Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 04-08-2022
Exécuté par nkoko (administrateur) sur LAPTOP-KDQE7FE3 (HP OMEN by HP Laptop) (09-08-2022 08:28:02)
Exécuté depuis C:\Users\nkoko\OneDrive\Bureau
Profils chargés: nkoko
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1826 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Chaos Group\V-Ray\Swarm 1.4\register-service.exe ->) (Chaos Software Ltd.) [Fichier non signé] C:\Program Files\Chaos Group\V-Ray\Swarm 1.4\swrm.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.15427.20194\OfficeClickToRun.exe
(C:\Program Files\mcafee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\uihost.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ChaosGroup) [Fichier non signé] C:\Program Files\Chaos Group\Chaos Cosmos\cbservice.exe <2>
(cmd.exe ->) () [Fichier non signé] C:\Users\nkoko\AppData\Roaming\graber.exe <2>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki124164.inf_amd64_85b60d2b8c3af983\igfxEM.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(services.exe ->) ("Chaos Software" Ltd -> ) C:\Program Files\Chaos Group\VRLService\OLS\vrol.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Chaos Software Ltd. -> ) [Fichier non signé] C:\Program Files\Chaos Group\V-Ray\Swarm 1.4\register-service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (HP Inc. -> HP) C:\Windows\System32\hpservice.exe
(services.exe ->) (HP Inc.) [Fichier non signé] C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki124164.inf_amd64_85b60d2b8c3af983\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki124164.inf_amd64_85b60d2b8c3af983\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki124164.inf_amd64_85b60d2b8c3af983\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhmsi.inf_amd64_56ff2fe42ef6ee17\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) () [Fichier non signé] C:\Users\nkoko\AppData\Local\cache\MoUSO.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Development Company, L.P.) C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\nkoko\AppData\Local\Microsoft\OneDrive\22.151.0717.0001\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dxgiadaptercache.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotification.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9217024 2017-04-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [1062392 2017-03-15] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324488 2016-08-02] (HP Inc. -> HP)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-2403731186-2497711067-2804180243-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-2403731186-2497711067-2804180243-1001\...\Run: [MicrosoftEdgeAutoLaunch_82A3B979538FB1ADDC98308836A1642D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3827112 2022-08-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2403731186-2497711067-2804180243-1001\...\MountPoints2: {8b7380a4-dd1b-11ec-9989-f430b9a69c12} - "F:\HiSuiteDownLoader.exe" 
HKLM\...\Print\Monitors\HP E111 Status Monitor: C:\windows\system32\hpinkstsE111LM.dll [393352 2017-04-14] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\104.0.5112.79\Installer\chrmstp.exe [2022-08-04] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CCBService.lnk [2022-08-05]
ShortcutTarget: CCBService.lnk -> C:\Program Files\Chaos Group\Chaos Cosmos\cbservice.exe (ChaosGroup) [Fichier non signé]
Startup: C:\Users\nkoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nvidia.lnk [2021-11-16]
ShortcutTarget: nvidia.lnk -> C:\Users\nkoko\AppData\Roaming\nvidia.vbs () [Fichier non signé]

