Sunday, March 18, 2012

CAP - CRIMINAL ALIEN PROGRAM

Criminal Alien Program


U.S. Immigration and Customs Enforcement (ICE) places a high priority on combating illegal immigration, including targeting illegal aliens with criminal records who pose a threat to public safety.

The Criminal Alien Program identifies, processes and removes criminal aliens incarcerated in federal, state and local prisons and jails throughout the U.S. It was created to prevent criminal aliens from being released into the general public. The program secures a final removal order, prior to the termination of criminal aliens’ sentences, whenever possible.

Criminal Alien Program Components



Jails and Prisons


ERO officers and agents assigned to CAP in federal, state and local prisons and jails throughout the country screen inmates and place detainers on criminal aliens to process them for removal before they are released to the general public. After the screening process and interviews, ERO initiates proceedings to remove the criminal aliens from the United States.

Violent Criminal Alien Section (VCAS)


Initiated in 2008, the Violent Criminal Alien Section (VCAS) screens recidivist criminal aliens encountered through CAP, the National Fugitive Operations Program and the Law Enforcement Agency Response Unit. The VCAS seeks criminal prosecution to deter and reduce future recidivism rates of violent criminal aliens. In coordination with the U.S. Attorney’s Office, the VCAS prioritizes federal criminal prosecution of egregious recidivist criminal aliens for felony violations. Illegal reentry after deportation in violation of 8 USC 1326 is currently the most prosecuted federal offense nationwide.

Joint Criminal Alien Removal Taskforces


In response to the 2009 congressional mandate to locate “at large” criminal aliens, ERO initiated Joint Criminal Alien Removal Taskforces (JCART). JCART seeks, locates and arrests at-large criminal aliens with convictions such as drug trafficking offenses, crimes of violence and sex offenses. JCART works with other agencies such as probation and parole offices, the United States Marshal’s Service, ICE Office of Investigations (OI), U.S. Customs and Border Protection (CBP), Bureau of Prisons (BOP) and at the request of local law enforcement, conducts special operations. JCART officers target criminal aliens that are at-large in the community who have been released from federal, state or local custody.

Detention Enforcement and Processing Offenders by Remote Technology (DEPORT)


Approximately 27 percent of inmates in Federal Bureau of Prisons (BOP) custody are non-U.S. citizens. ERO created the DEPORT Center in Chicago to process this population through CAP. ERO officers and agents assigned to the DEPORT Center conduct interviews of BOP inmates nationwide using video teleconference equipment. Through the combined effort of the DEPORT Center and local ERO resources, criminal aliens from all federal detention facilities are taken into ERO custody upon completion of their sentences.

Rapid Removal of Eligible Parolees Accepted for Transfer


This program is a joint partnership with state correctional/parole agencies. It helps ICE more effectively identify and expeditiously remove criminal aliens from the United States. By allowing for the conditional, early release of non-violent aliens with final orders of removal from the United States, the program also reduces the burden on American taxpayers.









DANIEL S. ABRAHAMIAN
CAP - CRIMINAL ALIEN PROGRAM
FEELMYFLAME
ADVANCEDDEFIANCE

ICE Cyber Crimes Center - C3

Cyber Crimes Center

U.S. Immigration and Customs Enforcement (ICE), the largest investigative agency in the U.S. Department of Homeland Security (DHS), protects national security by enforcing the nation's immigration and customs laws. One of ICE's leading priorities is to combat criminal activity conducted on or facilitated by the Internet.

The ICE Cyber Crimes Center (C3) delivers computer-based technical services to ICE components to support domestic and international investigations into cross-border crime.

The Cyber Crimes Section, the Child Exploitation Section, the Computer Forensics Section and the Cyber Administration Section comprise C3. This state-of-the-art center offers cyber-crime support and training to federal, state, local and international law enforcement agencies. C3 also includes a fully equipped computer forensics laboratory, which specializes in digital evidence recovery. In addition, C3 offers training in computer investigative and forensic skills.

Cyber Crimes Section

C3's Cyber Crimes Section manages the cyber component of traditional immigration and customs investigations. C3 special agents conduct and coordinate national level investigations involving the Internet. Those investigations focus on the following areas:
 Identity and benefit document fraud;
Money laundering;
Financial fraud (including e-payment fraud and Internet gambling);
Commercial fraud;
Counter-proliferation investigations;
Narcotics trafficking;
Illegal exports;
Human trafficking and smuggling; and
General smuggling.


Computer Forensics Section

As the use of computers and digital devices has become widespread, C3's Computer Forensics Section has grown to address the investigative challenges of a digital world. These devices have greatly increased the volume of data that ICE agents must examine during the course of an investigation. In addition, ICE investigators now must now manage digital evidence that is highly volatile, mobile and subject to encryption by any user. This makes recovery and stewardship of evidence challenging.

Computer forensics agents are ICE investigators trained to perform forensic examinations of seized digital storage devices, such as computer hard drives, flash drives, PDAs, mobile phones, DVDs, CDs and tape media. They use all available digital evidence recovery techniques to preserve an item's authenticity and integrity while maintaining a strict chain of custody.

Computer forensics agents are located in ICE field offices throughout the world to provide expertise on investigative strategies and to assist case agents in preparing search warrants targeting digital evidence. They are also called upon to furnish expert computer forensic testimony in criminal trials and to provide support to state and local law enforcement.













DANIEL S. ABRAHAMIAN
ICE CYBER CRIMES CENTER - C3
FEELMYFLAME
ADVANCEDDEFIANCE

BEST

ICE enforces a wide array of laws, including those related to securing the border and combating criminal smuggling.

Our nation's southern border has experienced a dramatic surge in cross-border crime and violence in recent years due to intense competition between Mexican drug cartels and criminal smuggling organizations that employ predatory tactics to realize profits. Law enforcement agencies at the northern border face similar challenges from transnational smuggling organizations.

In response to this trend, ICE has partnered with federal, state, local and foreign law enforcement counterparts to create the Border Enforcement Security Task Force (BEST), a series of multi-agency teams developed to identify, disrupt and dismantle criminal organizations posing significant threats to border security.

Several international law enforcement agencies serve as key members of the team.

On the Southwest border, the participation of the Mexican Secretaria de Seguridad Publica, or SSP, is vital. On the Northern border, Canadian law enforcement agencies like the Canada Border Services Agency, the Royal Canadian Mounted Police, the Ontario Provincial Police, the Niagara Regional Police Service, the Toronto Metropolitan Police, the Windsor Police Service, and the Amherstburg Police Service are active members. The Argentinean customs agency is part of the Miami BEST and the Colombian National Police is part of both the Miami and New York-New Jersey BESTs.





DANIEL S. ABRAHAMIAN
BEST
BORDER ENFORCEMENT SECURITY TASK FORCE
FEELMYFLAME
ADVANCEDDEFIANCE

Black ICE

"Although computer protective tools are also evolving and improving, they tend to evolve in a reactive manner to each perceived threat as it appears"


- Eleonore
- Phoenix
- Zeus trojan

Internet
- approx. 170 million + web hosts
- 2 billion users
- The total indexed size of the world wide web by search engines is nearly 10-12 billion pages, but the deep web could be as much as 400-500 times larger than the information indexed by the major search engines

- Operation SunDevil

- Computer Fraud and Abuse Act (1984)
"A hacker is one who accesses a computer intentionally without authorization, or exceeds authorized access, and then uses the access provided for purposes to which authorization did not extend, such as altering, damaging, or destroying data or preventing normal access"

- Computer Misuse Act (1990)
"Hackers are guilty of a legal offense if they knowingly cause a computer to perform any function to secure unauthorized access or cause unauthorized modification of the contents of the computer with the intent of impairing the computer, a program on that computer, or access to that computer"

- Password crackers
"John the Ripper"
"Crack"

- Automated attack tools
"MetaSploit" - has advanced options to load Active-X controls, the possibility to upload tool-kits and rootkits to computers, DLL injection for Windows systems and evasion models to defeat intrusion detection systems such as "Snort" (www.snort.org)

- Other software tools which scan SQL systems for possible SQL-injection attacks (i.e. "WebScarab") tools for further exploitation of the SQL server (i.e. "SQLNinja"), and tools for probing for vulnerabilities in server side CGI scripts (i.e. "CGIScan")

" NIC" = Network Interface Card

- Packet Sniffers

- IRC discussion groups

- SANS institute

- IANA = Internet Assigned Numbers Authority - private LAN IP address allocation

- Virtualization Software -  "QEMU"

- TAP magazine evolved into 2600 (www.2600.com)

- The Chaos Computer Club (CCC)

- Phrack

- Hack-Tic (www.hacktic.nl)

- Legion of Doom (LoD)

- Cult of the Dead Cow (CdC)

- LOpht
desinged "LOphtCrack" - a password cracker designed to ferret out insecure passwords on NT systems

- SLINT - a source code security analyzer
- AntiSniff = A network security tool designed to detect attackers
- LOpht announced a multi-million-dollar merge with computer security company @stake

- Kevin Mitnick "Condor"

- "Gary McKinnon"

- remote access software "RemoteAnywhere"

- Julian Assange "mendax"
- Wikileaks = Now have many mirror sites. Specialize in leaking highly classifed, confidential documents; capable of uploading to their website

- Richard Stallman founded "Free Software Foundation" FSF

- Linus Torvalds

- open-source projects " apache, php"

- Tim Berners-Lee invented the world wide web and WC3; invented HTML (hyptertext markup language), wrote the first ever WWW server or "http" (hypertext transfer protocol)

OFFENSIVE COMPUTING
Not enough to identify an intrusion; must respond to the attack
either by assuming control of remote documents / drives, etc.
and/or taking an offensive stance and striking back.
1. identify attacking OS
2. Produce a retaliatory response which inflicts damage to the intruder's OS
- Identify all documents involved in intrusion (stacks, traces, lastonealive, etc.)



BLACK ICE
"Intrusion Countermeasures Electronics"

"By using an IDS such as SNORT a programmer can react to alerts in anyway imaginable, up to and including making counter-attacks on attacking computers. You can imagine a scenario where the IDS has identified an ongoing attack from a remote computer - and now the system wants to do something about it, but the severity of the response can be varied."

- The Black ICE could block all traffic from the IP address involved in the attack
- The Black ICE could start a Denial of Service attack on the attacker using ICMP NET_UNREACH, TCP SYN floods or TCP ACK attacks.
- The Black ICE could run a vulnerability scanner such as "NESSUS" against the attacking computer - this process would identify all open ports and possible vulnerabilities in services - and would also identify the OS and patch level of the attacking computer
- The results of the vulnerability scan could then be fed into an automated program designed to exploit those vulnerabilities - MetaSploit using Autopwn would be a good example - with the express goal of breaking into the attacking machine using those vulnerabilities.

- Once the defender has taken control of the attacking computer, anything is possible limited only by the imagination and evil intention of the Black ICE programmers.

- Installation of a Remote Access Trojan (RAT) allowing full hostile takeover of the attacking computer.
(Previous notice of RAT object; identified as internet rating object; could have been a remote access trojan)

- More aggressive countermeasures would be the deletion of the OS or dismantling of the BIOS of the attacker

- botnets

- DDoS - Denial of Service (downloadable)

- internet spiders and crawlers - programs designed to scour the web for specific information

- rootkits are desinged to hide/camouflage malware. (LimeWire on Vista, Kaspersky, etc.)

- Port Scanning
Some programs enable an OS to create logs of specific events relating to attempts at intrusion; must learn to interpret these logs.
Scanning for ports enable a hacker to identify access to a computer within a network; must learn ways to secure ports and log events relating to the scanning of ports.

- This may sound difficult right now but you are at a novice level with respect to intrusion identification and response measures.
- Highly probable you already have documents relating to this content which have been ignored because of ignorance.
- Information is power. How this started was by one person learning how to connect into someone elses computer; then more followed until a vast information system/network grew.

files that are "open":

as done before, must extract information and open with removal of original security properties.

- hypothesis: one of at least one more data documents relating to what I believe to be a rootkit program masquerading as kaspersky antivirus; at minimum a dual-use program but still masking sufficient malware programs; similiar to the limewire i had on vista. obviously encrypted for a reason. the size of the document leads me to believe that the several large-sized documents i have including system include very sensitive information; i believe the method used to convey these documents somehow broke encryption. furthermore the page-breaker used and overall size indicate that this is sensitive material.


