HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B1380728F2F856B4E8C2792150C4831D\Usage\Main 25.04.2006 23:01 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System* 13.04.2006 04:50 0 bytes Key name contains embedded nulls (*) HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s0 18.02.2006 18:09 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s1 18.02.2006 18:09 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\s2 18.02.2006 18:09 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\g0 18.02.2006 18:09 32 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\h0 18.02.2006 18:09 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 11.03.2006 22:47 0 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\Timotime\Desktop\Neu Textdokument.txt 26.04.2006 17:49 0 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\Timotime\Lokale Einstellungen\Verlauf\History.IE5\MSHist012006042620060427 26.04.2006 17:49 0 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\Timotime\Lokale Einstellungen\Verlauf\History.IE5\MSHist012006042620060427\index.dat 26.04.2006 17:49 32.00 KB Hidden from Windows API. C:\Dokumente und Einstellungen\Timotime\Recent\Neu Textdokument.lnk 26.04.2006 17:49 547 bytes Hidden from Windows API. C:\sccfg.sys 26.04.2006 17:46 20 bytes Hidden from Windows API. C:\sys.txt 26.04.2006 17:51 1.02 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP16\change.log 26.04.2006 17:49 16.15 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP16\change.log.3 26.04.2006 17:52 16.56 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP16\drivetable.txt 26.04.2006 17:52 266 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003154.dll 26.04.2006 17:53 705 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003155.dll 06.05.2005 16:45 13.98 KB Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003156.dll 14.01.2005 10:57 386.50 KB Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003157.dll 14.01.2005 10:57 73.00 KB Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003158.dll 14.01.2005 10:57 1.23 MB Visible in directory index, but not Windows API or MFT. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003159.dll 26.04.2006 17:53 37.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\A0003160.dll 26.04.2006 17:53 73.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\change.log 26.04.2006 17:53 151.35 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\RestorePointSize 26.04.2006 17:53 8 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\rp.log 26.04.2006 17:52 536 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot 26.04.2006 17:52 0 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_MACHINE_SAM 26.04.2006 17:52 24.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_MACHINE_SECURITY 26.04.2006 17:52 44.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_MACHINE_SOFTWARE 26.04.2006 17:52 21.37 MB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_MACHINE_SYSTEM 26.04.2006 17:52 4.35 MB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_.DEFAULT 26.04.2006 17:52 248.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 26.04.2006 17:52 256.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 26.04.2006 17:52 224.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 26.04.2006 17:52 224.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 26.04.2006 17:52 3.34 MB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 26.04.2006 17:52 768.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 26.04.2006 17:52 8.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 26.04.2006 17:52 8.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 26.04.2006 17:52 104.00 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\domain.txt 26.04.2006 17:52 58 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository 26.04.2006 17:52 0 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\$WinMgmt.CFG 26.04.2006 17:47 20 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\INDEX.BTR 26.04.2006 17:52 1.30 MB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\INDEX.MAP 26.04.2006 17:52 712 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\MAPPING.VER 26.04.2006 17:52 4 bytes Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\MAPPING1.MAP 26.04.2006 17:52 4.49 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\MAPPING2.MAP 26.04.2006 17:52 4.49 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\OBJECTS.DATA 26.04.2006 17:52 7.52 MB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP17\snapshot\Repository\FS\OBJECTS.MAP 26.04.2006 17:52 3.80 KB Hidden from Windows API. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2 14.04.2006 03:07 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000013.msi 24.03.2005 17:09 6.50 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000017.ini 13.04.2006 04:44 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000018.ini 13.04.2006 04:44 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000020.ini 13.04.2006 04:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000021.ini 13.04.2006 04:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000022.ini 13.04.2006 04:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000023.sys 13.04.2006 04:45 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000027.mfl 13.04.2006 04:35 758.45 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000028.ini 13.04.2006 12:30 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000029.ini 13.04.2006 13:18 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000030.ini 13.04.2006 13:18 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000031.ini 13.04.2006 13:19 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000032.sys 13.04.2006 13:19 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000036.mfl 13.04.2006 13:20 776.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000037.ini 13.04.2006 13:27 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000038.ini 13.04.2006 13:28 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000039.ini 13.04.2006 13:28 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000040.ini 13.04.2006 13:28 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000041.sys 13.04.2006 13:29 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000045.nfo 07.04.2006 01:10 8.96 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000046.ini 13.04.2006 02:37 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000047.mfl 13.04.2006 13:59 934.94 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000048.ini 13.04.2006 14:05 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000049.ini 13.04.2006 17:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000050.ini 13.04.2006 17:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000051.sys 13.04.2006 17:46 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000055.PNF 18.02.2006 04:09 23.95 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000056.PNF 18.02.2006 04:10 9.44 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000057.lnk 21.02.2006 19:02 710 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000058.ini 21.02.2006 19:02 317 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000059.ini 13.04.2006 17:46 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000060.sys 04.08.2004 00:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000061.ax 04.08.2004 01:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000062.sys 04.08.2004 00:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000063.dll 04.08.2004 01:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000064.sys 04.08.2004 00:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000065.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000066.sys 04.08.2004 00:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000067.sys 04.08.2004 00:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000068.ax 04.08.2004 01:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000069.sys 04.08.2004 00:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000070.dll 04.08.2004 01:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000071.sys 04.08.2004 00:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000072.sys 04.08.2004 00:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000073.exe 30.07.2002 17:42 299.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000074.cat 08.08.2002 03:30 9.10 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000075.INF 15.08.2001 02:52 5.66 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000076.CAT 08.08.2002 03:30 9.10 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000077.PNF 18.02.2006 16:50 13.71 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000078.sys 18.08.2001 05:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000079.SYS 24.07.2002 05:30 31.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000080.sys 18.08.2001 05:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000081.tlb 02.12.2002 14:23 83.24 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000082.rgs 02.12.2002 16:28 25.22 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000083.dll 02.12.2002 14:33 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000084.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000085.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000086.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000087.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000088.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000089.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000090.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\A0000091.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\change.log.1 13.04.2006 12:30 15.67 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\change.log.2 13.04.2006 13:27 9.68 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\change.log.3 13.04.2006 14:05 10.92 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\change.log.4 13.04.2006 18:18 15.44 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\change.log.5 14.04.2006 03:07 88.32 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\drivetable.txt 14.04.2006 03:07 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\RestorePointSize 14.04.2006 16:55 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\rp.log 13.04.2006 04:50 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot 13.04.2006 04:50 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_MACHINE_SAM 13.04.2006 04:50 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_MACHINE_SECURITY 13.04.2006 04:50 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_MACHINE_SOFTWARE 13.04.2006 04:50 19.47 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_MACHINE_SYSTEM 13.04.2006 04:50 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_.DEFAULT 13.04.2006 04:50 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 13.04.2006 04:50 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 13.04.2006 04:50 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 13.04.2006 04:50 2.64 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 13.04.2006 04:50 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 13.04.2006 04:50 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 13.04.2006 04:50 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\domain.txt 13.04.2006 04:50 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository 13.04.2006 04:50 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\$WinMgmt.CFG 13.04.2006 04:45 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS 13.04.2006 04:50 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\INDEX.BTR 13.04.2006 04:50 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\INDEX.MAP 13.04.2006 04:50 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\MAPPING.VER 13.04.2006 04:50 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\MAPPING1.MAP 13.04.2006 04:50 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\MAPPING2.MAP 13.04.2006 04:50 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\OBJECTS.DATA 13.04.2006 04:50 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP2\snapshot\Repository\FS\OBJECTS.MAP 13.04.2006 04:50 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3 14.04.2006 05:08 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000092.inf 25.02.2005 08:26 1.78 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000093.PNF 14.04.2006 03:03 7.22 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000094.CAT 25.02.2005 08:26 7.84 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000095.sys 25.02.2005 08:26 59.