spam x sur mon PC; aide pour désinfection svp Résolu/Fermé

Question

Bonjour, 


Je suis venue sur le site cet été, et quelqu'un m'avait déjà aidé pour me débarrasser de logiciels malveillants avec malwarebytes entre autres.
Même si mon ordi à l'air "clean" et est beaucoup moins lent depuis, j'ai malgré tout toujours le même problème, persistant et très génant, c'est que tous les jours à 21heures précises (!!) une pub X se lance dans mon navigateur web.
Je fais régulièrement des scans avec malwarebytes et avast, et apparement il n'y a aucune menace.
Pourriez vous m'indiquer un logiciel ou une technique pour éradiquer cette pub dégoutante?
Merci pour votre aide


Configuration: Windows Vista / Firefox 3.6.11

benurrr · Answer

Bonjourrr

Téléchargez et enregistrez Navilog1 sur le Bureau. 

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe  

Sous XP : double-cliquez sur l'icône pour lancer l'outil. 

Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur". 

Choisissez votre langue, appuyez sur F pour Français. 

Appuyez sur une touche jusqu'à ce que vous arriviez au menu des options. 

Choisissez l'option 1 (Recherche / Désinfection Automatique). 

Laissez le programme travailler, il pourrait durer une dizaine de minutes. 

Si l'outil trouve quelque chose, il sera amené à faire redémarrer l'ordinateur. 

Lorsque le message "Scan terminé le..." s'affichera, appuyez sur une touche pour faire apparaitre le rapport dans le Bloc-notes (il sera aussi enregistré automatiquement sur votre disque dur : C:\cleannavi.txt)

helpvirus · Answer

Merci pour votre réponse,
ci joint le rapport:

Fix Navipromo version 4.0.9 commencé le 23/10/2010 22:45:23,55

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:
avilog1

Mise à jour le 17.09.2010 à 16h00 par IL-MAFIOSO

Microsoft® Windows Vista(TM) Édition Familiale Basique  ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU       T4200  @ 2.00GHz )
BIOS : Default System BIOS
USER : Nawel ( Administrator )
BOOT : Normal boot




C:\ (Local Disk) - NTFS - Total:162 Go (Free:115 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)

benurrr · Answer

Télécharge Ad-Remover sur ton bureau: 
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe 
https://www.androidworld.fr/ 

Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur". 

Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Scanner". 
Laisse travailler l'outil. 
Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée. 
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

helpvirus · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/10/10 à 20:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 23:05:46 le 23/10/2010, Mode normal

Microsoft® Windows Vista(TM) Édition Familiale Basique  Service Pack 2 (X86) 
Nawel@PC-DE-NAWEL (Hewlett-Packard Compaq Presario CQ61 Notebook PC) 
 
============== RECHERCHE ==============



Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{306467C5-0D1E-4167-AAE2-DA301CD9A59B}


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.10 (fr)] **

-- C:\Users\Nawel\AppData\Roaming\Mozilla\FireFox\Profiles\du0hdb69.default\Prefs.js --
browser.download.dir, C:\Users\Nawel\Downloads
browser.startup.homepage, hxxp://orange.fr
browser.startup.homepage_override.mstone, rv:1.9.2.11

========================================

** Internet Explorer Version [8.0.6001.18975] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Show_ToolBar: yes
Start Page: hxxp://www.orange.fr/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 23/10/2010 (2288 Octet(s)) 

Fin à: 23:07:17, 23/10/2010 
 
============== E.O.F ==============

benurrr · Answer

Nettoyage:

/!\ Ferme toutes tes applications ouvertes. /!\

Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Nettoyer".
Laisse travailler l'outil.
Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.

helpvirus · Answer

j ai du redémarrer l ordi pour que l analyse se finalise, mais je ne sais pas où se trouve le rapport enregistré?..

benurrr · Answer

dans C

helpvirus · Answer

merci


======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/10/10 à 20:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 23:18:33 le 23/10/2010, Mode normal

Microsoft® Windows Vista(TM) Édition Familiale Basique  Service Pack 2 (X86) 
Nawel@PC-DE-NAWEL (Hewlett-Packard Compaq Presario CQ61 Notebook PC) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{306467C5-0D1E-4167-AAE2-DA301CD9A59B}