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {013B846B-5135-46B1-8980-2DD1D890B615} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116648 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {030C32BD-C7EF-4204-9399-D8888E0F65BC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {03F8ADDA-94AA-4C06-B6C7-1DA90F24F71E} - System32\Tasks\Cache-S-21-2946144819-3e21f723 => C:\Users\nkoko\AppData\Local\cache\MoUSO.exe [734003200 2022-08-03] () [Fichier non signé]
Task: {051184BA-6AA9-4A82-8C21-CF86A4BBE8B7} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {07409080-1396-468F-B914-3D5E0D88D9F7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {095BC042-5244-40FC-92A4-655F41A1F88E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [715216 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {0C518199-F01B-42CF-9CB7-16710B002812} - \Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask -> Pas de fichier <==== ATTENTION
Task: {0E74EEBD-BDCE-4529-9E57-5F3FCD2E38EE} - \HPEA3JOBS -> Pas de fichier <==== ATTENTION
Task: {15F0DCDB-AAD3-4ACB-9CA8-024D661B03F5} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> Pas de fichier <==== ATTENTION
Task: {22AF5FAD-9821-4FEE-AC46-6BCD205106CC} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-04-07] (HP Inc. -> HP Inc.)
Task: {2AA41AA0-F7EC-459F-B985-289DCBE6AB7D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-14] (Google LLC -> Google LLC)
Task: {32A9DA54-3B7C-4DCF-9E39-FE4DED6AFB25} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - \Microsoft\Windows\WindowsUpdate\sih -> Pas de fichier <==== ATTENTION
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - \Microsoft\Windows\UpdateOrchestrator\Reboot -> Pas de fichier <==== ATTENTION
Task: {65B05AA8-71A2-495D-B1BC-518274D1D33A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F640F1D-7BB8-45AA-BCBE-5AEF93FB81FA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-06] (HP Inc. -> HP Inc.)
Task: {7072963F-3763-4E9F-A1F5-DE9703BAE827} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Pas de fichier <==== ATTENTION
Task: {73A86095-146D-422B-A905-477D325FF612} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {74BE8713-56EE-4942-8C71-EFFD8C853F64} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
Task: {77D6C9B8-BBB7-44E6-8CFB-7FD631353A35} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8666620D-3AB3-4370-A402-63355CFDFECA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116648 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {86D6E524-DED8-44DA-804E-59D6F993DF49} - \Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install -> Pas de fichier <==== ATTENTION
Task: {8B646E41-9FF6-4DCF-9D91-9B7C0925A066} - \HPAudioSwitch -> Pas de fichier <==== ATTENTION
Task: {9990406B-77FF-4070-8734-BAA3F28D223C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A9A3F3F4-5E64-4B86-BE17-97247048BE32} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Pas de fichier <==== ATTENTION
Task: {B8FA17C3-3B4B-4985-84A8-9E7BEDC710CA} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Pas de fichier <==== ATTENTION
Task: {BDF447EF-50CF-4903-8637-32199C484875} - \HPJumpStartLaunch -> Pas de fichier <==== ATTENTION
Task: {BF2FC061-C682-418A-9631-BFC317253005} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-14] (Google LLC -> Google LLC)
Task: {D08C0FA7-06CE-4770-835F-4DCCCDAE47F6} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Pas de fichier <==== ATTENTION
Task: {D522F4CC-2DDD-459C-9BD1-03672AEA4FD6} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Pas de fichier <==== ATTENTION
Task: {D6183F33-362F-482F-BB20-8EF872095B21} - \DropboxOEM -> Pas de fichier <==== ATTENTION
Task: {D9664D55-CF97-45F3-952B-282FD02654C9} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Pas de fichier <==== ATTENTION
Task: {DC294E9D-A65A-4D0E-AF23-86BAC3C017C5} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Pas de fichier <==== ATTENTION
Task: {E4F649CB-FB96-4526-BD83-320A3B4533B6} - System32\Tasks\HPCeeScheduleFornkoko => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {F5BB4073-F7BC-4817-9A8E-0042DCE2C320} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1487392 2017-04-07] (HP Inc. -> HP Inc.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleFornkoko.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{8d257f82-d966-4ca2-a97a-bf7e9f1e1dbf}: [DhcpNameServer] 40.23.1.11
Tcpip\..\Interfaces\{acabe690-38b9-4193-a4f8-ea108e4fe921}: [DhcpNameServer] 192.168.1.254

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\nkoko\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-09]
Edge HomePage: Default -> hxxp://www.fr-gogo.com/
Edge StartupUrls: Default -> "hxxp://www.google.com/"