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000096.ini 13.04.2006 18:17 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000098.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000099.ini 14.04.2006 02:54 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000100.ini 14.04.2006 02:54 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000104.sys 14.04.2006 02:54 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000105.sys 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000106.sys 04.08.2004 00:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000107.sys 18.08.2001 05:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000108.sys 04.08.2004 00:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000109.sys 04.08.2004 00:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000110.sys 04.08.2004 00:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000111.ini 14.04.2006 02:57 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000112.SYS 02.07.2003 04:42 27.25 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000113.sys 25.02.2005 08:26 59.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000114.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000115.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000116.dll 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000117.exe 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000118.dll 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000119.ax 04.08.2004 01:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000120.dll 04.08.2004 01:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000121.dll 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000122.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000123.cpl 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000124.dll 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000125.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000126.inf 14.04.2006 03:02 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000127.PNF 14.04.2006 03:02 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000128.inf 14.04.2006 03:03 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000129.PNF 14.04.2006 03:03 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000130.inf 14.04.2006 03:05 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000131.PNF 14.04.2006 03:05 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000132.inf 14.04.2006 03:05 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000133.PNF 14.04.2006 03:05 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000134.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000135.INF 26.08.2004 12:40 17.17 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000136.INF 26.08.2004 12:40 18.42 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000137.INF 26.08.2004 12:40 13.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000138.INF 26.08.2004 12:59 14.12 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000139.SYS 03.09.2004 10:32 3.41 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000140.INF 26.08.2004 12:40 53.74 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000141.CPL 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000142.DLL 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000143.DLL 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000144.EXE 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000145.INF 26.08.2004 12:40 23.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000146.INF 26.08.2004 12:40 36.87 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000147.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000148.DLL 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000149.INF 26.08.2004 12:40 12.48 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000150.SYS 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000151.INF 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000152.exe 03.09.2004 11:35 848.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000153.ini 14.04.2006 03:06 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000154.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000155.DLL 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000156.ini 14.04.2006 03:06 238 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000157.mfl 13.04.2006 17:56 758.44 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000158.ini 13.04.2006 12:30 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000159.lnk 14.04.2006 03:07 735 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000160.ini 14.04.2006 03:08 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000161.ini 14.04.2006 03:09 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000162.ini 14.04.2006 03:09 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000166.sys 14.04.2006 03:09 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000167.ini 14.04.2006 03:09 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000168.ini 13.04.2006 04:03 704 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000169.ini 13.04.2006 03:59 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000174.ini 14.04.2006 03:06 167 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000178.ini 13.04.2006 17:46 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000179.ini 14.04.2006 03:14 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000180.ini 14.04.2006 03:14 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000181.ini 14.04.2006 03:15 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000182.ini 14.04.2006 03:15 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000183.sys 14.04.2006 03:16 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000184.ini 14.04.2006 03:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000185.ini 14.04.2006 03:45 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000186.sys 14.04.2006 03:45 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000187.ini 14.04.2006 03:46 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000188.ini 14.04.2006 03:46 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000191.sys 14.04.2006 03:46 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000193.ini 14.04.2006 03:16 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000194.ini 14.04.2006 03:28 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000195.ini 14.04.2006 03:28 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000197.ini 14.04.2006 03:35 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000198.ini 14.04.2006 03:44 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000199.ini 14.04.2006 03:47 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000200.ini 14.04.2006 03:47 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000201.ini 14.04.2006 03:51 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000202.ini 14.04.2006 03:52 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000203.sys 14.04.2006 03:47 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000204.ini 14.04.2006 04:00 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000208.ini 14.04.2006 03:21 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000213.ini 14.04.2006 03:04 3.18 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000214.sys 11.11.2003 12:41 41.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000215.sys 17.08.2001 13:13 26.53 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000216.inf 29.08.2002 14:00 16.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000217.PNF 21.02.2006 15:12 14.98 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000218.PNF 14.04.2006 03:05 54.83 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000219.exe 18.06.2003 16:48 299.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000220.cat 01.07.2003 23:55 11.93 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000221.INF 13.06.2003 15:03 9.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000222.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000223.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000224.PNF 14.04.2006 03:05 20.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000225.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000226.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000227.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000228.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000229.sys 18.08.2001 04:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000230.sys 18.08.2001 05:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000231.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000232.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000233.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000234.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000235.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000236.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000237.inf 04.08.2004 01:51 167.56 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000238.PNF 21.02.2006 19:30 183.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000239.sys 18.08.2001 04:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000240.cat 01.07.2003 23:55 11.93 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000241.inf 13.06.2003 15:03 9.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000242.PNF 14.04.2006 03:05 20.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000243.SYS 02.07.2003 04:42 27.25 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000244.PNF 14.04.2006 03:05 10.75 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000258.ini 14.04.2006 04:00 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000259.ini 14.04.2006 04:01 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000260.ini 14.04.2006 04:01 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000261.sys 14.04.2006 04:01 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000262.ini 14.04.2006 04:23 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000263.ini 14.04.2006 04:23 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000264.ini 14.04.2006 04:01 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000265.ini 14.04.2006 04:18 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000266.sys 14.04.2006 04:24 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000267.ini 14.04.2006 04:18 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000271.sys 11.11.2003 12:41 41.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000272.sys 18.08.2001 04:18 35.