Black Hawk Down

APPLICATION SESSION LOG
Saved at: 06:48:06, 17/Jul/2011

 04:51:55 DBG Application starts
 04:51:55 Registration Key installation failed for '' ()
 04:51:55 DBG no user key retrieved
 04:51:55 User is member of Administrators group.
 04:51:56 Application 'Active@ UNDELETE 7.4 [DEMO]' starts. Version: 7.4.014
 04:51:56 DBG Low Resolution
 04:52:06 Local system uses a local area network to connect to the Internet. Local system has RAS installed.
 04:52:06 OK Internet Available. On-Line help and Software Update can be used
 04:52:06 Starting initialization...
 04:52:06 Opening recovery kernel ...
 04:52:06 Analyzing devices ...
 04:52:06 Analyzing device Hard Disk 0 (C:,D:,T:)
 04:52:06 Analyzing volume Daniel Mounted
 04:52:06 Analyzing volume Local Disk (C:)
 04:52:07 Analyzing volume RECOVERY (D:)
 04:52:08 Analyzing volume MOUNTDANIEL (T:)
 04:52:08 Analyzing device CDRom Drive 0 (E:)
 04:52:08 ... opening recovery kernel complete.
 04:52:08 Reading Data Storage Info...
 19:00:00   Processor type:                                          x86
 19:00:00   Number of Processors:                                      2
 19:00:00   Version (Service Pack):                         (Build 7600)
 19:00:00   Build:                                                  7600
 19:00:00   Operating System:                                  Windows 7
 04:52:08 DBG System Information:
 04:52:08 ... reading Data Storage Info complete.
 04:52:08 DBG Initialize application modules...
 04:52:08 DBG ... done
 04:52:08 OK Initialization complete.
 04:52:10 OK Ready
 19:00:00  Subject:                                    Computer [ (LOCAL) ]
 19:00:00  File Name:   C:\Users\Owner\Undelete Session 2011-07-12_0710B.usf
 19:00:00  Action:                                            Load Session
 04:52:54 DBG Application Persistence
 04:52:54 Loading Session info 'C:\Users\Owner\Undelete Session 2011-07-12_0710B.usf'...
 04:52:54 OK Application Session info has been loaded successfully from 'C:\Users\Owner\Undelete Session 2011-07-12_0710B.usf'.
 19:00:00  Subject:                                    Computer [ (LOCAL) ]
 19:00:00  File Name:   C:\Users\Owner\Undelete Session 2011-07-12_0711F.usf
 19:00:00  Action:                                            Load Session
 04:54:25 DBG Application Persistence
 04:54:25 Loading Session info 'C:\Users\Owner\Undelete Session 2011-07-12_0711F.usf'...
 04:54:25 Loading Scan Results for drive Local Disk (C:) ...
 04:54:40 Populating Logical Drive 'Local Disk (C:)' content...
 04:55:38 OK Application Session info has been loaded successfully from 'C:\Users\Owner\Undelete Session 2011-07-12_0711F.usf'.
 19:00:00  Number of Files or Folders to recover:                         204
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\!!_$$_!!'
 05:28:48 DBG Recovering selected Files and Folders
 05:28:48 WRNG File 'UserConfig.xml' will be recovered to the same drive where deleted data located.
 05:28:49 DBG Recovering from 'C:\ProgramData\WildTangent\My HP Game Console\pt\'
 05:28:49 Recovery started for UserConfig.xml [  263 B ]
 05:28:49 Recovery completed for UserConfig.xml
 05:28:49 WRNG File 'userinfo.dat' will be recovered to the same drive where deleted data located.
 05:28:49 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\SoftGrid Client\'
 05:28:49 Recovery started for userinfo.dat [  124 B ]
 05:28:49 Recovery completed for userinfo.dat
 05:28:49 WRNG File 'dalesa.docx' will be recovered to the same drive where deleted data located.
 05:28:49 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:28:49 Recovery started for dalesa.docx [14.66 KB]
 05:28:49 Recovery completed for dalesa.docx
 05:28:49 WRNG File 'owner@montclair[1].txt' will be recovered to the same drive where deleted data located.
 05:28:49 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Cookies\Lowcookies\'
 05:28:49 Recovery started for owner@montclair[1].txt [  265 B ]
 05:28:49 Recovery completed for owner@montclair[1].txt
 05:28:49 WRNG File 'owner@rutgers[2].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@rutgers[2].txt [  327 B ]
 05:28:49 Recovery completed for owner@rutgers[2].txt
 05:28:49 WRNG File 'owner@www.googleadservices[2].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@www.googleadservices[2].txt [  374 B ]
 05:28:49 Recovery completed for owner@www.googleadservices[2].txt
 05:28:49 WRNG File 'owner@www.music-oasis[1].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@www.music-oasis[1].txt [  124 B ]
 05:28:49 Recovery completed for owner@www.music-oasis[1].txt
 05:28:49 WRNG File 'owner@iamamerchant[1].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@iamamerchant[1].txt [  362 B ]
 05:28:49 Recovery completed for owner@iamamerchant[1].txt
 05:28:49 WRNG File 'owner@pointroll[2].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@pointroll[2].txt [  154 B ]
 05:28:49 Recovery completed for owner@pointroll[2].txt
 05:28:49 WRNG File 'owner@ads.pointroll[2].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@ads.pointroll[2].txt [  728 B ]
 05:28:49 Recovery completed for owner@ads.pointroll[2].txt
 05:28:49 WRNG File 'owner@www.hulu[1].txt' will be recovered to the same drive where deleted data located.
 05:28:49 Recovery started for owner@www.hulu[1].txt [  249 B ]
 05:28:49 Recovery completed for owner@www.hulu[1].txt
 05:28:49 WRNG File 'BeaconService.sol' will be recovered to the same drive where deleted data located.
 05:28:49 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\share_what\www.hulu.com\'
 05:28:49 Recovery started for BeaconService.sol [  138 B ]
 05:28:49 Recovery completed for BeaconService.sol
 05:28:49 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:51 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:53 WRNG File 'uninstall.log' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Program Files (x86)\Mozilla Firefox\uninstall\'
 05:28:53 Recovery started for uninstall.log [1.681 KB]
 05:28:53 Recovery completed for uninstall.log
 05:28:53 WRNG File 'wikipedia.xml' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Program Files (x86)\Mozilla Firefox\searchplugins\'
 05:28:53 Recovery started for wikipedia.xml [1.150 KB]
 05:28:53 Recovery completed for wikipedia.xml
 05:28:53 WRNG File 'blocklist.xml' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Program Files (x86)\Mozilla Firefox\'
 05:28:53 Recovery started for blocklist.xml [5.062 KB]
 05:28:53 Recovery completed for blocklist.xml
 05:28:53 WRNG File 'removed-files' will be recovered to the same drive where deleted data located.
 05:28:53 Recovery started for removed-files [33.45 KB]
 05:28:53 Recovery completed for removed-files
 05:28:53 WRNG File 'yahoo.xml' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Program Files (x86)\Mozilla Firefox\searchplugins\'
 05:28:53 Recovery started for yahoo.xml [1.070 KB]
 05:28:53 Recovery completed for yahoo.xml
 05:28:53 WRNG File 'urlclassifierkey3.txt' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\kxzk87a5.default\'
 05:28:53 Recovery started for urlclassifierkey3.txt [  154 B ]
 05:28:53 Recovery completed for urlclassifierkey3.txt
 05:28:53 WRNG File 'logo.png' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\skin\'
 05:28:53 Recovery started for logo.png [  299 B ]
 05:28:53 Recovery completed for logo.png
 05:28:53 WRNG File 'Report.wer' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_774338915cff6ad83d79bbe8b16e6f5f9ce414d8_01689ae7\'
 05:28:53 Recovery started for Report.wer [2.211 KB]
 05:28:53 Recovery completed for Report.wer
 05:28:53 WRNG File 'Report.wer' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_9bf6edcfa39b3abee1bab0e25834cf2b238ef988_0168b24e\'
 05:28:53 Recovery started for Report.wer [2.410 KB]
 05:28:53 Recovery completed for Report.wer
 05:28:53 WRNG File 'GlobalCatalogLock.dat' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\System Volume Information\Windows Backup\Catalogs\'
 05:28:53 Recovery started for GlobalCatalogLock.dat [    0 B ]
 05:28:53 Recovery completed for GlobalCatalogLock.dat
 05:28:53 WRNG File '_7.cfs' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Users\Owner\AppData\Local\Apple Computer\Safari\History\'
 05:28:53 Recovery started for _7.cfs [17.61 KB]
 05:28:53 Recovery completed for _7.cfs
 05:28:53 WRNG File 'segments' will be recovered to the same drive where deleted data located.