DANIEL S. ABRAHAMIAN
BLACK ICE
FEELMYFLAME

Campaigner

 05:29:05 Recovery completed for 686.swf
 05:29:05 WRNG File '685.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f93^2f000^2f000^2f000^2f017\'
 05:29:05 Recovery started for 685.swf [38.29 KB]
 05:29:05 Recovery completed for 685.swf
 05:29:05 WRNG File '870.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f110^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 870.gif [5.322 KB]
 05:29:05 Recovery completed for 870.gif
 05:29:05 WRNG File '890.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f7^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 890.gif [5.997 KB]
 05:29:05 Recovery completed for 890.gif
 05:29:05 WRNG File '818.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f50^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 818.gif [5.687 KB]
 05:29:05 Recovery completed for 818.gif
 05:29:05 WRNG File '880.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f107^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 880.swf [25.87 KB]
 05:29:05 Recovery completed for 880.swf
 05:29:05 WRNG File '770.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f99^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 770.swf [24.33 KB]
 05:29:05 Recovery completed for 770.swf
 05:29:05 WRNG File '717.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f45^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 717.gif [5.598 KB]
 05:29:05 Recovery completed for 717.gif
 05:29:05 WRNG File '656.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f99^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 656.jpg [12.56 KB]
 05:29:05 Recovery completed for 656.jpg
 05:29:05 WRNG File '772.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f7^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 772.swf [24.33 KB]
 05:29:05 Recovery completed for 772.swf
 05:29:05 WRNG File '692.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f111^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 692.jpg [13.29 KB]
 05:29:05 Recovery completed for 692.jpg
 05:29:05 WRNG File '348.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f115^2f000^2f000^2f000^2f017\'
 05:29:05 Recovery started for 348.swf [39.28 KB]
 05:29:05 Recovery completed for 348.swf
 05:29:05 WRNG File '942.swf' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\AppData\LocalLow\Microsoft\OfficeStarter\1\http^3a^2f^2fads2.msads.net^2fCIS^2f31^2f000^2f000^2f000^2f016\'
 05:29:05 Recovery started for 942.swf [29.09 KB]
 05:29:05 Recovery completed for 942.swf
 05:29:05 WRNG File 'hsi5.jpg' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\Users\Owner\Desktop\My Web Sites\Ice Mirror\www.ice.gov\images\most-wanted\'
 05:29:05 Recovery started for hsi5.jpg [27.80 KB]
 05:29:05 Recovery completed for hsi5.jpg
 05:29:05 WRNG File 'developers.shtml' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\About\developer_resources\'
 05:29:05 Recovery started for developers.shtml [21.90 KB]
 05:29:05 Recovery completed for developers.shtml
 05:29:05 WRNG File 'usagov_logo.gif' will be recovered to the same drive where deleted data located.
 05:29:05 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\resources\images\'
 05:29:05 Recovery started for usagov_logo.gif [6.500 KB]
 05:29:05 Recovery completed for usagov_logo.gif
 05:29:05 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:06 WRNG File 'DictionaryUnicode.txt' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:29:06 Recovery started for DictionaryUnicode.txt [47.55 KB]
 05:29:06 Recovery completed for DictionaryUnicode.txt
 05:29:06 WRNG File 'Americans_Minds.shtml' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\About\'
 05:29:06 Recovery started for Americans_Minds.shtml [23.70 KB]
 05:29:06 Recovery completed for Americans_Minds.shtml
 05:29:06 WRNG File 'index.shtml' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\gobiernousa\'
 05:29:06 Recovery started for index.shtml [37.44 KB]
 05:29:06 Recovery completed for index.shtml
 05:29:06 WRNG File 'index.html' will be recovered to the same drive where deleted data located.
 05:29:06 Recovery started for index.html [37.42 KB]
 05:29:06 Recovery completed for index.html
 05:29:06 WRNG File 'new[2].txt' will be recovered to the same drive where deleted data located.
 05:29:06 DBG Recovering from 'C:\Users\Owner\Documents\newdirective\Temporary Internet Files\Content.IE5\0ZX32UL8\'
 05:29:06 Recovery started for new[2].txt [14.93 KB]
 05:29:06 Recovery completed for new[2].txt
 05:29:06 WRNG File 'new[1].txt' will be recovered to the same drive where deleted data located.
 05:29:06 Recovery started for new[1].txt [15.17 KB]
 05:29:06 Recovery completed for new[1].txt
 05:29:06 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:08 WRNG File '07-04-11_15-51.jpg' will be recovered to the same drive where deleted data located.
 05:29:08 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:08 Recovery started for 07-04-11_15-51.jpg [48.07 KB]
 05:29:08 Recovery completed for 07-04-11_15-51.jpg
 05:29:08 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:08 WRNG File '07-04-11_13-54.jpg' will be recovered to the same drive where deleted data located.
 05:29:08 Recovery started for 07-04-11_13-54.jpg [48.36 KB]
 05:29:08 Recovery completed for 07-04-11_13-54.jpg
 05:29:08 WRNG File '07_04_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:08 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\daily_visited_urls\'
 05:29:08 Recovery started for 07_04_2011.txt [  338 B ]
 05:29:09 Recovery completed for 07_04_2011.txt
 05:29:09 WRNG File '07-04-11_14-16.jpg' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:09 Recovery started for 07-04-11_14-16.jpg [48.36 KB]
 05:29:09 Recovery completed for 07-04-11_14-16.jpg
 05:29:09 WRNG File '07_04_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\daily_log_files\'
 05:29:09 Recovery started for 07_04_2011.txt [20.31 KB]
 05:29:09 Recovery completed for 07_04_2011.txt
 05:29:09 WRNG File '07-04-11_20-59.jpg' will be recovered to the same drive where deleted data located.
 05:29:09 DBG Recovering from 'C:\Users\Owner\Desktop\DTMPFILES\Documents\Caches\Ultra Keylogger~$~\spy_screenshots\07_04_2011\'
 05:29:09 Recovery started for 07-04-11_20-59.jpg [27.07 KB]
 05:29:09 Recovery completed for 07-04-11_20-59.jpg
 05:29:09 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:10 WRNG File '07-04-11_23-08.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for 07-04-11_23-08.jpg [56.09 KB]
 05:29:10 Recovery completed for 07-04-11_23-08.jpg
 05:29:10 WRNG File '07-04-11_20-19.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for 07-04-11_20-19.jpg [58.96 KB]
 05:29:10 Recovery completed for 07-04-11_20-19.jpg
 05:29:10 WRNG File 'DLR4F47.tmp' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\AppData\Local\Temp\'
 05:29:10 Recovery started for DLR4F47.tmp [12.17 KB]
 05:29:10 Recovery completed for DLR4F47.tmp
 05:29:10 WRNG File 'Owner- Clipboard - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\ProgramData\KSP\LogFile\'
 05:29:10 Recovery started for Owner- Clipboard - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Clipboard - 7_7_2011.txt
 05:29:10 WRNG File 'Owner- Keys - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Owner- Keys - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Keys - 7_7_2011.txt
 05:29:10 WRNG File 'Owner- Website - 7_7_2011.txt' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Owner- Website - 7_7_2011.txt [    0 B ]
 05:29:10 Recovery completed for Owner- Website - 7_7_2011.txt
 05:29:10 WRNG File 'BCD.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\{DNL\boot\'
 05:29:10 Recovery started for BCD.LOG [17.00 KB]
 05:29:10 Recovery completed for BCD.LOG
 05:29:10 WRNG File 'svitracking.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\'
 05:29:10 Recovery started for svitracking.log [20.00 KB]
 05:29:10 Recovery completed for svitracking.log
 05:29:10 WRNG File '07-07-11_04-56.jpg' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\some_undistinguished_folder\Ultra Keylogger\spy_screenshots\07_07_2011\'
 05:29:10 Recovery started for 07-07-11_04-56.jpg [63.67 KB]
 05:29:10 Recovery completed for 07-07-11_04-56.jpg
 05:29:10 WRNG File 'tracking.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\{DNL\System Volume Information\'
 05:29:10 Recovery started for tracking.log [20.00 KB]
 05:29:10 Recovery completed for tracking.log
 05:29:10 WRNG File 'BurnBootMergeBBV1.log' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Logs\'
 05:29:10 Recovery started for BurnBootMergeBBV1.log [13.17 KB]
 05:29:10 Recovery completed for BurnBootMergeBBV1.log
 05:29:10 WRNG File 'BBApps.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for BBApps.log [3.555 KB]
 05:29:10 Recovery completed for BBApps.log
 05:29:10 WRNG File 'CardReader.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for CardReader.log [  207 B ]
 05:29:10 Recovery completed for CardReader.log
 05:29:10 WRNG File 'nis.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for nis.log [  172 B ]
 05:29:10 Recovery completed for nis.log
 05:29:10 WRNG File 'WMPfiles.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for WMPfiles.log [  776 B ]
 05:29:10 Recovery completed for WMPfiles.log
 05:29:10 WRNG File 'REGDEV_BB.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for REGDEV_BB.LOG [   41 B ]
 05:29:10 Recovery completed for REGDEV_BB.LOG
 05:29:10 WRNG File 'MountLtr.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for MountLtr.log [   71 B ]
 05:29:10 Recovery completed for MountLtr.log
 05:29:10 WRNG File 'BTooth.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Logs\BB\'
 05:29:10 Recovery started for BTooth.LOG [  654 B ]
 05:29:10 Recovery completed for BTooth.LOG
 05:29:10 WRNG File 'GFBIOS.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for GFBIOS.log [  388 B ]
 05:29:10 Recovery completed for GFBIOS.log
 05:29:10 WRNG File 'YouCam.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for YouCam.log [  845 B ]
 05:29:10 Recovery completed for YouCam.log
 05:29:10 WRNG File 'Touchpad.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for Touchpad.log [7.883 KB]
 05:29:10 Recovery completed for Touchpad.log
 05:29:10 WRNG File 'WINLIVE.LOG' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for WINLIVE.LOG [  901 B ]
 05:29:10 Recovery completed for WINLIVE.LOG
 05:29:10 WRNG File 'HWBIOS.log' will be recovered to the same drive where deleted data located.
 05:29:10 Recovery started for HWBIOS.log [  630 B ]
 05:29:11 Recovery completed for HWBIOS.log
 05:29:11 WRNG File 'cleanSWS.ini' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\'
 05:29:11 Recovery started for cleanSWS.ini [  206 B ]
 05:29:11 Recovery completed for cleanSWS.ini
 05:29:11 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:11 WRNG File 'info.ini' will be recovered to the same drive where deleted data located.
 05:29:11 Recovery started for info.ini [9.280 KB]
 05:29:11 Recovery completed for info.ini
 05:29:11 WRNG File 'CTOERROR.txt' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\postpin\'
 05:29:11 Recovery started for CTOERROR.txt [  272 B ]
 05:29:11 Recovery completed for CTOERROR.txt
 05:29:11 WRNG File 'RStoneLog.ini' will be recovered to the same drive where deleted data located.
 05:29:11 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\SYSTEM.SAV~\Util\'
 05:29:11 Recovery started for RStoneLog.ini [  209 B ]
 05:29:11 Recovery completed for RStoneLog.ini
 05:29:11 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:12 WRNG File '838[3].swf' will be recovered to the same drive where deleted data located.
 05:29:12 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Contentword\Content.IE5\T61N7AM6\'
 05:29:12 Recovery started for 838[3].swf [21.28 KB]
 05:29:12 Recovery completed for 838[3].swf
 05:29:12 WRNG File '770[3].swf' will be recovered to the same drive where deleted data located.
 05:29:12 Recovery started for 770[3].swf [24.33 KB]
 05:29:12 Recovery completed for 770[3].swf
 05:29:12 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:12 WRNG File '846[1].swf' will be recovered to the same drive where deleted data located.
 05:29:12 Recovery started for 846[1].swf [12.58 KB]
 05:29:12 Recovery completed for 846[1].swf
 05:29:12 WRNG File 'userstatus_2[1].swf' will be recovered to the same drive where deleted data located.
 05:29:12 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9SN2DWZY\'
 05:29:12 Recovery started for userstatus_2[1].swf [1.104 KB]
 05:29:13 Recovery completed for userstatus_2[1].swf
 05:29:13 WRNG File 'sound[1].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for sound[1].swf [6.939 KB]
 05:29:13 Recovery completed for sound[1].swf
 05:29:13 WRNG File '348[1].swf' will be recovered to the same drive where deleted data located.
 05:29:13 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\newdirective\Temporary Internet Files\Low\Content.IE5\O7BS3QDH\'
 05:29:13 Recovery started for 348[1].swf [39.28 KB]
 05:29:13 Recovery completed for 348[1].swf
 05:29:13 WRNG File 'ai[7].htm' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for ai[7].htm [  100 B ]
 05:29:13 Recovery completed for ai[7].htm
 05:29:13 WRNG File '770[5].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 770[5].swf [24.33 KB]
 05:29:13 Recovery completed for 770[5].swf
 05:29:13 WRNG File '770[7].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 770[7].swf [24.33 KB]
 05:29:13 Recovery completed for 770[7].swf
 05:29:13 WRNG File 'ads[1].htm' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for ads[1].htm [4.849 KB]
 05:29:13 Recovery completed for ads[1].htm
 05:29:13 WRNG File '826[2].swf' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for 826[2].swf [23.96 KB]
 05:29:13 Recovery completed for 826[2].swf
 05:29:13 WRNG File 'mail[2]' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for mail[2] [15.83 KB]
 05:29:13 Recovery completed for mail[2]
 05:29:13 WRNG File 'imagesCA69D7M2.jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for imagesCA69D7M2.jpg [5.232 KB]
 05:29:13 Recovery completed for imagesCA69D7M2.jpg
 05:29:13 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:13 WRNG File 'images[11].jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for images[11].jpg [5.878 KB]
 05:29:13 Recovery completed for images[11].jpg
 05:29:13 WRNG File 'horiz14[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:13 Recovery started for horiz14[1].jpg [18.06 KB]
 05:29:13 Recovery completed for horiz14[1].jpg
 05:29:13 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 WRNG File 'private02[1].gif' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for private02[1].gif [  613 B ]
 05:29:14 Recovery completed for private02[1].gif
 05:29:14 WRNG File 'imagesCAUAO5CR.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAUAO5CR.jpg [7.396 KB]
 05:29:14 Recovery completed for imagesCAUAO5CR.jpg
 05:29:14 WRNG File 'horiz6[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for horiz6[1].jpg [14.46 KB]
 05:29:14 Recovery completed for horiz6[1].jpg
 05:29:14 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:14 WRNG File 'imagesCA93YTQ9.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCA93YTQ9.jpg [5.492 KB]
 05:29:14 Recovery completed for imagesCA93YTQ9.jpg
 05:29:14 WRNG File 'images[1].jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for images[1].jpg [5.755 KB]
 05:29:14 Recovery completed for images[1].jpg
 05:29:14 WRNG File 'imagesCAO7RUB1.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAO7RUB1.jpg [7.165 KB]
 05:29:14 Recovery completed for imagesCAO7RUB1.jpg
 05:29:14 WRNG File 'imagesCAOPNANB.jpg' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for imagesCAOPNANB.jpg [5.966 KB]
 05:29:14 Recovery completed for imagesCAOPNANB.jpg
 05:29:14 WRNG File 'login_status[1].htm' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\newdirective\Temporary Internet Files\Low\Content.IE5\PKGPBA4L\'
 05:29:14 Recovery started for login_status[1].htm [   61 B ]
 05:29:14 Recovery completed for login_status[1].htm
 05:29:14 WRNG File 'mail[5]' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for mail[5] [37.75 KB]
 05:29:14 Recovery completed for mail[5]
 05:29:14 WRNG File 'Include[1].htm' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for Include[1].htm [  464 B ]
 05:29:14 Recovery completed for Include[1].htm
 05:29:14 WRNG File 'mail[4].txt' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for mail[4].txt [09.56 KB]
 05:29:14 Recovery completed for mail[4].txt
 05:29:14 WRNG File 'loginCache.sol' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\rcyle\Macromedia\Flash Player\#SharedObjects\UN8QTSRK\login.yahoo.com\'
 05:29:14 Recovery started for loginCache.sol [  158 B ]
