UC explorer à 100%

Bonjour,
d'abord, ravi d'utiliser ce forum qui m'a servi à me défaire de pas mal de situations..
j'ai le même problème d'UC explorer 100%, j'ai un rapport combofix,
merci beaucoup de m'indiquer la marche à suivre:
ComboFix 12-10-19.01 - Administrateur 20/10/2012 16:08:13.1.2 - x86 NETWORK
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2559.2258 [GMT 2:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrateur\WINDOWS
c:\documents and settings\All Users\Application Data\TEMP
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-09-20 au 2012-10-20 ))))))))))))))))))))))))))))))))))))
.
.
2012-10-19 18:22 . 2012-10-19 18:22 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-19 18:22 . 2012-10-19 18:22 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-19 14:37 . 2012-10-19 14:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-10-19 14:37 . 2012-07-03 11:46 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-19 13:36 . 2012-10-19 13:39 -------- d-----w- c:\program files\Mystery Trackers - Le Manoir des Void Edition Collector
2012-10-17 07:23 . 2012-10-20 13:38 -------- d-----w- c:\documents and settings\Administrateur\Application Data\vlc
2012-10-17 06:46 . 2012-10-17 06:46 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Mozilla
2012-10-17 04:57 . 2012-10-17 04:57 -------- d-----w- c:\documents and settings\Administrateur\Application Data\ParetoLogic
2012-10-17 04:57 . 2012-10-17 05:38 -------- d-----w- c:\documents and settings\All Users\Application Data\ParetoLogic
2012-10-17 03:04 . 2012-10-17 03:04 -------- d-----w- c:\program files\Fichiers communs\Oberon Media
2012-10-17 03:04 . 2012-10-17 03:04 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\JollyBear
2012-10-17 03:04 . 2012-10-17 03:04 -------- d-----w- c:\program files\Fichiers communs\Adobe AIR
2012-10-17 03:03 . 2012-10-17 03:03 -------- d-----w- c:\program files\Driver-Soft
2012-10-17 03:03 . 2012-10-20 13:50 -------- d-----w- c:\documents and settings\Administrateur\Application Data\AVG
2012-10-17 03:03 . 2012-10-17 03:03 -------- d-----w- C:\vus
2012-10-17 03:02 . 2012-10-17 03:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Orange
2012-10-17 03:01 . 2012-10-17 03:05 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Orange
2012-10-16 13:20 . 2012-10-16 13:20 -------- d-----w- c:\documents and settings\All Users\Application Data\JollyBear
2012-10-16 12:56 . 2012-10-16 12:56 -------- d-----w- c:\windows\system32\wbem\Repository
2012-10-08 14:30 . 2012-10-08 14:37 -------- d-----w- c:\documents and settings\All Users\Application Data\DriverGenius
2012-10-08 13:58 . 2012-10-08 13:58 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Easeware
2012-10-05 21:15 . 2012-10-05 21:20 -------- d-----w- C:\ZIK
2012-10-05 16:13 . 2012-10-09 16:01 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Blue Tea Games
2012-10-03 21:09 . 2012-10-03 21:09 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\DownTango
2012-10-02 17:06 . 2012-10-15 10:33 -------- d-----w- c:\documents and settings\Administrateur\Application Data\AlawarEntertainment
2012-09-30 22:05 . 2012-09-30 22:05 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2012-09-30 07:07 . 2012-09-30 07:07 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Enki Games
2012-09-30 03:13 . 2008-04-14 01:34 92160 ----a-w- c:\windows\system32\kswdmcap.ax
2012-09-30 03:13 . 2008-04-14 01:34 43008 ----a-w- c:\windows\system32\ksxbar.ax
2012-09-30 03:13 . 2008-04-14 01:33 54784 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2012-09-30 03:13 . 2008-04-14 01:33 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2012-09-30 03:13 . 2008-04-14 01:34 61952 ----a-w- c:\windows\system32\kstvtune.ax
2012-09-30 03:08 . 2012-10-17 03:16 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Skype
2012-09-30 03:07 . 2012-10-17 03:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2012-09-29 17:30 . 2012-09-29 17:30 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Freeze Tag
2012-09-29 07:43 . 1998-09-02 08:28 38160 ----a-w- c:\windows\system32\LMRTREND.dll
2012-09-29 07:43 . 1998-08-20 11:02 140800 ----a-w- c:\windows\system32\tm20dec.ax
2012-09-29 07:43 . 1998-08-27 04:51 182032 ----a-w- c:\windows\system32\dxtmsft3.dll
2012-09-29 07:43 . 2008-04-14 02:33 221184 ----a-w- c:\windows\system32\wmpns.dll
2012-09-29 07:43 . 1998-09-02 08:28 63488 ----a-w- c:\windows\system32\unam4ie.exe
2012-09-29 07:43 . 1998-08-17 09:21 5672 ----a-w- c:\windows\system32\quartz.vxd
2012-09-29 07:43 . 1998-08-17 09:21 10240 ----a-w- c:\windows\system32\vidx16.dll
2012-09-29 07:43 . 1998-08-17 09:21 11776 ----a-w- c:\windows\system32\mciqtz.drv
2012-09-29 07:43 . 1998-09-02 08:02 194320 ----a-w- c:\windows\system32\qcut.dll
2012-09-29 07:41 . 1999-03-23 08:42 39136 ----a-w- c:\windows\system32\cdrom.sys
2012-09-29 07:33 . 2006-02-06 14:54 24064 ----a-r- c:\windows\system32\PostProc.dll
2012-09-29 07:33 . 2001-09-19 12:47 765952 ----a-r- c:\windows\system\crlds3d.dll
2012-09-29 07:33 . 2006-04-27 05:42 93824 ----a-r- c:\windows\system32\drivers\aeaudio.sys
2012-09-29 07:33 . 2006-06-27 12:43 245760 ----a-r- c:\windows\system32\drivers\ADIHdAud.sys
2012-09-29 07:33 . 2006-03-17 17:18 392960 ----a-r- c:\windows\system32\drivers\senfilt.sys
2012-09-27 11:08 . 2012-10-19 13:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Elephant Games
2012-09-25 08:02 . 2012-09-25 08:02 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Gogii
2012-09-24 13:39 . 2012-09-24 13:39 1409 ----a-w- c:\windows\QTFont.for
2012-09-23 18:05 . 2012-09-23 18:05 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\doubleTwist_Corporation
