Quelqu'un pour analyser merci

ici merci de ton aide

[b]SDFix: Version 1.158 [/b]

Run by Tof on 16/03/2008 at 11:23

Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\TOF~1.SER\Bureau\SDFix

[b]Checking Services [/b]:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


[b]Checking Files [/b]:

Trojan Files Found:

C:\Documents and Settings\Tof.SERIAL-GLANDEUR\Local Settings\Temp\37f763ad-cf34-5bc4-54e4-ebf1b585d0b5.tmp.exe - Deleted
C:\Documents and Settings\Tof.SERIAL-GLANDEUR\Local Settings\Temp\tem8.tmp.exe - Deleted
C:\WINDOWS\antiv.exe - Deleted
C:\WINDOWS\system32\real.txt - Deleted





Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-16 11:28:44
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

C:\WINDOWS\SYSTEM32\UCFIEF.EXE [1572] 0x84121C68

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...


scan completed successfully
hidden processes: 1
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\uTorrent\\utorrent.exe"="C:\\Program Files\\uTorrent\\utorrent.exe:*:Enabled:æTorrent"
"C:\\Program Files\\Reallusion\\CrazyTalk for Skype\\CT4Skype.exe"="C:\\Program Files\\Reallusion\\CrazyTalk for Skype\\CT4Skype.exe:*:Enabled:CrazyTalk"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 6.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Sports Interactive\\Football Manager 2007\\fm.exe"="C:\\Program Files\\Sports Interactive\\Football Manager 2007\\fm.exe:*:Enabled:Football Manager 2007"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. The whole world can talk for free."
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
@=""
"C:\\WINDOWS\\system32\\ucfief.exe"="C:\\WINDOWS\\system32\\ucfief.exe:*:Enabled:Flash Media"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[b]Remaining Files [/b]:


File Backups: - C:\DOCUME~1\TOF~1.SER\Bureau\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Mon 15 Jan 2007 1,024 ...HR --- "C:\WINDOWS\system32\NTICDMK7.dll"
Mon 15 Jan 2007 1,024 ...HR --- "C:\WINDOWS\system32\NTIMPEG2.dll"
Mon 15 Jan 2007 1,024 ...HR --- "C:\WINDOWS\system32\NTIFCD3.dll"
Mon 15 Jan 2007 1,024 ...HR --- "C:\WINDOWS\system32\NTIBUN4.dll"
Mon 15 Jan 2007 1,024 ...HR --- "C:\WINDOWS\system32\NTIMP3.dll"
Mon 27 Aug 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Wed 23 Jan 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\585dc2612ebcefc90e7dee4c276ee95e\BIT5.tmp"
Mon 29 Oct 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Mon 17 Apr 2006 20 A..H. --- "C:\Documents and Settings\Tof.SERIAL-GLANDEUR\Mes documents\Ma musique\iTunes\iTunes Music\Sauvegarde de la licence\drmv1lic.bak"
Sat 4 Mar 2006 4,348 A..H. --- "C:\Documents and Settings\Tof.SERIAL-GLANDEUR\Mes documents\Ma musique\iTunes\iTunes Music\Sauvegarde de la licence\drmv1key.bak"
Mon 17 Apr 2006 400 A.SH. --- "C:\Documents and Settings\Tof.SERIAL-GLANDEUR\Mes documents\Ma musique\iTunes\iTunes Music\Sauvegarde de la licence\drmv2key.bak"

[b]Finished![/b]

escuse moi je suis novice est je sais pas si tu a bien recu mon analyse encore desolez du derangement