 05:29:14 Recovery completed for loginCache.sol
 05:29:14 WRNG File 'Detections.log' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Scans\History\Service\'
 05:29:14 Recovery started for Detections.log [  508 B ]
 05:29:14 Recovery completed for Detections.log
 05:29:14 WRNG File 'Unknown.Log' will be recovered to the same drive where deleted data located.
 05:29:14 Recovery started for Unknown.Log [48.82 KB]
 05:29:14 Recovery completed for Unknown.Log
 05:29:14 WRNG File 'Makefile.in' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Snort\doc\'
 05:29:14 Recovery started for Makefile.in [13.20 KB]
 05:29:14 Recovery completed for Makefile.in
 05:29:14 WRNG File 'owner@google[2].txt' will be recovered to the same drive where deleted data located.
 05:29:14 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:14 Recovery started for owner@google[2].txt [  130 B ]
 05:29:15 Recovery completed for owner@google[2].txt
 05:29:15 WRNG File 'owner@us.mg4.mail.yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@us.mg4.mail.yahoo[1].txt [  463 B ]
 05:29:15 Recovery completed for owner@us.mg4.mail.yahoo[1].txt
 05:29:15 WRNG File 'owner@njcu[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@njcu[2].txt [  375 B ]
 05:29:15 Recovery completed for owner@njcu[2].txt
 05:29:15 WRNG File 'owner@mail.yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@mail.yahoo[1].txt [  108 B ]
 05:29:15 Recovery completed for owner@mail.yahoo[1].txt
 05:29:15 WRNG File 'owner@adobe[3].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adobe[3].txt [   90 B ]
 05:29:15 Recovery completed for owner@adobe[3].txt
 05:29:15 WRNG File 'owner@adobe[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adobe[1].txt [  271 B ]
 05:29:15 Recovery completed for owner@adobe[1].txt
 05:29:15 WRNG File 'edb0044E.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb0044E.log [64.00 KB]
 05:29:15 Recovery completed for edb0044E.log
 05:29:15 WRNG File 'owner@pointroll[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@pointroll[2].txt [  154 B ]
 05:29:15 Recovery completed for owner@pointroll[2].txt
 05:29:15 WRNG File 'owner@adbrite[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adbrite[2].txt [  467 B ]
 05:29:15 Recovery completed for owner@adbrite[2].txt
 05:29:15 WRNG File 'owner@adap[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@adap[2].txt [  738 B ]
 05:29:15 Recovery completed for owner@adap[2].txt
 05:29:15 WRNG File 'owner@iamamerchant[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@iamamerchant[1].txt [  362 B ]
 05:29:15 Recovery completed for owner@iamamerchant[1].txt
 05:29:15 WRNG File 'edb00458.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb00458.log [64.00 KB]
 05:29:15 Recovery completed for edb00458.log
 05:29:15 WRNG File 'owner@digitalriver[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@digitalriver[1].txt [  367 B ]
 05:29:15 Recovery completed for owner@digitalriver[1].txt
 05:29:15 WRNG File 'owner@7search[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@7search[2].txt [  209 B ]
 05:29:15 Recovery completed for owner@7search[2].txt
 05:29:15 WRNG File 'owner@205.252.166[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@205.252.166[1].txt [  100 B ]
 05:29:15 Recovery completed for owner@205.252.166[1].txt
 05:29:15 WRNG File 'owner@quantserve[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@quantserve[2].txt [  168 B ]
 05:29:15 Recovery completed for owner@quantserve[2].txt
 05:29:15 WRNG File 'edb00457.log' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:15 Recovery started for edb00457.log [64.00 KB]
 05:29:15 Recovery completed for edb00457.log
 05:29:15 WRNG File 'owner@hushmail[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hushmail[1].txt [  261 B ]
 05:29:15 Recovery completed for owner@hushmail[1].txt
 05:29:15 WRNG File 'owner@hulu[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@hulu[2].txt [1.229 KB]
 05:29:15 Recovery completed for owner@hulu[2].txt
 05:29:15 WRNG File 'owner@questionmarket[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@questionmarket[1].txt [   85 B ]
 05:29:15 Recovery completed for owner@questionmarket[1].txt
 05:29:15 WRNG File 'owner@dmoz[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@dmoz[2].txt [  149 B ]
 05:29:15 Recovery completed for owner@dmoz[2].txt
 05:29:15 WRNG File 'owner@web4.kean[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@web4.kean[1].txt [  286 B ]
 05:29:15 Recovery completed for owner@web4.kean[1].txt
 05:29:15 WRNG File 'owner@facebook[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@facebook[1].txt [  175 B ]
 05:29:15 Recovery completed for owner@facebook[1].txt
 05:29:15 WRNG File 'owner@facebook[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:15 Recovery started for owner@facebook[1].txt [   91 B ]
 05:29:15 Recovery completed for owner@facebook[1].txt
 05:29:15 WRNG File 'owner@hp.digitalriver[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hp.digitalriver[1].txt [  128 B ]
 05:29:15 Recovery completed for owner@hp.digitalriver[1].txt
 05:29:15 WRNG File 'owner@wegmans[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@wegmans[1].txt [  175 B ]
 05:29:15 Recovery completed for owner@wegmans[1].txt
 05:29:15 WRNG File 'owner@quintcareers[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@quintcareers[1].txt [  398 B ]
 05:29:15 Recovery completed for owner@quintcareers[1].txt
 05:29:15 WRNG File '$RWSQJQ1.dmp' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 05:29:15 Recovery started for $RWSQJQ1.dmp [  512 B ]
 05:29:15 Recovery completed for $RWSQJQ1.dmp
 05:29:15 WRNG File 'owner@www.bing[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@www.bing[1].txt [  111 B ]
 05:29:15 Recovery completed for owner@www.bing[1].txt
 05:29:15 WRNG File 'owner@remotecontrol.mtv[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@remotecontrol.mtv[1].txt [   91 B ]
 05:29:15 Recovery completed for owner@remotecontrol.mtv[1].txt
 05:29:15 WRNG File 'owner@www.bing[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:15 Recovery started for owner@www.bing[1].txt [  111 B ]
 05:29:15 Recovery completed for owner@www.bing[1].txt
 05:29:15 WRNG File 'owner@hit.gemius[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@hit.gemius[2].txt [  201 B ]
 05:29:15 Recovery completed for owner@hit.gemius[2].txt
 05:29:15 WRNG File 'Search.htm.lnk' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\AppData\Roaming\Microsoft\Windows\Recent\'
 05:29:15 Recovery started for Search.htm.lnk [1.018 KB]
 05:29:15 Recovery completed for Search.htm.lnk
 05:29:15 WRNG File 'owner@resume-help[1].txt' will be recovered to the same drive where deleted data located.
 05:29:15 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:15 Recovery started for owner@resume-help[1].txt [  299 B ]
 05:29:15 Recovery completed for owner@resume-help[1].txt
 05:29:15 WRNG File 'owner@www.consultantlive[2].txt' will be recovered to the same drive where deleted data located.
 05:29:15 Recovery started for owner@www.consultantlive[2].txt [  186 B ]
 05:29:16 Recovery completed for owner@www.consultantlive[2].txt
 05:29:16 WRNG File 'edb.chk' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\catroot2(~^^\'
 05:29:16 Recovery started for edb.chk [8.000 KB]
 05:29:16 Recovery completed for edb.chk
 05:29:16 WRNG File 'owner@youtube[2].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:16 Recovery started for owner@youtube[2].txt [  549 B ]
 05:29:16 Recovery completed for owner@youtube[2].txt
 05:29:16 WRNG File 'owner@fwmrm[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 Recovery started for owner@fwmrm[1].txt [  620 B ]
 05:29:16 Recovery completed for owner@fwmrm[1].txt
 05:29:16 WRNG File 'owner@yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\'
 05:29:16 Recovery started for owner@yahoo[1].txt [   82 B ]
 05:29:16 Recovery completed for owner@yahoo[1].txt
 05:29:16 WRNG File 'owner@yahoo[1].txt' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Cookies\Low\'
 05:29:16 Recovery started for owner@yahoo[1].txt [1.222 KB]
 05:29:16 Recovery completed for owner@yahoo[1].txt
 05:29:16 WRNG File 'BeaconService.sol' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Users\Owner\!DNL\Macromedia~\Flash Player\#SharedObjects\UN8QTSRK\www.hulu.com\'
 05:29:16 Recovery started for BeaconService.sol [  138 B ]
 05:29:16 Recovery completed for BeaconService.sol
 05:29:16 WRNG File 'hpsaupgrade5.txt.lnk' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\'
 05:29:16 Recovery started for hpsaupgrade5.txt.lnk [0.982 KB]
 05:29:16 Recovery completed for hpsaupgrade5.txt.lnk
 05:29:16 WRNG File '$ICZ5104' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 05:29:16 Recovery started for $ICZ5104 [  544 B ]
 05:29:16 Recovery completed for $ICZ5104
 05:29:16 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:16 WRNG File '{D7B62219-CBEC-4E90-B586-349162DB03AC}' will be recovered to the same drive where deleted data located.
 05:29:16 DBG Recovering from 'C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\'
 05:29:16 Recovery started for {D7B62219-CBEC-4E90-B586-349162DB03AC} [6.672 KB]
 05:29:16 Recovery completed for {D7B62219-CBEC-4E90-B586-349162DB03AC}
 05:29:16 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:16 OK Recovery process completed.
              Recovered 173 item(s) total.
 05:29:16 OK Execution has been completed with errors
 05:37:08 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\!!_$$_!!'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 05:37:08 WRNG File 'application (1).pdf' will be recovered to the same drive where deleted data located.
 05:37:08 DBG Recovering from 'C:\Users\Owner\Downloads\'
 05:37:08 Recovery started for application (1).pdf [15.13 KB]
 05:37:09 Recovery completed for application (1).pdf
 05:37:09 OK Recovery process completed.
              Recovered 1 item(s) total.
 05:40:44 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\!!_$$_!!'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          39
 05:40:44 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:46 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:47 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:48 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:49 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:50 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:50 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:51 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:52 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:52 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:53 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:53 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:54 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:55 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:56 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:58 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:59 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:40:59 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:00 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:01 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 05:41:02 OK Recovery process completed.
              Recovered 0 item(s) total.
 05:41:02 OK Execution has been completed with errors
 05:49:06 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\!!_$$_!!'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          63
 05:49:06 WRNG File 'rsop.msc' will be recovered to the same drive where deleted data located.
 05:49:06 DBG Recovering from 'C:\Windows\winsxs\amd64_microsoft-windows-g..admin-gpedit-snapin_31bf3856ad364e35_6.1.7600.16385_none_ccd7905990f3c9d2\'
 05:49:06 Recovery started for rsop.msc [42.54 KB]
 05:49:07 Recovery completed for rsop.msc
 05:49:07 WRNG File 'iis.msc' will be recovered to the same drive where deleted data located.
 05:49:07 DBG Recovering from 'C:\Windows\winsxs\wow64_microsoft-windows-iis-managementconsole_31bf3856ad364e35_6.1.7600.16385_none_ee1d395a09294464\'
 05:49:07 Recovery started for iis.msc [61.63 KB]
 05:49:07 Recovery completed for iis.msc
 05:49:07 REG Unable to recover file 'printmanagement.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:09 WRNG File 'ScanManagement.msc' will be recovered to the same drive where deleted data located.
 05:49:09 DBG Recovering from 'C:\Windows\winsxs\msil_microsoft.windows.smc_31bf3856ad364e35_6.1.7600.16385_none_a9387863fbe3881b\'
 05:49:09 Recovery started for ScanManagement.msc [32.83 KB]
 05:49:09 Recovery completed for ScanManagement.msc
 05:49:09 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:10 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:12 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:13 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:14 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:15 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:15 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:16 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:17 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:18 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:19 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:20 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:21 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:22 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 WRNG File 'functions.html' will be recovered to the same drive where deleted data located.
 05:49:23 DBG Recovering from 'C:\Program Files\BreakPoint Software\Hex Workshop v6.5\hwapi\docs\'
 05:49:23 Recovery started for functions.html [5.024 KB]
 05:49:23 Recovery completed for functions.html
 05:49:23 WRNG File 'group__common.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__common.html [8.400 KB]
 05:49:23 Recovery completed for group__common.html
 05:49:23 WRNG File 'group__bookmarks.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__bookmarks.html [38.73 KB]
 05:49:23 Recovery completed for group__bookmarks.html
 05:49:23 WRNG File 'group__checksums.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__checksums.html [28.70 KB]
 05:49:23 Recovery completed for group__checksums.html
 05:49:23 WRNG File 'group__editor.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__editor.html [16.72 KB]
 05:49:23 Recovery completed for group__editor.html
 05:49:23 WRNG File 'group__document.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__document.html [39.21 KB]
 05:49:23 Recovery completed for group__document.html
 05:49:23 WRNG File 'group__entrypoints.html' will be recovered to the same drive where deleted data located.
 05:49:23 Recovery started for group__entrypoints.html [27.93 KB]
 05:49:23 Recovery completed for group__entrypoints.html
 05:49:23 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:23 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:24 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforDanielWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'rootforDanielnapavalleyWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'lusrmgr.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'urootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'nurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'dbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'ddbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 WRNG File 'danandatabase.log.URL' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\'
 05:49:25 Recovery started for danandatabase.log.URL [   67 B ]
 05:49:25 Recovery completed for danandatabase.log.URL
 05:49:25 WRNG File '5sysinfod.txt.URL' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\#~^&)(\Apple Software Update\'
 05:49:25 Recovery started for 5sysinfod.txt.URL [   59 B ]
 05:49:25 Recovery completed for 5sysinfod.txt.URL
 05:49:25 WRNG File 'UNDAN2Undelete Session 2011-07-12_12244.usf' will be recovered to the same drive where deleted data located.
 05:49:25 DBG Recovering from 'C:\Users\Owner\AppData\'
 05:49:25 Recovery started for UNDAN2Undelete Session 2011-07-12_12244.usf [  529 B ]
 05:49:25 Recovery completed for UNDAN2Undelete Session 2011-07-12_12244.usf
 05:49:25 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 05:49:25 OK Recovery process completed.
              Recovered 13 item(s) total.
 05:49:25 OK Execution has been completed with errors
 05:58:47 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\!!_$$_!!'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          50