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.10 (fr)] **

-- C:\Users\Nawel\AppData\Roaming\Mozilla\FireFox\Profiles\du0hdb69.default\Prefs.js --
browser.download.dir, C:\Users\Nawel\Downloads
browser.startup.homepage, hxxp://orange.fr
browser.startup.homepage_override.mstone, rv:1.9.2.11

========================================

** Internet Explorer Version [8.0.6001.18975] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 23/10/2010 (2253 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 23/10/2010 (2417 Octet(s)) 

Fin à: 23:20:10, 23/10/2010 
 
============== E.O.F ==============

helpvirus · Answer

la page de pub vient de réapparaitre!!
est ce que le nettoyage fonctionne vraiment??
merci

benurrr · Answer

une cle a etait suprimer mais il y'en a d'autre

Telecharge combofix : 
Faire un clic droit sur le lien 
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

    * Choisir : "Enregistrer la cible du lien sous..." 
    * Choisir le Bureau comme destination. 
    * Dans le champ "Nom du fichier", renommer ComboFix.exe en CCM.exe par exemple, puis enregistrer. 
    * Attention ! L'étape de renommage est obligatoire sous peine de voir afficher le message "ComboFix.exe n'est pas une application win32 valide" et de le rendre ainsi totalement inefficace.  

 Note importante :tu est sous Vista 

la désactivation du Contrôle des comptes utilisateurs est obligatoire 

Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac­er-l-uac 

pour toute manipulation fait comme ceci( clic droit "exécuter en tant qu'administrateur" pour Vista/7 )  

-> Double clique combofix.exe.  
-> Tape sur la touche 1 (Yes) pour démarrer le scan.  
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.  

NOTE : Le rapport se trouve également ici : C:\Combofix.txt  

Avant d'utiliser ComboFix :  

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.  

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.  

Une fois fait, sur ton bureau double-clic sur Combofix.exe.  

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.  

-Attention  Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi  

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.  

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)  

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.  

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.  

!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet)  

::Si combofix detecte quelque chose et de demande a redémarrer tu accepte 
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