2012-09-23 16:41 . 2012-09-23 18:05 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\doubleTwist Corporation
2012-09-23 16:41 . 2012-09-24 04:07 -------- d-----w- c:\program files\Fichiers communs\doubleTwist
2012-09-23 16:41 . 2008-12-11 11:26 60273 ----a-w- c:\windows\system32\pthreadGC2.dll
2012-09-23 16:41 . 2012-09-24 04:07 -------- d-----w- c:\program files\ffdshow
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-28 15:04 . 2001-08-28 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:04 . 2001-08-28 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-08-28 15:04 . 2001-08-28 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2012-03-13 14:19 385024 ------w- c:\windows\system32\html.iec
2012-08-24 13:53 . 2001-08-28 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-24 13:53 . 2001-08-28 12:00 177664 ----a-w- c:\windows\system32\wintrust(2).dll
2012-08-23 06:27 . 2001-08-28 12:00 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27 . 2001-08-23 17:12 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-21 09:13 . 2012-03-13 15:15 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-03-13 15:15 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-03-13 15:15 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-03-13 15:15 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2012-03-13 15:15 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-08-21 09:13 . 2012-03-13 15:15 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-08-21 09:13 . 2012-03-13 15:15 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:13 . 2012-03-13 15:15 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-08-21 09:12 . 2012-03-13 15:15 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-03-13 15:15 227648 ----a-w- c:\windows\system32\aswBoot.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-06-23 847872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2012-07-03 11:46 462920 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Gestion à distance de Windows
"4662:TCP"= 4662:TCP:*:Disabled:emule
"4672:UDP"= 4672:UDP:emule
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [13/03/2012 17:15 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [13/03/2012 17:15 355632]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13/03/2012 17:15 21256]
R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [21/03/2012 12:18 12184]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [19/10/2012 16:37 655944]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [19/10/2012 16:37 22344]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Fichiers communs\MAGIX Services\Database\bin\FABS.exe [27/08/2009 18:09 1253376]
S2 Orange update Core Service;Orange update Core Service;c:\program files\Orange\OrangeUpdate\Service\OUCore.exe --> c:\program files\Orange\OrangeUpdate\Service\OUCore.exe [?]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Fichiers communs\MAGIX Services\Database\bin\fbserver.exe [07/08/2008 12:10 3276800]
S3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\drivers\ivusb.sys [29/07/2010 01:25 25112]
S4 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [14/03/2012 08:52 136176]
S4 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [14/03/2012 08:52 136176]
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2012-10-20 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-11 09:12]
.
2012-06-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-03-14 06:52]
.
2012-06-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-03-14 06:52]
.
2012-10-20 c:\windows\Tasks\User_Feed_Synchronization-{AE1C175C-E20B-4DB8-B7CB-45706BA56E7E}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage_IE
IE: ajouter cette page à vos favoris Orange - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\addfavorites_html\addfavorites.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: envoyer le texte sélectionné par sms - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
IE: envoyer par sms - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\sendsms_html\sendsms.html
IE: envoyer un mail - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\sendmail_html\sendmail.html
IE: orange.fr - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\orange_html\orange.html
IE: rechercher le texte sélectionné - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
IE: traduire la page - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\translate_html\translate.html
IE: traduire le texte sélectionné - c:\documents and settings\Administrateur\Application Data\Orange\OrangeInside\src\translateSelectedText_html\translateSelectedText.html
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-10 - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-20 16:18
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1547161642-515967899-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,29,d9,34,a9,16,52,45,a6,72,4a,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,29,d9,34,a9,16,52,45,a6,72,4a,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,40,29,d9,34,a9,16,52,45,a6,72,4a,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(1344)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2796)
c:\program files\RocketDock\RocketDock.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\System32\snmp.exe
.
**************************************************************************
.
Heure de fin: 2012-10-20 16:25:49 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-10-20 14:25
.
Avant-CF: 25 495 031 808 octets libres
Après-CF: 25 800 327 168 octets libres
.
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 37C6D644300C63A0CF8EFDD85CC671A5