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000273.SYS 02.07.2003 04:42 27.25 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000275.mfl 14.04.2006 03:10 758.45 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000276.ini 14.04.2006 04:05 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000277.ini 14.04.2006 04:18 3.18 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000278.ini 14.04.2006 03:21 202 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000279.exe 10.11.2003 13:55 114.14 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000280.ini 14.04.2006 03:06 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000281.dll 18.10.2002 15:56 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000282.exe 22.07.2003 11:15 220.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000283.exe 05.08.2003 14:23 260.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000284.SYS 03.09.2004 10:32 3.41 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000285.exe 03.09.2004 11:35 848.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000286.ini 14.04.2006 03:06 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000287.exe 17.09.2003 13:15 712.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000288.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000289.CPL 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000290.DLL 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000291.DLL 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000292.EXE 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000293.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000294.DLL 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000295.SYS 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000296.INF 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000297.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000298.DLL 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000299.lnk 14.04.2006 03:06 1.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000300.lnk 14.04.2006 03:06 1.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000301.INI 14.04.2006 03:06 26 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000302.INI 14.04.2006 03:06 92 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000303.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000304.ini 14.04.2006 03:06 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000305.cat 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000306.inf 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000307.PNF 14.04.2006 03:06 64.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000308.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000309.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000310.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000311.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000312.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000313.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000314.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000315.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000316.sys 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000317.dll 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000318.dll 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000319.dll 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000320.exe 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000321.dll 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000322.cpl 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000323.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000324.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000325.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000326.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000327.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000328.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000329.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000330.ini 14.04.2006 04:19 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000331.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000332.ini 14.04.2006 04:25 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000333.ini 14.04.2006 04:25 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000334.sys 14.04.2006 04:25 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000335.ini 14.04.2006 04:32 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000336.ini 14.04.2006 04:32 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000337.ini 14.04.2006 04:25 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000338.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000339.INF 26.08.2004 12:40 17.17 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000340.INF 26.08.2004 12:40 18.42 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000341.INF 26.08.2004 12:40 13.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000342.INF 26.08.2004 12:59 14.12 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000343.SYS 03.09.2004 10:32 3.41 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000344.INF 26.08.2004 12:40 53.74 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000345.CPL 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000346.DLL 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000347.DLL 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000348.EXE 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000349.INF 26.08.2004 12:40 23.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000350.INF 26.08.2004 12:40 36.87 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000351.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000352.DLL 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000353.INF 26.08.2004 12:40 12.48 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000354.SYS 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000355.INF 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000356.exe 03.09.2004 11:35 848.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000357.ini 14.04.2006 04:31 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000358.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000359.DLL 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000360.ini 14.04.2006 04:31 238 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000361.ini 14.04.2006 04:26 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000362.sys 14.04.2006 04:32 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000363.ini 14.04.2006 04:31 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000367.sys 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000368.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000369.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000370.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000371.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000372.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000373.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000374.dll 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000375.exe 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000376.dll 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000377.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000378.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000379.dll 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000380.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000381.cpl 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000382.dll 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000383.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000384.inf 14.04.2006 04:31 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000385.PNF 14.04.2006 04:31 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000386.ini 14.04.2006 04:31 167 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000387.ini 14.04.2006 04:29 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000388.inf 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000389.sys 03.08.2005 16:16 197.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000390.isu 18.02.2006 16:38 53.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000391.PNF 18.02.2006 16:38 7.99 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000392.PNF 18.02.2006 16:38 6.17 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000393.cat 11.04.2002 12:36 7.82 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000394.sys 20.02.2002 15:50 20.89 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000395.inf 26.02.2002 18:31 2.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000396.inf 26.02.2002 18:31 3.39 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000397.dll 26.03.2002 02:23 61.13 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000398.dll 26.09.2002 19:41 96.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000399.dll 26.09.2002 16:04 36.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000400.dll 31.05.2002 15:41 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000401.dll 26.09.2002 16:03 36.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000402.cpl 26.09.2002 16:03 124.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000403.exe 26.09.2002 16:06 376.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000404.exe 26.09.2002 16:03 40.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000405.DLL 15.08.2002 22:32 64.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000406.sys 15.08.2002 22:30 15.69 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000407.lnk 18.02.2006 16:38 675 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\A0000408.lnk 18.02.2006 16:38 610 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.1 14.04.2006 03:08 8.78 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.10 14.04.2006 04:33 3.74 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.11 14.04.2006 05:08 49.64 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.2 14.04.2006 03:14 44.79 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.3 14.04.2006 03:44 20.21 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.4 14.04.2006 03:45 2.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.5 14.04.2006 03:46 2.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.6 14.04.2006 04:00 7.01 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.7 14.04.2006 04:19 58.54 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.8 14.04.2006 04:24 3.15 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\change.log.9 14.04.2006 04:31 63.68 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\drivetable.txt 14.04.2006 05:08 268 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\RestorePointSize 14.04.2006 16:56 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\rp.log 14.04.2006 03:07 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot 14.04.2006 03:07 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_MACHINE_SAM 14.04.2006 03:07 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_MACHINE_SECURITY 14.04.2006 03:07 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_MACHINE_SOFTWARE 14.04.2006 03:07 19.53 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_MACHINE_SYSTEM 14.04.2006 03:07 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_.DEFAULT 14.04.2006 03:07 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 14.04.2006 03:07 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 14.04.2006 03:07 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 14.04.2006 03:07 2.65 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 14.04.2006 03:07 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 14.04.2006 03:07 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 14.04.2006 03:07 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\domain.txt 14.04.2006 03:07 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\MFEX-1.DAT 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository 14.04.2006 03:07 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\$WinMgmt.CFG 14.04.2006 02:54 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS 14.04.2006 03:07 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\INDEX.BTR 14.04.2006 03:07 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\INDEX.MAP 14.04.2006 03:07 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\MAPPING.VER 14.04.2006 03:07 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\MAPPING1.MAP 14.04.2006 03:07 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\MAPPING2.MAP 14.04.2006 03:07 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\OBJECTS.DATA 14.04.2006 03:07 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP3\snapshot\Repository\FS\OBJECTS.MAP 14.04.2006 03:07 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4 15.04.2006 19:36 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000409.inf 29.03.2004 07:45 1.78 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000410.PNF 14.04.2006 03:07 7.22 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000411.sys 29.03.2004 07:45 71.