helpvirus · Answer

ComboFix 10-10-22.05 - Nawel 23/10/2010  23:50:42.1.2 - x86
Lancé depuis: c:\users\Nawel\Desktop\CCM.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroIEHelper.dll
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroIEHelperShim.dll
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroPDF.dll
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroPDF.FRA
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\pdfshell.dll
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\pdfshell.FRA
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.0.6001.18000_none_120e336fea4a5696_actxprxy.dll_82133921
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_bb0c4b16a3cdf79e_advapi32.dll.mui_28c7718f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.0.6001.18000_none_e34851aa8681b8b0_advapi32.dll_9512793c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advpack.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_d773de0bfeaad348_advpack.dll.mui_2fc06c95
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6001.18000_none_abcb6579f2d08df0_advpack.dll_8c6ea088
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.18293_none_aac1f52459f8aeb3_atl.dll_0c7220db
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.0.6001.18000_none_b5dfbc3a51b01b87_winmm.dll_08d4f5e8
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.0.6001.18000_none_0bf37d16f567e1f7_authui.dll_05ff9fd2
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_dc2b7e603ef69e37_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_79655e87353c9a36_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_de-de_7690f3c33712eed0_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_1f2721562628575e_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f81c9bc25f0fa95_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_es-es_1f4d26a02617ec3a_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_be682b4d1b31de64_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_c2049c9f18ea029c_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_09751ce6fd49d1b8_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_it-it_ac2c92e5f01be81a_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_4e5211f2e336f9f5_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_f1bbeea7d5a7c10b_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_da4e6fdcadccecc7_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_d88dbb1aaef8f69c_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_1eca159c941b6450_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_211e004092a4f834_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_21ffcfac92146810_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_68a2e17076f5f63c_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_049dcbe56e1f0097_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_adab162c5cdb0288_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_7f08342a0d12d4a7_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_7db32cb80dee4737_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_830471800a83b117_bootmgr.exe.mui_c434701f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_setbcdlocale.dll_77bec53b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_winload.exe_75835076
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_winresume.exe_85cd1215
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6001.18000_none_11b58d1eacaaef15_kdcom.dll_db5e7744
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_596c2a437e051e5c_memtest.exe.mui_77b8cbcc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_85c9aa521430d159_expand.exe.mui_3f54e013
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_85c9aa521430d159_netmsg.dll.mui_ab0f7c73
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ng-engine.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5839302cd22da35e_winbrand.dll.mui_3ca0ebbc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_191b8ce8d6fcde7a_winload.exe.mui_3bc5b827
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_191b8ce8d6fcde7a_winresume.exe.mui_ff8b5358
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.0.6001.18000_none_d8354e6a049d5abe_memtest.exe_01d80391
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_beffcb972322525d_winload.exe.mui_3bc5b827
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_beffcb972322525d_winresume.exe.mui_ff8b5358
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b_winload.exe_75835076
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b_winresume.exe_85cd1215
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.0.6000.16386_none_006b2fc82be4576c_psapi.dll_e8b5b4d1
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basesrv_31bf3856ad364e35_6.0.6001.18000_none_0ccaead5e3bacdd0_basesrv.dll_8c1ad808
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_expand.exe_f43b24c8
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_netmsg.dll_52337068
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_netrap.dll_8860c248
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.0.6001.18000_none_38797b7986345c9b_bootvid.dll_c188118d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.0.6000.16386_none_e73316a16878fc16_winbrand.dll_9cd6a3cf
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-browseui.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_44b593b4d3d0d1ca_browseui.dll.mui_58ee483b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-browseui_31bf3856ad364e35_6.0.6001.18000_none_30e2e1b2e655cd1c_browseui.dll_7a6f3790
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_8bd47df3081acc91_drvinst.exe.mui_e88f4c73
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_8bd47df3081acc91_umpnpmgr.dll.mui_d66aed17
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_9980918843687de0_ci.dll.mui_76757f43
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_050b67d195e2b066_certcli.dll.mui_1b6822cf
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..qfe-rpcss.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_e8bcaf49192f21ec_rpcss.dll.mui_78e56052
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.0.6001.18000_none_d77db57c3ca78826_certcli.dll_f553bbce
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.0.6001.18000_none_373f511ce1ebb446_cabinet.dll_7ab07912
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cdfs_31bf3856ad364e35_6.0.6001.18000_none_a667930f1cf3e8c6_cdfs.sys_02574081
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cmi_31bf3856ad364e35_6.0.6001.18000_none_a9ce4a485a8ade99_cmiv2.dll_be06aa9f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6_cngaudit.dll_86fb1bb1
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6001.18023_none_a065524404cd682d_ci.dll_070fb998
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.0.6001.18000_none_ac1da75bf2516084_ole32.dll_e9dcc2e3
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6001.18226_none_69bb41ac3deac876_rpcss.dll_fd3e269b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_58cbcd0633b69569_ole32.dll.mui_5035d60a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_58cbcd0633b69569_oleres.dll.mui_ff00d4cb
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43_comcat.dll_8571d1d1
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43_oleres.dll_2eae8210
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ar-sa_ce2a204bd0e07b46_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_bg-bg_746a01d4c160cc9d_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_1f73786faee8a8c8_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_bcad5896a52ea4c7_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_de-de_b9d8edd2a704f961_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_626f1b65961a61ef_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_en-us_62c9c3cb95e30526_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_es-es_629520af9609f6cb_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_et-ee_5c54ec3f9a0fd35a_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_01b0255c8b23e8f5_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_054c96ae88dc0d2d_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_he-il_496c3e506f4b0e1b_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_hr-hr_4b88f1306dfe7ae1_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_4cbd16f66d3bdc49_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_it-it_ef748cf5600df2ab_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_919a0c0253290486_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_3503e8b74599cb9c_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_lt-lt_d8cf14b837c19739_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_lv-lv_d99c833c373fd829_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_1d9669ec1dbef758_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_1bd5b52a1eeb012d_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_62120fac040d6ee1_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_6465fa50029702c5_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_6547c9bc020672a1_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ro-ro_a9828ff3e86d3dfd_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_abeadb7fe6e800cd_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sk-sk_4b05e02cdc01f2f7_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sl-si_4a1801e4dc9c05da_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sr-..-cs_e9a17e7755f46922_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_47e5c5f4de110b28_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_th-th_ecefe7a7cf55c869_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_f0f3103bcccd0d19_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_uk-ua_8cd2f2e2c3fe3365_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_c2502e397d04df38_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_c0fb26c77de051c8_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_c64c6b8f7a75bba8_comctl32.dll.mui_0da4e682
