Spam x sur mon PC; aide pour désinfection svp

Résolu
helpvirus -  
 helpvirus -
Bonjour,

Je suis venue sur le site cet été, et quelqu'un m'avait déjà aidé pour me débarrasser de logiciels malveillants avec malwarebytes entre autres.
Même si mon ordi à l'air "clean" et est beaucoup moins lent depuis, j'ai malgré tout toujours le même problème, persistant et très génant, c'est que tous les jours à 21heures précises (!!) une pub X se lance dans mon navigateur web.
Je fais régulièrement des scans avec malwarebytes et avast, et apparement il n'y a aucune menace.
Pourriez vous m'indiquer un logiciel ou une technique pour éradiquer cette pub dégoutante?
Merci pour votre aide

38 réponses

  • 1
  • 2
Résumé de la discussion

Un problème récurrent de publicités intempestives dans le navigateur à heure fixe persiste malgré des scans réguliers avec Malwarebytes et Avast sous Windows Vista et Firefox 3.6.11. Plusieurs réponses évoquent des outils de désinfection comme VundoFix et la détection d'un cheval de Troie publicitaire, avec des rapports à récupérer (par exemple c:\vundofix.txt) et des éléments à désinfecter. D'autres interventions suggèrent d'opter pour un traitement en mode administrateur et d'activer temporairement certaines options système (par exemple désactivation du contrôle des comptes utilisateur) pour exécuter les outils de désinfection. En parallèle, des échanges indiquent que certains rapports peuvent manquer ou ne pas être générés automatiquement, ce qui nécessite de relancer les analyses et de vérifier manuellement les résultats générés par les outils.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    Bonjourrr

    Téléchargez et enregistrez Navilog1 sur le Bureau.

    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    Sous XP : double-cliquez sur l'icône pour lancer l'outil.

    Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur".

    Choisissez votre langue, appuyez sur F pour Français.

    Appuyez sur une touche jusqu'à ce que vous arriviez au menu des options.

    Choisissez l'option 1 (Recherche / Désinfection Automatique).

    Laissez le programme travailler, il pourrait durer une dizaine de minutes.

    Si l'outil trouve quelque chose, il sera amené à faire redémarrer l'ordinateur.

    Lorsque le message "Scan terminé le..." s'affichera, appuyez sur une touche pour faire apparaitre le rapport dans le Bloc-notes (il sera aussi enregistré automatiquement sur votre disque dur : C:\cleannavi.txt)
    0
  2. helpvirus
     
    Merci pour votre réponse,
    ci joint le rapport:

    Fix Navipromo version 4.0.9 commencé le 23/10/2010 22:45:23,55

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!

    Outil exécuté depuis C:\navilog1

    Mise à jour le 17.09.2010 à 16h00 par IL-MAFIOSO

    Microsoft® Windows Vista(TM) Édition Familiale Basique ( v6.0.6002 ) Service Pack 2
    X86-based PC ( Multiprocessor Free : Pentium(R) Dual-Core CPU T4200 @ 2.00GHz )
    BIOS : Default System BIOS
    USER : Nawel ( Administrator )
    BOOT : Normal boot

    C:\ (Local Disk) - NTFS - Total:162 Go (Free:115 Go)
    D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
    E:\ (CD or DVD)
    F:\ (CD or DVD)
    0
  3. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    Télécharge Ad-Remover sur ton bureau:
    http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe
    https://www.androidworld.fr/

    Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur".

    Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Scanner".
    Laisse travailler l'outil.
    Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.
    Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
    Mais C.. de penser que ­tu es libre...Merci a australe13
    0
  4. helpvirus
     
    ======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

    Mis à jour par TeamXscript le 22/10/10 à 20:00
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    Site web: http://www.teamxscript.org

    C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 23:05:46 le 23/10/2010, Mode normal

    Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
    Nawel@PC-DE-NAWEL (Hewlett-Packard Compaq Presario CQ61 Notebook PC)

    ============== RECHERCHE ==============

    Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{306467C5-0D1E-4167-AAE2-DA301CD9A59B}

    ============== SCAN ADDITIONNEL ==============

    ** Mozilla Firefox Version [3.6.10 (fr)] **

    -- C:\Users\Nawel\AppData\Roaming\Mozilla\FireFox\Profiles\du0hdb69.default\Prefs.js --
    browser.download.dir, C:\\Users\\Nawel\\Downloads
    browser.startup.homepage, hxxp://orange.fr
    browser.startup.homepage_override.mstone, rv:1.9.2.11