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000412.dll 04.05.2004 04:17 56.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000413.lnk 14.04.2006 03:07 751 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000414.lnk 14.04.2006 03:07 741 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000415.dll 04.05.2004 04:17 64.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000416.exe 04.05.2004 04:17 552.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000417.dll 20.11.2003 08:00 40.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000418.DLL 24.02.2004 08:23 92.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000419.ilg 14.04.2006 03:08 43.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000420.isu 23.02.2006 17:31 13.52 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000421.ico 01.11.2004 16:34 8.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000422.exe 06.09.2005 12:10 440.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000423.ini 24.02.2006 14:35 18.18 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000424.ini 23.08.2005 16:47 309 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000425.ini 13.07.2004 15:32 1.72 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000426.dll 02.09.2005 15:49 36.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000427.lnk 23.02.2006 17:30 1.58 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000428.ini 14.04.2006 04:57 565 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000429.ini 14.04.2006 04:31 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000431.dll 02.09.2005 15:49 36.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000432.ini 14.04.2006 04:33 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000433.ini 14.04.2006 04:33 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000434.ini 14.04.2006 04:33 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000435.ini 14.04.2006 04:35 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000436.ini 14.04.2006 05:09 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000437.sys 14.04.2006 04:34 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000441.ini 14.04.2006 04:38 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000442.ini 14.04.2006 04:31 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000443.ini 14.04.2006 04:30 3.18 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000444.ini 14.04.2006 04:37 202 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000445.exe 10.11.2003 13:55 114.14 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000446.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000447.ini 14.04.2006 04:30 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000448.dll 18.10.2002 15:56 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000449.exe 22.07.2003 11:15 220.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000450.PNF 14.04.2006 04:31 64.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000451.exe 05.08.2003 14:23 260.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000452.SYS 03.09.2004 10:32 3.41 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000453.exe 03.09.2004 11:35 848.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000454.ini 14.04.2006 04:31 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000455.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000456.exe 17.09.2003 13:15 712.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000457.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000458.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000459.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000460.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000461.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000462.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000463.sys 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000464.dll 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000465.dll 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000466.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000467.dll 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000468.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000469.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000470.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000471.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000472.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000473.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000474.exe 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000475.CPL 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000476.DLL 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000477.DLL 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000478.EXE 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000479.dll 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000480.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000481.DLL 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000482.SYS 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000483.INF 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000484.cpl 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000485.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000486.DLL 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000487.lnk 14.04.2006 04:31 1.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000488.lnk 14.04.2006 04:31 1.37 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000489.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000490.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000491.INI 14.04.2006 04:31 26 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000492.INI 14.04.2006 04:31 92 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000493.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000494.cat 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000495.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000496.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000497.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000498.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000499.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000500.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000501.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000502.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000503.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000504.ini 14.04.2006 05:09 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000505.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000506.ini 14.04.2006 05:10 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000507.ini 14.04.2006 05:10 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000508.ini 14.04.2006 05:10 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000509.DLL 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000510.INF 26.08.2004 12:40 17.17 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000511.INF 26.08.2004 12:40 18.42 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000512.INF 26.08.2004 12:40 13.65 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000513.INF 26.08.2004 12:59 14.12 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000514.SYS 03.09.2004 10:32 3.41 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000515.INF 26.08.2004 12:40 53.74 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000516.CPL 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000517.DLL 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000518.DLL 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000519.EXE 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000520.INF 26.08.2004 12:40 23.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000521.INF 26.08.2004 12:40 36.87 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000522.CAT 02.09.2004 11:37 203.46 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000523.DLL 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000524.INF 26.08.2004 12:40 12.48 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000525.SYS 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000526.INF 26.08.2004 12:40 38.43 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000527.exe 03.09.2004 11:35 848.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000528.ini 14.04.2006 05:13 736 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000529.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000530.DLL 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000531.ini 14.04.2006 05:12 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000532.ini 14.04.2006 05:13 238 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000533.ini 14.04.2006 05:13 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000534.sys 14.04.2006 05:10 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000538.ini 14.04.2006 05:11 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000539.sys 23.08.2004 10:21 802.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000540.sys 03.08.2004 23:08 58.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000541.sys 03.08.2004 23:15 137.63 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000542.sys 03.08.2004 23:15 142.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000543.sys 03.08.2004 23:08 47.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000544.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000545.dll 23.11.2001 06:08 696.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000546.dll 18.02.2003 12:26 28.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000547.exe 23.04.2004 09:02 228.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000548.dll 26.08.2004 12:25 160.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000549.ax 04.08.2004 00:58 127.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000550.dll 04.08.2004 00:57 4.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000551.dll 24.04.2003 07:29 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000552.drv 04.08.2004 01:58 23.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000553.cpl 12.08.2004 09:50 2.45 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000554.dll 29.04.2002 09:04 896.