HKLM\SECURITY\Policy\Secrets\SAC* 1/26/2004 12:43 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SAI* 1/26/2004 12:43 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{09534AC1-5A62-4C2B-9FCE-D3E4363EC673}* 12/3/2004 3:49 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{0C341B3F-A837-4075-AB0C-FB8760AF90C1}* 9/17/2004 9:48 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{12C98FA8-EB3F-4758-BD74-6846489BE12A}* 6/15/2004 12:05 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{148f1a14-53f3-4074-a573-e1ccd344e1d0}* 1/26/2004 12:29 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{1A2DE6D5-679E-4BC0-8DE3-28C547854FCD}* 12/30/2005 10:15 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{2A76889C-D780-4674-8D1F-9BA7A73BBEA2}* 6/15/2004 12:09 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{3D14228D-FBE1-11D0-995D-00C04FD919C1}* 1/26/2004 12:27 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{4436A545-F78A-469E-A444-624C2F8D45B2}* 9/9/2004 9:43 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{4D5AA16F-288B-4BFD-920B-8797E434AC90}* 10/3/2006 1:34 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{57B701A4-0456-47D6-BBDE-72D772DBF3C7}* 6/15/2004 12:04 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{5A5A79F1-9868-4543-A352-9A98F80425C3}* 6/14/2004 11:59 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{61110E12-743C-435C-9846-3A1B77758D2E}* 9/28/2004 2:26 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{6838CC0E-7A29-48B2-B707-D72E5CB84FEA}* 6/14/2004 11:54 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{7203B6A5-7808-11D2-AC23-00105A0D1A42}* 10/4/2005 4:33 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{AB0F2FB5-71F4-4BD6-B643-5699A0753C23}* 6/21/2005 3:19 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{BC43544C-EC48-422F-9812-E71F1DE85D76}* 10/3/2006 2:50 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{C19026FE-7975-40C2-B96C-58E4D986CB46}* 6/14/2004 11:53 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{C3EEB391-7E26-4CFF-9646-3D1D6CB71549}* 6/15/2004 12:11 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{DA090C36-10BB-49BC-B981-F5A8D7752F62}* 7/18/2004 10:50 PM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{DCFD61B6-0593-40C6-8808-77BF80F0AAB5}* 6/15/2004 12:12 AM 0 bytes Key name contains embedded nulls (*) HKLM\SECURITY\Policy\Secrets\SCM:{E4A33FC1-DF62-44C2-A889-9F8302C813B5}* 6/15/2004 12:00 AM 0 bytes Key name contains embedded nulls (*) HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\LDMSDATA\MSSQLServer\uptime_time_utc 7/5/2007 12:14 PM 8 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\uptime_time_utc 7/5/2007 12:14 PM 8 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\LastAliveUptime 7/5/2007 12:14 PM 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\LastAliveStamp 7/5/2007 12:14 PM 16 bytes Data mismatch between Windows API and raw hive data. C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XMP7S5PK\CAIU6UKQ.HTM 7/5/2007 12:19 PM 1.15 KB Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\20060303063237_backup_L05phatFadhD1LhT.tar.gz.lnk 7/5/2007 12:43 PM 815 bytes Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\bin.lnk 2/19/2007 11:11 AM 837 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\Administrator\Recent\CHANGELOG.php.lnk 7/5/2007 12:33 PM 877 bytes Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\confirm.aspx.lnk 2/19/2007 12:12 PM 1.07 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\Administrator\Recent\robots.txt.lnk 7/5/2007 12:34 PM 866 bytes Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\RootkitRevealer.chm.lnk 7/5/2007 12:19 PM 548 bytes Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\secure.lnk 6/28/2007 3:58 PM 785 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\Administrator\Recent\Sti_Trace.log.lnk 2/19/2007 11:57 AM 702 bytes Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\Administrator\Recent\w401AHRMA.lnk 7/5/2007 12:43 PM 561 bytes Hidden from Windows API. C:\Documents and Settings\Administrator\Recent\www.lnk 7/5/2007 12:34 PM 689 bytes Hidden from Windows API. C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\I2_LDVP.TMP 7/5/2007 12:23 PM 0 bytes Hidden from Windows API. C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\I2_LDVP.TMP\dec 7/5/2007 12:23 PM 0 bytes Hidden from Windows API. C:\Program Files\Common Files\Symantec Shared\VirusDefs\20070705.017\vscanmsx.dat 7/5/2007 12:26 PM 2.02 KB Hidden from Windows API. C:\WINDOWS\system32\CatRoot2\tmp.edb 7/5/2007 12:14 PM 1.01 MB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\Temp\wrt4FE9.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FEA.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FEB.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FEC.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FED.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FEE.