    ========================================

    ** Internet Explorer Version [8.0.6001.18975] **

    [HKCU\Software\Microsoft\Internet Explorer\Main]
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\Windows\system32\blank.htm
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Show_ToolBar: yes
    Start Page: hxxp://www.orange.fr/

    [HKLM\Software\Microsoft\Internet Explorer\Main]
    AutoHide: yes
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\Windows\System32\blank.htm
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/

    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    Tabs: res://ieframe.dll/tabswelcome.htm
    Blank: res://mshtml.dll/blank.htm

    ========================================

    C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
    C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

    C:\Ad-Report-SCAN[1].txt - 23/10/2010 (2288 Octet(s))

    Fin à: 23:07:17, 23/10/2010

    ============== E.O.F ==============
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    Nettoyage:

    /!\ Ferme toutes tes applications ouvertes. /!\

    Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Nettoyer".
    Laisse travailler l'outil.
    Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.
    0
  7. helpvirus
     
    j ai du redémarrer l ordi pour que l analyse se finalise, mais je ne sais pas où se trouve le rapport enregistré?..
    0
  8. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    dans C
    0
  9. helpvirus
     
    merci

    ======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

    Mis à jour par TeamXscript le 22/10/10 à 20:00
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    Site web: http://www.teamxscript.org

    C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 23:18:33 le 23/10/2010, Mode normal

    Microsoft® Windows Vista(TM) Édition Familiale Basique Service Pack 2 (X86)
    Nawel@PC-DE-NAWEL (Hewlett-Packard Compaq Presario CQ61 Notebook PC)

    ============== ACTION(S) ==============

    (!) -- Fichiers temporaires supprimés.

    Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{306467C5-0D1E-4167-AAE2-DA301CD9A59B}

    ============== SCAN ADDITIONNEL ==============

    ** Mozilla Firefox Version [3.6.10 (fr)] **

    -- C:\Users\Nawel\AppData\Roaming\Mozilla\FireFox\Profiles\du0hdb69.default\Prefs.js --
    browser.download.dir, C:\\Users\\Nawel\\Downloads
    browser.startup.homepage, hxxp://orange.fr
    browser.startup.homepage_override.mstone, rv:1.9.2.11

    ========================================

    ** Internet Explorer Version [8.0.6001.18975] **

    [HKCU\Software\Microsoft\Internet Explorer\Main]
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\Windows\system32\blank.htm
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Show_ToolBar: yes
    Start Page: hxxp://fr.msn.com/

    [HKLM\Software\Microsoft\Internet Explorer\Main]
    AutoHide: yes
    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\Windows\System32\blank.htm
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/

    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    Tabs: res://ieframe.dll/tabswelcome.htm
    Blank: res://mshtml.dll/blank.htm

    ========================================

    C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
    C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

    C:\Ad-Report-CLEAN[1].txt - 23/10/2010 (2253 Octet(s))
    C:\Ad-Report-SCAN[1].txt - 23/10/2010 (2417 Octet(s))

    Fin à: 23:20:10, 23/10/2010

    ============== E.O.F ==============
    0
  10. helpvirus
     
    la page de pub vient de réapparaitre!!
    est ce que le nettoyage fonctionne vraiment??
    merci
    0
  11. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    une cle a etait suprimer mais il y'en a d'autre

    Telecharge combofix :
    Faire un clic droit sur le lien
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    * Choisir : "Enregistrer la cible du lien sous..."
    * Choisir le Bureau comme destination.
    * Dans le champ "Nom du fichier", renommer ComboFix.exe en CCM.exe par exemple, puis enregistrer.
    * Attention ! L'étape de renommage est obligatoire sous peine de voir afficher le message "ComboFix.exe n'est pas une application win32 valide" et de le rendre ainsi totalement inefficace.

    Note importante :tu est sous Vista

    la désactivation du Contrôle des comptes utilisateurs est obligatoire

    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac­er-l-uac

    pour toute manipulation fait comme ceci( clic droit "exécuter en tant qu'administrateur" pour Vista/7 )

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    Avant d'utiliser ComboFix :

    -> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

    -> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

    Une fois fait, sur ton bureau double-clic sur Combofix.exe.

    - Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

    -Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi

    - En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

    - Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

    -> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    -> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    !\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet)

    ::Si combofix detecte quelque chose et de demande a redémarrer tu accepte
    Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
    Mais C.. de penser que ­tu es libre...Merci a australe13
    0
  12. helpvirus
     
    ComboFix 10-10-22.05 - Nawel 23/10/2010 23:50:42.1.2 - x86
    Lancé depuis: c:\users\Nawel\Desktop\CCM.exe
    SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroIEHelper.dll
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroIEHelperShim.dll
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroPDF.dll
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\AcroPDF.FRA
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\pdfshell.dll
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RDVSE3B\ActiveX\pdfshell.FRA
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-activexproxy_31bf3856ad364e35_6.0.6001.18000_none_120e336fea4a5696_actxprxy.dll_82133921
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advapi32.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_bb0c4b16a3cdf79e_advapi32.dll.mui_28c7718f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advapi32_31bf3856ad364e35_6.0.6001.18000_none_e34851aa8681b8b0_advapi32.dll_9512793c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advpack.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_d773de0bfeaad348_advpack.dll.mui_2fc06c95
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6001.18000_none_abcb6579f2d08df0_advpack.dll_8c6ea088
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.18293_none_aac1f52459f8aeb3_atl.dll_0c7220db
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-audio-mmecore-base_31bf3856ad364e35_6.0.6001.18000_none_b5dfbc3a51b01b87_winmm.dll_08d4f5e8
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-authentication-authui_31bf3856ad364e35_6.0.6001.18000_none_0bf37d16f567e1f7_authui.dll_05ff9fd2
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_dc2b7e603ef69e37_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_79655e87353c9a36_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_de-de_7690f3c33712eed0_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_1f2721562628575e_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_en-us_1f81c9bc25f0fa95_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_es-es_1f4d26a02617ec3a_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_be682b4d1b31de64_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_c2049c9f18ea029c_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_09751ce6fd49d1b8_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_it-it_ac2c92e5f01be81a_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_4e5211f2e336f9f5_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_f1bbeea7d5a7c10b_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_da4e6fdcadccecc7_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_d88dbb1aaef8f69c_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_1eca159c941b6450_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_211e004092a4f834_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_21ffcfac92146810_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_68a2e17076f5f63c_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_049dcbe56e1f0097_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_adab162c5cdb0288_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_7f08342a0d12d4a7_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_7db32cb80dee4737_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ager-pcat.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_830471800a83b117_bootmgr.exe.mui_c434701f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_setbcdlocale.dll_77bec53b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_winload.exe_75835076
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..environment-windows_31bf3856ad364e35_6.0.6001.18027_none_6929f9588cd4875c_winresume.exe_85cd1215
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.0.6001.18000_none_11b58d1eacaaef15_kdcom.dll_db5e7744
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..iagnostic.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_596c2a437e051e5c_memtest.exe.mui_77b8cbcc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_85c9aa521430d159_expand.exe.mui_3f54e013
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..isc-tools.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_85c9aa521430d159_netmsg.dll.mui_ab0f7c73
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..ng-engine.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5839302cd22da35e_winbrand.dll.mui_3ca0ebbc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_191b8ce8d6fcde7a_winload.exe.mui_3bc5b827
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_191b8ce8d6fcde7a_winresume.exe.mui_ff8b5358
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..re-memorydiagnostic_31bf3856ad364e35_6.0.6001.18000_none_d8354e6a049d5abe_memtest.exe_01d80391
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_beffcb972322525d_winload.exe.mui_3bc5b827
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..t-windows.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_beffcb972322525d_winresume.exe.mui_ff8b5358
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b_winload.exe_75835076
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6001.18027_none_5b181c606cb0c98b_winresume.exe_85cd1215
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basedependencies_31bf3856ad364e35_6.0.6000.16386_none_006b2fc82be4576c_psapi.dll_e8b5b4d1
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basesrv_31bf3856ad364e35_6.0.6001.18000_none_0ccaead5e3bacdd0_basesrv.dll_8c1ad808
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_expand.exe_f43b24c8
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_netmsg.dll_52337068
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77_netrap.dll_8860c248