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000555.exe 17.02.2004 04:51 1.39 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000556.inf 14.04.2006 05:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000557.PNF 14.04.2006 05:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000558.ini 14.04.2006 05:13 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000559.ini 14.04.2006 05:14 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000560.ini 14.04.2006 05:14 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000561.ini 14.04.2006 05:14 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000562.ini 14.04.2006 05:31 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000563.sys 14.04.2006 05:15 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000567.ini 14.04.2006 05:33 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000568.ini 14.04.2006 05:34 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000569.ini 14.04.2006 05:34 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000570.ini 14.04.2006 05:34 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000571.ini 14.04.2006 05:37 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000572.sys 14.04.2006 05:34 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000573.ini 14.04.2006 05:33 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000577.ini 14.04.2006 05:16 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000578.mfl 14.04.2006 04:27 855.87 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000579.CAT 27.04.2004 15:12 7.84 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000582.lnk 02.03.2006 22:59 1.96 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000632.ini 14.04.2006 05:13 167 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000633.ini 14.04.2006 04:00 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000634.ini 13.04.2006 04:47 154.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000638.ini 14.04.2006 05:37 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000639.ini 14.04.2006 05:38 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000640.ini 14.04.2006 05:38 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000643.sys 14.04.2006 05:38 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000645.inf 13.04.2006 23:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000646.PNF 13.04.2006 23:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000647.ini 14.04.2006 05:38 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000648.ini 14.04.2006 05:59 1.97 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000649.ini 14.04.2006 06:37 552 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000650.mfl 14.04.2006 05:45 873.83 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000651.lnk 02.04.2006 21:05 507 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000652.lnk 12.04.2006 03:21 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000653.lnk 12.04.2006 03:21 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000654.lnk 12.04.2006 03:21 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000655.lnk 12.04.2006 03:19 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000656.lnk 12.04.2006 03:21 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000657.lnk 12.04.2006 03:19 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000658.lnk 12.04.2006 03:19 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000659.lnk 12.04.2006 03:21 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000660.lnk 12.04.2006 03:21 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000661.lnk 12.04.2006 03:22 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000662.lnk 12.04.2006 03:22 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000663.lnk 12.04.2006 03:22 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000664.lnk 12.04.2006 03:22 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000665.lnk 12.04.2006 03:20 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000666.lnk 12.04.2006 03:20 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000667.lnk 12.04.2006 03:20 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000668.lnk 08.04.2006 11:46 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000672.ini 14.04.2006 06:26 168.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000673.exe 13.04.2006 13:59 3.99 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000674.ini 13.04.2006 04:48 65 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000676.exe 17.11.1998 14:44 321.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000677.ini 01.04.2006 03:21 44 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000678.lnk 02.04.2006 18:40 709 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000679.lnk 04.04.2006 21:58 507 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000680.lnk 06.04.2006 22:26 512 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000681.ini 08.04.2006 19:25 116 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000682.lnk 11.04.2006 00:54 547 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000683.ini 14.04.2006 05:40 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000684.ini 14.04.2006 04:58 211 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000741.ini 14.04.2006 06:37 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000742.ini 14.04.2006 15:54 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000743.ini 14.04.2006 15:54 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000744.ini 14.04.2006 15:55 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000745.ini 15.04.2006 03:51 2.02 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000746.sys 14.04.2006 15:54 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000750.ini 15.04.2006 04:41 552 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\A0000751.ini 15.04.2006 00:42 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.1 14.04.2006 05:09 19.88 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.2 14.04.2006 05:13 72.96 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.3 14.04.2006 05:33 38.99 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.4 14.04.2006 05:37 7.02 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.5 14.04.2006 06:37 18.91 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.6 15.04.2006 04:41 83.21 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\change.log.7 15.04.2006 18:55 13.53 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\drivetable.txt 15.04.2006 19:36 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\RestorePointSize 15.04.2006 20:02 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\rp.log 14.04.2006 05:08 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot 14.04.2006 05:08 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_MACHINE_SAM 14.04.2006 05:08 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_MACHINE_SECURITY 14.04.2006 05:08 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_MACHINE_SOFTWARE 14.04.2006 05:08 19.55 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_MACHINE_SYSTEM 14.04.2006 05:08 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_.DEFAULT 14.04.2006 05:08 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 14.04.2006 05:08 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 14.04.2006 05:08 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 14.04.2006 05:08 2.78 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 14.04.2006 05:08 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 14.04.2006 05:08 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 14.04.2006 05:08 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\domain.txt 14.04.2006 05:08 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository 14.04.2006 05:08 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\$WinMgmt.CFG 14.04.2006 04:34 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS 14.04.2006 05:08 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\INDEX.BTR 14.04.2006 05:07 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\INDEX.MAP 14.04.2006 05:08 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\MAPPING.VER 14.04.2006 05:08 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\MAPPING1.MAP 14.04.2006 05:08 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\MAPPING2.MAP 14.04.2006 05:07 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\OBJECTS.DATA 14.04.2006 05:07 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP4\snapshot\Repository\FS\OBJECTS.MAP 14.04.2006 05:08 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5 16.04.2006 19:51 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000753.ini 15.04.2006 19:34 2.02 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000754.ini 15.04.2006 19:22 601 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000758.ini 15.04.2006 19:02 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000759.mfl 15.04.2006 04:27 1.01 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000782.ini 13.03.2006 00:06 433 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000783.ini 19.02.2006 13:52 106 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000784.ini 15.04.2006 20:51 350 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000785.ini 15.04.2006 20:51 350 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000786.ini 15.04.2006 20:51 433 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000787.lnk 15.04.2006 04:28 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000788.lnk 15.04.2006 04:28 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000789.lnk 15.04.2006 04:28 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000790.lnk 15.04.2006 04:28 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000791.lnk 06.04.2006 23:45 471 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000792.lnk 15.04.2006 04:28 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000793.lnk 15.04.2006 04:28 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000794.lnk 15.04.2006 04:28 387 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000795.lnk 15.04.2006 04:29 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000796.lnk 12.04.2006 03:20 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000797.lnk 12.04.2006 03:20 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000798.lnk 12.04.2006 03:20 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000799.lnk 12.04.2006 03:20 428 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000800.lnk 14.04.2006 16:33 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000801.lnk 14.04.2006 16:34 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000802.lnk 14.04.2006 16:34 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000803.lnk 14.04.2006 16:35 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000804.lnk 14.04.2006 16:35 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000805.lnk 14.04.2006 16:35 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000806.ini 15.04.2006 04:38 174.