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ar-sa_56568abbaaeb5efc_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_bg-bg_fc966c449b6bb053_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_a79fe2df88f38c7e_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_44d9c3067f39887d_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_de-de_42055842810fdd17_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_ea9b85d5702545a5_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_en-us_eaf62e3b6fede8dc_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_es-es_eac18b1f7014da81_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_et-ee_e48156af741ab710_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_89dc8fcc652eccab_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_8d79011e62e6f0e3_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_he-il_d198a8c04955f1d1_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_hr-hr_d3b55ba048095e97_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_d4e981664746bfff_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_it-it_77a0f7653a18d661_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_19c676722d33e83c_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_bd3053271fa4af52_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_lt-lt_60fb7f2811cc7aef_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_lv-lv_61c8edac114abbdf_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_a5c2d45bf7c9db0e_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_a4021f99f8f5e4e3_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_ea3e7a1bde185297_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_ec9264bfdca1e67b_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_ed74342bdc115657_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ro-ro_31aefa63c27821b3_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_341745efc0f2e483_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sk-sk_d3324a9cb60cd6ad_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sl-si_d2446c54b6a6e990_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sr-..-cs_71cde8e72fff4cd8_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_d0123064b81beede_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_th-th_751c5217a960ac1f_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_791f7aaba6d7f0cf_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_uk-ua_14ff5d529e09171b_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_4a7c98a9570fc2ee_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_4927913757eb357e_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_4e78d5ff54809f5e_comdlg32.dll.mui_ac8e62f4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32_31bf3856ad364e35_6.0.6001.18000_none_b5b111a1a5a793a5_comdlg32.dll_b1ffde97
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6001.22132_none_7eedc84840c02c40_clfs.sys_04dfdff9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_fs_rec.sys_dfd2dd83
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_imagehlp.dll_41876e91
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_wmi.dll_cba0311d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_cfgmgr32.dll_7bc7e545
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_drvinst.exe_6593e92a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_umpnpmgr.dll_112f9bb4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-credui.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_0266d651984fbcfe_credui.dll.mui_34721171
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-credui_31bf3856ad364e35_6.0.6001.18000_none_db374cc18eed7408_credui.dll_c0e5bbea
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6e72ee75b0546bd2_crypt32.dll.mui_4268f86a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6001.18000_none_5b6fc1dbddd3c6da_crypt32.dll_9c3ccf73
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptdll-dll_31bf3856ad364e35_6.0.6001.18000_none_059e85e6adc57125_cryptdll.dll_e0da7eac
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.0.6001.18000_none_17194119fbd5b944_cryptnet.dll_e44c577b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptui-dll.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_a5e5011991525101_cryptui.dll.mui_9728c1dd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptui-dll_31bf3856ad364e35_6.0.6001.18000_none_85ee5b5e98235317_cryptui.dll_af347940
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.0.6001.18000_none_c9873705a55da1c9_csrsrv.dll_f50da7f9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c_csrss.exe_06529458
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfhost.exe.mui_1fc689ff
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfplatform.dll.mui_d815d31a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfsvc.dll.mui_e907fe77
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..irectdraw.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_0f01563062f52121_ddraw.dll.mui_95b8c3ab
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcmonitor.dll.mui_478a7103
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcsvc.dll.mui_186571e1
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcsvc6.dll.mui_b45c7567
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6001.18000_none_e00ee48d3ffd5af4_dwmapi.dll_2f4f8b34
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6001.18000_none_e00ee48d3ffd5af4_milcore.dll_89763441
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_ntdsapi.dll_23e20303
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_w32topl.dll_1a0f388b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..owmanager.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_4a454ca1b1de622d_dwm.exe.mui_706e052f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_dwm.exe_04cf416e
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_dwmredir.dll_a25c13fe
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_uxsms.dll_ca422e1e
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..utoenroll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5b839e304fa3ea19_pautoenr.dll.mui_9667d15f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..vices-sam.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_b703115232707ef4_samsrv.dll.mui_32250491
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dfsclient_31bf3856ad364e35_6.0.6001.18000_none_879a2ddde61be4de_dfsc.sys_ff9a943d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcmonitor.dll_aa545cc8
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcsvc.dll_8155446a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcsvc6.dll_39c77c46
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.18000_none_b1ee595da0f48e64_samlib.dll_caeebf04
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.18000_none_b1ee595da0f48e64_samsrv.dll_b7a400ca
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.0.6001.18000_none_0505a2ecc0013ebd_ddraw.dll_8f1f5d02
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.0.6001.18000_none_0505a2ecc0013ebd_ddrawex.dll_2aa2f829
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5d4a7eb0d4f2175d_dnsapi.dll.mui_97465f8a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5d4a7eb0d4f2175d_dnsrslvr.dll.mui_1e1a1ed1
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnsapi.dll_c81f5791
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnscacheugc.exe_aa32623e
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnsrslvr.dll_faf65b7a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-duser.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_157c898a18ddf685_duser.dll.mui_3c369ac4
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-duser_31bf3856ad364e35_6.0.6001.18000_none_5a74ae48fc7a81f9_duser.dll_a2bd2fa9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dynamicvolumemanager_31bf3856ad364e35_6.0.6001.18000_none_dd02c2028628d6ec_volmgrx.sys_f02896c6
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..estorageengine-isam_31bf3856ad364e35_6.0.6001.18000_none_f1e446e12c0bbf09_esent.dll_35f49bdd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..gine-isam.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_0e5c60de6824fa7b_esent.dll.mui_e30e3b90
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..rtingcore.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_a35f9bfd2cda7f05_wer.dll.mui_e68ddae7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_wer.dll_c8c67db6
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_werdiagcontroller.dll_208f2db3
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_wermgr.exe_d92a3b6c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog-api.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c422b19a4d9162d1_wevtapi.dll.mui_27c9f5dd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog-api_31bf3856ad364e35_6.0.6001.18000_none_ac31021c654a3267_wevtapi.dll_df064540
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_3e52e079b6dcfb48_wevtsvc.dll.mui_f41bf7b7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog_31bf3856ad364e35_6.0.6001.18000_none_dcc45c1a12d92f84_wevtsvc.dll_add42ce6