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-bootvid_31bf3856ad364e35_6.0.6001.18000_none_38797b7986345c9b_bootvid.dll_c188118d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-branding-engine_31bf3856ad364e35_6.0.6000.16386_none_e73316a16878fc16_winbrand.dll_9cd6a3cf
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-browseui.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_44b593b4d3d0d1ca_browseui.dll.mui_58ee483b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-browseui_31bf3856ad364e35_6.0.6001.18000_none_30e2e1b2e655cd1c_browseui.dll_7a6f3790
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_8bd47df3081acc91_drvinst.exe.mui_e88f4c73
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ermodepnp.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_8bd47df3081acc91_umpnpmgr.dll.mui_d66aed17
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..integrity.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_9980918843687de0_ci.dll.mui_76757f43
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..ityclient.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_050b67d195e2b066_certcli.dll.mui_1b6822cf
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..qfe-rpcss.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_e8bcaf49192f21ec_rpcss.dll.mui_78e56052
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-c..tionauthorityclient_31bf3856ad364e35_6.0.6001.18000_none_d77db57c3ca78826_certcli.dll_f553bbce
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cabinet_31bf3856ad364e35_6.0.6001.18000_none_373f511ce1ebb446_cabinet.dll_7ab07912
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cdfs_31bf3856ad364e35_6.0.6001.18000_none_a667930f1cf3e8c6_cdfs.sys_02574081
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cmi_31bf3856ad364e35_6.0.6001.18000_none_a9ce4a485a8ade99_cmiv2.dll_be06aa9f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6_cngaudit.dll_86fb1bb1
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-codeintegrity_31bf3856ad364e35_6.0.6001.18023_none_a065524404cd682d_ci.dll_070fb998
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base-qfe-ole32_31bf3856ad364e35_6.0.6001.18000_none_ac1da75bf2516084_ole32.dll_e9dcc2e3
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base-qfe-rpcss_31bf3856ad364e35_6.0.6001.18226_none_69bb41ac3deac876_rpcss.dll_fd3e269b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_58cbcd0633b69569_ole32.dll.mui_5035d60a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_58cbcd0633b69569_oleres.dll.mui_ff00d4cb
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43_comcat.dll_8571d1d1
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43_oleres.dll_2eae8210
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ar-sa_ce2a204bd0e07b46_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_bg-bg_746a01d4c160cc9d_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_1f73786faee8a8c8_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_bcad5896a52ea4c7_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_de-de_b9d8edd2a704f961_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_626f1b65961a61ef_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_en-us_62c9c3cb95e30526_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_es-es_629520af9609f6cb_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_et-ee_5c54ec3f9a0fd35a_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_01b0255c8b23e8f5_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_054c96ae88dc0d2d_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_he-il_496c3e506f4b0e1b_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_hr-hr_4b88f1306dfe7ae1_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_4cbd16f66d3bdc49_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_it-it_ef748cf5600df2ab_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_919a0c0253290486_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_3503e8b74599cb9c_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_lt-lt_d8cf14b837c19739_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_lv-lv_d99c833c373fd829_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_1d9669ec1dbef758_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_1bd5b52a1eeb012d_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_62120fac040d6ee1_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_6465fa50029702c5_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_6547c9bc020672a1_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ro-ro_a9828ff3e86d3dfd_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_abeadb7fe6e800cd_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sk-sk_4b05e02cdc01f2f7_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sl-si_4a1801e4dc9c05da_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sr-..-cs_e9a17e7755f46922_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_47e5c5f4de110b28_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_th-th_ecefe7a7cf55c869_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_f0f3103bcccd0d19_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_uk-ua_8cd2f2e2c3fe3365_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_c2502e397d04df38_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_c0fb26c77de051c8_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comctl32-v5.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_c64c6b8f7a75bba8_comctl32.dll.mui_0da4e682