 05:28:53 Recovery started for segments [   27 B ]
 05:28:53 Recovery completed for segments
 05:28:53 WRNG File 'deletable' will be recovered to the same drive where deleted data located.
 05:28:53 Recovery started for deletable [    4 B ]
 05:28:53 Recovery completed for deletable
 05:28:53 WRNG File 'LastSession.plist' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Apple Computer\Safari\'
 05:28:53 Recovery started for LastSession.plist [  481 B ]
 05:28:53 Recovery completed for LastSession.plist
 05:28:53 WRNG File 'WER2184.tmp.WERInternalMetadata.xml' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Windows\Temp~$%\'
 05:28:53 Recovery started for WER2184.tmp.WERInternalMetadata.xml [3.475 KB]
 05:28:53 Recovery completed for WER2184.tmp.WERInternalMetadata.xml
 05:28:53 WRNG File 'NJCU Fafsa.txt' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:28:53 Recovery started for NJCU Fafsa.txt [3.289 KB]
 05:28:53 Recovery completed for NJCU Fafsa.txt
 05:28:53 WRNG File 'Employment.txt' will be recovered to the same drive where deleted data located.
 05:28:53 Recovery started for Employment.txt [21.49 KB]
 05:28:53 Recovery completed for Employment.txt
 05:28:53 WRNG File 'TMGrpPrm.sav' will be recovered to the same drive where deleted data located.
 05:28:53 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Adobe\Acrobat\10.0\'
 05:28:53 Recovery started for TMGrpPrm.sav [   54 B ]
 05:28:53 Recovery completed for TMGrpPrm.sav
 05:28:53 WRNG File 'TMDocs.sav' will be recovered to the same drive where deleted data located.
 05:28:53 Recovery started for TMDocs.sav [   36 B ]
 05:28:53 Recovery completed for TMDocs.sav
 05:28:53 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:54 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:55 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:56 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:56 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:57 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:57 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:57 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:58 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:58 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:59 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:59 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:28:59 WRNG File 'car.txt' will be recovered to the same drive where deleted data located.
 05:28:59 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:28:59 Recovery started for car.txt [3.641 KB]
 05:28:59 Recovery completed for car.txt
 05:28:59 WRNG File 'cacheSize.txt' will be recovered to the same drive where deleted data located.
 05:28:59 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Adobe\Flash Player\AssetCache\7J8GPGRP\'
 05:28:59 Recovery started for cacheSize.txt [    8 B ]
 05:28:59 Recovery completed for cacheSize.txt
 05:28:59 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:00 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:00 WRNG File 'random.txt' will be recovered to the same drive where deleted data located.
 05:29:00 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:29:00 Recovery started for random.txt [  319 B ]
 05:29:00 Recovery completed for random.txt
 05:29:00 WRNG File 'Intl.txt' will be recovered to the same drive where deleted data located.
 05:29:00 Recovery started for Intl.txt [  319 B ]
 05:29:00 Recovery completed for Intl.txt
 05:29:00 WRNG File 'rambler.txt' will be recovered to the same drive where deleted data located.
 05:29:00 Recovery started for rambler.txt [7.365 KB]
 05:29:00 Recovery completed for rambler.txt
 05:29:00 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:02 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:04 WRNG File 'NTUSER.DAT{82fdb024-a3b3-11e0-8ed1-806e6f6e6963}.TM.blf' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Windows\ServiceProfiles\NetworkService\'
 05:29:04 Recovery started for NTUSER.DAT{82fdb024-a3b3-11e0-8ed1-806e6f6e6963}.TM.blf [64.00 KB]
 05:29:04 Recovery completed for NTUSER.DAT{82fdb024-a3b3-11e0-8ed1-806e6f6e6963}.TM.blf
 05:29:04 WRNG File 'AdobeARM_NotLocked.log' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\Local\Temp\'
 05:29:04 Recovery started for AdobeARM_NotLocked.log [  744 B ]
 05:29:04 Recovery completed for AdobeARM_NotLocked.log
 05:29:04 WRNG File 'blocklist.xml' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\kxzk87a5.default\'
 05:29:04 Recovery started for blocklist.xml [7.320 KB]
 05:29:04 Recovery completed for blocklist.xml
 05:29:04 WRNG File 'victims.txt' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:29:04 Recovery started for victims.txt [09.74 KB]
 05:29:04 Recovery completed for victims.txt
 05:29:04 WRNG File '967.gif' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f21^2f000^2f000^2f000^2f016\'
 05:29:04 Recovery started for 967.gif [9.371 KB]
 05:29:04 Recovery completed for 967.gif
 05:29:04 WRNG File '940.jpg' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f31^2f000^2f000^2f000^2f016\'
 05:29:04 Recovery started for 940.jpg [12.28 KB]
 05:29:04 Recovery completed for 940.jpg
 05:29:04 WRNG File '826.swf' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f33^2f000^2f000^2f000^2f016\'
 05:29:04 Recovery started for 826.swf [23.96 KB]
 05:29:04 Recovery completed for 826.swf
 05:29:04 WRNG File '838.swf' will be recovered to the same drive where deleted data located.
 05:29:04 Recovery started for 838.swf [21.28 KB]
 05:29:04 Recovery completed for 838.swf
 05:29:04 WRNG File '686.swf' will be recovered to the same drive where deleted data located.
 05:29:04 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f109^2f000^2f000^2f000^2f016\'
 05:29:04 Recovery started for 686.swf [23.19 KB]
 05:29:05 Recovery completed for 686.swf
 05:29:05 WRNG File '685.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f93^2f000^2f000^2f000^2f017\'
 05:29:05 Recovery started for 685.swf [38.29 KB]
 05:29:05 Recovery completed for 685.swf
 05:29:05 WRNG File '870.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f110^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 870.gif [5.322 KB]
 05:29:05 Recovery completed for 870.gif
 05:29:05 WRNG File '890.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f7^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 890.gif [5.997 KB]
 05:29:05 Recovery completed for 890.gif
 05:29:05 WRNG File '818.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f50^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 818.gif [5.687 KB]
 05:29:05 Recovery completed for 818.gif
 05:29:05 WRNG File '880.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f107^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 880.swf [25.87 KB]
 05:29:05 Recovery completed for 880.swf
 05:29:05 WRNG File '770.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f99^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 770.swf [24.33 KB]
 05:29:05 Recovery completed for 770.swf
 05:29:05 WRNG File '717.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f45^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 717.gif [5.598 KB]
 05:29:05 Recovery completed for 717.gif
 05:29:05 WRNG File '656.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f99^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 656.jpg [12.56 KB]
 05:29:05 Recovery completed for 656.jpg
 05:29:05 WRNG File '772.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f7^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 772.swf [24.33 KB]
 05:29:05 Recovery completed for 772.swf
 05:29:05 WRNG File '692.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f111^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 692.jpg [13.29 KB]
 05:29:05 Recovery completed for 692.jpg
 05:29:05 WRNG File '348.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f115^2f000^2f000^2f000^2f017\'
 05:29:05 Recovery started for 348.swf [39.28 KB]
 05:29:05 Recovery completed for 348.swf
 05:29:05 WRNG File '942.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f31^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 942.swf [29.09 KB]
 05:29:05 Recovery completed for 942.swf
 05:29:05 WRNG File 'hsi5.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\Desktop\My Web Sites\Ice Mirror\www.ice.gov\images\most-wanted\'
 05:29:05 Recovery started for hsi5.jpg [27.80 KB]
 05:29:05 Recovery completed for hsi5.jpg
 05:29:05 WRNG File 'developers.shtml' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\About\developer_resources\'
 05:29:05 Recovery started for developers.shtml [21.90 KB]
 05:29:05 Recovery completed for developers.shtml
 05:29:05 WRNG File 'usagov_logo.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\resources\images\'
 05:29:05 Recovery started for usagov_logo.gif [6.500 KB]
 05:29:05 Recovery completed for usagov_logo.gif
 05:29:05 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:06 WRNG File 'DictionaryUnicode.txt' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:29:06 Recovery started for DictionaryUnicode.txt [47.55 KB]
 05:29:06 Recovery completed for DictionaryUnicode.txt
 05:29:06 WRNG File 'Americans_Minds.shtml' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\About\'
 05:29:06 Recovery started for Americans_Minds.shtml [23.70 KB]
 05:29:06 Recovery completed for Americans_Minds.shtml
 05:29:06 WRNG File 'index.shtml' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\gobiernousa\'
 05:29:06 Recovery started for index.shtml [37.44 KB]
 05:29:06 Recovery completed for index.shtml
 05:29:06 WRNG File 'index.html' will be recovered to the same drive where deleted data located.
