Bonjour à tous,
j'ai une infection "de masse" (spyware et +), et cela m'était déja arrivé une fois il y a 2 ans avec un dialer. J'ai utilisé hitman Pro qui m avait nettoyé le Pc mais cette fois impossible de terminer le processus hitman.
J ai lu pas mal de post et j ai suivi le conseil de télécharger smitfraud et clean. Ca marche jusqu au moment de redémarrer en mode sans échec : et bien sûr impossible. j'ai un écran (bleu) qui apparaît en me signalant que le système est arrêté par sécurité.
voila, avec tout ca j'espère trouver une âme bien veillante qui saura s'occuper de mon cas
D avance merci
PS : j'ai le log de hitjack si besoin
Ajout du 27-04-2007 à 19:52:
(...)
je vous joins la seule inscription détectée comme méchante sur hijackthis :
&Suchen -
res://C:\WINDOWS\system32\Suchspur.dll/Suchspur.HTM
c'est du chinois (ou de l'allemand pour moi

)
Ajout du 27-04-2007 à 20:53:
apparemment mon souci n'est pas convenable puisque pas de réponse
je vous joins mon log
le bilan à 20:54 = tout est ok sauf que je ne peux toujours pas démarrer en mode sans échec
mon log :
Code: 

- Logfile of HijackThis v1.99.1
- Scan saved at 20:52:19, on 27/04/2007
- Platform: Windows XP SP2 (WinNT 5.01.2600)
- MSIE: Internet Explorer v7.00 (7.00.6000.16414)
-
- Running processes:
- C:\WINDOWS\System32\smss.exe
- C:\WINDOWS\system32\winlogon.exe
- C:\WINDOWS\system32\services.exe
- C:\WINDOWS\system32\lsass.exe
- C:\WINDOWS\system32\svchost.exe
- C:\WINDOWS\System32\svchost.exe
- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
- C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
- C:\WINDOWS\system32\spoolsv.exe
- C:\WINDOWS\Explorer.EXE
- C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
- C:\WINDOWS\stsystra.exe
- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
- C:\Program Files\Dell\QuickSet\quickset.exe
- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
- C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
- C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
- C:\Program Files\Creative\Mixer\CTSVolFE.exe
- C:\WINDOWS\system32\dla\tfswctrl.exe
- C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
- C:\Program Files\Dell\MediaDirect\PCMService.exe
- C:\Program Files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe
- C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
- C:\Program Files\McAfee\MSK\MskAgent.exe
- C:\Program Files\SiteAdvisor66\SiteAdv.exe
- C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
- C:\Program Files\QuickTime\qttask.exe
- C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
- C:\Program Files\iTunes\iTunesHelper.exe
- C:\Program Files\Lexmark 5400 Series\lxctmon.exe
- C:\Program Files\Lexmark 5400 Series\ezprint.exe
- C:\WINDOWS\system32\ctfmon.exe
- C:\Program Files\Dell Support\DSAgnt.exe
- C:\Program Files\Google\GoogleToolbarNotifier.2.1128.5462\GoogleToolbarNotifier.exe
- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
- C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
- C:\Program Files\Digital Line Detect\DLG.exe
- C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
- C:\Program Files\Dell Network Assistant\hnm_svc.exe
- C:\WINDOWS\system32\lxctcoms.exe
- C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
- c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
- C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
- C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
- c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
- c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
- C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
- C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
- C:\PROGRA~1\McAfee\MPS\mps.exe
- C:\Program Files\McAfee\MSK\MskSrver.exe
- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
- C:\Program Files\SiteAdvisor66\SAService.exe
- C:\WINDOWS\system32\svchost.exe
- C:\Program Files\McAfee\MPS\mpsevh.exe
- C:\Program Files\iPod\bin\iPodService.exe
- C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
- c:\PROGRA~1\mcafee.com\agent\mcagent.exe
- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
- C:\Program Files\Mozilla Firefox\firefox.exe
- C:\Program Files\WinRAR\WinRAR.exe
- C:\DOCUME~1\Pierre\LOCALS~1\Temp\Rar$EX00.844\HijackThis.exe
-
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
- R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
- R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
- R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
- R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
- R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
- R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
- O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
- O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor66\SiteAdv.dll
- O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
- O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
- O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
- O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
- O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
- O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
- O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
- O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor66\SiteAdv.dll
- O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
- O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
- O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
- O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
- O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
- O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
- O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
- O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
- O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
- O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
- O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
- O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
- O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
- O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
- O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire Plus\Corel Photo Downloader.exe
- O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
- O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
- O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor66\SiteAdv.exe
- O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
- O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
- O4 - HKLM\..\Run: [lxctmon.exe] "C:\Program Files\Lexmark 5400 Series\lxctmon.exe"
- O4 - HKLM\..\Run: [Lexmark 5400 Series Fax Server] "C:\Program Files\Lexmark 5400 Series\fm3032.exe" /s
- O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
- O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\LXCTtime.dll,_RunDLLEntry@16
- O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
- O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
- O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
- O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier.2.1128.5462\GoogleToolbarNotifier.exe
- O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
- O4 - Global Startup: BTTray.lnk = ?
- O4 - Global Startup: Dell Network Assistant.lnk = ?
- O4 - Global Startup: Digital Line Detect.lnk = ?
- O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
- O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
- O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
- O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
- O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
- O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
- O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
- O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
- O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
- O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
- O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
- O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
- O11 - Options group: [INTERNATIONAL] International*
- O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor66\SiteAdv.dll
- O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
- O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
- O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
- O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
- O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
- O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
- O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
- O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
- O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
- O23 - Service: lxct_device - - C:\WINDOWS\system32\lxctcoms.exe
- O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
- O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
- O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
- O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
- O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
- O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
- O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
- O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
- O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
- O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
- O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
- O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
- O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
- O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
- O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor66\SAService.exe
- O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
[ Ce message a été modifié par : : pierrotpp le 27-04-2007 22:49 ]