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000807.ini 15.04.2006 04:39 116 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000808.lnk 15.04.2006 21:37 357 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000809.ini 15.04.2006 04:31 65 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000811.lnk 14.04.2006 21:00 547 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000865.ini 15.04.2006 04:41 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000866.ini 15.04.2006 14:58 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000867.ini 15.04.2006 14:58 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000871.sys 15.04.2006 14:58 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000872.ini 15.04.2006 14:58 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000873.ini 16.04.2006 02:54 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000874.ini 16.04.2006 03:09 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000877.ini 15.04.2006 21:33 116 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000879.ini 16.04.2006 03:09 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000880.ini 16.04.2006 12:08 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000881.ini 16.04.2006 12:08 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000885.sys 16.04.2006 12:08 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000886.ini 16.04.2006 12:09 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000887.ini 16.04.2006 12:10 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\A0000888.ini 16.04.2006 12:54 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\change.log.1 16.04.2006 03:09 111.71 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\change.log.2 16.04.2006 12:54 11.07 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\change.log.3 16.04.2006 19:34 6.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\drivetable.txt 16.04.2006 19:51 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\RestorePointSize 17.04.2006 16:40 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\rp.log 15.04.2006 19:36 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot 15.04.2006 19:36 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_MACHINE_SAM 15.04.2006 19:36 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_MACHINE_SECURITY 15.04.2006 19:36 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_MACHINE_SOFTWARE 15.04.2006 19:36 20.05 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_MACHINE_SYSTEM 15.04.2006 19:36 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_.DEFAULT 15.04.2006 19:36 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 15.04.2006 19:36 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 15.04.2006 19:36 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 15.04.2006 19:36 2.78 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 15.04.2006 19:36 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 15.04.2006 19:36 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 15.04.2006 19:36 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\domain.txt 15.04.2006 19:36 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository 15.04.2006 19:36 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\$WinMgmt.CFG 15.04.2006 14:58 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS 15.04.2006 19:36 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\INDEX.BTR 15.04.2006 19:35 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\INDEX.MAP 15.04.2006 19:36 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\MAPPING.VER 15.04.2006 19:36 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\MAPPING1.MAP 15.04.2006 19:35 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\MAPPING2.MAP 15.04.2006 19:36 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\OBJECTS.DATA 15.04.2006 19:35 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP5\snapshot\Repository\FS\OBJECTS.MAP 15.04.2006 19:36 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6 18.04.2006 01:42 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000889.ini 16.04.2006 19:38 603 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000890.ini 16.04.2006 12:54 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000891.ini 16.04.2006 19:27 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000892.ini 16.04.2006 19:27 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000893.ini 16.04.2006 19:27 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000894.ini 16.04.2006 19:28 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000895.sys 16.04.2006 19:27 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000896.ini 16.04.2006 19:57 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000900.ini 16.04.2006 02:44 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000954.lnk 15.04.2006 21:24 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000955.lnk 15.04.2006 21:24 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000956.lnk 15.04.2006 21:24 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000957.lnk 15.04.2006 21:25 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000958.lnk 15.04.2006 21:25 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000959.lnk 15.04.2006 21:25 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000960.lnk 15.04.2006 21:25 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000961.lnk 15.04.2006 04:29 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000962.lnk 15.04.2006 21:25 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000963.lnk 15.04.2006 21:26 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000964.lnk 15.04.2006 21:26 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000965.lnk 15.04.2006 21:26 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000966.lnk 15.04.2006 21:26 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000967.lnk 15.04.2006 21:26 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000968.mfl 15.04.2006 22:41 903.69 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000969.ini 15.04.2006 22:21 182.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000973.ini 16.04.2006 19:58 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000974.ini 17.04.2006 01:20 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000975.ini 17.04.2006 01:20 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000979.sys 17.04.2006 01:20 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000980.ini 17.04.2006 01:20 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000981.ini 17.04.2006 03:11 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000982.ini 17.04.2006 04:31 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000983.lnk 17.04.2006 04:14 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000984.lnk 17.04.2006 04:14 531 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000985.lnk 17.04.2006 04:14 531 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000989.lnk 15.04.2006 21:25 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000990.lnk 15.04.2006 21:25 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000991.lnk 17.04.2006 04:14 531 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000992.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000993.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000994.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000995.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000996.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000997.lnk 17.04.2006 04:15 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000998.lnk 15.04.2006 21:25 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0000999.lnk 15.04.2006 21:25 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001000.ini 17.04.2006 01:40 162 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001054.ini 17.04.2006 04:31 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001055.ini 17.04.2006 15:25 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001056.ini 17.04.2006 15:25 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001060.sys 17.04.2006 15:25 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001061.ini 17.04.2006 15:26 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001062.ini 17.04.2006 20:57 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001063.ini 17.04.2006 21:20 552 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001064.ini 17.04.2006 17:22 162 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001119.tlb 10.11.2003 18:11 101.19 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001120.rgs 10.11.2003 18:11 29.06 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\A0001121.dll 10.11.2003 18:10 32.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\change.log.1 16.04.2006 19:58 2.20 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\change.log.2 17.04.2006 04:31 42.38 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\change.log.3 17.04.2006 21:21 28.87 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\change.log.4 18.04.2006 01:42 14.02 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\drivetable.txt 18.04.2006 01:42 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\RestorePointSize 18.04.2006 18:21 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\rp.log 16.04.2006 19:51 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot 16.04.2006 19:51 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_MACHINE_SAM 16.04.2006 19:51 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_MACHINE_SECURITY 16.04.2006 19:51 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_MACHINE_SOFTWARE 16.04.2006 19:51 20.05 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_MACHINE_SYSTEM 16.04.2006 19:51 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_.DEFAULT 16.04.2006 19:51 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 16.04.2006 19:51 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 16.04.2006 19:51 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 16.04.2006 19:51 2.81 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 16.04.2006 19:51 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 16.04.2006 19:51 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 16.04.2006 19:51 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\domain.txt 16.04.2006 19:51 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository 16.04.2006 19:51 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\$WinMgmt.CFG 16.04.2006 19:27 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS 16.04.2006 19:51 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\INDEX.BTR 16.04.2006 19:50 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\INDEX.MAP 16.04.2006 19:51 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\MAPPING.VER 16.04.2006 19:51 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\MAPPING1.MAP 16.04.2006 19:51 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\MAPPING2.MAP 16.04.2006 19:50 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\OBJECTS.DATA 16.04.2006 19:50 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP6\snapshot\Repository\FS\OBJECTS.MAP 16.04.2006 19:51 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7 18.04.2006 23:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001122.ini 18.04.2006 01:36 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001124.dll 22.03.2006 17:44 218.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001125.ini 22.03.2006 17:44 280 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001126.dll 22.03.2006 17:44 52.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001127.ini 22.03.2006 17:44 318 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001128.dll 22.03.2006 17:44 12.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001129.ini 22.03.2006 17:44 304 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001130.dll 22.03.2006 17:44 462.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001131.ini 22.03.2006 17:44 298 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001132.dll 22.03.2006 17:44 142.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001133.ini 22.03.2006 17:44 302 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001134.dll 22.03.2006 17:44 155.50 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001135.ini 22.03.2006 17:44 304 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001136.dll 22.03.2006 17:44 356.