 05:58:47 REG Unable to recover file 'printmanagement.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:49 REG Unable to recover file 'ArtFile.bin' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:50 REG Unable to recover file 'Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:52 REG Unable to recover file '73-028.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:53 REG Unable to recover file 'image-flyer.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:54 REG Unable to recover file 'image-pamphlet.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:55 REG Unable to recover file 'immigration-detainer-form.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:55 REG Unable to recover file 'photo.JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (1).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (2).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:56 REG Unable to recover file 'photo (6).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (9).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (3).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (4).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:57 REG Unable to recover file 'photo (5).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (7).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (8).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (10).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'photo (11).JPG' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:58 REG Unable to recover file 'AGENLIST.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:59 REG Unable to recover file 'Directoryofcontractedservices2010.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:58:59 REG Unable to recover file 'University of Phoenix Veterans Responsibility Letter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:01 REG Unable to recover file 'computercrimes.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:02 REG Unable to recover file 'employment_employee_application.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:03 REG Unable to recover file 'cybercrimescenter.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'americanmegatrends.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'ntfs.sys' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:04 REG Unable to recover file 'CBS.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file 'Realtek.ico' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file '07-04-11_12-57.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:05 REG Unable to recover file '07-04-11_21-19.jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'WINDOWS6.1-KB980436-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'WINDOWS6.1-KB980182-X64.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'update_security_info[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:06 REG Unable to recover file 'path[1].jpg' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'yahoo_dom_event_animation_connection_2.8.2_inc_superads_capslock_loginmd5_min_12[1].js' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'mail[1]' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'images[1].htm' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforDanielWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'rootforDanielnapavalleyWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'lusrmgr.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'urootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'nurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'dbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'ddbdaniel_xmlnurootforWmiMgmt.msc' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'TMP00001775B0F46B62C7268C7E' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 REG Unable to recover file 'TMP0000178A74294DF5D6DA4FA3' due to size limit (64.0 KB) for the Unregistered Version.
 05:59:07 OK Recovery process completed.
              Recovered 0 item(s) total.
 05:59:07 OK Execution has been completed with errors
 06:01:53 Setting check state for Files and Folders...
 06:01:55 Setting check state for Files and Folders...
 06:01:57 Setting check state for Files and Folders...
 06:01:58 Setting check state for Files and Folders...
 06:02:45 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          66
 06:02:45 REG Unable to recover folder 'System Volume Information' due to size limit (64.0 KB) for the Unregistered Version.
 06:02:51 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:02:51 OK Execution has been completed with errors
 06:03:09 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          43
 06:03:09 REG Unable to recover folder 'SPP' due to size limit (64.0 KB) for the Unregistered Version.
 06:03:11 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:03:11 OK Execution has been completed with errors
 06:03:22 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           2
 06:03:22 WRNG Folder 'Windows Backup' will be recovered to the same drive where deleted data located.
 06:03:22 WRNG Folder 'Catalogs' will be recovered to the same drive where deleted data located.
 06:03:22 WRNG File 'GlobalCatalog.wbcat' will be recovered to the same drive where deleted data located.
 06:03:22 DBG Recovering from 'C:\System Volume Information\Windows Backup\Catalogs\'
 06:03:22 Recovery started for GlobalCatalog.wbcat [  136 B ]
 06:03:22 Recovery completed for GlobalCatalog.wbcat
 06:03:22 WRNG File 'GlobalCatalogLock.dat' will be recovered to the same drive where deleted data located.
 06:03:22 Recovery started for GlobalCatalogLock.dat [    0 B ]
 06:03:22 Recovery completed for GlobalCatalogLock.dat
 06:03:22 OK Recovery process completed.
              Recovered 2 item(s) total.
 06:03:56 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           0
 06:03:56 WRNG Folder 'WindowsImageBackup' will be recovered to the same drive where deleted data located.
 06:03:56 WRNG Folder 'SPPMetadataCache' will be recovered to the same drive where deleted data located.
 06:03:56 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:04:15 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          30
 06:04:15 REG Unable to recover folder 'SppGroupCache' due to size limit (64.0 KB) for the Unregistered Version.
 06:04:17 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:04:17 OK Execution has been completed with errors
 06:04:30 DBG Search in:                                  C:\...\SppGroupCache;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                            Yes
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Accessed
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:04:30 Search started on C:\System Volume Information\SPP\SppGroupCache
 06:04:30 Search completed [found 0 items]
 06:04:30 OK Search has been completed. [Total 0 items found].
              Review search results and repeat Search with another options if necessary.
 06:04:32 OK Filtering has been completed. Found 0 items.
 06:04:47 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           0
 06:04:47 WRNG Folder 'SppCbsHiveStore' will be recovered to the same drive where deleted data located.
 06:04:47 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:04:56 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          13
 06:04:56 REG Unable to recover folder 'OnlineMetadataCache' due to size limit (64.0 KB) for the Unregistered Version.
 06:04:58 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:04:58 OK Execution has been completed with errors
 06:05:30 DBG Search in:                            C:\...\OnlineMetadataCache;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:05:30 Search started on C:\System Volume Information\SPP\OnlineMetadataCache
 06:05:30 Search completed [found 0 items]
 06:05:30 OK Search has been completed. [Total 0 items found].
              Review search results and repeat Search with another options if necessary.
 06:05:32 OK Filtering has been completed. Found 0 items.
 06:05:54 DBG Search in:                          C:\...\System Volume Information;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:05:54 Search started on C:\System Volume Information
 06:05:54 Search completed [found 6 items]
 06:05:54 OK Search has been completed. [Total 6 items found].
              Review search results and repeat Search with another options if necessary.
 06:05:55 Applying file filter:
                 All files; Recursive;
 06:05:55 OK Filtering has been completed. Found 6 items.
 06:06:26 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           6
 06:06:26 REG Unable to recover file 'ISwift3.dat' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:29 REG Unable to recover file 'mdllog.dat' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:30 REG Unable to recover file 'Syscache.hve' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:30 REG Unable to recover file 'Syscache.hve.LOG1' due to size limit (64.0 KB) for the Unregistered Version.
 06:06:31 WRNG File 'Syscache.hve.LOG2' will be recovered to the same drive where deleted data located.
 06:06:31 DBG Recovering from 'C:\System Volume Information\'
 06:06:31 Recovery started for Syscache.hve.LOG2 [    0 B ]
 06:06:31 Recovery completed for Syscache.hve.LOG2
 06:06:31 WRNG File 'tracking.log' will be recovered to the same drive where deleted data located.
 06:06:31 Recovery started for tracking.log [20.00 KB]
 06:06:31 Recovery completed for tracking.log
 06:06:31 OK Recovery process completed.
              Recovered 2 item(s) total.
 06:06:31 OK Execution has been completed with errors
 06:07:26 Setting check state for Files and Folders...
 06:10:36 Setting check state for Files and Folders...
 06:11:20 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           2
 06:11:20 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 06:11:21 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:11:21 OK Execution has been completed with errors
 06:11:53 DBG Search in:                                   C:\...\$RECYCLE.BIN;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:11:53 Search started on C:\$RECYCLE.BIN
 06:11:53 Search completed [found 0 items]
 06:11:53 OK Search has been completed. [Total 0 items found].
              Review search results and repeat Search with another options if necessary.
 06:11:55 OK Filtering has been completed. Found 0 items.
 06:12:22 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          20
 06:12:22 REG Unable to recover folder '$R0B5N43' due to size limit (64.0 KB) for the Unregistered Version.
 06:12:24 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:12:24 OK Execution has been completed with errors
 06:12:51 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           5
 06:12:51 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 06:12:53 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:12:53 OK Execution has been completed with errors
 06:13:06 Setting check state for Files and Folders...
 06:13:08 Setting check state for Files and Folders...
 06:13:12 Setting check state for Files and Folders...
 06:14:04 DBG Search in:                                   C:\...\$RECYCLE.BIN;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:14:04 Search started on C:\$RECYCLE.BIN
 06:14:04 Search completed [found 0 items]
 06:14:04 OK Search has been completed. [Total 0 items found].
              Review search results and repeat Search with another options if necessary.
 06:14:05 OK Filtering has been completed. Found 0 items.
 06:17:22 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:17:22 REG Unable to recover file 'SAM' due to size limit (64.0 KB) for the Unregistered Version.
 06:17:25 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:17:25 OK Execution has been completed with errors
 06:17:42 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:17:42 WRNG File 'SECURITY' will be recovered to the same drive where deleted data located.
 06:17:42 DBG Recovering from 'C:\Windows\System32\config\RegBack\'
 06:17:42 Recovery started for SECURITY [24.00 KB]
 06:17:42 Recovery completed for SECURITY
 06:17:42 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:18:39 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:18:39 REG Unable to recover file 'SOFTWARE' due to size limit (64.0 KB) for the Unregistered Version.
 06:18:41 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:18:41 OK Execution has been completed with errors
 06:19:13 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:19:13 REG Unable to recover file 'SAM' due to size limit (64.0 KB) for the Unregistered Version.
 06:19:15 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:19:15 OK Execution has been completed with errors
 06:19:46 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:19:46 WRNG File 'BCD-Template.LOG' will be recovered to the same drive where deleted data located.
 06:19:46 DBG Recovering from 'C:\Windows\System32\config\'
 06:19:46 Recovery started for BCD-Template.LOG [25.00 KB]
 06:19:47 Recovery completed for BCD-Template.LOG
 06:19:47 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:20:22 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:20:22 WRNG File 'BCD-Template' will be recovered to the same drive where deleted data located.
 06:20:22 DBG Recovering from 'C:\Windows\System32\config\'
 06:20:22 Recovery started for BCD-Template [28.00 KB]
 06:20:23 Recovery completed for BCD-Template
 06:20:23 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:21:27 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           4
 06:21:27 REG Unable to recover folder '.' due to size limit (64.0 KB) for the Unregistered Version.
 06:21:29 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:21:29 OK Execution has been completed with errors
 06:21:42 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:21:42 REG Unable to recover file 'COMPONENTS' due to size limit (64.0 KB) for the Unregistered Version.
 06:21:44 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:21:44 OK Execution has been completed with errors
 06:22:01 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:22:01 WRNG File 'COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf' will be recovered to the same drive where deleted data located.
 06:22:01 DBG Recovering from 'C:\Windows\System32\config\'
 06:22:01 Recovery started for COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [64.00 KB]
 06:22:01 Recovery completed for COMPONENTS{016888b9-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
 06:22:01 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:22:53 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:22:53 WRNG File '{016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf' will be recovered to the same drive where deleted data located.
 06:22:53 DBG Recovering from 'C:\Windows\System32\config\TxR\'
 06:22:53 Recovery started for {016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf [64.00 KB]
 06:22:53 Recovery completed for {016888cc-6c6f-11de-8d1d-001e0bcde3ec}.TxR.blf
 06:22:53 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:24:09 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:24:09 WRNG File 'ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf' will be recovered to the same drive where deleted data located.
 06:24:09 DBG Recovering from 'C:\Windows\System32\config\systemprofile\'
 06:24:09 Recovery started for ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf [64.00 KB]
 06:24:09 Recovery completed for ntuser.dat{7c888175-9b49-11de-9d11-806e6f6e6963}.TM.blf
 06:24:09 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:27:22 Setting check state for Files and Folders...
 06:29:08 DBG Search in:                          C:\; C:\...\!DNL; C:\...\$DNL; C:\...\$Extend; C:\...\$RECYCLE.BIN; C:\...\1f303bafee44f2f1c1326ad68022faf7; C:\...\Daniel Mounted; C:\...\Documents and Settings; C:\...\log data; C:\...\Mounted Daniel; C:\...\MSOCache; C:\...\My Web Sites; C:\...\PerfLogs; C:\...\Program Files; C:\...\Program Files (x86); C:\...\ProgramData; C:\...\Recovery; C:\...\some_undistinguished_folder; C:\...\SwSetup; C:\...\System Volume Information; C:\...\SYSTEM.SAV; C:\...\undkcr~~%; C:\...\Users; C:\...\Windows;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:29:08 Search started on C:\
 06:29:08 Search completed [found 7 items]
 06:29:08 Search started on C:\!DNL
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$DNL
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$Extend
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\$RECYCLE.BIN
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\1f303bafee44f2f1c1326ad68022faf7
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Daniel Mounted
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Documents and Settings
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\log data
 06:29:08 Search completed [found 2 items]
 06:29:08 Search started on C:\Mounted Daniel
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\MSOCache
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\My Web Sites
