HKU\S-1-5-21-1708537768-1958367476-682003330-1004	 	0 bytes	Error dumping hive: The system cannot find the file specified.
HKLM\SECURITY\Policy\Secrets\SAC*	12/15/2006 18:28	0 bytes	Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI*	12/15/2006 18:28	0 bytes	Key name contains embedded nulls (*)
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed	4/2/2011 14:55	80 bytes	Data mismatch between Windows API and raw hive data.
C:\Documents and Settings\All Users\Application Data\IObit\Protected Folder\config.ini	3/25/2011 08:50	57 bytes	Hidden from Windows API.
C:\Documents and Settings\All Users\Application Data\IObit\Protected Folder\drawposs.db	3/24/2011 10:44	0 bytes	Hidden from Windows API.
C:\Documents and Settings\All Users\Application Data\IObit\Protected Folder\fstile.cds	3/24/2011 10:44	0 bytes	Hidden from Windows API.
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG:KAVICHS	4/2/2011 11:33	36 bytes	Hidden from Windows API.
C:\Documents and Settings\LocalService\ntuser.dat.LOG:KAVICHS	4/2/2011 11:35	36 bytes	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_001eb9	4/2/2011 13:01	35.48 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_001f0a	4/2/2011 13:31	34.69 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_002008	4/2/2011 14:17	34.23 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_00200a	4/2/2011 14:17	35.57 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_00200b	4/2/2011 14:17	35.31 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_002070	4/2/2011 14:33	31.44 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020a7	4/2/2011 15:37	34.69 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020a8	4/2/2011 15:37	34.23 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020a9	4/2/2011 15:37	35.57 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020aa	4/2/2011 15:37	35.31 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020ab	4/2/2011 15:37	31.44 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_0020ac	4/2/2011 15:37	35.48 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG:KAVICHS	4/2/2011 11:33	36 bytes	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Temporary Internet Files\Content.IE5\5CL7F1HN\94928[1].xml	4/2/2011 15:37	4.79 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Temporary Internet Files\Content.IE5\EGCQJQC8\94928[1].xml	4/2/2011 15:52	1.20 KB	Hidden from Windows API.
C:\Documents and Settings\Mick Hayes\Local Settings\Temporary Internet Files\Content.IE5\UNAE8VPK\94928[1].xml	4/2/2011 15:22	1.20 KB	Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Mick Hayes\NTUSER.DAT.LOG:KAVICHS	4/2/2011 15:31	36 bytes	Hidden from Windows API.
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG:KAVICHS	4/2/2011 11:33	36 bytes	Hidden from Windows API.
C:\Documents and Settings\NetworkService\ntuser.dat.LOG:KAVICHS	4/2/2011 11:33	36 bytes	Hidden from Windows API.
C:\System Volume Information\_restore{6109A6AC-ABC4-4A08-A4A4-5CEC1D979087}\RP1821\A0500086.ini	4/2/2011 11:33	72.63 KB	Hidden from Windows API.
C:\WINDOWS\system32\config\default.LOG:KAVICHS	4/2/2011 15:37	36 bytes	Hidden from Windows API.
C:\WINDOWS\system32\config\SAM.LOG:KAVICHS	4/2/2011 11:30	36 bytes	Hidden from Windows API.
C:\WINDOWS\system32\config\SECURITY.LOG:KAVICHS	4/2/2011 14:30	36 bytes	Hidden from Windows API.
C:\WINDOWS\system32\config\software.LOG:KAVICHS	4/2/2011 15:39	36 bytes	Hidden from Windows API.
C:\WINDOWS\system32\config\system.LOG:KAVICHS	4/2/2011 15:37	36 bytes	Hidden from Windows API.