 05:29:06 Recovery started for index.html [37.42 KB]
 05:29:06 Recovery completed for index.html
 05:29:06 WRNG File 'new[2].txt' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\Users\Owner\Documents\newdirective\Temporary Internet Files\Content.IE5\0ZX32UL8\'
 05:29:06 Recovery started for new[2].txt [14.93 KB]
 05:29:06 Recovery completed for new[2].txt
 05:29:06 WRNG File 'new[1].txt' will be recovered to the same drive where deleted data located.
 05:29:06 Recovery started for new[1].txt [15.17 KB]
 05:29:06 Recovery completed for new[1].txt
 05:29:06 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:08 WRNG File '07-04-11_15-51.jpg' will be recovered to the same drive where deleted data located.
 05:29:08 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:08 Recovery started for 07-04-11_15-51.jpg [48.07 KB]
 05:29:08 Recovery completed for 07-04-11_15-51.jpg
 05:29:08 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:08 WRNG File '07-04-11_13-54.jpg' will be recovered to the same drive where deleted data located.
 05:29:08 Recovery started for 07-04-11_13-54.jpg [48.36 KB]
 05:29:08 Recovery completed for 07-04-11_13-54.jpg
 05:29:08 WRNG File '07_04_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:08 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\daily_visited_urls\'
 05:29:08 Recovery started for 07_04_2011.txt [  338 B ]
 05:29:09 Recovery completed for 07_04_2011.txt
 05:29:09 WRNG File '07-04-11_14-16.jpg' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:09 Recovery started for 07-04-11_14-16.jpg [48.36 KB]
 05:29:09 Recovery completed for 07-04-11_14-16.jpg
 05:29:09 WRNG File '07_04_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\daily_log_files\'
 05:29:09 Recovery started for 07_04_2011.txt [20.31 KB]
 05:29:09 Recovery completed for 07_04_2011.txt
 05:29:09 WRNG File '07-04-11_20-59.jpg' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:09 Recovery started for 07-04-11_20-59.jpg [27.07 KB]
 05:29:09 Recovery completed for 07-04-11_20-59.jpg
 05:29:09 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:10 WRNG File '07-04-11_23-08.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for 07-04-11_23-08.jpg [56.09 KB]
 05:29:10 Recovery completed for 07-04-11_23-08.jpg
 05:29:10 WRNG File '07-04-11_20-19.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for 07-04-11_20-19.jpg [58.96 KB]
 05:29:10 Recovery completed for 07-04-11_20-19.jpg
 05:29:10 WRNG File 'DLR4F47.tmp' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\AppData\Local\Temp\'
 05:29:10 Recovery started for DLR4F47.tmp [12.17 KB]
 05:29:10 Recovery completed for DLR4F47.tmp
 05:29:10 WRNG File 'Owner- Clipboard - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\ProgramData\KSP\LogFile\'
 05:29:10 Recovery started for Owner- Clipboard - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Clipboard - 7_7_2011.txt
 05:29:10 WRNG File 'Owner- Keys - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Owner- Keys - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Keys - 7_7_2011.txt
 05:29:10 WRNG File 'Owner- Website - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Owner- Website - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Website - 7_7_2011.txt
 05:29:10 WRNG File 'BCD.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\{DNL\boot\'
 05:29:10 Recovery started for BCD.LOG [17.00 KB]
 05:29:10 Recovery completed for BCD.LOG
 05:29:10 WRNG File 'svitracking.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\'
 05:29:10 Recovery started for svitracking.log [20.00 KB]
 05:29:10 Recovery completed for svitracking.log
 05:29:10 WRNG File '07-07-11_04-56.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\some_undistinguished_folder\Ultra Keylogger\spy_screenshots\07_07_2011\'
 05:29:10 Recovery started for 07-07-11_04-56.jpg [63.67 KB]
 05:29:10 Recovery completed for 07-07-11_04-56.jpg
 05:29:10 WRNG File 'tracking.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\{DNL\System Volume Information\'
 05:29:10 Recovery started for tracking.log [20.00 KB]
 05:29:10 Recovery completed for tracking.log
 05:29:10 WRNG File 'BurnBootMergeBBV1.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Logs\'
 05:29:10 Recovery started for BurnBootMergeBBV1.log [13.17 KB]
 05:29:10 Recovery completed for BurnBootMergeBBV1.log
 05:29:10 WRNG File 'BBApps.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for BBApps.log [3.555 KB]
 05:29:10 Recovery completed for BBApps.log
 05:29:10 WRNG File 'CardReader.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for CardReader.log [  207 B ]
 05:29:10 Recovery completed for CardReader.log
 05:29:10 WRNG File 'nis.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for nis.log [  172 B ]
 05:29:10 Recovery completed for nis.log
 05:29:10 WRNG File 'WMPfiles.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for WMPfiles.log [  776 B ]
 05:29:10 Recovery completed for WMPfiles.log
 05:29:10 WRNG File 'REGDEV_BB.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for REGDEV_BB.LOG [   41 B ]
 05:29:10 Recovery completed for REGDEV_BB.LOG
 05:29:10 WRNG File 'MountLtr.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for MountLtr.log [   71 B ]
 05:29:10 Recovery completed for MountLtr.log
 05:29:10 WRNG File 'BTooth.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Logs\BB\'
 05:29:10 Recovery started for BTooth.LOG [  654 B ]
 05:29:10 Recovery completed for BTooth.LOG
 05:29:10 WRNG File 'GFBIOS.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for GFBIOS.log [  388 B ]
 05:29:10 Recovery completed for GFBIOS.log
 05:29:10 WRNG File 'YouCam.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for YouCam.log [  845 B ]
 05:29:10 Recovery completed for YouCam.log
 05:29:10 WRNG File 'Touchpad.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Touchpad.log [7.883 KB]
 05:29:10 Recovery completed for Touchpad.log
 05:29:10 WRNG File 'WINLIVE.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for WINLIVE.LOG [  901 B ]
 05:29:10 Recovery completed for WINLIVE.LOG
 05:29:10 WRNG File 'HWBIOS.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for HWBIOS.log [  630 B ]
 05:29:11 Recovery completed for HWBIOS.log
 05:29:11 WRNG File 'cleanSWS.ini' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\'
 05:29:11 Recovery started for cleanSWS.ini [  206 B ]
 05:29:11 Recovery completed for cleanSWS.ini
 05:29:11 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:11 WRNG File 'info.ini' will be recovered to the same drive where deleted data located.
 05:29:11 Recovery started for info.ini [9.280 KB]
 05:29:11 Recovery completed for info.ini
 05:29:11 WRNG File 'CTOERROR.txt' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\postpin\'
 05:29:11 Recovery started for CTOERROR.txt [  272 B ]
 05:29:11 Recovery completed for CTOERROR.txt
 05:29:11 WRNG File 'RStoneLog.ini' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\'
 05:29:11 Recovery started for RStoneLog.ini [  209 B ]
 05:29:11 Recovery completed for RStoneLog.ini
 05:29:11 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:12 WRNG File '838[3].swf' will be recovered to the same drive where deleted data located.
