HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 14.07.2006 11:00 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\uptime_pid 13.07.2006 20:34 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\uptime_time_utc 13.07.2006 20:34 8 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7040110900063D11C8EF10054038389C\Usage\OUTLOOKFiles 14.07.2006 11:00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7040110900063D11C8EF10054038389C\Usage\ProductFiles 14.07.2006 11:00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7040110900063D11C8EF10054038389C\Usage\WORDFiles 14.07.2006 11:00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FC6B5F6CC906E82478F6AC3871C620B1\Usage\Complete 14.07.2006 10:59 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\MSSYCLM\Start 14.07.2006 10:57 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 20.06.2006 17:15 0 bytes Access is denied. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Anwendungsdaten\Mozilla\Firefox\Profiles\opu2e40y.default\bookmarkbackups\bookmarks-2006-07-06.html 05.07.2006 17:59 18.30 KB Visible in Windows API, but not in MFT or directory index. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Anwendungsdaten\Mozilla\Firefox\Profiles\opu2e40y.default\bookmarkbackups\bookmarks-2006-07-14.html 13.07.2006 19:20 20.36 KB Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Anwendungsdaten\Mozilla\Firefox\Profiles\opu2e40y.default\history.dat 14.07.2006 11:09 371 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Cookies\christoph.rettig@protecus[1].txt 14.07.2006 11:03 107 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Eigene Dateien\Eigene Bilder\spy-kassaserver.JPG 14.07.2006 11:07 174.88 KB Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\B7I09BML\login[1].php 14.07.2006 11:02 1.38 KB Visible in Windows API, but not in MFT or directory index. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\B7I09BML\report[1].gif 14.07.2006 11:03 126 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\K6E3912G\do_login[1].php 14.07.2006 11:03 478 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\K6E3912G\findnew[1].gif 14.07.2006 11:03 303 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\K6E3912G\list[1].gif 14.07.2006 11:03 223 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QPOJA1OH\profile[1].gif 14.07.2006 11:03 342 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QPOJA1OH\t23511-lastpage[1].htm 14.07.2006 11:02 27.80 KB Visible in Windows API, but not in MFT or directory index. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QPOJA1OH\t23511-lastpage[2].htm 14.07.2006 11:03 44.45 KB Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\T1J3RE4F\do_login[1].htm 14.07.2006 11:03 892 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\T1J3RE4F\google[1] 14.07.2006 10:59 1.67 KB Visible in Windows API, but not in MFT or directory index. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\T1J3RE4F\message[1].gif 14.07.2006 11:03 890 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Lokale Einstellungen\Temporary Internet Files\Content.IE5\T1J3RE4F\t23511-lastpage[2].htm 14.07.2006 11:07 47.24 KB Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Recent\Eigene Bilder.lnk 14.07.2006 11:07 496 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\christoph.rettig.COMPRENDIUM-AT\Recent\spy-kassaserver.JPG.lnk 14.07.2006 11:07 740 bytes Hidden from Windows API. C:\Dokumente und Einstellungen\NetworkService\Cookies\index.dat 14.07.2006 11:40 16.00 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\lulock.dat 14.07.2006 11:40 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1d2f.tmp 14.07.2006 11:40 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp 14.07.2006 11:42 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\CATALOG.DAT 14.06.2006 10:00 2.84 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\CCERASER.DLL 14.06.2006 10:00 1.78 MB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ECBOOTIL.VXD 14.06.2006 10:00 6.74 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ECMSVR32.DLL 14.06.2006 10:00 281.66 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\eeCtrl.sys 10.07.2006 12:44 316.64 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ERASER.grd 10.07.2006 12:44 232 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ERASER.sig 10.07.2006 12:44 2.20 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ERASER.spm 10.07.2006 12:44 1.21 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\eraser.sys 10.07.2006 12:44 87.14 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\ESRDEF.BIN 12.07.2006 10:00 2.86 MB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\HH 14.06.2006 10:00 4.04 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVENG.EXP 12.10.2005 08:00 99.86 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVENG.SYS 14.06.2006 10:00 76.04 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVENG.VXD 14.06.2006 10:00 86.07 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVENG32.DLL 14.06.2006 10:00 121.66 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVEX15.EXP 14.06.2006 10:00 844.53 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVEX15.SYS 14.06.2006 10:00 780.48 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVEX15.VXD 14.06.2006 10:00 935.57 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NAVEX32A.DLL 14.06.2006 10:00 817.66 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\NCSACERT.TXT 12.10.2005 08:00 6.38 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\SCRAUTH.DAT 10.07.2006 10:00 95.22 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\SYMAVENG.CAT 14.06.2006 10:00 7.95 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\SYMAVENG.INF 14.06.2006 10:00 901 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\SymErase.cat 10.07.2006 12:44 7.95 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\SymErase.inf 10.07.2006 12:44 617 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TCDEFS.DAT 12.07.2006 10:00 46.82 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TCSCAN7.DAT 12.07.2006 10:00 790.63 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TCSCAN8.DAT 12.07.2006 