FireFox:
========
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default [2022-08-09]
CHR Notifications: Default -> hxxps://pantoneexam.000webhostapp.com; hxxps://www.netflix.com; hxxps://www.youtube.com; hxxps://www97.orvilleandrea.pro
CHR HomePage: Default -> hxxp://www.fr-gogo.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Ad Block Ultra) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpiejmibihoklikohojpofdfgnjhjdfj [2022-05-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-28]
CHR Extension: (Planificateur de logements) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjfkgdpkecnmfcgfpfibpcnkeakahllc [2021-11-16]
CHR Extension: (Skyrama) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlehaidnnmjjkhgbbiombcdifogolhap [2021-11-16]
CHR Extension: (Lady Popular) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnamdlacgipmoldlhfgjficjiclhgibm [2021-11-16]
CHR Extension: (L'ultime bloqueur de publicité vidéo) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbjaofhpjelogcpkjgpneaojiafljhik [2021-11-17]
CHR Extension: (MetaMask) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-08-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-14]
CHR Extension: (Canvas Rider) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2021-11-16]
CHR Profile: C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-08-09]
CHR Profile: C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-04-29]
CHR Notifications: Profile 1 -> hxxps://fr.best-jobs-online.com
CHR Extension: (Slides) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-03-27]
CHR Extension: (Docs) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-03-27]
CHR Extension: (Google Drive) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-03-27]
CHR Extension: (YouTube) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-03-27]
CHR Extension: (Sheets) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-03-27]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-03-27]
CHR Extension: (Google Docs hors connexion) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-27]
CHR Extension: (Gmail) - C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-03-27]
CHR Profile: C:\Users\nkoko\AppData\Local\Google\Chrome\User Data\System Profile [2022-08-09]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111288 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1309184 2016-10-07] (HP Inc.) [Fichier non signé]
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-04-03] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [223904 2022-04-28] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\windows\system32\Hpservice.exe [38752 2016-09-26] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [630776 2017-02-06] (HP Inc. -> HP Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [808728 2022-08-04] (McAfee, LLC -> McAfee, LLC)
R2 VRLService; C:\Program Files\Chaos Group\VRLService\OLS\vrol.exe [19188960 2022-08-05] ("Chaos Software" Ltd -> )
R2 vrswrm-service; C:\Program Files\Chaos Group\V-Ray\Swarm 1.4\register-service.exe [90176 2022-08-05] (Chaos Software Ltd. -> ) [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhmsi.inf_amd64_56ff2fe42ef6ee17\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhmsi.inf_amd64_56ff2fe42ef6ee17\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 FTSER2K; C:\WINDOWS\system32\drivers\ftser2k.sys [79872 2014-09-09] (Microsoft Windows Hardware Compatibility Publisher -> FTDI Ltd.)
S3 MpKsl0f950962; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A4558AD-012F-4711-A074-2237E2166A7D}\MpKslDrv.sys [141576 2022-08-09] (Microsoft Windows -> Microsoft Corporation)
R3 MpKsl49d55ff9; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A4558AD-012F-4711-A074-2237E2166A7D}\MpKslDrv.sys [141576 2022-08-09] (Microsoft Windows -> Microsoft Corporation)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64880 2020-04-24] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-08-09 08:26 - 2022-08-09 08:32 - 000000000 ____D C:\FRST
2022-08-08 22:22 - 2022-08-08 22:22 - 000000000 ____H C:\Users\nkoko\BIT2380.tmp
2022-08-06 08:23 - 2022-08-06 08:23 - 000003612 _____ C:\WINDOWS\system32\Tasks\Cache-S-21-2946144819-3e21f723
2022-08-06 07:51 - 2022-08-06 07:51 - 000000000 ____D C:\Users\nkoko\.oracle_jre_usage
2022-08-05 22:25 - 2022-08-09 08:20 - 000000000 ____D C:\Users\nkoko\OneDrive\Documents\Chaos Cosmos
2022-08-05 22:25 - 2022-08-05 22:38 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\Chaos Group
2022-08-05 22:25 - 2022-08-05 22:25 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chaos Group
2022-08-05 22:24 - 2022-08-05 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\V-Ray for SketchUp
2022-07-21 17:02 - 2022-07-21 17:02 - 000087507 _____ C:\Users\nkoko\Downloads\ATTESTATION D HEBERGEMENT.pdf
2022-07-14 19:30 - 2022-07-14 19:30 - 000137998 _____ C:\Users\nkoko\Downloads\cerfa_14880-02.pdf
2022-07-14 02:37 - 2022-07-14 02:37 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-07-14 02:37 - 2022-07-14 02:37 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-07-14 02:37 - 2022-07-14 02:37 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-07-14 02:37 - 2022-07-14 02:37 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-07-14 02:37 - 2022-07-14 02:37 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-07-14 02:37 - 2022-07-14 02:37 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-07-14 02:36 - 2022-07-14 02:36 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-07-14 02:36 - 2022-07-14 02:36 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-07-14 02:36 - 2022-07-14 02:36 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-07-14 02:36 - 2022-07-14 02:36 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-07-14 02:36 - 2022-07-14 02:36 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-07-14 02:36 - 2022-07-14 02:36 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-07-14 02:36 - 2022-07-14 02:36 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-07-14 02:36 - 2022-07-14 02:36 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-07-14 02:36 - 2022-07-14 02:36 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-07-14 02:36 - 2022-07-14 02:36 - 000011811 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-07-14 02:35 - 2022-07-14 02:35 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-07-14 02:35 - 2022-07-14 02:35 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-07-14 02:35 - 2022-07-14 02:35 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-07-14 02:15 - 2022-07-14 02:15 - 000000000 ___HD C:\$WinREAgent
2022-07-12 09:37 - 2022-07-12 09:37 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2022-07-12 09:37 - 2022-07-12 09:37 - 000000000 ____D C:\Users\nkoko\AppData\Local\Zoom
2022-07-12 09:36 - 2022-07-12 09:37 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\Zoom