 05:29:12 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Contentword\Content.IE5\T61N7AM6\'
 05:29:12 Recovery started for 838[3].swf [21.28 KB]
 05:29:12 Recovery completed for 838[3].swf
 05:29:12 WRNG File '770[3].swf' will be recovered to the same drive where deleted data located.
 05:29:12 Recovery started for 770[3].swf [24.33 KB]
 05:29:12 Recovery completed for 770[3].swf
 05:29:12 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:12 WRNG File '846[1].swf' will be recovered to the same drive where deleted data located.
 05:29:12 Recovery started for 846[1].swf [12.58 KB]
 05:29:12 Recovery completed for 846[1].swf
 05:29:12 WRNG File 'userstatus_2[1].swf' will be recovered to the same drive where deleted data located.
 05:29:12 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9SN2DWZY\'
 05:29:12 Recovery started for userstatus_2[1].swf [1.104 KB]
 05:29:13 Recovery completed for userstatus_2[1].swf
 05:29:13 WRNG File 'sound[1].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for sound[1].swf [6.939 KB]
 05:29:13 Recovery completed for sound[1].swf
 05:29:13 WRNG File '348[1].swf' will be recovered to the same drive where deleted data located.
 05:29:13 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\newdirective\Temporary Internet Files\Low\Content.IE5\O7BS3QDH\'
 05:29:13 Recovery started for 348[1].swf [39.28 KB]
 05:29:13 Recovery completed for 348[1].swf
 05:29:13 WRNG File 'ai[7].htm' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for ai[7].htm [  100 B ]
 05:29:13 Recovery completed for ai[7].htm
 05:29:13 WRNG File '770[5].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 770[5].swf [24.33 KB]
 05:29:13 Recovery completed for 770[5].swf
 05:29:13 WRNG File '770[7].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 770[7].swf [24.33 KB]
 05:29:13 Recovery completed for 770[7].swf
 05:29:13 WRNG File 'ads[1].htm' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for ads[1].htm [4.849 KB]
 05:29:13 Recovery completed for ads[1].htm
 05:29:13 WRNG File '826[2].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 826[2].swf [23.96 KB]
 05:29:13 Recovery completed for 826[2].swf
 05:29:13 WRNG File 'mail[2]' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for mail[2] [15.83 KB]
 05:29:13 Recovery completed for mail[2]
 05:29:13 WRNG File 'imagesCA69D7M2.jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for imagesCA69D7M2.jpg [5.232 KB]
 05:29:13 Recovery completed for imagesCA69D7M2.jpg
 05:29:13 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:13 WRNG File 'images[11].jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for images[11].jpg [5.878 KB]
 05:29:13 Recovery completed for images[11].jpg
 05:29:13 WRNG File 'horiz14[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for horiz14[1].jpg [18.06 KB]
 05:29:13 Recovery completed for horiz14[1].jpg
 05:29:13 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 WRNG File 'private02[1].gif' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for private02[1].gif [  613 B ]
 05:29:14 Recovery completed for private02[1].gif
 05:29:14 WRNG File 'imagesCAUAO5CR.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAUAO5CR.jpg [7.396 KB]
 05:29:14 Recovery completed for imagesCAUAO5CR.jpg
 05:29:14 WRNG File 'horiz6[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for horiz6[1].jpg [14.46 KB]
 05:29:14 Recovery completed for horiz6[1].jpg
 05:29:14 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 WRNG File 'imagesCA93YTQ9.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCA93YTQ9.jpg [5.492 KB]
 05:29:14 Recovery completed for imagesCA93YTQ9.jpg
 05:29:14 WRNG File 'images[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for images[1].jpg [5.755 KB]
 05:29:14 Recovery completed for images[1].jpg
 05:29:14 WRNG File 'imagesCAO7RUB1.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAO7RUB1.jpg [7.165 KB]
 05:29:14 Recovery completed for imagesCAO7RUB1.jpg
 05:29:14 WRNG File 'imagesCAOPNANB.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAOPNANB.jpg [5.966 KB]
 05:29:14 Recovery completed for imagesCAOPNANB.jpg
 05:29:14 WRNG File 'login_status[1].htm' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\newdirective\Temporary Internet Files\Low\Content.IE5\PKGPBA4L\'
 05:29:14 Recovery started for login_status[1].htm [   61 B ]
 05:29:14 Recovery completed for login_status[1].htm
 05:29:14 WRNG File 'mail[5]' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for mail[5] [37.75 KB]
 05:29:14 Recovery completed for mail[5]
 05:29:14 WRNG File 'Include[1].htm' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for Include[1].htm [  464 B ]
 05:29:14 Recovery completed for Include[1].htm
 05:29:14 WRNG File 'mail[4].txt' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for mail[4].txt [09.56 KB]
 05:29:14 Recovery completed for mail[4].txt
 05:29:14 WRNG File 'loginCache.sol' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\rcyle\Macromedia\Flash Player\#SharedObjects\UN8QTSRK\login.yahoo.com\'
 05:29:14 Recovery started for loginCache.sol [  158 B ]
 05:29:14 Recovery completed for loginCache.sol
 05:29:14 WRNG File 'Detections.log' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Scans\History\Service\'
 05:29:14 Recovery started for Detections.log [  508 B ]
 05:29:14 Recovery completed for Detections.log
 05:29:14 WRNG File 'Unknown.Log' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for Unknown.Log [48.82 KB]
 05:29:14 Recovery completed for Unknown.Log
 05:29:14 WRNG File 'Makefile.in' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Snort\doc\'
 05:29:14 Recovery started for Makefile.in [13.20 KB]
 05:29:14 Recovery completed for Makefile.in
 05:29:14 WRNG File 'owner@google[2].txt' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:14 Recovery started for owner@google[2].txt [  130 B ]
 05:29:15 Recovery completed for owner@google[2].txt
 05:29:15 WRNG File 'owner@us.mg4.mail.yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@us.mg4.mail.yahoo[1].txt [  463 B ]
 05:29:15 Recovery completed for owner@us.mg4.mail.yahoo[1].txt
 05:29:15 WRNG File 'owner@njcu[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@njcu[2].txt [  375 B ]
 05:29:15 Recovery completed for owner@njcu[2].txt
 05:29:15 WRNG File 'owner@mail.yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@mail.yahoo[1].txt [  108 B ]
 05:29:15 Recovery completed for owner@mail.yahoo[1].txt
 05:29:15 WRNG File 'owner@adobe[3].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adobe[3].txt [   90 B ]
 05:29:15 Recovery completed for owner@adobe[3].txt
 05:29:15 WRNG File 'owner@adobe[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adobe[1].txt [  271 B ]
 05:29:15 Recovery completed for owner@adobe[1].txt
 05:29:15 WRNG File 'edb0044E.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb0044E.log [64.00 KB]
 05:29:15 Recovery completed for edb0044E.log
 05:29:15 WRNG File 'owner@pointroll[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@pointroll[2].txt [  154 B ]
 05:29:15 Recovery completed for owner@pointroll[2].txt
 05:29:15 WRNG File 'owner@adbrite[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adbrite[2].txt [  467 B ]
 05:29:15 Recovery completed for owner@adbrite[2].txt
 05:29:15 WRNG File 'owner@adap[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adap[2].txt [  738 B ]
 05:29:15 Recovery completed for owner@adap[2].txt
 05:29:15 WRNG File 'owner@iamamerchant[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@iamamerchant[1].txt [  362 B ]
 05:29:15 Recovery completed for owner@iamamerchant[1].txt
 05:29:15 WRNG File 'edb00458.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb00458.log [64.00 KB]
 05:29:15 Recovery completed for edb00458.log
 05:29:15 WRNG File 'owner@digitalriver[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@digitalriver[1].txt [  367 B ]
 05:29:15 Recovery completed for owner@digitalriver[1].txt
 05:29:15 WRNG File 'owner@7search[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@7search[2].txt [  209 B ]
 05:29:15 Recovery completed for owner@7search[2].txt
 05:29:15 WRNG File 'owner@205.252.166[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@205.252.166[1].txt [  100 B ]
 05:29:15 Recovery completed for owner@205.252.166[1].txt
 05:29:15 WRNG File 'owner@quantserve[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@quantserve[2].txt [  168 B ]
 05:29:15 Recovery completed for owner@quantserve[2].txt
 05:29:15 WRNG File 'edb00457.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb00457.log [64.00 KB]
 05:29:15 Recovery completed for edb00457.log
 05:29:15 WRNG File 'owner@hushmail[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hushmail[1].txt [  261 B ]
 05:29:15 Recovery completed for owner@hushmail[1].txt