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1255.fon_9d2fb92e
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1256.fon_9d30b96d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1257.fon_9d31b9ac
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee874.fon_594d8854
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1255.fon_9dadc8af
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1256.fon_9daec8ee
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1257.fon_9dafc92d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef874.fon_594e8893
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserife.fon_dad8712a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifee.fon_12eef23f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifeg.fon_12f0f2bd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifer.fon_12fbf572
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifet.fon_12fdf5f0
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriff.fon_dacf6ef3
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffe.fon_12e5f008
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffg.fon_12e7f086
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffr.fon_12f2f33b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifft.fon_12f4f3b9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..libraries.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_d6679712d1aa695c_ulib.dll.mui_bb7d4db5
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6001.18000_none_e99657d7efad5998_ifsutil.dll_7d6905f6
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6001.18000_none_e99657d7efad5998_ulib.dll_d1653396
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-failovercluster-client_31bf3856ad364e35_6.0.6001.18000_none_a64f31c652a84afa_clusapi.dll_06332635
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-failovercluster-client_31bf3856ad364e35_6.0.6001.18000_none_a64f31c652a84afa_resutils.dll_f05671f7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fat_31bf3856ad364e35_6.0.6001.18000_none_aeb32b80576428df_fastfat.sys_0ffee946
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-feclient.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_ef9360bb95e4d858_feclient.dll.mui_cc0efa1f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-feclient_31bf3856ad364e35_6.0.6001.18000_none_beda112b5794d4e0_feclient.dll_248fccac
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fileinfominifilter_31bf3856ad364e35_6.0.6001.18000_none_d6b4fb25314dd313_fileinfo.sys_9be2dfcd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-filtermanager-core_31bf3856ad364e35_6.0.6001.18000_none_110972f22acc1185_fltmgr.sys_c6e91b41
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fmifs_31bf3856ad364e35_6.0.6001.18000_none_570e7185319735c5_fmifs.dll_cfc1a67d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1255.fon_265dc6ea
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1256.fon_265ec729
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1257.fon_265fc768
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1255.fon_26dbd66b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1256.fon_26dcd6aa
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1257.fon_26ddd6e9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coure.fon_2cd9f3a7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couree.fon_7511c346
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coureg.fon_75b3eb24
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courer.fon_792fc669
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couret.fon_79d1ee47
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courf.fon_2a004040
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfe.fon_72380fdf
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfg.fon_72da37bd
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfr.fon_76561302
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courft.fon_76f83ae0
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fix.fon_dc96978e
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixe.fon_f66366a7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixg.fon_f6656725
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixr.fon_f67069da
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixt.fon_f6726a58
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1255.fon_77ccac39
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1256.fon_77c3aa02
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1257.fon_77baa7cb
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f874.fon_2b942d95
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_c8514fix.fon_9cff44b7
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_cvgafix.fon_c20a9ed9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_h8514fix.fon_9a1c84fa
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_hvgafix.fon_bf27df1c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_j8514fix.fon_cc283848
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_jvgafix.fon_f133926a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_s8514fix.fon_2d5cdf27
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_svgafix.fon_52683949
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1255.fon_9bd6a5fc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1256.fon_9bd7a63b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1257.fon_9bd8a67a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf874.fon_577765e0
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafix.fon_8caf829c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixe.fon_dea8b251
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixg.fon_de96ade3
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixr.fon_de339586
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixt.fon_de219118
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oem.fon_c20e1190
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oeme.fon_dbdae0a9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemg.fon_dbdce127
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemr.fon_dbe7e3dc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemt.fon_dbe9e45a
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_85775.fon_f144fe91
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_85855.fon_f139fbdc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_c8514oem.fon_9ff1fe45
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_h8514oem.fon_9d0f3e88
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_j8514oem.fon_cf1af1d6
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_s8514oem.fon_304f98b5
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga737.fon_11d63f16
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga775.fon_05cd499c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga850.fon_09ec4cfe
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga852.fon_0a8e74dc
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga855.fon_0b81b0a9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga857.fon_0c23d887
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga860.fon_07129997
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga861.fon_0763ad86
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga863.fon_0805d564
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga865.fon_08a7fd42
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga866.fon_08f91131
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga869.fon_09ec4cfe
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga932.fon_1042dbe9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga936.fon_11872ba5
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga949.fon_0fa0b40b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga950.fon_09ed4d3d
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_jsmalle.fon_4f77c739
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_jsmallf.fon_4f6ec502
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1255.fon_bf98786c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1256.fon_bf9978ab
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1257.fon_bf9a78ea
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1255.fon_c01687ed
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1256.fon_c017882c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1257.fon_c018886b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smalle.fon_a263d115
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallee.fon_f45d00ca
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smalleg.fon_f44afc5c
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaller.fon_f3e7e3ff
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallet.fon_f3d5df91
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallf.fon_a2b4e504
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfe.fon_f4ae14b9
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfg.fon_f49c104b
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfr.fon_f438f7ee
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallft.fon_f426f380
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sys.fon_bcc6c556
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514syse.fon_d693946f
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sysg.fon_d69594ed
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sysr.fon_d6a097a2
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514syst.fon_d6a29820
c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bit