 06:29:08 Search completed [found 6 items]
 06:29:08 Search started on C:\PerfLogs
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Program Files
 06:29:08 Search completed [found 76 items]
 06:29:08 Search started on C:\Program Files (x86)
 06:29:08 Search completed [found 21 items]
 06:29:08 Search started on C:\ProgramData
 06:29:08 Search completed [found 12 items]
 06:29:08 Search started on C:\Recovery
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\some_undistinguished_folder
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\SwSetup
 06:29:08 Search completed [found 1 items]
 06:29:08 Search started on C:\System Volume Information
 06:29:08 Search completed [found 6 items]
 06:29:08 Search started on C:\SYSTEM.SAV
 06:29:08 Search completed [found 9 items]
 06:29:08 Search started on C:\undkcr~~%
 06:29:08 Search completed [found 0 items]
 06:29:08 Search started on C:\Users
 06:29:08 Search completed [found 1 items]
 06:29:08 Search started on C:\Windows
 06:29:08 Search completed [found 47 items]
 06:29:08 OK Search has been completed. [Total 188 items found].
              Review search results and repeat Search with another options if necessary.
 06:29:10 Applying file filter:
                 All files; Recursive;
 06:29:10 OK Filtering has been completed. Found 5229 items.
 06:30:35 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                         323
 06:30:35 REG Unable to recover folder 'S-1-5-21-2426286085-332982260-2691753013-1000' due to size limit (64.0 KB) for the Unregistered Version.
 06:30:38 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:30:38 OK Execution has been completed with errors
 06:30:50 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:30:50 WRNG File '$RZVLLCD.dat' will be recovered to the same drive where deleted data located.
 06:30:50 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:30:50 Recovery started for $RZVLLCD.dat [    8 B ]
 06:30:50 Recovery completed for $RZVLLCD.dat
 06:30:50 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:31:46 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:31:46 WRNG File '$RTKDHV7.txt' will be recovered to the same drive where deleted data located.
 06:31:46 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:31:46 Recovery started for $RTKDHV7.txt [   53 B ]
 06:31:46 Recovery completed for $RTKDHV7.txt
 06:31:46 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:32:34 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:32:34 WRNG File '$RKK73AF.dat' will be recovered to the same drive where deleted data located.
 06:32:34 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:32:34 Recovery started for $RKK73AF.dat [4.767 KB]
 06:32:34 Recovery completed for $RKK73AF.dat
 06:32:34 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:33:18 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:33:18 WRNG File '$RWSQJQ1.dmp' will be recovered to the same drive where deleted data located.
 06:33:18 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:33:18 Recovery started for $RWSQJQ1.dmp [  512 B ]
 06:33:18 Recovery completed for $RWSQJQ1.dmp
 06:33:18 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:33:57 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:33:57 WRNG File '$R6JPDZ7.dat' will be recovered to the same drive where deleted data located.
 06:33:57 DBG Recovering from 'C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\'
 06:33:57 Recovery started for $R6JPDZ7.dat [  958 B ]
 06:33:57 Recovery completed for $R6JPDZ7.dat
 06:33:57 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:34:52 DBG Search in:                                                    C:;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:34:52 Search started on C:\
 06:34:52 Search completed [found 7 items]
 06:34:52 OK Search has been completed. [Total 7 items found].
              Review search results and repeat Search with another options if necessary.
 06:34:53 Applying file filter:
                 All files; Recursive;
 06:34:53 OK Filtering has been completed. Found 779 items.
 06:35:09 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:35:09 WRNG File 'ProgramData.xml' will be recovered to the same drive where deleted data located.
 06:35:09 DBG Recovering from 'C:\'
 06:35:09 Recovery started for ProgramData.xml [  646 B ]
 06:35:09 Recovery completed for ProgramData.xml
 06:35:09 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:38:45 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:38:45 WRNG File 'trace.txt' will be recovered to the same drive where deleted data located.
 06:38:45 DBG Recovering from 'C:\'
 06:38:45 Recovery started for trace.txt [    9 B ]
 06:38:45 Recovery completed for trace.txt
 06:38:45 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:39:21 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:39:21 REG Unable to recover file 'BCIView.exe' due to size limit (64.0 KB) for the Unregistered Version.
 06:39:23 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:39:23 OK Execution has been completed with errors
 06:39:45 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:39:45 WRNG File 'DeLink.log' will be recovered to the same drive where deleted data located.
 06:39:45 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:39:45 Recovery started for DeLink.log [  340 B ]
 06:39:45 Recovery completed for DeLink.log
 06:39:45 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:40:10 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:40:10 WRNG File 'esuw71.Log' will be recovered to the same drive where deleted data located.
 06:40:10 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:40:10 Recovery started for esuw71.Log [  583 B ]
 06:40:10 Recovery completed for esuw71.Log
 06:40:10 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:40:43 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:40:43 WRNG File 'REBOOT.ME' will be recovered to the same drive where deleted data located.
 06:40:43 DBG Recovering from 'C:\SYSTEM.SAV\'
 06:40:43 Recovery started for REBOOT.ME [   46 B ]
 06:40:43 Recovery completed for REBOOT.ME
 06:40:43 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:41:16 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:41:16 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 06:41:20 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:41:20 OK Execution has been completed with errors
 06:41:40 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:41:40 WRNG File 'TPBINFO.INI' will be recovered to the same drive where deleted data located.
 06:41:40 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:41:40 Recovery started for TPBINFO.INI [   52 B ]
 06:41:40 Recovery completed for TPBINFO.INI
 06:41:40 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:42:08 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:42:08 WRNG File 'SWSET_B.INI' will be recovered to the same drive where deleted data located.
 06:42:08 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:42:08 Recovery started for SWSET_B.INI [1.981 KB]
 06:42:08 Recovery completed for SWSET_B.INI
 06:42:08 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:42:40 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:42:40 WRNG File 'RStoneLog2.ini' will be recovered to the same drive where deleted data located.
 06:42:40 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:42:40 Recovery started for RStoneLog2.ini [  268 B ]
 06:42:40 Recovery completed for RStoneLog2.ini
 06:42:40 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:43:17 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:43:17 WRNG File 'RStoneLog.ini' will be recovered to the same drive where deleted data located.
 06:43:17 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:43:17 Recovery started for RStoneLog.ini [  209 B ]
 06:43:17 Recovery completed for RStoneLog.ini
 06:43:17 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:44:04 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:44:04 WRNG File 'PBARINFO.INI' will be recovered to the same drive where deleted data located.
 06:44:04 DBG Recovering from 'C:\SYSTEM.SAV\Util\'
 06:44:04 Recovery started for PBARINFO.INI [   47 B ]
 06:44:04 Recovery completed for PBARINFO.INI
 06:44:04 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:44:39 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:44:39 WRNG File 'HideCMD.vbs' will be recovered to the same drive where deleted data located.
 06:44:39 DBG Recovering from 'C:\SYSTEM.SAV\Util\TDC\'
 06:44:39 Recovery started for HideCMD.vbs [  381 B ]
 06:44:39 Recovery completed for HideCMD.vbs
 06:44:39 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:45:42 DBG Search in:                                       C:\...\$R0B5N43;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                             No
               Case sensitive search:                                          No
               Search among deleted only:                                     Yes
               Search among existing only:                                     No
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:45:42 Search started on C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\$R0B5N43
 06:45:42 Search completed [found 0 items]
 06:45:42 OK Search has been completed. [Total 0 items found].
              Review search results and repeat Search with another options if necessary.
 06:45:43 OK Filtering has been completed. Found 0 items.
 06:46:00 DBG Search in:                                       C:\...\$R0B5N43;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                            Yes
               Case sensitive search:                                         Yes
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:46:00 Search started on C:\$RECYCLE.BIN\S-1-5-21-2426286085-332982260-2691753013-1000\$R0B5N43
 06:46:01 Search completed [found 20 items]
 06:46:01 OK Search has been completed. [Total 20 items found].
              Review search results and repeat Search with another options if necessary.
 06:46:02 Applying file filter:
                 All files; Recursive;
 06:46:02 OK Filtering has been completed. Found 20 items.
 06:46:49 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:46:49 REG Unable to recover file 'CryptRSA.efi' due to size limit (64.0 KB) for the Unregistered Version.
 06:46:51 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:46:51 OK Execution has been completed with errors
 06:47:04 DBG Search in:                                   C:\...\$RECYCLE.BIN;
              General Search Criteria:
               Looking for:                                                  *.*;
               Recursive search in subdirectories:                            Yes
               Case sensitive search:                                         Yes
               Search among deleted only:                                      No
               Search among existing only:                                    Yes
              File Date Criteria:
               Date Type:                                                Modified
               Date Range:                        Infinite small - Infinite large
              File Size Criteria:                                          Any size
              File Attributes Criteria:                          Any file attribute
 06:47:04 Search started on C:\$RECYCLE.BIN
 06:47:04 Search completed [found 303 items]
 06:47:04 OK Search has been completed. [Total 303 items found].
              Review search results and repeat Search with another options if necessary.
 06:47:06 Applying file filter:
                 All files; Recursive;
 06:47:06 OK Filtering has been completed. Found 304 items.
 06:48:23 DBG Application Persistence
               Action:                                            Save Session
               File Name:   C:\Users\Owner\dsa_Undelete Session 2011-07-17_06481.usf
               Subject:                                    Computer [ (LOCAL) ]
 06:48:23 Saving session data...
 06:48:23 Saving application log...
 06:48:23 Saving hardware info...
 06:48:23 ERR Unable to save Disk Scan results on a same disk.
              Operation terminated.
 06:48:27 ERR Unable to save Disk Scan results on a same disk.
              Operation terminated.
 06:48:27 OK Execution has been completed with errors
 06:48:54 DBG Application Persistence
               Action:                                            Save Session
               File Name:         D:\dsa_Undelete Session 2011-07-17_06483.usf
               Subject:                                    Computer [ (LOCAL) ]
 06:48:54 Saving session data...
 06:48:54 Saving application log...
 06:48:54 Saving hardware info...
 06:48:54 Saving C: Scan Result to 'D:\C 2011-07-17_06484.scaninfo'.
 06:51:16 OK Application Session file has been saved successfully as 'D:\dsa_Undelete Session 2011-07-17_06483.usf'.
 06:55:40 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:55:40 WRNG File 'AEConfig.xml' will be recovered to the same drive where deleted data located.
 06:55:40 DBG Recovering from 'C:\ProgramData\AE\'
 06:55:40 Recovery started for AEConfig.xml [12.96 KB]
 06:55:40 Recovery completed for AEConfig.xml
 06:55:40 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:56:09 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:56:09 WRNG File 'AEConfigBackup.xml' will be recovered to the same drive where deleted data located.
 06:56:09 DBG Recovering from 'C:\ProgramData\AE\'
 06:56:09 Recovery started for AEConfigBackup.xml [12.96 KB]
 06:56:10 Recovery completed for AEConfigBackup.xml
 06:56:10 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:56:56 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:56:56 REG Unable to recover file 'HpBiosUpdate32.txt' due to size limit (64.0 KB) for the Unregistered Version.
 06:56:58 OK Recovery process completed.
              Recovered 0 item(s) total.
 06:56:58 OK Execution has been completed with errors
 06:57:51 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:57:51 WRNG File 'ksp.ini' will be recovered to the same drive where deleted data located.
 06:57:51 DBG Recovering from 'C:\ProgramData\KSP\'
 06:57:51 Recovery started for ksp.ini [   46 B ]
 06:57:51 Recovery completed for ksp.ini
 06:57:51 OK Recovery process completed.
              Recovered 1 item(s) total.
 06:59:18 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 06:59:18 WRNG File 'config.txt' will be recovered to the same drive where deleted data located.
 06:59:18 DBG Recovering from 'C:\Program Files\'
 06:59:18 Recovery started for config.txt [   54 B ]
 06:59:18 Recovery completed for config.txt
 06:59:18 OK Recovery process completed.
              Recovered 1 item(s) total.
 07:00:23 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 07:00:23 WRNG File 'MountPointManagerRemoteDatabase' will be recovered to the same drive where deleted data located.
 07:00:23 DBG Recovering from 'C:\System Volume Information\'
 07:00:23 Recovery started for MountPointManagerRemoteDatabase [  248 B ]
 07:00:23 Recovery completed for MountPointManagerRemoteDatabase
 07:00:23 OK Recovery process completed.
              Recovered 1 item(s) total.
 07:01:01 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 07:01:01 REG Unable to recover file 'Syscache.hve.LOG1' due to size limit (64.0 KB) for the Unregistered Version.
 07:01:03 OK Recovery process completed.
              Recovered 0 item(s) total.
 07:01:03 OK Execution has been completed with errors
 07:02:38 Setting check state for Files and Folders...
 07:03:05 Setting check state for Files and Folders...
 07:04:02 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 07:04:02 WRNG File 'RecentFileCache.bcf' will be recovered to the same drive where deleted data located.
 07:04:02 DBG Recovering from 'C:\Windows\AppCompat\Programs\'
 07:04:02 Recovery started for RecentFileCache.bcf [21.66 KB]
 07:04:02 Recovery completed for RecentFileCache.bcf
 07:04:02 OK Recovery process completed.
              Recovered 1 item(s) total.
 07:04:49 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\&&^^%%%%%%%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           1
 07:04:49 WRNG File '110707~224931~0050.txt' will be recovered to the same drive where deleted data located.
 07:04:49 DBG Recovering from 'C:\Windows\FileMap-by-BB\'
 07:04:49 Recovery started for 110707~224931~0050.txt [  870 B ]
 07:04:49 Recovery completed for 110707~224931~0050.txt
 07:04:49 OK Recovery process completed.
              Recovered 1 item(s) total.
 07:05:45 Setting check state for Files and Folders...
 07:05:46 Setting check state for Files and Folders...
 07:06:39 DBG Application closed normally.