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001137.ini 22.03.2006 17:44 302 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001138.dll 22.03.2006 17:44 174.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001139.ini 22.03.2006 17:44 304 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001142.ini 18.04.2006 00:55 549 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001143.ini 17.04.2006 21:21 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001144.ini 17.04.2006 22:01 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001145.ini 17.04.2006 22:01 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001149.sys 17.04.2006 22:01 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001150.inf 18.04.2006 01:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001151.PNF 18.04.2006 01:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001152.inf 18.04.2006 01:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001153.PNF 18.04.2006 01:45 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001154.ini 17.04.2006 22:02 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001155.ini 18.04.2006 07:37 2.09 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001156.ini 18.04.2006 07:54 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001158.lnk 17.04.2006 16:18 416 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001159.lnk 17.04.2006 16:18 423 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001160.lnk 17.04.2006 16:18 423 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001161.lnk 17.04.2006 16:18 423 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001162.lnk 17.04.2006 16:19 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001163.lnk 17.04.2006 16:19 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001164.lnk 17.04.2006 16:19 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001165.lnk 17.04.2006 16:19 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001166.lnk 17.04.2006 16:19 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001167.lnk 17.04.2006 16:19 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001168.lnk 15.04.2006 21:25 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001169.lnk 15.04.2006 21:26 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001171.ini 17.04.2006 04:25 190.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001175.lnk 02.04.2006 21:03 2.36 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001176.ini 18.04.2006 07:54 190 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001177.ini 18.04.2006 16:38 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001178.ini 18.04.2006 16:38 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001179.ini 18.04.2006 16:39 62 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001180.ini 18.04.2006 20:20 2.16 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001181.sys 18.04.2006 16:38 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001185.ini 18.04.2006 20:21 554 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001186.ini 18.04.2006 01:41 317 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\A0001187.lnk 18.04.2006 20:19 522 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\change.log.1 18.04.2006 07:55 70.90 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\change.log.2 18.04.2006 20:21 42.79 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\change.log.3 18.04.2006 23:12 7.83 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\drivetable.txt 18.04.2006 23:13 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\RestorePointSize 19.04.2006 17:06 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\rp.log 18.04.2006 01:42 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot 18.04.2006 01:42 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_MACHINE_SAM 18.04.2006 01:42 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_MACHINE_SECURITY 18.04.2006 01:42 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_MACHINE_SOFTWARE 18.04.2006 01:42 20.07 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_MACHINE_SYSTEM 18.04.2006 01:42 4.28 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_.DEFAULT 18.04.2006 01:42 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 18.04.2006 01:42 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 18.04.2006 01:42 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 18.04.2006 01:42 3.31 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 18.04.2006 01:42 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 18.04.2006 01:42 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 18.04.2006 01:42 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\domain.txt 18.04.2006 01:42 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository 18.04.2006 01:42 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\$WinMgmt.CFG 17.04.2006 22:02 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS 18.04.2006 01:42 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\INDEX.BTR 18.04.2006 01:42 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\INDEX.MAP 18.04.2006 01:42 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\MAPPING.VER 18.04.2006 01:42 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\MAPPING1.MAP 18.04.2006 01:42 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\MAPPING2.MAP 18.04.2006 01:42 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\OBJECTS.DATA 18.04.2006 01:42 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP7\snapshot\Repository\FS\OBJECTS.MAP 18.04.2006 01:42 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8 19.04.2006 02:59 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001188.ini 18.04.2006 22:34 2.16 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001189.ini 18.04.2006 23:04 549 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001190.msi 07.03.2006 20:04 2.14 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001191.msi 14.04.2006 03:07 2.64 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001192.mst 07.03.2006 20:03 61.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001193.lnk 18.04.2006 20:12 2.36 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001194.lnk 10.04.2006 02:20 1005 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001195.lnk 06.04.2006 14:11 2.34 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001196.ini 18.04.2006 22:38 155 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001197.ini 18.04.2006 18:00 194.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001198.lnk 18.04.2006 17:57 411 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001199.lnk 18.04.2006 17:58 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001200.lnk 18.04.2006 17:58 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001201.lnk 18.04.2006 17:58 399 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001202.lnk 18.04.2006 17:58 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001203.lnk 18.04.2006 17:58 380 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001204.lnk 17.04.2006 16:19 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001205.lnk 17.04.2006 16:19 392 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001206.lnk 17.04.2006 04:06 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001207.lnk 18.04.2006 17:58 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001208.lnk 18.04.2006 17:58 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001209.lnk 18.04.2006 17:59 404 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001210.lnk 17.04.2006 04:06 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001211.lnk 17.04.2006 04:06 368 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001212.lnk 17.04.2006 16:10 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001213.lnk 17.04.2006 16:10 375 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001214.exe 18.04.2006 01:41 546.31 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\A0001215.ini 15.04.2006 22:21 65 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\change.log.1 19.04.2006 02:57 44.27 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\drivetable.txt 19.04.2006 02:59 266 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\RestorePointSize 19.04.2006 17:10 8 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\rp.log 18.04.2006 23:13 536 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot 18.04.2006 23:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_MACHINE_SAM 18.04.2006 23:13 24.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_MACHINE_SECURITY 18.04.2006 23:13 44.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_MACHINE_SOFTWARE 18.04.2006 23:13 20.08 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_MACHINE_SYSTEM 18.04.2006 23:13 4.29 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_.DEFAULT 18.04.2006 23:13 240.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18 21.02.2006 22:45 256.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19 18.04.2006 23:12 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20 18.04.2006 23:12 224.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1004 18.04.2006 23:13 3.31 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-1214440339-1677128483-1343024091-1005 29.03.2006 18:27 768.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19 18.04.2006 23:12 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20 18.04.2006 23:12 8.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-1214440339-1677128483-1343024091-1004 18.04.2006 23:13 100.00 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\ComDb.Dat 21.02.2006 15:15 22.73 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\domain.txt 18.04.2006 23:13 58 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository 18.04.2006 23:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\$WinMgmt.CFG 18.04.2006 22:34 20 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS 18.04.2006 23:13 0 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\INDEX.BTR 18.04.2006 23:12 1.30 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\INDEX.MAP 18.04.2006 23:12 712 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\MAPPING.VER 18.04.2006 23:12 4 bytes Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\MAPPING1.MAP 18.04.2006 23:12 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\MAPPING2.MAP 18.04.2006 23:12 4.49 KB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\OBJECTS.DATA 18.04.2006 23:12 7.52 MB Visible in Windows API, but not in MFT or directory index. C:\System Volume Information\_restore{CD56DC96-BE6B-467C-B778-464908700218}\RP8\snapshot\Repository\FS\OBJECTS.MAP 18.04.2006 23:12 3.80 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\$hf_mig$\KB894391\SP2QFE 26.04.2006 17:53 0 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll 28.04.2005 21:35 1.23 MB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll 28.04.2005 21:35 73.00 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll 28.04.2005 21:35 36.50 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll 28.04.2005 21:35 387.00 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll 24.02.2005 21:34 15.22 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe 24.02.2005 21:34 208.22 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update 26.04.2006 17:53 0 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\branches.inf 06.05.2005 15:44 705 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\eula.txt 