helpvirus · Answer

je sais pas si vous avez eu la rapport en entier?

benurrr · Answer

non pas entier il y'en a eu de la supression en premiere passe

alors fais ceci :

Clique sur ce lien :

http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier C:\Combofix.txt

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

helpvirus · Answer

Voilà

http://www.cijoint.fr/cjlink.php?file=cj201010/cijGsZI3NT.txt

pendant qu'on fait la désinfection,c est énervant, la pub revient de plus en plus souvent!
mais bon je vous fait confiance!

benurrr · Answer

DÉSACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRÉSENTS !!!!!(car il est détecte a tort comme infection)  

Télécharge ici :List_Kill'em de gen-hackman   

http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe


et enregistre le sur ton bureau 

 windows 7 => clic droit "exécuter en tant que administrateur 

sur le raccourci sur ton bureau pour lancer l'installation 

Laisse coché : 

  Exécuter List_Kill'em 

une fois terminée , clic sur "terminer" et le programme se lancera seul 

Il commencera par telecharger et installer ses mises à jour , puis te donnera son menu 

choisis l'option Search 

  laisse travailler l'outil 

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agrée" 

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué. 

  Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED" 

------  NE LE POSTE PAS SUR LE FORUM------- 

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/ 

  Clique sur Parcourir et cherche le fichier C:\List'em.txt 

  Clique sur Ouvrir. 

 Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt 

est ajouté dans la page. 