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-08-09 08:33 - 2021-11-14 18:57 - 000000000 ____D C:\Program Files (x86)\Google
2022-08-09 08:28 - 2021-11-13 22:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-09 08:25 - 2021-11-14 00:02 - 001841164 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-09 08:25 - 2021-11-13 22:52 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-08-09 08:25 - 2021-11-13 22:52 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-08-09 08:25 - 2021-11-13 22:45 - 000000000 ____D C:\WINDOWS\INF
2022-08-09 08:21 - 2021-11-14 00:30 - 000000000 ___RD C:\Users\nkoko\OneDrive
2022-08-09 08:19 - 2021-11-14 00:24 - 000000000 __SHD C:\Users\nkoko\IntelGraphicsProfiles
2022-08-09 08:17 - 2022-02-21 23:38 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleFornkoko.job
2022-08-09 08:17 - 2021-11-13 23:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-09 08:17 - 2021-11-13 23:29 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-09 08:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\ServiceState
2022-08-09 08:17 - 2021-11-13 22:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-08-09 08:17 - 2017-07-31 14:55 - 000000000 ____D C:\ProgramData\NVIDIA
2022-08-09 08:08 - 2021-11-13 23:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-08 23:35 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-08-08 22:22 - 2022-02-21 23:38 - 000003256 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleFornkoko
2022-08-08 22:22 - 2021-11-14 00:13 - 000000000 ____D C:\Users\nkoko
2022-08-07 11:31 - 2021-11-13 22:47 - 000000000 ___HD C:\Program Files\WindowsApps
2022-08-07 11:12 - 2021-11-13 23:42 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-06 08:44 - 2021-11-14 00:25 - 000000000 ____D C:\Users\nkoko\AppData\Local\D3DSCache
2022-08-06 08:23 - 2022-02-08 12:06 - 000000000 ___HD C:\Users\nkoko\AppData\Local\cache
2022-08-05 22:25 - 2021-11-16 20:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chaos Group
2022-08-05 22:25 - 2021-11-16 20:20 - 000000000 ____D C:\Program Files\Chaos Group
2022-08-05 22:25 - 2021-11-16 15:07 - 000000000 ____D C:\Program Files\Common Files\ChaosGroup
2022-08-05 22:25 - 2017-05-13 08:05 - 000000000 ____D C:\ProgramData\Package Cache
2022-08-04 23:45 - 2021-11-14 18:59 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-08-04 22:43 - 2021-12-11 03:17 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2403731186-2497711067-2804180243-1001
2022-08-04 22:43 - 2021-11-14 00:30 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2403731186-2497711067-2804180243-1001
2022-08-04 22:43 - 2021-11-14 00:13 - 000002428 _____ C:\Users\nkoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-07-28 12:08 - 2021-12-11 16:30 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2022-07-21 11:05 - 2021-11-13 23:42 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-07-21 11:05 - 2021-11-13 23:42 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-07-20 12:40 - 2017-05-13 08:09 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-07-14 18:23 - 2021-11-16 13:12 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\WhatsApp
2022-07-14 03:19 - 2021-11-13 23:29 - 000344264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\SystemResources
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\system32\setup
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-07-14 03:17 - 2021-11-13 22:47 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-07-14 02:42 - 2021-11-13 22:39 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-07-14 02:35 - 2021-11-13 23:32 - 003010560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-07-14 02:15 - 2021-11-16 19:26 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-07-14 02:12 - 2021-11-16 19:26 - 146546848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-07-11 19:05 - 2021-11-19 00:50 - 000000000 ____D C:\Users\nkoko\AppData\Roaming\obs-studio

==================== Fichiers à la racine de certains dossiers ========

2020-10-30 10:44 - 2021-01-18 01:47 - 000000125 ___SH () C:\Users\nkoko\AppData\Roaming\bim.bat
2020-10-30 10:44 - 2021-01-18 01:47 - 066328064 ___SH () C:\Users\nkoko\AppData\Roaming\graber.exe
2020-10-30 10:44 - 2020-06-29 01:06 - 000000115 ___SH () C:\Users\nkoko\AppData\Roaming\nvidia.vbs

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================