10:00 297.28 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TCSCAN9.DAT 12.07.2006 10:00 613.63 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TECHNOTE.TXT 12.10.2005 08:00 875 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TINF.DAT 12.07.2006 10:00 453 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TINFIDX.DAT 12.10.2005 08:00 148 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TINFL.DAT 12.07.2006 10:00 1.91 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TSCAN1.DAT 12.07.2006 10:00 55.50 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\TSCAN1HD.DAT 10.07.2006 10:00 2.96 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\V.GRD 12.07.2006 10:00 5.06 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\V.SIG 12.07.2006 10:00 2.20 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN.INF 10.07.2006 10:00 103.75 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN1.DAT 12.07.2006 10:00 938.59 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN2.DAT 12.07.2006 10:00 556.29 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN3.DAT 12.07.2006 10:00 142.93 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN4.DAT 12.07.2006 10:00 312.60 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN5.DAT 12.07.2006 10:00 2.41 MB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN6.DAT 12.07.2006 10:00 379.92 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp1e00.tmp\VIRSCAN7.DAT 14.07.2006 11:42 3.70 MB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp56d6.tmp 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\cur.scr 13.07.2006 05:40 1.42 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\ESRDEF.999 13.07.2006 05:39 5.75 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TCDEFS.998 13.07.2006 05:39 208 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TCSCAN7.997 13.07.2006 05:39 3.03 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TCSCAN8.996 13.07.2006 05:39 841 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TCSCAN9.995 13.07.2006 05:39 16.03 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TINF.994 13.07.2006 05:39 92 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TINFL.993 13.07.2006 05:39 93 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\TSCAN1.992 13.07.2006 05:39 162 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\V.990 13.07.2006 05:39 238 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\V.991 13.07.2006 05:39 978 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN1.989 13.07.2006 05:39 1.11 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN2.988 13.07.2006 05:39 3.95 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN3.987 13.07.2006 05:39 259 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN4.986 13.07.2006 05:39 25.80 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN5.985 13.07.2006 05:39 20.41 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN6.984 13.07.2006 05:39 515 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN7.983 13.07.2006 05:39 20.10 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN8.982 13.07.2006 05:39 2.05 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\VIRSCAN9.981 13.07.2006 05:40 36.59 KB Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\virscant.dat 13.07.2006 05:40 32 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Gemeinsame Dateien\Symantec Shared\VirusDefs\tmp57bc.tmp\WHATSNEW.980 13.07.2006 05:40 398 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\Norton AntiVirus\Savrt\0017NAV~.TMP 14.07.2006 11:14 0 bytes Hidden from Windows API. C:\Programme\utils\Spamihilator\recycle\2453931_111149_d8d8b.recycle 14.07.2006 11:11 3.10 KB Hidden from Windows API. C:\Programme\utils\Spamihilator\SPA10.tmp.log 14.07.2006 10:54 532 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPA17.tmp.log 14.07.2006 11:21 0 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPA18.tmp.log 14.07.2006 11:21 0 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPA23.tmp.log 14.07.2006 11:36 310 bytes Hidden from Windows API. C:\Programme\utils\Spamihilator\SPA24.tmp.log 14.07.2006 11:36 530 bytes Hidden from Windows API. C:\Programme\utils\Spamihilator\SPA28.tmp.log 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\utils\Spamihilator\SPA29.tmp.log 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\utils\Spamihilator\SPA2A.tmp.log 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\utils\Spamihilator\SPA2B.tmp.log 14.07.2006 11:41 0 bytes Visible in directory index, but not Windows API or MFT. C:\Programme\utils\Spamihilator\SPA3.tmp.log 14.07.2006 11:01 0 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPA4.tmp.log 14.07.2006 11:01 0 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPAD.tmp.log 14.07.2006 10:54 311 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPAE.tmp.log 14.07.2006 10:54 582 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\SPAF.tmp.log 14.07.2006 10:54 312 bytes Visible in Windows API, but not in MFT or directory index. C:\Programme\utils\Spamihilator\training\5e9a01dd.training 14.07.2006 11:11 3.10 KB Hidden from Windows API. C:\WINDOWS\Prefetch\AUPDATE.EXE-233AFF23.pf 14.07.2006 11:40 8.81 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\FIREFOX.EXE-3425AEB8.pf 14.07.2006 11:09 43.18 KB Hidden from Windows API. C:\WINDOWS\Prefetch\INKFORM.EXE-12DA720E.pf 14.07.2006 11:32 60.36 KB Hidden from Windows API. C:\WINDOWS\Prefetch\MSTSC.EXE-3295C471.pf 14.07.2006 11:10 24.00 KB Hidden from Windows API. C:\WINDOWS\Prefetch\NDETECT.EXE-2EA889EE.pf 14.07.2006 11:40 19.62 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\NSLOOKUP.EXE-2D4B4F48.pf 14.07.2006 11:42 14.37 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\PING.EXE-30D22814.pf 14.07.2006 11:42 12.14 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\TRACERT.EXE-0D85656D.pf 14.07.2006 11:44 12.94 KB Visible in directory index, but not Windows API or MFT. C:\WINDOWS\Prefetch\TRUEIMAGE.EXE-2091914C.pf 14.07.2006 11:28 61.80 KB Hidden from Windows API. C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb 14.07.2006 10:59 64.00 KB Visible in Windows API, but not in MFT or directory index.