 05:29:15 WRNG File 'owner@hulu[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@hulu[2].txt [1.229 KB]
 05:29:15 Recovery completed for owner@hulu[2].txt
 05:29:15 WRNG File 'owner@questionmarket[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@questionmarket[1].txt [   85 B ]
 05:29:15 Recovery completed for owner@questionmarket[1].txt
 05:29:15 WRNG File 'owner@dmoz[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@dmoz[2].txt [  149 B ]
 05:29:15 Recovery completed for owner@dmoz[2].txt
 05:29:15 WRNG File 'owner@web4.kean[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@web4.kean[1].txt [  286 B ]
 05:29:15 Recovery completed for owner@web4.kean[1].txt
 05:29:15 WRNG File 'owner@facebook[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@facebook[1].txt [  175 B ]
 05:29:15 Recovery completed for owner@facebook[1].txt
 05:29:15 WRNG File 'owner@facebook[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:15 Recovery started for owner@facebook[1].txt [   91 B ]
 05:29:15 Recovery completed for owner@facebook[1].txt
 05:29:15 WRNG File 'owner@hp.digitalriver[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hp.digitalriver[1].txt [  128 B ]
 05:29:15 Recovery completed for owner@hp.digitalriver[1].txt
 05:29:15 WRNG File 'owner@wegmans[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@wegmans[1].txt [  175 B ]
 05:29:15 Recovery completed for owner@wegmans[1].txt
 05:29:15 WRNG File 'owner@quintcareers[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@quintcareers[1].txt [  398 B ]
 05:29:15 Recovery completed for owner@quintcareers[1].txt
 05:29:15 WRNG File '$RWSQJQ1.dmp' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 05:29:15 Recovery started for $RWSQJQ1.dmp [  512 B ]
 05:29:15 Recovery completed for $RWSQJQ1.dmp
 05:29:15 WRNG File 'owner@www.bing[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@www.bing[1].txt [  111 B ]
 05:29:15 Recovery completed for owner@www.bing[1].txt
 05:29:15 WRNG File 'owner@remotecontrol.mtv[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@remotecontrol.mtv[1].txt [   91 B ]
 05:29:15 Recovery completed for owner@remotecontrol.mtv[1].txt
 05:29:15 WRNG File 'owner@www.bing[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:15 Recovery started for owner@www.bing[1].txt [  111 B ]
 05:29:15 Recovery completed for owner@www.bing[1].txt
 05:29:15 WRNG File 'owner@hit.gemius[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hit.gemius[2].txt [  201 B ]
 05:29:15 Recovery completed for owner@hit.gemius[2].txt
 05:29:15 WRNG File 'Search.htm.lnk' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\AppData\Roaming\Microsoft\Windows\Recent\'
 05:29:15 Recovery started for Search.htm.lnk [1.018 KB]
 05:29:15 Recovery completed for Search.htm.lnk
 05:29:15 WRNG File 'owner@resume-help[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@resume-help[1].txt [  299 B ]
 05:29:15 Recovery completed for owner@resume-help[1].txt
 05:29:15 WRNG File 'owner@www.consultantlive[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@www.consultantlive[2].txt [  186 B ]
 05:29:16 Recovery completed for owner@www.consultantlive[2].txt
 05:29:16 WRNG File 'edb.chk' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:16 Recovery started for edb.chk [8.000 KB]
 05:29:16 Recovery completed for edb.chk
 05:29:16 WRNG File 'owner@youtube[2].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:16 Recovery started for owner@youtube[2].txt [  549 B ]
 05:29:16 Recovery completed for owner@youtube[2].txt
 05:29:16 WRNG File 'owner@fwmrm[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 Recovery started for owner@fwmrm[1].txt [  620 B ]
 05:29:16 Recovery completed for owner@fwmrm[1].txt
 05:29:16 WRNG File 'owner@yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:16 Recovery started for owner@yahoo[1].txt [   82 B ]
 05:29:16 Recovery completed for owner@yahoo[1].txt
 05:29:16 WRNG File 'owner@yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:16 Recovery started for owner@yahoo[1].txt [1.222 KB]
 05:29:16 Recovery completed for owner@yahoo[1].txt
 05:29:16 WRNG File 'BeaconService.sol' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Macromedia~\Flash Player\#SharedObjects\UN8QTSRK\www.hulu.com\'
 05:29:16 Recovery started for BeaconService.sol [  138 B ]
 05:29:16 Recovery completed for BeaconService.sol
 05:29:16 WRNG File 'hpsaupgrade5.txt.lnk' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\'
 05:29:16 Recovery started for hpsaupgrade5.txt.lnk [0.982 KB]
 05:29:16 Recovery completed for hpsaupgrade5.txt.lnk
 05:29:16 WRNG File '$ICZ5104' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 05:29:16 Recovery started for $ICZ5104 [  544 B ]
 05:29:16 Recovery completed for $ICZ5104
 05:29:16 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:16 WRNG File '{D7B62219-CBEC-4E90-B586-349162DB03AC}' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\'
 05:29:16 Recovery started for {D7B62219-CBEC-4E90-B586-349162DB03AC} [6.672 KB]
 05:29:16 Recovery completed for {D7B62219-CBEC-4E90-B586-349162DB03AC}
 05:29:16 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 173 item(s) total.
 05:29:16 OK Recovery process completed.
 05:29:16 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\!!_$$_!!'
 05:37:08 DBG Recovering selected Files and Folders
 05:37:08 WRNG File 'application (1).pdf' will be recovered to the same drive where deleted data located.
 05:37:08 DBG Recovering from 'C:\Users\Owner\Downloads\'
 05:37:08 Recovery started for application (1).pdf [15.13 KB]
 05:37:09 Recovery completed for application (1).pdf
 19:00:00 Recovered 1 item(s) total.
 05:37:09 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                          39
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\!!_$$_!!'
 05:40:44 DBG Recovering selected Files and Folders
 05:40:44 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:46 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:47 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:48 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:49 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:50 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:50 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:51 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:52 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:52 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:53 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:53 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:56 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:58 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:59 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:59 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 05:41:02 OK Recovery process completed.
 05:41:02 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                          63
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\!!_$$_!!'
 05:49:06 DBG Recovering selected Files and Folders
 05:49:06 WRNG File 'rsop.msc' will be recovered to the same drive where deleted data located.
 05:49:06 DBG Recovering from 'C:\Windows\winsxs\amd64_microsoft-windows-g..admin-gpedit-snapin_31bf3856ad364e35_6.1.7600.16385_none_ccd7905990f3c9d2\'
 05:49:06 Recovery started for rsop.msc [42.54 KB]
 05:49:07 Recovery completed for rsop.msc
 05:49:07 WRNG File 'iis.msc' will be recovered to the same drive where deleted data located.
 05:49:07 DBG Recovering from 'C:\Windows\winsxs\wow64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_6.1.7600.16385_none_ee1d395a09294464\'
 05:49:07 Recovery started for iis.msc [61.63 KB]
 05:49:07 Recovery completed for iis.msc
 05:49:07 REG Unable to recover file 'printmanagement.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:09 WRNG File 'ScanManagement.msc' will be recovered to the same drive where deleted data located.
 05:49:09 DBG Recovering from 'C:\Windows\winsxs\msil_microsoft.windows.smc_31bf3856ad364e35_6.1.7600.16385_none_a9387863fbe3881b\'
 05:49:09 Recovery started for ScanManagement.msc [32.83 KB]
 05:49:09 Recovery completed for ScanManagement.msc
 05:49:09 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:10 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:12 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:13 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:14 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:15 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:15 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:19 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:20 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:21 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 WRNG File 'functions.html' will be recovered to the same drive where deleted data located.