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ar-sa_56568abbaaeb5efc_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_bg-bg_fc966c449b6bb053_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_cs-cz_a79fe2df88f38c7e_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_da-dk_44d9c3067f39887d_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_de-de_42055842810fdd17_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_el-gr_ea9b85d5702545a5_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_en-us_eaf62e3b6fede8dc_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_es-es_eac18b1f7014da81_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_et-ee_e48156af741ab710_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_fi-fi_89dc8fcc652eccab_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_8d79011e62e6f0e3_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_he-il_d198a8c04955f1d1_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_hr-hr_d3b55ba048095e97_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_hu-hu_d4e981664746bfff_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_it-it_77a0f7653a18d661_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ja-jp_19c676722d33e83c_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ko-kr_bd3053271fa4af52_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_lt-lt_60fb7f2811cc7aef_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_lv-lv_61c8edac114abbdf_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_a5c2d45bf7c9db0e_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_nl-nl_a4021f99f8f5e4e3_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pl-pl_ea3e7a1bde185297_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pt-br_ec9264bfdca1e67b_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_pt-pt_ed74342bdc115657_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ro-ro_31aefa63c27821b3_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_ru-ru_341745efc0f2e483_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sk-sk_d3324a9cb60cd6ad_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sl-si_d2446c54b6a6e990_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sr-..-cs_71cde8e72fff4cd8_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_sv-se_d0123064b81beede_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_th-th_751c5217a960ac1f_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_tr-tr_791f7aaba6d7f0cf_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_uk-ua_14ff5d529e09171b_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-cn_4a7c98a9570fc2ee_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-hk_4927913757eb357e_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32.resources_31bf3856ad364e35_6.0.6001.18000_zh-tw_4e78d5ff54809f5e_comdlg32.dll.mui_ac8e62f4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-comdlg32_31bf3856ad364e35_6.0.6001.18000_none_b5b111a1a5a793a5_comdlg32.dll_b1ffde97
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6001.22132_none_7eedc84840c02c40_clfs.sys_04dfdff9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_fs_rec.sys_dfd2dd83
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_imagehlp.dll_41876e91
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737_wmi.dll_cba0311d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_cfgmgr32.dll_7bc7e545
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_drvinst.exe_6593e92a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6001.18000_none_7701ab362cebf905_umpnpmgr.dll_112f9bb4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-credui.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_0266d651984fbcfe_credui.dll.mui_34721171
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-credui_31bf3856ad364e35_6.0.6001.18000_none_db374cc18eed7408_credui.dll_c0e5bbea
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6e72ee75b0546bd2_crypt32.dll.mui_4268f86a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-crypt32-dll_31bf3856ad364e35_6.0.6001.18000_none_5b6fc1dbddd3c6da_crypt32.dll_9c3ccf73
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptdll-dll_31bf3856ad364e35_6.0.6001.18000_none_059e85e6adc57125_cryptdll.dll_e0da7eac
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptnet-dll_31bf3856ad364e35_6.0.6001.18000_none_17194119fbd5b944_cryptnet.dll_e44c577b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptui-dll.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_a5e5011991525101_cryptui.dll.mui_9728c1dd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-cryptui-dll_31bf3856ad364e35_6.0.6001.18000_none_85ee5b5e98235317_cryptui.dll_af347940
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-csrsrv_31bf3856ad364e35_6.0.6001.18000_none_c9873705a55da1c9_csrsrv.dll_f50da7f9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c_csrss.exe_06529458
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfhost.exe.mui_1fc689ff
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfplatform.dll.mui_d815d31a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..-usermode.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_6730977c4db96ba8_wudfsvc.dll.mui_e907fe77
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..irectdraw.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_0f01563062f52121_ddraw.dll.mui_95b8c3ab
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcmonitor.dll.mui_478a7103
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcsvc.dll.mui_186571e1
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..lient-dll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_f633113db01e5da6_dhcpcsvc6.dll.mui_b45c7567
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6001.18000_none_e00ee48d3ffd5af4_dwmapi.dll_2f4f8b34
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..opwindowmanager-api_31bf3856ad364e35_6.0.6001.18000_none_e00ee48d3ffd5af4_milcore.dll_89763441
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_ntdsapi.dll_23e20303
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_w32topl.dll_1a0f388b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..owmanager.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_4a454ca1b1de622d_dwm.exe.mui_706e052f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_dwm.exe_04cf416e
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_dwmredir.dll_a25c13fe
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..pwindowmanager-core_31bf3856ad364e35_6.0.6001.18000_none_8da39414bd31fb37_uxsms.dll_ca422e1e
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..utoenroll.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5b839e304fa3ea19_pautoenr.dll.mui_9667d15f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-d..vices-sam.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_b703115232707ef4_samsrv.dll.mui_32250491
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dfsclient_31bf3856ad364e35_6.0.6001.18000_none_879a2ddde61be4de_dfsc.sys_ff9a943d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcmonitor.dll_aa545cc8
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcsvc.dll_8155446a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a_dhcpcsvc6.dll_39c77c46
