert. Wollte nach ANtivir Spybot durchlaufen lassen, aber ich dachte, gleichzeitig ist vielleicht nicht so geschickt...?

Hab nur wenig Internetzugang, kann deshalb nicht viele Tools runterladen, aber wuerde mich ueber jede Unterstuetzung freuen.

Danke,
Kat

Hier ist ein Auszug aus Antivirs Quarantaene-Info:




Type: File
Source: I:\Usb 2.0 Driver\S-1-5-31-1286970278978-5713669491-166975984-320\dmc\dmc .1xe
Status: Infected
Quarantine object: 45ccf41b.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Contains recognition pattern of the WORM/Mabezat.b worm
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\.Spotlight-V100.exe
Status: Infected
Quarantine object: 06769fbf.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\katie's stuff.exe
Status: Infected
Quarantine object: 1662e39a.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\video.exe
Status: Infected
Quarantine object: 32049b35.qua
Restored: YES
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\Recycled.exe
Status: Infected
Quarantine object: 47338c9b.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\.Trashes.exe
Status: Infected
Quarantine object: 25c3fdbc.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\$RECYCLE.BIN.exe
Status: Infected
Quarantine object: 4c8beaf1.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\System Volume Information.exe
Status: Infected
Quarantine object: 5e4bb735.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\.TemporaryItems.exe
Status: Infected
Quarantine object: 6054d082.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\.fseventsd.exe
Status: Infected
Quarantine object: 542ec5ba.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\for barb.exe
Status: Infected
Quarantine object: 5ad8cfc6.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\kb's stuff.exe
Status: Infected
Quarantine object: 6a35a3c9.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 7:57


Type: File
Source: I:\video.exe
Status: Infected
Quarantine object: 4caaf0ab.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:10


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012640.exe
Status: Infected
Quarantine object: 18008f1d.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012639.exe
Status: Infected
Quarantine object: 667bf43b.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012638.exe
Status: Infected
Quarantine object: 12e1dc48.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012635.exe
Status: Infected
Quarantine object: 2f64b889.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012636.exe
Status: Infected
Quarantine object: 4a0d93e3.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012637.exe
Status: Infected
Quarantine object: 19d58021.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012634.exe
Status: Infected
Quarantine object: 079fe82b.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001080.exe
Status: Infected
Quarantine object: 1d029a3c.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001083.exe
Status: Infected
Quarantine object: 1c23fc6b.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012641.exe
Status: Infected
Quarantine object: 565bfc76.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001077.exe
Status: Infected
Quarantine object: 562fccbf.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001078.exe
Status: Infected
Quarantine object: 3e0beb84.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012642.exe
Status: Infected
Quarantine object: 2d2b8023.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{3F8A943F-EA94-4A97-9E58-B55D13F926B5}\RP46\A0012644.exe
Status: Infected
Quarantine object: 2c9ef676.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001085.exe
Status: Infected
Quarantine object: 5013e8d4.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001086.exe
Status: Infected
Quarantine object: 258090cd.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05


Type: File
Source: I:\System Volume Information\_restore{92FF4C98-E897-4D5E-9203-79767A6BB5CF}\RP1\A0001081.exe
Status: Infected
Quarantine object: 57adcf2c.qua
Restored: NO
Uploaded to Avira: NO
Operating System: Windows 2000/XP/VISTA Workstation
Search engine: 8.02.05.24
Virus definition file: 7.11.10.110
Detection: Is the TR/ATRAPS.Gen Trojan
Date/Time: 6/29/2011, 8:05

Seit ich die Autorun.inf geshreddert habe findet Antivir den TR/ATRAPS nicht mehr, aber meine Dateien sind immer noch unsichtbar (habe auch versteckte Dateien sichtbar gemacht). Da Malwarebytes sie alle gescannt hat, gehe ich davon aus, dass die Dateien irgendwie noch da sind...?

Hier ist ein logfile von malwarbytes fuer laufwerk I:

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 6977

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

7/1/2011 3:07:04 AM
mbam-log-2011-07-01 (03-07-04).txt

Scan type: Full scan (I:\|)
Objects scanned: 198005
Time elapsed: 14 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Was nun?