-------------------------------------------------------------------------------- Session starts at: 04:30:19, 18/Jul/2011
 04:30:19 DBG Application starts
 04:30:19 Registration Key installation failed for '' ()
 04:30:19 DBG no user key retrieved
 04:30:19 User is member of Administrators group.
 04:30:19 Application 'Active@ UNDELETE 7.4 [DEMO]' starts. Version: 7.4.014
 04:30:19 DBG Low Resolution
 04:30:28 Local system uses a local area network to connect to the Internet. Local system has RAS installed.
 04:30:28 OK Internet Available. On-Line help and Software Update can be used
 04:30:28 Starting initialization...
 04:30:28 Opening recovery kernel ...
 04:30:29 Analyzing devices ...
 04:30:29 Analyzing device Hard Disk 0 (C:,D:,T:)
 04:30:29 Analyzing volume Daniel Mounted
 04:30:29 Analyzing volume Local Disk (C:)
 04:30:30 Analyzing volume RECOVERY (D:)
 04:30:30 Analyzing volume MOUNTDANIEL (T:)
 04:30:30 Analyzing device CDRom Drive 0 (E:)
 04:30:30 ... opening recovery kernel complete.
 04:30:30 Reading Data Storage Info...
 04:30:30 DBG System Information:
                Operating System:                                  Windows 7
                Build:                                                  7600
                Version (Service Pack):                         (Build 7600)
                Number of Processors:                                      2
                Processor type:                                          x86
 04:30:30 ... reading Data Storage Info complete.
 04:30:30 DBG Initialize application modules...
 04:30:31 DBG ... done
 04:30:31 OK Initialization complete.
 04:30:33 OK Ready
 04:32:16 DBG Application Persistence
               Action:                                            Load Session
               File Name:   C:\Users\Owner\AppData\UNDAN2Undelete Session 2011-07-12_12244.usf
               Subject:                                    Computer [ (LOCAL) ]
 04:32:17 Loading Session info 'C:\Users\Owner\AppData\UNDAN2Undelete Session 2011-07-12_12244.usf'...
 04:32:17 Disk Scan has been loaded successfully as 'C:\Users\Owner\AppData\Disk Scan 2011-07-12_12247.scan'.
 04:32:17 Loading detected drives info...
 04:32:17 Loading Scan Results for drive Daniel Mounted 0 (2) [Excellent] ...
 04:32:17 Populating Logical Drive 'Daniel Mounted 0 (2) [Excellent]' content...
 04:32:17 OK Application Session info has been loaded successfully from 'C:\Users\Owner\AppData\UNDAN2Undelete Session 2011-07-12_12244.usf'.
 04:33:33 Applying file filter.
                 Deleted files only; Recursive;
 04:33:34 OK Filtering has been completed. Found 0 items.
 04:34:06 DBG Logical Drive Scan options:
               Drive to scan:                                            D:;
               Scan type:                                                Low
               Ignore R/W errors:                                        Yes
               Show results In Document View:                            Yes
               Autosave scan results:                                     No
               Low Level scan:                                            No
 04:34:06 Scanning...
 04:34:06 Analyzing volume RECOVERY (D:)
 04:34:06 Drive scan started on RECOVERY (D:)
 04:34:07 Drive scan completed
 04:34:07 DBG Drive Scan returns 0
 04:34:07 Analyzing Scan results...
 04:34:07 Populating Logical Drive 'RECOVERY (D:)' content...
 04:34:07 OK Logical Drive scan has been completed.
              You can save the Scan Results to avoid re-scanning later. See help for details.
 04:34:09 Applying file filter.
                 Deleted files only; Recursive;
 04:34:10 OK Filtering has been completed. Found 0 items.
 04:34:23 Applying file filter.
                 All files; Recursive;
 04:34:23 OK Filtering has been completed. Found 1231 items.
 04:36:10 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\$%dan$%'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                           4
 04:36:10 DBG Recovering from 'D:\Recovery\system32\Recovery\'
 04:36:10 Recovery started for ReAgent.xml [1.060 KB]
 04:36:10 Recovery completed for ReAgent.xml
 04:36:11 DBG Recovering from 'D:\system.sav\logs\'
 04:36:11 Recovery started for rmaftobe.log [  559 B ]
 04:36:11 Recovery completed for rmaftobe.log
 04:36:11 Recovery started for rmevents.log [21.43 KB]
 04:36:11 Recovery completed for rmevents.log
 04:36:11 DBG Recovering from 'D:\'
 04:36:11 Recovery started for HP_WSD.dat [    8 B ]
 04:36:11 Recovery completed for HP_WSD.dat
 04:36:11 OK Recovery process completed.
              Recovered 4 item(s) total.
 04:40:43 DBG Logical Drive Scan options:
               Drive to scan:                                            C:;
               Scan type:                                                Low
               Ignore R/W errors:                                        Yes
               Show results In Document View:                            Yes
               Autosave scan results:                                     No
               Low Level scan:                                            No
 04:40:43 Scanning...
 04:40:43 Analyzing volume Local Disk (C:)
 04:40:44 Drive scan started on Local Disk (C:)
 04:41:17 Drive scan completed
 04:41:17 DBG Drive Scan returns 0
 04:41:17 Analyzing Scan results...
 04:41:17 Populating Logical Drive 'Local Disk (C:)' content...
 04:42:15 OK Logical Drive scan has been completed.
              You can save the Scan Results to avoid re-scanning later. See help for details.
 04:42:25 Applying file filter.
                 All files; Recursive;
 04:42:34 OK Filtering has been completed. Found 388066 items.
 04:43:29 Applying file filter.
                 All files; Recursive;
 04:43:41 OK Filtering has been completed. Found 388066 items.
 04:52:41 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\@$DANIEL$@'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          36
 04:52:41 WRNG File 'netzero-dia00013hpd15.odf15' will be recovered to the same drive where deleted data located.
 04:52:42 DBG Recovering from 'C:\Users\Owner\Desktop\ProgramData~\Hewlett-Packard\HP Setup\Easy Internet Signup\offers\en_us\offer_definitions\'
 04:52:42 Recovery started for netzero-dia00013hpd15.odf15 [  549 B ]
 04:52:42 Recovery completed for netzero-dia00013hpd15.odf15
 04:52:42 WRNG File 'netzerodia00018hpd08.odf8' will be recovered to the same drive where deleted data located.
 04:52:42 Recovery started for netzerodia00018hpd08.odf8 [  522 B ]
 04:52:42 Recovery completed for netzerodia00018hpd08.odf8
 04:52:42 WRNG File 'app.conf' will be recovered to the same drive where deleted data located.
 04:52:42 DBG Recovering from 'C:\Users\Owner\Desktop\ProgramData~\HP Photo Creations\'
 04:52:42 Recovery started for app.conf [   13 B ]
 04:52:42 Recovery completed for app.conf
 04:52:42 WRNG File 'log.dmb' will be recovered to the same drive where deleted data located.
 04:52:42 DBG Recovering from 'C:\Users\Owner\Desktop\USB Disk Security~\'
 04:52:42 Recovery started for log.dmb [29.20 KB]
 04:52:42 Recovery completed for log.dmb
 04:52:42 WRNG File 'log1.dmb' will be recovered to the same drive where deleted data located.
 04:52:42 Recovery started for log1.dmb [27.57 KB]
 04:52:42 Recovery completed for log1.dmb
 04:52:42 WRNG File 'log2.dmb' will be recovered to the same drive where deleted data located.
 04:52:42 Recovery started for log2.dmb [56.33 KB]
 04:52:42 Recovery completed for log2.dmb
 04:52:42 WRNG File 'log3.dmb' will be recovered to the same drive where deleted data located.
 04:52:42 Recovery started for log3.dmb [56.44 KB]
 04:52:42 Recovery completed for log3.dmb
 04:52:42 WRNG File 'info.bom' will be recovered to the same drive where deleted data located.
 04:52:42 DBG Recovering from 'C:\Users\Owner\Desktop\SYSTEM.SAV~\'
 04:52:42 Recovery started for info.bom [21.14 KB]
 04:52:42 Recovery completed for info.bom
 04:52:42 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:45 WRNG File 'New.rov' will be recovered to the same drive where deleted data located.
 04:52:45 DBG Recovering from 'C:\Program Files\Broadcom\Projects\4\'
 04:52:45 Recovery started for New.rov [  512 B ]
 04:52:45 Recovery completed for New.rov
 04:52:45 WRNG File 'MpIndex.rov' will be recovered to the same drive where deleted data located.
 04:52:45 Recovery started for MpIndex.rov [  512 B ]
 04:52:45 Recovery completed for MpIndex.rov
 04:52:45 WRNG File 'Mail.pat' will be recovered to the same drive where deleted data located.
 04:52:45 DBG Recovering from 'C:\Users\Owner\Documents\'
 04:52:45 Recovery started for Mail.pat [16.00 KB]
 04:52:45 Recovery completed for Mail.pat
 04:52:45 WRNG File 'Current Tabs' will be recovered to the same drive where deleted data located.
 04:52:45 DBG Recovering from 'C:\Users\Owner\Documents\Local\Comodo\Dragon\User Data\Default\'
 04:52:45 Recovery started for Current Tabs [  266 B ]
 04:52:45 Recovery completed for Current Tabs
 04:52:45 WRNG File 'Cookies' will be recovered to the same drive where deleted data located.
 04:52:45 Recovery started for Cookies [6.000 KB]
 04:52:45 Recovery completed for Cookies
 04:52:45 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:46 WRNG File 'Top Sites' will be recovered to the same drive where deleted data located.
 04:52:46 Recovery started for Top Sites [20.00 KB]
 04:52:46 Recovery completed for Top Sites
 04:52:46 WRNG File 'Preferences' will be recovered to the same drive where deleted data located.
 04:52:46 Recovery started for Preferences [6.075 KB]
 04:52:46 Recovery completed for Preferences
 04:52:46 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:47 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:48 WRNG File 'Archived History' will be recovered to the same drive where deleted data located.
 04:52:48 DBG Recovering from 'C:\Users\Owner\Documents\Local\Google\Chrome\User Data\Default\'
 04:52:48 Recovery started for Archived History [52.00 KB]
 04:52:48 Recovery completed for Archived History
 04:52:48 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:48 WRNG File 'Login Data' will be recovered to the same drive where deleted data located.
 04:52:48 Recovery started for Login Data [28.00 KB]
 04:52:49 Recovery completed for Login Data
 04:52:49 WRNG File 'login.html.tmp' will be recovered to the same drive where deleted data located.
 04:52:49 DBG Recovering from 'C:\Users\Owner\~i1i#\~^dkcvi\My Web Sites\Ice Mirror\www.ice.gov\exec\training\'
 04:52:49 Recovery started for login.html.tmp [22.73 KB]
 04:52:49 Recovery completed for login.html.tmp
 04:52:49 WRNG File 'SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf' will be recovered to the same drive where deleted data located.
 04:52:49 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Contentword\'
 04:52:49 Recovery started for SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf [20.62 KB]
 04:52:49 Recovery completed for SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
 04:52:49 WRNG File 'SEARCHFILTERHOST.EXE-77482212.pf' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for SEARCHFILTERHOST.EXE-77482212.pf [18.14 KB]
 04:52:49 Recovery completed for SEARCHFILTERHOST.EXE-77482212.pf
 04:52:49 WRNG File 'CREDHIST' will be recovered to the same drive where deleted data located.
 04:52:49 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\rcyle\Microsoftd\Protect\'
 04:52:49 Recovery started for CREDHIST [  168 B ]
 04:52:49 Recovery completed for CREDHIST
 04:52:49 WRNG File 'SYNCHIST' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for SYNCHIST [   76 B ]
 04:52:49 Recovery completed for SYNCHIST
 04:52:49 WRNG File '1718' will be recovered to the same drive where deleted data located.
 04:52:49 DBG Recovering from 'C:\ProgramData\Kaspersky Lab\AVP11\SysWHist\amlogs\'
 04:52:49 Recovery started for 1718 [16.00 KB]
 04:52:49 Recovery completed for 1718
 04:52:49 WRNG File '1754' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for 1754 [  503 B ]