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.18000_none_b1ee595da0f48e64_samlib.dll_caeebf04
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.18000_none_b1ee595da0f48e64_samsrv.dll_b7a400ca
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.0.6001.18000_none_0505a2ecc0013ebd_ddraw.dll_8f1f5d02
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.0.6001.18000_none_0505a2ecc0013ebd_ddrawex.dll_2aa2f829
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5d4a7eb0d4f2175d_dnsapi.dll.mui_97465f8a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_5d4a7eb0d4f2175d_dnsrslvr.dll.mui_1e1a1ed1
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnsapi.dll_c81f5791
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnscacheugc.exe_aa32623e
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18000_none_e1e27cdd8259636b_dnsrslvr.dll_faf65b7a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-duser.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_157c898a18ddf685_duser.dll.mui_3c369ac4
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-duser_31bf3856ad364e35_6.0.6001.18000_none_5a74ae48fc7a81f9_duser.dll_a2bd2fa9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-dynamicvolumemanager_31bf3856ad364e35_6.0.6001.18000_none_dd02c2028628d6ec_volmgrx.sys_f02896c6
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..estorageengine-isam_31bf3856ad364e35_6.0.6001.18000_none_f1e446e12c0bbf09_esent.dll_35f49bdd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..gine-isam.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_0e5c60de6824fa7b_esent.dll.mui_e30e3b90
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-e..rtingcore.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_a35f9bfd2cda7f05_wer.dll.mui_e68ddae7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_wer.dll_c8c67db6
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_werdiagcontroller.dll_208f2db3
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_6.0.6001.18000_none_2076b21605e43be9_wermgr.exe_d92a3b6c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog-api.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_c422b19a4d9162d1_wevtapi.dll.mui_27c9f5dd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog-api_31bf3856ad364e35_6.0.6001.18000_none_ac31021c654a3267_wevtapi.dll_df064540
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_3e52e079b6dcfb48_wevtsvc.dll.mui_f41bf7b7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-eventlog_31bf3856ad364e35_6.0.6001.18000_none_dcc45c1a12d92f84_wevtsvc.dll_add42ce6
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1255.fon_9d2fb92e
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1256.fon_9d30b96d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee1257.fon_9d31b9ac
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssee874.fon_594d8854
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1255.fon_9dadc8af
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1256.fon_9daec8ee
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef1257.fon_9dafc92d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_ssef874.fon_594e8893
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserife.fon_dad8712a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifee.fon_12eef23f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifeg.fon_12f0f2bd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifer.fon_12fbf572
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifet.fon_12fdf5f0
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriff.fon_dacf6ef3
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffe.fon_12e5f008
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffg.fon_12e7f086
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sseriffr.fon_12f2f33b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..itmap-ms_sans_serif_31bf3856ad364e35_6.0.6000.16386_none_4e73ea6d973a7510_sserifft.fon_12f4f3b9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..libraries.resources_31bf3856ad364e35_6.0.6001.18000_fr-fr_d6679712d1aa695c_ulib.dll.mui_bb7d4db5
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6001.18000_none_e99657d7efad5998_ifsutil.dll_7d6905f6
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-f..temutilitylibraries_31bf3856ad364e35_6.0.6001.18000_none_e99657d7efad5998_ulib.dll_d1653396
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-failovercluster-client_31bf3856ad364e35_6.0.6001.18000_none_a64f31c652a84afa_clusapi.dll_06332635
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-failovercluster-client_31bf3856ad364e35_6.0.6001.18000_none_a64f31c652a84afa_resutils.dll_f05671f7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fat_31bf3856ad364e35_6.0.6001.18000_none_aeb32b80576428df_fastfat.sys_0ffee946
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-feclient.resources_31bf3856ad364e35_6.0.6000.16386_fr-fr_ef9360bb95e4d858_feclient.dll.mui_cc0efa1f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-feclient_31bf3856ad364e35_6.0.6001.18000_none_beda112b5794d4e0_feclient.dll_248fccac
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fileinfominifilter_31bf3856ad364e35_6.0.6001.18000_none_d6b4fb25314dd313_fileinfo.sys_9be2dfcd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-filtermanager-core_31bf3856ad364e35_6.0.6001.18000_none_110972f22acc1185_fltmgr.sys_c6e91b41
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-fmifs_31bf3856ad364e35_6.0.6001.18000_none_570e7185319735c5_fmifs.dll_cfc1a67d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1255.fon_265dc6ea
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1256.fon_265ec729
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coue1257.fon_265fc768
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1255.fon_26dbd66b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1256.fon_26dcd6aa
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couf1257.fon_26ddd6e9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coure.fon_2cd9f3a7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couree.fon_7511c346
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_coureg.fon_75b3eb24
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courer.fon_792fc669
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_couret.fon_79d1ee47