 05:49:23 DBG Recovering from 'C:\Program Files\BreakPoint Software\Hex Workshop v6.5\hwapi\docs\'
 05:49:23 Recovery started for functions.html [5.024 KB]
 05:49:23 Recovery completed for functions.html
 05:49:23 WRNG File 'group__common.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__common.html [8.400 KB]
 05:49:23 Recovery completed for group__common.html
 05:49:23 WRNG File 'group__bookmarks.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__bookmarks.html [38.73 KB]
 05:49:23 Recovery completed for group__bookmarks.html
 05:49:23 WRNG File 'group__checksums.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__checksums.html [28.70 KB]
 05:49:23 Recovery completed for group__checksums.html
 05:49:23 WRNG File 'group__editor.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__editor.html [16.72 KB]
 05:49:23 Recovery completed for group__editor.html
 05:49:23 WRNG File 'group__document.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__document.html [39.21 KB]
 05:49:23 Recovery completed for group__document.html
 05:49:23 WRNG File 'group__entrypoints.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__entrypoints.html [27.93 KB]
 05:49:23 Recovery completed for group__entrypoints.html
 05:49:23 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforDanielWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforDanielnapavalleyWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'lusrmgr.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'urootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'nurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'dbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'ddbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 WRNG File 'danandatabase.log.URL' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\'
 05:49:25 Recovery started for danandatabase.log.URL [   67 B ]
 05:49:25 Recovery completed for danandatabase.log.URL
 05:49:25 WRNG File '5sysinfod.txt.URL' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\#~^&)(\Apple Software Update\'
 05:49:25 Recovery started for 5sysinfod.txt.URL [   59 B ]
 05:49:25 Recovery completed for 5sysinfod.txt.URL
 05:49:25 WRNG File 'UNDAN2Undelete Session 2011-07-12_12244.usf' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\AppData\'
 05:49:25 Recovery started for UNDAN2Undelete Session 2011-07-12_12244.usf [  529 B ]
 05:49:25 Recovery completed for UNDAN2Undelete Session 2011-07-12_12244.usf
 05:49:25 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 13 item(s) total.
 05:49:25 OK Recovery process completed.
 05:49:25 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                          50
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\!!_$$_!!'
 05:58:47 DBG Recovering selected Files and Folders
 05:58:47 REG Unable to recover file 'printmanagement.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:49 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:50 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:52 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:53 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:54 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:55 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:55 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:59 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:59 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:01 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:02 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:03 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforDanielWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforDanielnapavalleyWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'lusrmgr.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'urootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'nurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'dbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'ddbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 05:59:07 OK Recovery process completed.
 05:59:07 OK Execution has been completed with errors
 06:01:53 Setting check state for Files and Folders...
 06:01:55 Setting check state for Files and Folders...
 06:01:57 Setting check state for Files and Folders...
 06:01:58 Setting check state for Files and Folders...
 19:00:00  Number of Files or Folders to recover:                          66
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:02:45 DBG Recovering selected Files and Folders
 06:02:45 REG Unable to recover folder 'System Volume Information' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:02:51 OK Recovery process completed.
 06:02:51 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                          43
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:03:09 DBG Recovering selected Files and Folders
 06:03:09 REG Unable to recover folder 'SPP' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:03:11 OK Recovery process completed.
 06:03:11 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           2
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:03:22 DBG Recovering selected Files and Folders
 06:03:22 WRNG Folder 'Windows Backup' will be recovered to the same drive where deleted data located.
 06:03:22 WRNG Folder 'Catalogs' will be recovered to the same drive where deleted data located.
 06:03:22 WRNG File 'GlobalCatalog.wbcat' will be recovered to the same drive where deleted data located.
 06:03:22 DBG Recovering from 'C:\System Volume Information\Windows Backup\Catalogs\'
 06:03:22 Recovery started for GlobalCatalog.wbcat [  136 B ]
 06:03:22 Recovery completed for GlobalCatalog.wbcat
 06:03:22 WRNG File 'GlobalCatalogLock.dat' will be recovered to the same drive where deleted data located.
 06:03:22 Recovery started for GlobalCatalogLock.dat [    0 B ]
 06:03:22 Recovery completed for GlobalCatalogLock.dat
 19:00:00 Recovered 2 item(s) total.
 06:03:22 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           0
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:03:56 DBG Recovering selected Files and Folders
 06:03:56 WRNG Folder 'WindowsImageBackup' will be recovered to the same drive where deleted data located.
 06:03:56 WRNG Folder 'SPPMetadataCache' will be recovered to the same drive where deleted data located.
 19:00:00 Recovered 0 item(s) total.
 06:03:56 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                          30
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:04:15 DBG Recovering selected Files and Folders
 06:04:15 REG Unable to recover folder 'SppGroupCache' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:04:17 OK Recovery process completed.
 06:04:17 OK Execution has been completed with errors
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Accessed
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                            Yes
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:04:30 DBG Search in:                                  C:\...\SppGroupCache;
 06:04:30 Search started on C:\System Volume Information\SPP\SppGroupCache
 06:04:30 Search completed [found 0 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:04:30 OK Search has been completed. [Total 0 items found].
 06:04:32 OK Filtering has been completed. Found 0 items.
 19:00:00  Number of Files or Folders to recover:                           0
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:04:47 DBG Recovering selected Files and Folders
 06:04:47 WRNG Folder 'SppCbsHiveStore' will be recovered to the same drive where deleted data located.
 19:00:00 Recovered 0 item(s) total.
 06:04:47 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                          13
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:04:56 DBG Recovering selected Files and Folders
 06:04:56 REG Unable to recover folder 'OnlineMetadataCache' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:04:58 OK Recovery process completed.
 06:04:58 OK Execution has been completed with errors
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:05:30 DBG Search in:                            C:\...\OnlineMetadataCache;
 06:05:30 Search started on C:\System Volume Information\SPP\OnlineMetadataCache
 06:05:30 Search completed [found 0 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:05:30 OK Search has been completed. [Total 0 items found].
 06:05:32 OK Filtering has been completed. Found 0 items.
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:05:54 DBG Search in:                          C:\...\System Volume Information;
 06:05:54 Search started on C:\System Volume Information
 06:05:54 Search completed [found 6 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:05:54 OK Search has been completed. [Total 6 items found].
 19:00:00    All files; Recursive;
 06:05:55 Applying file filter:
 06:05:55 OK Filtering has been completed. Found 6 items.
 19:00:00  Number of Files or Folders to recover:                           6
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:06:26 DBG Recovering selected Files and Folders
 06:06:26 REG Unable to recover file 'ISwift3.dat' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:29 REG Unable to recover file 'mdllog.dat' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:30 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:30 REG Unable to recover file 'Syscache.hve.LOG1' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:31 WRNG File 'Syscache.hve.LOG2' will be recovered to the same drive where deleted data located.
 06:06:31 DBG Recovering from 'C:\System Volume Information\'
 06:06:31 Recovery started for Syscache.hve.LOG2 [    0 B ]
 06:06:31 Recovery completed for Syscache.hve.LOG2
 06:06:31 WRNG File 'tracking.log' will be recovered to the same drive where deleted data located.
 06:06:31 Recovery started for tracking.log [20.00 KB]
 06:06:31 Recovery completed for tracking.log
 19:00:00 Recovered 2 item(s) total.
 06:06:31 OK Recovery process completed.
 06:06:31 OK Execution has been completed with errors
 06:07:26 Setting check state for Files and Folders...
 06:10:36 Setting check state for Files and Folders...
 19:00:00  Number of Files or Folders to recover:                           2
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:11:20 DBG Recovering selected Files and Folders
 06:11:20 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:11:21 OK Recovery process completed.
 06:11:21 OK Execution has been completed with errors
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:11:53 DBG Search in:                                   C:\...\$RECYCLE.BIN;
 06:11:53 Search started on C:\$RECYCLE.BIN
 06:11:53 Search completed [found 0 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:11:53 OK Search has been completed. [Total 0 items found].
 06:11:55 OK Filtering has been completed. Found 0 items.
 19:00:00  Number of Files or Folders to recover:                          20
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:12:22 DBG Recovering selected Files and Folders
 06:12:22 REG Unable to recover folder '$R0B5N43' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:12:24 OK Recovery process completed.
 06:12:24 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           5
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:12:51 DBG Recovering selected Files and Folders
 06:12:51 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:12:53 OK Recovery process completed.