  Copie ce lien dans ta réponse.

helpvirus · Answer

voilà:

http://www.cijoint.fr/cjlink.php?file=cj201010/cijQm6Ze9t.txt

benurrr · Answer

Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.  
mais cette fois-ci :  

choisis l'option CLEAN  
 
laisse travailler l'outil.  

en fin de scan la fenêtre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau poste le
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

helpvirus · Answer

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.1.0 ¤¤¤¤¤¤¤¤¤¤ 
 
User : Nawel (Administrateurs) 
Update on 21/10/2010 by g3n-h@ckm@n ::::: 11.00
Start at: 01:25:18 | 24/10/2010

Pentium(R) Dual-Core CPU       T4200  @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Basique  (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18975
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 162,47 Go (115,41 Go free) | NTFS
D:\ -> Disque fixe local | 9,86 Go (1,72 Go free) [RECOVERY] | NTFS
E:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤ Files/folders : 

Quarantined & Deleted !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log 
Quarantined & Deleted !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 
Quarantined & Deleted !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log 
Quarantined & Deleted !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 
Quarantined & Deleted !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log 
Quarantined & Deleted !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log 
Quarantined & Deleted !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 
Quarantined & Deleted !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 
Quarantined & Deleted !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log 
Quarantined & Deleted !! : C:\ProgramData\hpqp.ini 
Quarantined & Deleted !! : C:\ProgramData\hpqp.txt 
Quarantined & Deleted !! : C:\ProgramData\HPWALog.txt 
Quarantined & Deleted !! : C:\ProgramData\hpzinstall.log 
Quarantined & Deleted !! : C:\ProgramData
vModes.001 
Quarantined & Deleted !! : C:\ProgramData
vModes.dat 
 
Quarantined & Deleted !! : C:\Users\Nawel\AppData\Local\d3d9caps.dat 
Quarantined & Deleted !! : C:\Users\Nawel\AppData\Local\GDIPFONTCACHEV1.DAT 
 
¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

127.0.0.1       localhost   

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.msn.com/fr-fr
Local Page	=         	C:\Windows\System32\blank.htm
Default_Search_URL	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL	=         	https://www.msn.com/fr-fr/?ocid=iehp
Search Page	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.google.com/?gws_rd=ssl
Local Page	=         	C:\WINDOWS\system32\blank.htm
Search Page	=         	http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 
cval	=      	1 () 
FirewallDisableNotify	=      	0 (0x0) 
AntiVirusDisableNotify	=      	0 (0x0) 
UpdatesDisableNotify	=      	0 (0x0) 
 
¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

 Ndisuio : Start = 3   
 EapHost : Start = 2   
 Wlansvc : Start = 2   
 SharedAccess : Start = 2   
 windefend : Start = 2   
 wuauserv : Start = 2   
 wscsvc : Start = 2   

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK 
Prefetch cleaned 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ 

FEATURE_BROWSER_EMULATION | svchost : 
====================================
 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys 
kernel: MBR read successfully
user & kernel MBR OK 
 
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

benurrr · Answer

Télécharge LOP S&D d'Eric71 ici 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7cqAHkTRpjDpRpXiNVvkeDRjEg9Z-Ro2il_2UJtgw8o54GpQB7mczoXlnaXpv_rdWn9Ghoifa2VxjU6_2RJlNfEDOM7a0lq1d_45gcxHVxEtpnlwYYoJmWPIZdyiV8K2FcsLnIfp3ZeKq1T-D2unpCY-bhDDCvHwuiZhi61ZD-Eu3PsbGALq6Bz1uHuTXUhb8HQUr2q-t8sQILdAQyHP-ND6sjcE5g%3D%3D&attredirects=2

Double-clique dessus pour lancer l'installation.
 
Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau. 
Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche ) 

Patiente jusqu'à la fin du scan. 
Poste le rapport généré (situé aussi ici C:\lopR.txt ) 

( Si le Bureau ne réapparaît pas, lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )

helpvirus · Answer

J attend ms ça n a pas l air de fonctionner
j ai une fenetre "utilitaire QGREP de recherche de chaines de caractere a cessé de fonctionner"
et ça demande de fermer le programme
et la fenetre lop dit recherche depuis plus de 20 minutes déja...

Spam x sur mon PC; aide pour désinfection svp

38 réponses

Discussions similaires