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courf.fon_2a004040
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfe.fon_72380fdf
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfg.fon_72da37bd
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courfr.fon_76561302
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-courier_31bf3856ad364e35_6.0.6000.16386_none_f4584b4d860ae29f_courft.fon_76f83ae0
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fix.fon_dc96978e
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixe.fon_f66366a7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixg.fon_f6656725
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixr.fon_f67069da
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_8514fixt.fon_f6726a58
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1255.fon_77ccac39
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1256.fon_77c3aa02
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f1257.fon_77baa7cb
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_85f874.fon_2b942d95
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_c8514fix.fon_9cff44b7
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_cvgafix.fon_c20a9ed9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_h8514fix.fon_9a1c84fa
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_hvgafix.fon_bf27df1c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_j8514fix.fon_cc283848
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_jvgafix.fon_f133926a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_s8514fix.fon_2d5cdf27
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_svgafix.fon_52683949
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1255.fon_9bd6a5fc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1256.fon_9bd7a63b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf1257.fon_9bd8a67a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgaf874.fon_577765e0
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafix.fon_8caf829c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixe.fon_dea8b251
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixg.fon_de96ade3
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixr.fon_de339586
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-fixed_31bf3856ad364e35_6.0.6000.16386_none_7cd9205231b4785e_vgafixt.fon_de219118
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oem.fon_c20e1190
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oeme.fon_dbdae0a9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemg.fon_dbdce127
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemr.fon_dbe7e3dc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_8514oemt.fon_dbe9e45a
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_85775.fon_f144fe91
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_85855.fon_f139fbdc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_c8514oem.fon_9ff1fe45
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_h8514oem.fon_9d0f3e88
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_j8514oem.fon_cf1af1d6
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_s8514oem.fon_304f98b5
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga737.fon_11d63f16
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga775.fon_05cd499c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga850.fon_09ec4cfe
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga852.fon_0a8e74dc
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga855.fon_0b81b0a9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga857.fon_0c23d887
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga860.fon_07129997
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga861.fon_0763ad86
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga863.fon_0805d564
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga865.fon_08a7fd42
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga866.fon_08f91131
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga869.fon_09ec4cfe
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga932.fon_1042dbe9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga936.fon_11872ba5
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga949.fon_0fa0b40b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-oem_31bf3856ad364e35_6.0.6000.16386_none_fb2d5aefb17b8d65_vga950.fon_09ed4d3d
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_jsmalle.fon_4f77c739
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_jsmallf.fon_4f6ec502
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1255.fon_bf98786c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1256.fon_bf9978ab
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smae1257.fon_bf9a78ea
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1255.fon_c01687ed
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1256.fon_c017882c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaf1257.fon_c018886b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smalle.fon_a263d115
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallee.fon_f45d00ca
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smalleg.fon_f44afc5c
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smaller.fon_f3e7e3ff
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallet.fon_f3d5df91
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallf.fon_a2b4e504
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfe.fon_f4ae14b9
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfg.fon_f49c104b
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallfr.fon_f438f7ee
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-small_31bf3856ad364e35_6.0.6000.16386_none_7957df9e7efe1665_smallft.fon_f426f380
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sys.fon_bcc6c556
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514syse.fon_d693946f
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sysg.fon_d69594ed
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514sysr.fon_d6a097a2
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bitmap-system_31bf3856ad364e35_6.0.6000.16386_none_81200aeaf9f41989_8514syst.fon_d6a29820
    c:\$recycle.bin\S-1-5-21-2673795307-1727803372-3588904539-1000\$RHE8DJU\x86_microsoft-windows-font-bit
    0
  13. helpvirus
     