05.02.2005 22:09 3.86 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\KB894391.CAT 06.05.2005 16:45 13.98 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll 24.02.2005 21:34 21.72 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\update.exe 24.02.2005 21:34 710.72 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\update.ver 06.05.2005 16:52 1.19 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\update_SP2QFE.inf 06.05.2005 15:56 11.13 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\updatebr.inf 06.05.2005 15:44 592 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll 24.02.2005 21:34 369.22 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$ 26.04.2006 17:53 0 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\ole32.dll 14.01.2005 10:57 1.23 MB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\olecli32.dll 14.01.2005 10:57 73.00 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\olecnv32.dll 14.01.2005 10:57 37.00 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll 14.01.2005 10:57 386.50 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\spuninst 26.04.2006 17:53 0 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe 24.02.2005 21:34 208.22 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.inf 26.04.2006 17:53 7.13 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.txt 26.04.2006 17:53 552 bytes Visible in directory index, but not Windows API or MFT. C:\WINDOWS\$NtUninstallKB894391$\spuninst\updspapi.dll 24.02.2005 21:34 369.22 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll 21.02.2006 16:14 252.00 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll 21.02.2006 16:14 111.50 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\inf\oem15.inf 22.02.2006 15:15 10.41 KB Hidden from Windows API. C:\WINDOWS\inf\oem15.PNF 26.04.2006 17:53 24.13 KB Hidden from Windows API. C:\WINDOWS\LastGood 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\WINDOWS\LastGood\INF 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\WINDOWS\LastGood\INF\oem15.inf 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\WINDOWS\LastGood\INF\oem15.PNF 26.04.2006 17:53 0 bytes Hidden from Windows API. C:\WINDOWS\Prefetch\MSCONFIG.EXE-35E4DAE9.pf 26.04.2006 17:53 65.27 KB Hidden from Windows API. C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf 26.04.2006 17:51 193.54 KB Hidden from Windows API. C:\WINDOWS\Prefetch\RUNDLL32.EXE-29A2BA7C.pf 26.04.2006 17:53 19.43 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\RUNDLL32.EXE-3910966A.pf 26.04.2006 17:53 58.03 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\UPDATE.EXE-2AFF2EF2.pf 26.04.2006 17:53 56.57 KB Hidden from Windows API. C:\WINDOWS\Prefetch\WSCNTFY.EXE-1B24F5EB.pf 26.04.2006 17:53 6.97 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\system32\_000008_.tmp.dll 14.01.2005 10:57 37.00 KB Hidden from Windows API. C:\WINDOWS\system32\CatRoot2\edb00007.log 26.04.2006 17:39 128.00 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\system32\CatRoot2\edb00008.log 26.04.2006 17:40 128.00 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\system32\CatRoot2\edb00009.log 26.04.2006 17:53 128.00 KB Hidden from Windows API. C:\WINDOWS\system32\CatRoot2\edbtmp.log 26.04.2006 17:53 128.00 KB Hidden from Windows API. C:\WINDOWS\system32\CatRoot2\tmp.edb 26.04.2006 17:53 1.01 MB Hidden from Windows API. C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB894391.cat 06.05.2005 16:45 13.98 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.CAT 26.04.2006 17:53 13.98 KB Hidden from Windows API. C:\WINDOWS\system32\dllcache\olecli32.dll 14.01.2005 10:57 73.00 KB Visible in Windows API, directory index, but not in MFT. C:\WINDOWS\system32\dllcache\olecnv32.dll 14.01.2005 10:57 37.00 KB Visible in Windows API, directory index, but not in MFT. C:\WINDOWS\system32\olecnv32.dll 14.01.2005 10:57 37.00 KB Visible in Windows API, directory index, but not in MFT. C:\WINDOWS\system32\SET5.tmp 28.04.2005 21:31 386.50 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\system32\SET6.tmp 28.04.2005 21:31 73.00 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\system32\SET7.tmp 28.04.2005 21:31 1.23 MB Visible in directory index, but not Windows API or MFT. Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: E0A9-1879 Verzeichnis von C:\WINDOWS\system32 26.04.2006 17:46 291 OODBS.lor 26.04.2006 17:36 53.760 zlib.dll 26.04.2006 17:04 310 qsyllxjl.txt 25.04.2006 21:55 16.579 RootkitReveal.txt 25.04.2006 21:53 16.579 RootkitReveal 11.txt 23.04.2006 15:11 13.734 wpa.dbl 19.04.2006 00:13 98.304 CmdLineExt.dll 14.04.2006 03:00 13.734 wpa.bak 08.04.2006 13:57 664 d3d9caps.dat 31.03.2006 15:01 2.089 INSTALL.LOG 31.03.2006 15:01 29 UNWISE.INI 26.03.2006 14:35 58.732 perfc009.dat 26.03.2006 14:35 392.432 perfh009.dat 26.03.2006 14:35 70.778 perfc007.dat 26.03.2006 14:35 405.448 perfh007.dat 26.03.2006 14:35 938.224 PerfStringBackup.INI 21.03.2006 00:05 14.848 BASSMOD.dll 11.03.2006 22:48 2.272 w95inf16.dll 11.03.2006 22:48 4.608 w95inf32.dll 11.03.2006 18:08 242.328 FNTCACHE.DAT 25.02.2006 22:20 7.006 jupdate-1.5.0_06-b05.log 22.02.2006 22:30 1.100 d3d8caps.dat 22.02.2006 00:29 269 spupdwxp.log 18.02.2006 16:03 35.363 windrvNT.sys 18.02.2006 16:03 53.248 suppdll.dll 18.02.2006 04:23 25.065 wmpscheme.xml 18.02.2006 04:20 249 $winnt$.inf 18.02.2006 04:18 2.951 CONFIG.NT 18.02.2006 04:17 488 WindowsLogon.manifest 18.02.2006 04:17 488 logonui.exe.manifest 18.02.2006 04:17 749 cdplayer.exe.manifest 18.02.2006 04:17 749 wuaucpl.cpl.manifest 18.02.2006 04:17 749 ncpa.cpl.manifest 18.02.2006 04:17 749 sapi.cpl.manifest 18.02.2006 04:17 749 nwc.cpl.manifest 18.02.2006 04:16 21.740 emptyregdb.dat 18.02.2006 04:12 0 h323log.txt 07.02.2006 22:28 4.513.120 MRT.exe 26.01.2006 09:57 520.192 ati2sgag.exe 25.01.2006 05:52 255.488 ati2dvag.dll 25.01.2006 05:47 114.688 atipdlxx.dll 25.01.2006 05:47 77.824 Oemdspif.dll 25.01.2006 05:46 26.112 Ati2mdxx.exe 25.01.2006 05:46 41.472 ati2edxx.dll 25.01.2006 05:46 61.440 ati2evxx.dll 25.01.2006 05:45 405.504 ati2evxx.exe 25.01.2006 05:44 53.248 ATIDDC.DLL 25.01.2006 05:36 2.604.128 ati3duag.dll 25.01.2006 05:30 6.684.672 atioglx1.dll 25.01.2006 05:30 860.192 ativvaxx.dll 25.01.2006 05:28 307.200 atiiiexx.dll 25.01.2006 05:16 151.552 atikvmag.dll 25.01.2006 05:16 17.408 atitvo32.dll 25.01.2006 05:13 5.115.904 atioglxx.dll 25.01.2006 05:10 258.048 ati2cqag.dll 25.01.2006 04:29 282.624 ATIDEMGR.dll 24.01.2006 20:34 118.784 sirenacm.dll 18.01.2006 14:05 57.344 avsda.dll 04.01.2006 05:35 68.096 webclnt.dll Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: E0A9-1879 Verzeichnis von C:\DOKUME~1\Timotime\LOKALE~1\Temp 26.04.2006 17:48 348.243 XLLS.exe 1 Datei(en) 348.243 Bytes 0 Verzeichnis(se), 5.280.903.168 Bytes frei Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: E0A9-1879 Verzeichnis von C:\WINDOWS 26.04.2006 17:47 1.209.547 WindowsUpdate.log 26.04.2006 17:46 159 wiadebug.log 26.04.2006 17:46 50 wiaservc.log 26.04.2006 17:46 0 0.log 26.04.2006 17:46 2.048 bootstat.dat 26.04.2006 17:45 31.848 SchedLgU.Txt 26.04.2006 17:44 178.921 setupact.log 26.04.2006 17:41 18.611 KB911562.log 26.04.2006 17:41 18.832 KB900485.log 26.04.2006 17:41 18.801 KB912812.log 26.04.2006 17:41 18.308 KB901190.log 26.04.2006 17:41 18.227 KB908531.log 26.04.2006 17:40 18.130 KB911567.log 26.04.2006 17:40 1.755 setupapi.log 26.04.2006 17:39 15.580 KB885250.log 26.04.2006 17:39 15.730 KB887742.log 26.04.2006 17:39 15.239 KB887472.log 26.04.2006 17:39 14.963 KB902400.log 26.04.2006 17:38 15.016 KB894391.log 26.04.2006 17:36 357 whInstaller.ini 26.04.2006 17:36 2.205.539 setupapi.log.0.old 26.04.2006 17:08 116 NeroDigital.ini 25.04.2006 17:14 25.792 wmsetup.log 20.04.2006 14:16 460 wmsetup10.log 18.04.2006 01:45 173.292 DirectX.log 14.04.2006 22:19 604 win.ini 14.04.2006 22:19 227 system.ini 14.04.2006 05:13 92 CMISETUP.INI 14.04.2006 05:13 26 CMCDPLAY.INI 14.04.2006 05:12 3.255 Ascd_tmp.ini 14.04.2006 03:43 232 avmw2k.log 14.04.2006 03:43 184 avmadd32.log 14.04.2006 03:06 0 Wininit.ini 14.04.2006 03:00 761.744 setuplog.txt 09.04.2006 22:50 2.018 ModemLog_Smart Link 56K Voice Modem.txt 31.03.2006 15:01 40.132 php.ini 29.03.2006 18:04 1.519 OEWABLog.txt 26.03.2006 19:55 253.952 Setup1.exe 26.03.2006 19:55 74.752 ST6UNST.EXE 10.03.2006 23:34 0 PestPatrol5.INI 02.03.2006 23:00 400 ODBC.INI 25.02.2006 22:21 659 mozver.dat 23.02.2006 17:49 737.280 iun6002.exe 22.02.2006 15:18 5.328 KB905915.log 22.02.2006 00:37 29.972 spupdsvc.log 22.02.2006 00:35 91.293 comsetup.log 22.02.2006 00:35 56.059 ntdtcsetup.log 22.02.2006 00:35 34.792 iis6.log 22.02.2006 00:35 95.451 tsoc.log 22.02.2006 00:35 13.379 ocmsn.log 22.02.2006 00:35 1.374 imsins.log 22.02.2006 00:35 320.634 KB899587.log 22.02.2006 00:35 135.045 ocgen.log 22.02.2006 00:35 12.374 msgsocm.log 22.02.2006 00:35 229.972 FaxSetup.log 22.02.2006 00:35 8.698 updspapi.log 22.02.2006 00:35 1.374 imsins.BAK 22.02.2006 00:35 319.514 KB896422.log 22.02.2006 00:35 319.530 KB885835.log 22.02.2006 00:35 318.884 KB885836.log 22.02.2006 00:35 319.599 KB911927.log 22.02.2006 00:34 318.696 KB901017.log 22.02.2006 00:34 319.009 KB899591.log 22.02.2006 00:34 319.144 KB896424.log 22.02.2006 00:34 319.007 KB893756.log 22.02.2006 00:34 316.769 KB896423.log 22.02.2006 00:34 316.514 KB873339.log 22.02.2006 00:34 316.583 KB888113.log 22.02.2006 00:34 318.067 KB896358.log 22.02.2006 00:34 10.967 KB910437.log 22.02.2006 00:33 7.336 KB911564.log 22.02.2006 00:33 315.536 KB891781.log 22.02.2006 00:33 2.072 vminst.log 22.02.2006 00:33 316.451 KB890046.log 22.02.2006 00:33 317.392 KB873333.log 22.02.2006 00:32 419.529 KB905749.log 22.02.2006 00:32 419.953 KB896428.log 22.02.2006 00:31 360 DtcInstall.log 22.02.2006 00:31 316.640 WMSysPr9.prx 22.02.2006 00:28 1.442 COM+.log 21.02.2006 23:00 413.961 KB905414.log 21.02.2006 22:56 410.590 KB901214.log 21.02.2006 22:54 409.116 KB888302.log 21.02.2006 22:54 413.215 KB900725.log 21.02.2006 22:53 410.467 KB912919.log 21.02.2006 22:52 410.510 KB904706.log 21.02.2006 22:50 109.147 KB911565.log 21.02.2006 22:48 409.428 KB908519.log 21.02.2006 22:47 207.928 KB913446.log 21.02.2006 22:47 414.806 KB890859.log 21.02.2006 22:12 207.510 KB898461.log 21.02.2006 19:39 424.360 svcpack.log 21.02.2006 19:31 200 cmsetacl.log 21.02.2006 19:30 1.330 sessmgr.setup.log 21.02.2006 19:13 605 medctroc.Log 21.02.2006 15:12 7.417 KB893803v2.log 20.02.2006 22:36 1.550 smivia.dat 18.02.2006 16:55 299.552 WMSysPrx.prx 18.02.2006 16:37 498 s3setup.log 18.02.2006 04:26 0 nsreg.dat 18.02.2006 04:21 8.192 REGLOCS.OLD 18.02.2006 04:18 0 control.ini 18.02.2006 04:18 4.161 ODBCINST.INI 18.02.2006 04:18 280 Windows Update.log 18.02.2006 04:17 749 WindowsShell.Manifest 18.02.2006 04:15 37 vbaddin.ini 18.02.2006 04:15 36 vb.ini 18.02.2006 04:11 0 Sti_Trace.log 18.02.2006 04:09 1.348 regopt.log 18.02.2006 04:08 0 setuperr.log Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: E0A9-1879 Verzeichnis von C:\ 26.04.2006 17:51 0 sys.txt 26.04.2006 17:50 7.883 system.txt 26.04.2006 17:50 292 systemtemp.txt 26.04.2006 17:50 99.123 system32.txt 26.04.2006 17:46 805.306.368 pagefile.sys 26.04.2006 17:46 1.692 avenger.txt 25.04.2006 17:22 588 DirDPF.txt 25.04.2006 17:22 2 DirDPFCns.txt 14.04.2006 22:19 211 boot.ini 13.04.2006 04:23 16 MSDOS.SYS 21.02.2006 19:18 47.564 NTDETECT.COM 21.02.2006 19:18 251.184 ntldr 18.02.2006 04:18 0 IO.SYS 18.02.2006 04:18 0 CONFIG.SYS 18.02.2006 04:18 0 AUTOEXEC.BAT 31.10.2005 17:56 700.416 StubInstaller.exe 29.08.2002 14:00 4.952 bootfont.bin 17 Datei(en) 806.420.291 Bytes 0 Verzeichnis(se), 5.280.763.904 Bytes frei