 06:12:53 OK Execution has been completed with errors
 06:13:06 Setting check state for Files and Folders...
 06:13:08 Setting check state for Files and Folders...
 06:13:12 Setting check state for Files and Folders...
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:14:04 DBG Search in:                                   C:\...\$RECYCLE.BIN;
 06:14:04 Search started on C:\$RECYCLE.BIN
 06:14:04 Search completed [found 0 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:14:04 OK Search has been completed. [Total 0 items found].
 06:14:05 OK Filtering has been completed. Found 0 items.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:17:22 DBG Recovering selected Files and Folders
 06:17:22 REG Unable to recover file 'SAM' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:17:25 OK Recovery process completed.
 06:17:25 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:17:42 DBG Recovering selected Files and Folders
 06:17:42 WRNG File 'SECURITY' will be recovered to the same drive where deleted data located.
 06:17:42 DBG Recovering from 'C:\Windows\System32\config\RegBack\'
 06:17:42 Recovery started for SECURITY [24.00 KB]
 06:17:42 Recovery completed for SECURITY
 19:00:00 Recovered 1 item(s) total.
 06:17:42 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:18:39 DBG Recovering selected Files and Folders
 06:18:39 REG Unable to recover file 'SOFTWARE' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:18:41 OK Recovery process completed.
 06:18:41 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:19:13 DBG Recovering selected Files and Folders
 06:19:13 REG Unable to recover file 'SAM' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:19:15 OK Recovery process completed.
 06:19:15 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:19:46 DBG Recovering selected Files and Folders
 06:19:46 WRNG File 'BCD-Template.LOG' will be recovered to the same drive where deleted data located.
 06:19:46 DBG Recovering from 'C:\Windows\System32\config\'
 06:19:46 Recovery started for BCD-Template.LOG [25.00 KB]
 06:19:47 Recovery completed for BCD-Template.LOG
 19:00:00 Recovered 1 item(s) total.
 06:19:47 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:20:22 DBG Recovering selected Files and Folders
 06:20:22 WRNG File 'BCD-Template' will be recovered to the same drive where deleted data located.
 06:20:22 DBG Recovering from 'C:\Windows\System32\config\'
 06:20:22 Recovery started for BCD-Template [28.00 KB]
 06:20:23 Recovery completed for BCD-Template
 19:00:00 Recovered 1 item(s) total.
 06:20:23 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           4
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:21:27 DBG Recovering selected Files and Folders
 06:21:27 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:21:29 OK Recovery process completed.
 06:21:29 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:21:42 DBG Recovering selected Files and Folders
 06:21:42 REG Unable to recover file 'COMPONENTS' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:21:44 OK Recovery process completed.
 06:21:44 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:22:01 DBG Recovering selected Files and Folders
 06:22:01 WRNG File 'COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf' will be recovered to the same drive where deleted data located.
 06:22:01 DBG Recovering from 'C:\Windows\System32\config\'
 06:22:01 Recovery started for COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [64.00 KB]
 06:22:01 Recovery completed for COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
 19:00:00 Recovered 1 item(s) total.
 06:22:01 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:22:53 DBG Recovering selected Files and Folders
 06:22:53 WRNG File '{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf' will be recovered to the same drive where deleted data located.
 06:22:53 DBG Recovering from 'C:\Windows\System32\config\TxR\'
 06:22:53 Recovery started for {016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf [64.00 KB]
 06:22:53 Recovery completed for {016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
 19:00:00 Recovered 1 item(s) total.
 06:22:53 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:24:09 DBG Recovering selected Files and Folders
 06:24:09 WRNG File 'ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf' will be recovered to the same drive where deleted data located.
 06:24:09 DBG Recovering from 'C:\Windows\System32\config\systemprofile\'
 06:24:09 Recovery started for ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf [64.00 KB]
 06:24:09 Recovery completed for ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf
 19:00:00 Recovered 1 item(s) total.
 06:24:09 OK Recovery process completed.
 06:27:22 Setting check state for Files and Folders...
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:29:08 DBG Search in:                          C:\; C:\...\!DNL; C:\...\$DNL; C:\...\$Extend; C:\...\$RECYCLE.BIN; C:\...\1f303bafee44f2f1c1326ad68022faf7; C:\...\Daniel Mounted; C:\...\Documents and Settings; C:\...\log data; C:\...\Mounted Daniel; C:\...\MSOCache; C:\...\My Web Sites; C:\...\PerfLogs; C:\...\Program Files; C:\...\Program Files (x86); C:\...\ProgramData; C:\...\Recovery; C:\...\some_undistinguished_folder; C:\...\SwSetup; C:\...\System Volume Information; C:\...\SYSTEM.SAV; C:\...\undkcr~~%; C:\...\Users; C:\...\Windows;
 06:29:08 Search started on C:\
 06:29:08 Search completed [found 7 items]
 06:29:08 Search started on C:\!DNL
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$DNL
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$Extend
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$RECYCLE.BIN
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\1f303bafee44f2f1c1326ad68022faf7
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Daniel Mounted
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Documents and Settings
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\log data
 06:29:08 Search completed [found 2 items]
 06:29:08 Search started on C:\Mounted Daniel
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\MSOCache
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\My Web Sites
 06:29:08 Search completed [found 6 items]
 06:29:08 Search started on C:\PerfLogs
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Program Files
 06:29:08 Search completed [found 76 items]
 06:29:08 Search started on C:\Program Files (x86)
 06:29:08 Search completed [found 21 items]
 06:29:08 Search started on C:\ProgramData
 06:29:08 Search completed [found 12 items]
 06:29:08 Search started on C:\Recovery
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\some_undistinguished_folder
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\SwSetup
 06:29:08 Search completed [found 1 items]
 06:29:08 Search started on C:\System Volume Information
 06:29:08 Search completed [found 6 items]
 06:29:08 Search started on C:\SYSTEM.SAV
 06:29:08 Search completed [found 9 items]
 06:29:08 Search started on C:\undkcr~~%
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Users
 06:29:08 Search completed [found 1 items]
 06:29:08 Search started on C:\Windows
 06:29:08 Search completed [found 47 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:29:08 OK Search has been completed. [Total 188 items found].
 19:00:00    All files; Recursive;
 06:29:10 Applying file filter:
 06:29:10 OK Filtering has been completed. Found 5229 items.
 19:00:00  Number of Files or Folders to recover:                         323
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:30:35 DBG Recovering selected Files and Folders
 06:30:35 REG Unable to recover folder 'S-1-5-21-2426286085-332982260-2691753013-1000' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:30:38 OK Recovery process completed.
 06:30:38 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:30:50 DBG Recovering selected Files and Folders
 06:30:50 WRNG File '$RZVLLCD.dat' will be recovered to the same drive where deleted data located.
 06:30:50 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:30:50 Recovery started for $RZVLLCD.dat [    8 B ]
 06:30:50 Recovery completed for $RZVLLCD.dat
 19:00:00 Recovered 1 item(s) total.
 06:30:50 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:31:46 DBG Recovering selected Files and Folders
 06:31:46 WRNG File '$RTKDHV7.txt' will be recovered to the same drive where deleted data located.
 06:31:46 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:31:46 Recovery started for $RTKDHV7.txt [   53 B ]
 06:31:46 Recovery completed for $RTKDHV7.txt
 19:00:00 Recovered 1 item(s) total.
 06:31:46 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:32:34 DBG Recovering selected Files and Folders
 06:32:34 WRNG File '$RKK73AF.dat' will be recovered to the same drive where deleted data located.
 06:32:34 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:32:34 Recovery started for $RKK73AF.dat [4.767 KB]
 06:32:34 Recovery completed for $RKK73AF.dat
 19:00:00 Recovered 1 item(s) total.
 06:32:34 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:33:18 DBG Recovering selected Files and Folders
 06:33:18 WRNG File '$RWSQJQ1.dmp' will be recovered to the same drive where deleted data located.
 06:33:18 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:33:18 Recovery started for $RWSQJQ1.dmp [  512 B ]
 06:33:18 Recovery completed for $RWSQJQ1.dmp
 19:00:00 Recovered 1 item(s) total.