    je sais pas si vous avez eu la rapport en entier?
    0
  14. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    non pas entier il y'en a eu de la supression en premiere passe

    alors fais ceci :

    Clique sur ce lien :

    http://www.cijoint.fr/

    Clique sur Parcourir et cherche le fichier C:\Combofix.txt

    Clique sur Ouvrir.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.
    0
  15. helpvirus
     
    Voilà

    http://www.cijoint.fr/cjlink.php?file=cj201010/cijGsZI3NT.txt

    pendant qu'on fait la désinfection,c est énervant, la pub revient de plus en plus souvent!
    mais bon je vous fait confiance!
    0
  16. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    DÉSACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRÉSENTS !!!!!(car il est détecte a tort comme infection)

    Télécharge ici :List_Kill'em de gen-hackman

    http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe

    et enregistre le sur ton bureau

    windows 7 => clic droit "exécuter en tant que administrateur

    sur le raccourci sur ton bureau pour lancer l'installation

    Laisse coché :

    Exécuter List_Kill'em

    une fois terminée , clic sur "terminer" et le programme se lancera seul

    Il commencera par telecharger et installer ses mises à jour , puis te donnera son menu

    choisis l'option Search

    laisse travailler l'outil

    il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agrée"

    à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.

    Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

    ------ NE LE POSTE PAS SUR LE FORUM-------

    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    Clique sur Parcourir et cherche le fichier C:\List'em.txt

    Clique sur Ouvrir.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.
    0
  17. helpvirus
     
    voilà:

    http://www.cijoint.fr/cjlink.php?file=cj201010/cijQm6Ze9t.txt
    0
  18. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
    mais cette fois-ci :

    choisis l'option CLEAN

    laisse travailler l'outil.

    en fin de scan la fenêtre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau poste le
    Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,
    Mais C.. de penser que ­tu es libre...Merci a australe13
    0
  19. helpvirus
     
    ¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.1.0 ¤¤¤¤¤¤¤¤¤¤

    User : Nawel (Administrateurs)
    Update on 21/10/2010 by g3n-h@ckm@n ::::: 11.00
    Start at: 01:25:18 | 24/10/2010

    Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
    Microsoft® Windows Vista(TM) Édition Familiale Basique (6.0.6002 32-bit) # Service Pack 2
    Internet Explorer 8.0.6001.18975
    Windows Firewall Status : Disabled

    C:\ -> Disque fixe local | 162,47 Go (115,41 Go free) | NTFS
    D:\ -> Disque fixe local | 9,86 Go (1,72 Go free) [RECOVERY] | NTFS
    E:\ -> Disque CD-ROM

    ¤¤¤¤¤¤¤¤¤¤ Files/folders :

    Quarantined & Deleted !! : C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
    Quarantined & Deleted !! : C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
    Quarantined & Deleted !! : C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
    Quarantined & Deleted !! : C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
    Quarantined & Deleted !! : C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
    Quarantined & Deleted !! : C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
    Quarantined & Deleted !! : C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
    Quarantined & Deleted !! : C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
    Quarantined & Deleted !! : C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
    Quarantined & Deleted !! : C:\ProgramData\hpqp.ini
    Quarantined & Deleted !! : C:\ProgramData\hpqp.txt
    Quarantined & Deleted !! : C:\ProgramData\HPWALog.txt
    Quarantined & Deleted !! : C:\ProgramData\hpzinstall.log
    Quarantined & Deleted !! : C:\ProgramData\nvModes.001
    Quarantined & Deleted !! : C:\ProgramData\nvModes.dat

    Quarantined & Deleted !! : C:\Users\Nawel\AppData\Local\d3d9caps.dat
    Quarantined & Deleted !! : C:\Users\Nawel\AppData\Local\GDIPFONTCACHEV1.DAT

    ¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

    127.0.0.1 localhost

    ¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤

    ¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    Start Page = https://www.msn.com/fr-fr
    Local Page = C:\Windows\System32\blank.htm
    Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    Start Page = https://www.google.com/?gws_rd=ssl
    Local Page = C:\WINDOWS\system32\blank.htm
    Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

    ¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    cval = 1 ()
    FirewallDisableNotify = 0 (0x0)
    AntiVirusDisableNotify = 0 (0x0)
    UpdatesDisableNotify = 0 (0x0)

    ¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

    Ndisuio : Start = 3
    EapHost : Start = 2
    Wlansvc : Start = 2
    SharedAccess : Start = 2
    windefend : Start = 2
    wuauserv : Start = 2
    wscsvc : Start = 2

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
    Disk Cleaned
    anti-ver blaster : OK
    Prefetch cleaned
    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

    FEATURE_BROWSER_EMULATION | svchost :
    ====================================

    Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

    device: opened successfully
    user: MBR read successfully
    called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys
    kernel: MBR read successfully
    user & kernel MBR OK

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
    0
  20. benurrr Messages postés 9766 Statut Contributeur sécurité 107
     
    Télécharge LOP S&D d'Eric71 ici
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7cqAHkTRpjDpRpXiNVvkeDRjEg9Z-Ro2il_2UJtgw8o54GpQB7mczoXlnaXpv_rdWn9Ghoifa2VxjU6_2RJlNfEDOM7a0lq1d_45gcxHVxEtpnlwYYoJmWPIZdyiV8K2FcsLnIfp3ZeKq1T-D2unpCY-bhDDCvHwuiZhi61ZD-Eu3PsbGALq6Bz1uHuTXUhb8HQUr2q-t8sQILdAQyHP-ND6sjcE5g%3D%3D&attredirects=2

    Double-clique dessus pour lancer l'installation.

    Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
    Séléctionne la langue souhaitée , puis choisis l'Option 1 ( Recherche )

    Patiente jusqu'à la fin du scan.
    Poste le rapport généré (situé aussi ici C:\lopR.txt )

    ( Si le Bureau ne réapparaît pas, lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , tape explorer.exe et valide )
    0
  21. helpvirus
     
    J attend ms ça n a pas l air de fonctionner
    j ai une fenetre "utilitaire QGREP de recherche de chaines de caractere a cessé de fonctionner"
    et ça demande de fermer le programme
    et la fenetre lop dit recherche depuis plus de 20 minutes déja...
    0
  • 1
  • 2