 04:52:49 Recovery completed for 1754
 04:52:49 WRNG File '1845' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for 1845 [  643 B ]
 04:52:49 Recovery completed for 1845
 04:52:49 WRNG File '1847' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for 1847 [  589 B ]
 04:52:49 Recovery completed for 1847
 04:52:49 WRNG File '1848' will be recovered to the same drive where deleted data located.
 04:52:49 Recovery started for 1848 [  589 B ]
 04:52:49 Recovery completed for 1848
 04:52:49 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:51 WRNG File '1860' will be recovered to the same drive where deleted data located.
 04:52:51 Recovery started for 1860 [  482 B ]
 04:52:51 Recovery completed for 1860
 04:52:51 WRNG File 'bookmarks-2011-07-18.json' will be recovered to the same drive where deleted data located.
 04:52:51 DBG Recovering from 'C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\razm4x68.default\bookmarkbackups\'
 04:52:51 Recovery started for bookmarks-2011-07-18.json [3.770 KB]
 04:52:51 Recovery completed for bookmarks-2011-07-18.json
 04:52:51 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 04:52:52 OK Recovery process completed.
              Recovered 29 item(s) total.
 04:52:52 OK Execution has been completed with errors
 05:13:16 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\(%~^)'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          46
 05:13:16 WRNG File '{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log' will be recovered to the same drive where deleted data located.
 05:13:16 DBG Recovering from 'C:\ProgramData\'
 05:13:16 Recovery started for {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log [  109 B ]
 05:13:16 Recovery completed for {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
 05:13:16 WRNG File 'CardReader.log' will be recovered to the same drive where deleted data located.
 05:13:16 DBG Recovering from 'C:\SYSTEM.SAV\Logs\'
 05:13:16 Recovery started for CardReader.log [  207 B ]
 05:13:16 Recovery completed for CardReader.log
 05:13:16 WRNG File 'Network.log' will be recovered to the same drive where deleted data located.
 05:13:16 Recovery started for Network.log [  217 B ]
 05:13:16 Recovery completed for Network.log
 05:13:16 WRNG File '{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log' will be recovered to the same drive where deleted data located.
 05:13:16 DBG Recovering from 'C:\ProgramData\'
 05:13:16 Recovery started for {4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log [   32 B ]
 05:13:16 Recovery completed for {4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
 05:13:16 WRNG File 'REGDEV_BB.LOG' will be recovered to the same drive where deleted data located.
 05:13:16 DBG Recovering from 'C:\SYSTEM.SAV\Logs\'
 05:13:16 Recovery started for REGDEV_BB.LOG [   41 B ]
 05:13:16 Recovery completed for REGDEV_BB.LOG
 05:13:16 WRNG File 'BurnBootMerge.log' will be recovered to the same drive where deleted data located.
 05:13:16 Recovery started for BurnBootMerge.log [28.12 KB]
 05:13:16 Recovery completed for BurnBootMerge.log
 05:13:16 WRNG File 'MEMDUMP_BBV.log' will be recovered to the same drive where deleted data located.
 05:13:16 Recovery started for MEMDUMP_BBV.log [   29 B ]
 05:13:16 Recovery completed for MEMDUMP_BBV.log
 05:13:16 WRNG File 'preuser.log' will be recovered to the same drive where deleted data located.
 05:13:16 Recovery started for preuser.log [  149 B ]
 05:13:16 Recovery completed for preuser.log
 05:13:16 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:18 WRNG File 'SysinfoPre.LOG' will be recovered to the same drive where deleted data located.
 05:13:18 DBG Recovering from 'C:\Users\Owner\Desktop\Logs~\'
 05:13:18 Recovery started for SysinfoPre.LOG [37.25 KB]
 05:13:18 Recovery completed for SysinfoPre.LOG
 05:13:18 WRNG File 'SysIDOk.log' will be recovered to the same drive where deleted data located.
 05:13:18 Recovery started for SysIDOk.log [  274 B ]
 05:13:18 Recovery completed for SysIDOk.log
 05:13:18 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:18 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:19 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:19 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:20 WRNG File 'hts-log.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\My Web Sites\USA.gov\'
 05:13:20 Recovery started for hts-log.txt [8.556 KB]
 05:13:20 Recovery completed for hts-log.txt
 05:13:20 WRNG File 'cookies.txt' will be recovered to the same drive where deleted data located.
 05:13:20 Recovery started for cookies.txt [  406 B ]
 05:13:20 Recovery completed for cookies.txt
 05:13:20 WRNG File 'systemvolumeinfor.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:13:20 Recovery started for systemvolumeinfor.txt [   80 B ]
 05:13:20 Recovery completed for systemvolumeinfor.txt
 05:13:20 WRNG File 'BlackBox.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\log data\'
 05:13:20 Recovery started for BlackBox.txt [  523 B ]
 05:13:20 Recovery completed for BlackBox.txt
 05:13:20 WRNG File 'sysdrvsysinfod.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:13:20 Recovery started for sysdrvsysinfod.txt [60.83 KB]
 05:13:20 Recovery completed for sysdrvsysinfod.txt
 05:13:20 WRNG File 'SysInfostrg_disks.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\Users\Owner\)&^~r\1.0\HP&~~@^\Data\'
 05:13:20 Recovery started for SysInfostrg_disks.txt [2.029 KB]
 05:13:20 Recovery completed for SysInfostrg_disks.txt
 05:13:20 WRNG File 'SysInfoHrdwre_directmemoryaccess.txt' will be recovered to the same drive where deleted data located.
 05:13:20 Recovery started for SysInfoHrdwre_directmemoryaccess.txt [  324 B ]
 05:13:20 Recovery completed for SysInfoHrdwre_directmemoryaccess.txt
 05:13:20 WRNG File 'root.txt' will be recovered to the same drive where deleted data located.
 05:13:20 DBG Recovering from 'C:\Users\Owner\drvq\x86\'
 05:13:20 Recovery started for root.txt [   83 B ]
 05:13:20 Recovery completed for root.txt
 05:13:20 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:21 WRNG File 'SysInfoEnvivariables.txt' will be recovered to the same drive where deleted data located.
 05:13:21 DBG Recovering from 'C:\Users\Owner\RegBack\Data\'
 05:13:21 Recovery started for SysInfoEnvivariables.txt [3.740 KB]
 05:13:21 Recovery completed for SysInfoEnvivariables.txt
 05:13:21 WRNG File 'SysInfoHrdwre_irqs.txt' will be recovered to the same drive where deleted data located.
 05:13:21 Recovery started for SysInfoHrdwre_irqs.txt [11.47 KB]
 05:13:21 Recovery completed for SysInfoHrdwre_irqs.txt
 05:13:21 WRNG File 'SysInfoHrdwre_Conflictsharing.txt' will be recovered to the same drive where deleted data located.
 05:13:21 Recovery started for SysInfoHrdwre_Conflictsharing.txt [4.102 KB]
 05:13:21 Recovery completed for SysInfoHrdwre_Conflictsharing.txt
 05:13:21 WRNG File 'volshadow.txt' will be recovered to the same drive where deleted data located.
 05:13:21 DBG Recovering from 'C:\Users\Owner\#~^&)(\'
 05:13:21 Recovery started for volshadow.txt [5.215 KB]
 05:13:21 Recovery completed for volshadow.txt
 05:13:21 WRNG File 'voltracking.log' will be recovered to the same drive where deleted data located.
 05:13:21 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\'
 05:13:21 Recovery started for voltracking.log [20.00 KB]
 05:13:21 Recovery completed for voltracking.log
 05:13:21 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:22 WRNG File 'root.txt' will be recovered to the same drive where deleted data located.
 05:13:22 DBG Recovering from 'C:\Users\Owner\~CDVTKDBND\x86~\'
 05:13:22 Recovery started for root.txt [   83 B ]
 05:13:22 Recovery completed for root.txt
 05:13:22 WRNG File 'systemdriverinfo.txt' will be recovered to the same drive where deleted data located.
 05:13:22 DBG Recovering from 'C:\Users\Owner\~^~Documents\Documents\'
 05:13:22 Recovery started for systemdriverinfo.txt [1.676 KB]
 05:13:22 Recovery completed for systemdriverinfo.txt
 05:13:22 WRNG File 'SysInfoHrdwre_inputoutput.txt' will be recovered to the same drive where deleted data located.
 05:13:22 DBG Recovering from 'C:\Users\Owner\~i1i#\HP&~~@^\Data\'
 05:13:22 Recovery started for SysInfoHrdwre_inputoutput.txt [4.969 KB]
 05:13:22 Recovery completed for SysInfoHrdwre_inputoutput.txt
 05:13:22 WRNG File 'SysInfoSrvcs.txt' will be recovered to the same drive where deleted data located.
 05:13:22 Recovery started for SysInfoSrvcs.txt [48.57 KB]
 05:13:22 Recovery completed for SysInfoSrvcs.txt
 05:13:22 WRNG File 'sysd~.txt' will be recovered to the same drive where deleted data located.
 05:13:22 DBG Recovering from 'C:\Users\Owner\'
 05:13:22 Recovery started for sysd~.txt [60.71 KB]
 05:13:23 Recovery completed for sysd~.txt
 05:13:23 WRNG File 'SysDrctry110707~224931~2258.txt' will be recovered to the same drive where deleted data located.
 05:13:23 DBG Recovering from 'C:\Users\Owner\%$DANIEL%$\Boot-\'
 05:13:23 Recovery started for SysDrctry110707~224931~2258.txt [31.28 KB]
 05:13:23 Recovery completed for SysDrctry110707~224931~2258.txt
 05:13:23 WRNG File 'RootDirectory_FileCount110707~224931~0010.txt' will be recovered to the same drive where deleted data located.
 05:13:23 DBG Recovering from 'C:\Users\Owner\'
 05:13:23 Recovery started for RootDirectory_FileCount110707~224931~0010.txt [  281 B ]
 05:13:23 Recovery completed for RootDirectory_FileCount110707~224931~0010.txt
 05:13:23 WRNG File 'DNS RESET.REG' will be recovered to the same drive where deleted data located.
 05:13:23 DBG Recovering from 'C:\Users\Owner\%$DANIEL%$\MRI5.0.4\WINDOWS TOOLS\WINDOWS FIXES\NETWORKING\'
 05:13:23 Recovery started for DNS RESET.REG [  578 B ]
 05:13:23 Recovery completed for DNS RESET.REG
 05:13:23 WRNG File 'secdbase_userights.txt' will be recovered to the same drive where deleted data located.
 05:13:23 DBG Recovering from 'C:\Users\Owner\%%##%%\'
 05:13:23 Recovery started for secdbase_userights.txt [2.473 KB]
 05:13:23 Recovery completed for secdbase_userights.txt
 05:13:23 WRNG File 'secounted.txt' will be recovered to the same drive where deleted data located.
 05:13:23 Recovery started for secounted.txt [  146 B ]
 05:13:23 Recovery completed for secounted.txt
 05:13:23 WRNG File 'searcheverywhere.txt' will be recovered to the same drive where deleted data located.
 05:13:23 Recovery started for searcheverywhere.txt [   69 B ]
 05:13:23 Recovery completed for searcheverywhere.txt
 05:13:23 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:24 WRNG File 'secedit.log' will be recovered to the same drive where deleted data located.
 05:13:24 DBG Recovering from 'C:\Users\Owner\%da32\Security\Logs\'
 05:13:24 Recovery started for secedit.log [60.75 KB]
 05:13:24 Recovery completed for secedit.log
 05:13:24 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:24 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:25 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:13:25 OK Recovery process completed.
              Recovered 35 item(s) total.
 05:13:25 OK Execution has been completed with errors
 05:16:36 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\(%~^)'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          11
 05:16:36 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:38 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:38 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:38 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:39 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:39 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:39 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:40 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:40 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:40 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:40 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:16:40 OK Recovery process completed.