 06:33:18 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:33:57 DBG Recovering selected Files and Folders
 06:33:57 WRNG File '$R6JPDZ7.dat' will be recovered to the same drive where deleted data located.
 06:33:57 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:33:57 Recovery started for $R6JPDZ7.dat [  958 B ]
 06:33:57 Recovery completed for $R6JPDZ7.dat
 19:00:00 Recovered 1 item(s) total.
 06:33:57 OK Recovery process completed.
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:34:52 DBG Search in:                                                    C:;
 06:34:52 Search started on C:\
 06:34:52 Search completed [found 7 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:34:52 OK Search has been completed. [Total 7 items found].
 19:00:00    All files; Recursive;
 06:34:53 Applying file filter:
 06:34:53 OK Filtering has been completed. Found 779 items.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:35:09 DBG Recovering selected Files and Folders
 06:35:09 WRNG File 'ProgramData.xml' will be recovered to the same drive where deleted data located.
 06:35:09 DBG Recovering from 'C:\'
 06:35:09 Recovery started for ProgramData.xml [  646 B ]
 06:35:09 Recovery completed for ProgramData.xml
 19:00:00 Recovered 1 item(s) total.
 06:35:09 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:38:45 DBG Recovering selected Files and Folders
 06:38:45 WRNG File 'trace.txt' will be recovered to the same drive where deleted data located.
 06:38:45 DBG Recovering from 'C:\'
 06:38:45 Recovery started for trace.txt [    9 B ]
 06:38:45 Recovery completed for trace.txt
 19:00:00 Recovered 1 item(s) total.
 06:38:45 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:39:21 DBG Recovering selected Files and Folders
 06:39:21 REG Unable to recover file 'BCIView.exe' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:39:23 OK Recovery process completed.
 06:39:23 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:39:45 DBG Recovering selected Files and Folders
 06:39:45 WRNG File 'DeLink.log' will be recovered to the same drive where deleted data located.
 06:39:45 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:39:45 Recovery started for DeLink.log [  340 B ]
 06:39:45 Recovery completed for DeLink.log
 19:00:00 Recovered 1 item(s) total.
 06:39:45 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:40:10 DBG Recovering selected Files and Folders
 06:40:10 WRNG File 'esuw71.Log' will be recovered to the same drive where deleted data located.
 06:40:10 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:40:10 Recovery started for esuw71.Log [  583 B ]
 06:40:10 Recovery completed for esuw71.Log
 19:00:00 Recovered 1 item(s) total.
 06:40:10 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:40:43 DBG Recovering selected Files and Folders
 06:40:43 WRNG File 'REBOOT.ME' will be recovered to the same drive where deleted data located.
 06:40:43 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:40:43 Recovery started for REBOOT.ME [   46 B ]
 06:40:43 Recovery completed for REBOOT.ME
 19:00:00 Recovered 1 item(s) total.
 06:40:43 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:41:16 DBG Recovering selected Files and Folders
 06:41:16 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:41:20 OK Recovery process completed.
 06:41:20 OK Execution has been completed with errors
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:41:40 DBG Recovering selected Files and Folders
 06:41:40 WRNG File 'TPBINFO.INI' will be recovered to the same drive where deleted data located.
 06:41:40 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:41:40 Recovery started for TPBINFO.INI [   52 B ]
 06:41:40 Recovery completed for TPBINFO.INI
 19:00:00 Recovered 1 item(s) total.
 06:41:40 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:42:08 DBG Recovering selected Files and Folders
 06:42:08 WRNG File 'SWSET_B.INI' will be recovered to the same drive where deleted data located.
 06:42:08 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:42:08 Recovery started for SWSET_B.INI [1.981 KB]
 06:42:08 Recovery completed for SWSET_B.INI
 19:00:00 Recovered 1 item(s) total.
 06:42:08 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:42:40 DBG Recovering selected Files and Folders
 06:42:40 WRNG File 'RStoneLog2.ini' will be recovered to the same drive where deleted data located.
 06:42:40 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:42:40 Recovery started for RStoneLog2.ini [  268 B ]
 06:42:40 Recovery completed for RStoneLog2.ini
 19:00:00 Recovered 1 item(s) total.
 06:42:40 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:43:17 DBG Recovering selected Files and Folders
 06:43:17 WRNG File 'RStoneLog.ini' will be recovered to the same drive where deleted data located.
 06:43:17 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:43:17 Recovery started for RStoneLog.ini [  209 B ]
 06:43:17 Recovery completed for RStoneLog.ini
 19:00:00 Recovered 1 item(s) total.
 06:43:17 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:44:04 DBG Recovering selected Files and Folders
 06:44:04 WRNG File 'PBARINFO.INI' will be recovered to the same drive where deleted data located.
 06:44:04 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:44:04 Recovery started for PBARINFO.INI [   47 B ]
 06:44:04 Recovery completed for PBARINFO.INI
 19:00:00 Recovered 1 item(s) total.
 06:44:04 OK Recovery process completed.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:44:39 DBG Recovering selected Files and Folders
 06:44:39 WRNG File 'HideCMD.vbs' will be recovered to the same drive where deleted data located.
 06:44:39 DBG Recovering from 'C:\SYSTEM.SAV\Util\TDC\'
 06:44:39 Recovery started for HideCMD.vbs [  381 B ]
 06:44:39 Recovery completed for HideCMD.vbs
 19:00:00 Recovered 1 item(s) total.
 06:44:39 OK Recovery process completed.
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                     No
 19:00:00  Search among deleted only:                                     Yes
 19:00:00  Case sensitive search:                                          No
 19:00:00  Recursive search in subdirectories:                             No
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:45:42 DBG Search in:                                       C:\...\$R0B5N43;
 06:45:42 Search started on C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\$R0B5N43
 06:45:42 Search completed [found 0 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:45:42 OK Search has been completed. [Total 0 items found].
 06:45:43 OK Filtering has been completed. Found 0 items.
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                         Yes
 19:00:00  Recursive search in subdirectories:                            Yes
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:46:00 DBG Search in:                                       C:\...\$R0B5N43;
 06:46:00 Search started on C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\$R0B5N43
 06:46:01 Search completed [found 20 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:46:01 OK Search has been completed. [Total 20 items found].
 19:00:00    All files; Recursive;
 06:46:02 Applying file filter:
 06:46:02 OK Filtering has been completed. Found 20 items.
 19:00:00  Number of Files or Folders to recover:                           1
 19:00:00  Invalid file name symbols will be replaced with:                 _
 19:00:00 Recover files locally:                                  Yes
 19:00:00  File naming options:                       Use original file names
 19:00:00  Overwrite mode:                          Generate unique file name
 19:00:00  Create original file(s) path:                                  Yes
 19:00:00  Allow recovering to the same drive:                            Yes
 19:00:00  Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
 06:46:49 DBG Recovering selected Files and Folders
 06:46:49 REG Unable to recover file 'CryptRSA.efi' due to size limit (64.0 KB) for the Unregistered Version.
 19:00:00 Recovered 0 item(s) total.
 06:46:51 OK Recovery process completed.
 06:46:51 OK Execution has been completed with errors
 19:00:00 File Attributes Criteria:                          Any file attribute
 19:00:00 File Size Criteria:                                          Any size
 19:00:00  Date Range:                        Infinite small - Infinite large
 19:00:00  Date Type:                                                Modified
 19:00:00 File Date Criteria:
 19:00:00  Search among existing only:                                    Yes
 19:00:00  Search among deleted only:                                      No
 19:00:00  Case sensitive search:                                         Yes
 19:00:00  Recursive search in subdirectories:                            Yes
 19:00:00  Looking for:                                                  *.*;
 19:00:00 General Search Criteria:
 06:47:04 DBG Search in:                                   C:\...\$RECYCLE.BIN;
 06:47:04 Search started on C:\$RECYCLE.BIN
 06:47:04 Search completed [found 303 items]
 19:00:00 Review search results and repeat Search with another options if necessary.
 06:47:04 OK Search has been completed. [Total 303 items found].
 19:00:00    All files; Recursive;
 06:47:06 Applying file filter:
 06:47:06 OK Filtering has been completed. Found 304 items.

DANIEL S. ABRAHAMIAN

BLACK HAWK DOWN

FEELMYFLAME