C'est parce que tu as gardé tes favoris et données
Refais une installation propre en ne conservant rien

C'est ce que j'ai fait, et en fait steam est toujours infecté, je viens d'avoir une nouvelle pub...

Désinstalles KMSpico et refais frst

voilà :

http://www.cjoint.com/c/EGEmRDGqyP8

http://www.cjoint.com/c/EGEmR6JCyu8

Merci de prendre le temps de m'aider, ça s'est déjà amélioré !

ok je regarde ça

Refais un fixlist avec ses lignes

<code></code>start
Task: {056CD522-FEE9-4385-B850-46B9D09FB31D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d No Task File <==== ATTENTION
Task: {0574E92B-1A3A-4439-BC93-92F6D6A87819} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent No Task File <==== ATTENTION
Task: {26A2DC82-44C5-4A5A-B63C-B891647AEAE7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess No Task File <==== ATTENTION
Task: {2970C4E6-E3F9-44E0-9C41-1704EFCC66C1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d No Task File <==== ATTENTION
Task: {35AFD7A1-7B70-490C-AF74-A57817B52025} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d No Task File <==== ATTENTION
Task: {8E23BA08-FBA9-4628-93D8-EA4DFAC5BB69} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\RunOW.job => 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
2015-07-29 12:59 - 2015-07-29 12:59 - 00000356 _____ C:\WINDOWS\Tasks\RunOW.job
end</code>

voici le rapport

Fix result of Farbar Recovery Scan Tool (x64) Version:28-07-2015 Ran by Benjamin (2015-07-30 15:44:27) Run:3 Running from C:\Users\Benjamin\Desktop Loaded Profiles: Benjamin (Available Profiles: Benjamin & test) Boot Mode: Normal ============================================== fixlist content: ***************** start
Task: {056CD522-FEE9-4385-B850-46B9D09FB31D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d No Task File <==== ATTENTION
Task: {0574E92B-1A3A-4439-BC93-92F6D6A87819} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent No Task File <==== ATTENTION
Task: {26A2DC82-44C5-4A5A-B63C-B891647AEAE7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess No Task File <==== ATTENTION
Task: {2970C4E6-E3F9-44E0-9C41-1704EFCC66C1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d No Task File <==== ATTENTION
Task: {35AFD7A1-7B70-490C-AF74-A57817B52025} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d No Task File <==== ATTENTION
Task: {8E23BA08-FBA9-4628-93D8-EA4DFAC5BB69} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\RunOW.job => 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
2015-07-29 12:59 - 2015-07-29 12:59 - 00000356 _____ C:\WINDOWS\Tasks\RunOW.job
end

• • **************

</code>start => Error: No automatic fix found for this entry.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{056CD522-FEE9-4385-B850-46B9D09FB31D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{056CD522-FEE9-4385-B850-46B9D09FB31D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0574E92B-1A3A-4439-BC93-92F6D6A87819}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0574E92B-1A3A-4439-BC93-92F6D6A87819}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{26A2DC82-44C5-4A5A-B63C-B891647AEAE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{26A2DC82-44C5-4A5A-B63C-B891647AEAE7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2970C4E6-E3F9-44E0-9C41-1704EFCC66C1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2970C4E6-E3F9-44E0-9C41-1704EFCC66C1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35AFD7A1-7B70-490C-AF74-A57817B52025}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35AFD7A1-7B70-490C-AF74-A57817B52025}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E23BA08-FBA9-4628-93D8-EA4DFAC5BB69}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E23BA08-FBA9-4628-93D8-EA4DFAC5BB69}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
C:\WINDOWS\Tasks\RunOW.job => moved successfully.
"C:\WINDOWS\Tasks\RunOW.job" => File/Folder not found.

==== End of Fixlog 15:44:28 ====
</code>

Je te tiens au courant.

Bon, j'ai réinstaller firefox je vais bien voir mais je pense pas que ça va faire grand chose... Je pense de plus en plus a reformater, mais vu que je suis sous windows 10, je sais pas comment faire sachant que j'ai deux disque dur, dont un ssd...

EDIT : toujours infecté...

au pire tu peux toujours tenter eset online scanner mais il n'y avait plus d'infection

attends, je viens de penser a _un truc là, j'ai deux disques durs, ca pose pas de problème ? par ce que si ça se trouve, les logiciels ne scannent que C et pas l'autre.

Fais un scan avec eset online scanner

Ok là ce soir je peut pas, je te tiens au courant demain.

merci encore.

j'ai fait le scan en ligne, et voilà ce que ça donne :

C:\Users\Benjamin\AppData\Roaming\uTorrent\updates\3.4.2_31515.exe a variant of Win32/AdkDLLWrapper.A potentially unwanted application cleaned by deleting - quarantined
C:\Windows.old\Users\Benjamin\AppData\Local\Temp\ICReinstall_hamachi_2-2_fr_14515.exe a variant of Win32/InstallCore.UE potentially unwanted application cleaned by deleting - quarantined

Toujours des pubs?

Ouais...

Je pense de plus en plus a reformater.

Tu peux tenter roguekiller

toujours des pubs pares passage de roguekiller.

Mais où sur steam ou sur firefox ?

Quand je clique sur des liens j'ai des popup qui s'ouvrent avec des pubs. Parfois j'ai même un truc qui s'ouvre sur le coté de ma page.

Sur malekal, une personne semble avoir le même problème que moi, et apparement ce serait carément une infection de fichiers systèmes.