              Recovered 0 item(s) total.
 05:16:40 OK Execution has been completed with errors
 05:26:30 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\%da32'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          12
 05:26:30 REG Unable to recover file '09-10_FAFSA-D_Abrahamian.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:26:34 OK Recovery process completed.
              Recovered 0 item(s) total.
 05:26:34 OK Execution has been completed with errors
 05:27:19 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\%da32'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          13
 05:27:19 REG Unable to recover file '09-10_FAFSA-D_Abrahamian.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:21 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:23 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:24 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:25 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:26 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:26 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:27 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:28 WRNG File 'Daniel Abrahamian's Resume.rtf.pfx' will be recovered to the same drive where deleted data located.
 05:27:28 DBG Recovering from 'C:\Users\Owner\Documents\'
 05:27:28 Recovery started for Daniel Abrahamian's Resume.rtf.pfx [1.766 KB]
 05:27:28 Recovery completed for Daniel Abrahamian's Resume.rtf.pfx
 05:27:28 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:29 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:30 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:31 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:27:31 OK Recovery process completed.
              Recovered 1 item(s) total.
 05:27:31 OK Execution has been completed with errors
 05:29:53 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\%da32'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          23
 05:29:53 REG Unable to recover file 'M1033DSK.CRT' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:55 WRNG File 'Thawte Root Certificate.cer' will be recovered to the same drive where deleted data located.
 05:29:55 DBG Recovering from 'C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\'
 05:29:55 Recovery started for Thawte Root Certificate.cer [  677 B ]
 05:29:56 Recovery completed for Thawte Root Certificate.cer
 05:29:56 WRNG File 'Adobe Root Certificate.cer' will be recovered to the same drive where deleted data located.
 05:29:56 Recovery started for Adobe Root Certificate.cer [1.161 KB]
 05:29:56 Recovery completed for Adobe Root Certificate.cer
 05:29:56 WRNG File 'Owner.contact' will be recovered to the same drive where deleted data located.
 05:29:56 DBG Recovering from 'C:\Users\Owner\Contacts\'
 05:29:56 Recovery started for Owner.contact [43.55 KB]
 05:29:56 Recovery completed for Owner.contact
 05:29:56 REG Unable to recover file '09-10_FAFSA-D_Abrahamian.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:56 WRNG File 'RTC.der' will be recovered to the same drive where deleted data located.
 05:29:56 DBG Recovering from 'C:\Program Files (x86)\Adobe\Reader 10.0\Reader\'
 05:29:56 Recovery started for RTC.der [1.072 KB]
 05:29:56 Recovery completed for RTC.der
 05:29:56 WRNG File 'RTC.der' will be recovered to the same drive where deleted data located.
 05:29:56 DBG Recovering from 'C:\Users\Owner\$$DANIEL$$\AE\Program Files (x86)\Adobe\Reader 10.0\Reader\'
 05:29:56 Recovery started for RTC.der [1.072 KB]
 05:29:57 Recovery completed for RTC.der
 05:29:57 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:57 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:58 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:58 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:58 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:58 WRNG File 'Desastres.shtm' will be recovered to the same drive where deleted data located.
 05:29:58 DBG Recovering from 'C:\My Web Sites\USA.gov\www.usa.gov\gobiernousa\Temas\'
 05:29:58 Recovery started for Desastres.shtm [21.28 KB]
 05:29:58 Recovery completed for Desastres.shtm
 05:29:58 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:59 WRNG File 'sdcs.cer' will be recovered to the same drive where deleted data located.
 05:29:59 DBG Recovering from 'C:\Users\Owner\Documents\Fax\sdcs\'
 05:29:59 Recovery started for sdcs.cer [1.057 KB]
 05:29:59 Recovery completed for sdcs.cer
 05:29:59 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:59 WRNG File 'sdcs.cer' will be recovered to the same drive where deleted data located.
 05:29:59 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Fax\sdcs\'
 05:29:59 Recovery started for sdcs.cer [1.057 KB]
 05:29:59 Recovery completed for sdcs.cer
 05:29:59 WRNG File 'RTC.der' will be recovered to the same drive where deleted data located.
 05:29:59 DBG Recovering from 'C:\Users\Owner\%$DANIEL%$\Reader\'
 05:29:59 Recovery started for RTC.der [1.072 KB]
 05:29:59 Recovery completed for RTC.der
 05:29:59 WRNG File 'RTC.der' will be recovered to the same drive where deleted data located.
 05:29:59 DBG Recovering from 'C:\Users\Owner\$$DANIEL$$\AE\Users\Owner\%$DANIEL%$\Reader\'
 05:29:59 Recovery started for RTC.der [1.072 KB]
 05:29:59 Recovery completed for RTC.der
 05:29:59 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:29:59 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:30:00 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:30:00 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:30:00 OK Recovery process completed.
              Recovered 10 item(s) total.
 05:30:00 OK Execution has been completed with errors
 05:31:19 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\%da32'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          20
 05:31:19 REG Unable to recover file 'M1033DSK.CRT' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:20 WRNG File 'Thawte Root Certificate.cer' will be recovered to the same drive where deleted data located.
 05:31:20 DBG Recovering from 'C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\'
 05:31:20 Recovery started for Thawte Root Certificate.cer [  677 B ]
 05:31:20 Recovery completed for Thawte Root Certificate.cer
 05:31:20 WRNG File 'Adobe Root Certificate.cer' will be recovered to the same drive where deleted data located.
 05:31:20 Recovery started for Adobe Root Certificate.cer [1.161 KB]
 05:31:21 Recovery completed for Adobe Root Certificate.cer
 05:31:21 REG Unable to recover file '09-10_FAFSA-D_Abrahamian.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:22 WRNG File 'pmd.cer' will be recovered to the same drive where deleted data located.
 05:31:22 DBG Recovering from 'C:\Program Files (x86)\Adobe\Reader 10.0\Reader\'
 05:31:22 Recovery started for pmd.cer [  420 B ]
 05:31:22 Recovery completed for pmd.cer
 05:31:22 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:23 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:24 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:24 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:24 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:24 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:25 WRNG File 'sdcs.cer' will be recovered to the same drive where deleted data located.
 05:31:25 DBG Recovering from 'C:\Users\Owner\Documents\Fax\sdcs\'
 05:31:25 Recovery started for sdcs.cer [1.057 KB]
 05:31:25 Recovery completed for sdcs.cer
 05:31:25 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:31:26 WRNG Recovery terminated by user!
 05:31:26 OK Execution has been completed with errors
 05:32:25 DBG Recovering selected Files and Folders
               Destination path: ' C:\Users\Owner\%da32'
               Allow recovering to the same drive:                            Yes
               Create original file(s) path:                                  Yes
               Overwrite mode:                          Generate unique file name
               File naming options:                       Use original file names
              Recover files locally:                                  Yes
               Invalid file name symbols will be replaced with:                 _
               Number of Files or Folders to recover:                          18
 05:32:25 REG Unable to recover file 'M1033DSK.CRT' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:27 REG Unable to recover file '09-10_FAFSA-D_Abrahamian.pdf' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:27 REG Unable to recover file 'SysInfo.US' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:28 REG Unable to recover file 'Visited Links' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:28 REG Unable to recover file 'History' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:28 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:28 REG Unable to recover file 'Web Data' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:28 REG Unable to recover file 'Sysinfo.log' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:29 WRNG File '-hjz0zid.sam' will be recovered to the same drive where deleted data located.
 05:32:29 DBG Recovering from 'C:\Users\Owner\~^@~~()\x86~\setup\sql_engine_core_shared_msi\pfiles\sqlservr\100\dts\upgrdmap\'
 05:32:29 Recovery started for -hjz0zid.sam [1.182 KB]
 05:32:29 Recovery completed for -hjz0zid.sam
 05:32:29 REG Unable to recover file 'SYSINFO.LOG' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:29 WRNG File 'sdcs.cer' will be recovered to the same drive where deleted data located.
 05:32:29 DBG Recovering from 'C:\Users\Owner\~_mydcmnts\DTMPFILES\Documents\Fax\sdcs\'
 05:32:29 Recovery started for sdcs.cer [1.057 KB]
 05:32:29 Recovery completed for sdcs.cer
 05:32:29 WRNG File 'RTC.der' will be recovered to the same drive where deleted data located.
 05:32:29 DBG Recovering from 'C:\Users\Owner\%$DANIEL%$\Reader\'
 05:32:29 Recovery started for RTC.der [1.072 KB]
 05:32:29 Recovery completed for RTC.der
 05:32:29 WRNG File 'pmd.cer' will be recovered to the same drive where deleted data located.
 05:32:29 Recovery started for pmd.cer [  420 B ]
 05:32:29 Recovery completed for pmd.cer
 05:32:29 REG Unable to recover file 'Registry log.reg' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:29 WRNG File 'lmhosts.sam' will be recovered to the same drive where deleted data located.
 05:32:29 DBG Recovering from 'C:\Users\Owner\)))))))))))(((((((\'
 05:32:29 Recovery started for lmhosts.sam [3.597 KB]
 05:32:29 Recovery completed for lmhosts.sam
 05:32:29 REG Unable to recover file 'rootclasses.txt' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:30 REG Unable to recover file 'tmp.edb' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:30 REG Unable to recover file 'TMP000000041ACA23488EFB5981' due to size limit (64.0 KB) for the Unregistered Version.
 05:32:30 OK Recovery process completed.
              Recovered 5 item(s) total.
 05:32:30 OK Execution has been completed with errors
 05:34:09 Saving session data...
 05:34:09 Saving application log...
 05:34:09 Saving hardware info...
 05:34:10 ERR Unable to save Disk Scan results on a same disk.
              Operation terminated.
 05:34:24 DBG Application Persistence
               Action:                                            Save Session
               File Name:             D:\Undelete Session 2011-07-18_05343.usf
               Subject:                                    Computer [ (LOCAL) ]
 05:34:24 Saving session data...
 05:34:24 Saving application log...
 05:34:24 Saving hardware info...
 05:34:24 Saving C: Scan Result to 'D:\C 2011-07-18_05344.scaninfo'.
 05:36:47 ERR Unable to save Disk Scan results on a same disk.
              Operation terminated.
 05:36:50 ERR Unable to save Disk Scan results on a same disk.
              Operation terminated.
 05:36:51 OK Execution has been completed with errors
 05:37:07 DBG Application closed normally.


DANIEL S. ABRAHAMIAN
CAMPAIGNER
FEELMYFLAME
ADVANCEDDEFIANCE