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FEF.tmp 7/5/2007 12:19 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FF0.tmp 7/5/2007 12:20 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FF1.tmp 7/5/2007 12:20 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FF2.tmp 7/5/2007 12:20 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FF3.tmp 7/5/2007 12:20 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FFC.tmp 7/5/2007 12:21 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FFD.tmp 7/5/2007 12:21 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FFE.tmp 7/5/2007 12:21 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt4FFF.tmp 7/5/2007 12:21 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5003.tmp 7/5/2007 12:27 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5004.tmp 7/5/2007 12:27 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5005.tmp 7/5/2007 12:27 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5006.tmp 7/5/2007 12:27 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5007.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5008.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5009.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500A.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500B.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500C.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500D.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500E.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt500F.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5010.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5011.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5012.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5013.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. C:\WINDOWS\Temp\wrt5014.tmp 7/5/2007 12:30 PM 0 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401DHAUNT\deadhaunting.com\log\W3SVC1276074182\ex070705.log 7/5/2007 1:55 PM 533 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_md10_0005 perpetrators.cp 7/3/2007 6:36 PM 467.00 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_md10_0006 sign off.cp 7/3/2007 6:37 PM 394.00 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_md11_0003 VPA.cp 7/3/2007 7:43 PM 1.19 MB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_mod10_0005 perpetrators.cp 7/5/2007 1:25 PM 467.00 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_mod10_0006 sign off.cp 7/5/2007 1:25 PM 394.00 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\ISSIWeb-CW CBT\Course 05 - Investigation\CW05_mod11_0003 VPA.cp 7/5/2007 1:26 PM 1.19 MB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets 7/5/2007 1:10 PM 0 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0001.swf 7/5/2007 1:08 PM 282.39 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0002.swf 7/5/2007 1:08 PM 181.28 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0003.swf 7/5/2007 1:09 PM 937.75 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0004.swf 7/5/2007 1:09 PM 476.91 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0005.swf 7/5/2007 1:09 PM 447.86 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0006.swf 7/5/2007 1:10 PM 2.05 MB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\CW06_mod06_0007.swf 7/5/2007 1:10 PM 189.51 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\Cw06_Mod06_0008.swf 7/5/2007 1:10 PM 17.66 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\Cw06_Mod06_0009.swf 7/5/2007 1:10 PM 17.80 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401INTELLALEARN\Mec\06_06 Assets\Cw06_Mod06_0010.swf 7/5/2007 1:08 PM 18.43 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401PROBEN\probengroup.com\log\W3SVC511343127\ex070705.log 7/5/2007 1:50 PM 769 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\_notes\index.htm.0065.f4be.bak.mno 6/28/2007 8:08 AM 243 bytes Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\_notes\index.htm.0066.3e95.bak.mno 6/28/2007 8:09 AM 243 bytes Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\_notes\index.htm.0071.878c.bak.mno 7/3/2007 3:30 PM 242 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\_notes\index.htm.0072.77ab.bak.mno 7/5/2007 1:51 PM 243 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\index.htm.0065.f4be.bak 6/28/2007 8:08 AM 8.71 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\index.htm.0066.3e95.bak 6/28/2007 8:09 AM 8.77 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\index.htm.0071.878c.bak 7/3/2007 3:30 PM 6.14 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\_baks\index.htm.0072.77ab.bak 7/5/2007 1:51 PM 6.17 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\_notes\DeKalbCountyAuction-WestchesterAuctions.htm.0022.a67a.bak.mno 6/8/2007 11:54 AM 243 bytes Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\_notes\DeKalbCountyAuction-WestchesterAuctions.htm.0023.cb56.bak.mno 6/8/2007 11:54 AM 243 bytes Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\_notes\DeKalbCountyAuction-WestchesterAuctions.htm.0028.7b01.bak.mno 7/5/2007 12:18 PM 243 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\_notes\DeKalbCountyAuction-WestchesterAuctions.htm.0029.3585.bak.mno 7/5/2007 1:52 PM 243 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\DeKalbCountyAuction-WestchesterAuctions.htm.0022.a67a.bak 6/8/2007 11:54 AM 8.82 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\DeKalbCountyAuction-WestchesterAuctions.htm.0023.cb56.bak 6/8/2007 11:54 AM 8.82 KB Visible in Windows API, but not in MFT or directory index. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\DeKalbCountyAuction-WestchesterAuctions.htm.0028.7b01.bak 7/5/2007 12:18 PM 7.55 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_baks\DeKalbCountyAuction-WestchesterAuctions.htm.0029.3585.bak 7/5/2007 1:52 PM 7.58 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\_notes\PikeCountyILAuction2007.htm.mno 7/5/2007 1:50 PM 243 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\images\_notes\Pike-County-Web_000.jpg.mno 7/5/2007 1:50 PM 243 bytes Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\images\Pike-County-Web_000.jpg 7/5/2007 1:50 PM 161.74 KB Hidden from Windows API. L:\HC6Webspace\RW401AWT\w401WESTCHESTER\westchester-auctions.com\www\auction\PikeCountyILAuction2007.htm 7/5/2007 1:50 PM 11.17 KB Hidden from Windows API. L:\PHP\Sessions\sess_02977c2c833f325f7c515792fe3fff6f 7/5/2007 1:16 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_0599ac53fde513de1c79011458628dcb 7/5/2007 1:43 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_063a10ccad59cd979cca56af787b914e 7/5/2007 1:45 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_085df3b19c2ce5bb5022aa2505095e6d 7/5/2007 1:40 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_0c525e7e6ee3921479813ea20a8d115f 7/5/2007 1:34 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_0ee4289a914b3486b6a1e8a03c031df6 7/5/2007 1:10 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_0f1b647c03fe909f0a09ff2b9bc9aa19 7/5/2007 2:00 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_10e181df118efe8ce4e7c50809920b6d 7/5/2007 1:05 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_117c444b5170077723ddcc8b28460946 7/5/2007 1:16 PM 437 bytes Hidden from Windows API. L:\PHP\Sessions\sess_12ed2d0e58f290a1df069a2102bda55d 7/5/2007 12:59 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_15594c5385710f9a24c3b6775fcb3b17 7/5/2007 2:00 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_1a0968b6a3a56d54a3758614c1ce3933 7/5/2007 1:18 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_1b97216fe4467579b5cbb4bb17d87a8f 7/5/2007 1:09 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_1fea616ffe4050dd79ebcfde40f2d1f3 7/5/2007 1:31 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_20bfc7111534d253e479f04335c3efcc 7/5/2007 1:19 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_21b92df3e71ccea7f2be0a241d74ca4d 7/5/2007 1:09 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_22af2fd57e8c096307ecd0ee9bb5ba27 7/5/2007 1:58 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_237ffc96a83328bb92ecb8ecc5eef3cd 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_24effa708bd303876c08695e9202bd81 7/5/2007 1:27 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_270270bc8d1b3460d4a8b183653322a4 7/5/2007 1:02 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_28f7d2e67b3d4c342ccbe49f811d8bbf 7/5/2007 1:43 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_293b4327767b90327257a40ed9a6ebde 7/5/2007 1:16 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_29c9723de70a9a20ccef81d691ce9e7d 7/5/2007 1:03 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_2c31d1cc6a3af3ca9637e6408f4778e9 7/5/2007 12:58 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_311d14fd924e2894105b00bbafa06164 7/5/2007 2:02 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_328053e5a46d5be8ec74c4eac6adca28 7/5/2007 1:58 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_360e618d77d49dd9034a85979404cbd6 7/5/2007 2:03 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_36b767627f937172c6ed28d999300a1a 7/5/2007 1:22 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_38d8381a3c6d5e88f54b243293853d04 7/5/2007 1:31 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_3a29441f59c0321b0ff9f6a671a8c74e 7/5/2007 1:44 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_3b1b66b1901a27aada130926cf814b7b 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_3d28214c649f3c3f2ff6215b5a1c9817 7/5/2007 2:03 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_43a06356c08a74a88a53df4bc55fbd5b 7/5/2007 1:23 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_455833c95b5b7df00c42abf0eff708b7 7/5/2007 12:55 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_475cac9374fcf09bb882b05a310e72a6 7/5/2007 1:29 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_482218645331a1baeded94f345293927 7/5/2007 1:36 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_49b9660705380c40368909d8d2e8cc0f 7/5/2007 1:21 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_4cfbb6931514a577ef2a7be5b31643d4 7/5/2007 1:39 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_4d2ec82b654132eb056cda7afe6b3e23 7/5/2007 1:32 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_5325dc6b92e4bffd5921063bdcffa5be 7/5/2007 1:23 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_537cde06d6c699b53766e2e9a02b8ee9 7/5/2007 1:05 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_56ac5af18483b7e28422e6395fe55290 7/5/2007 1:40 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_56e941fdf01ce2cce89f051150697854 7/5/2007 1:36 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_57a4c972d609dce5634065c9cd92de73 7/5/2007 1:29 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_57b8e1614ae082c43fb7a0bc175b0531 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_5c70e317183c3770945f74cbb3efa493 7/5/2007 1:43 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_5ecb5d586bb59892e57f599129505214 7/5/2007 1:21 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_64ff4d1c13057b85dafc5a6302f00013 7/5/2007 1:29 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_66f84ef1ca422efbd9db84ff7fee9e1f 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_68d81ffd3b46bcb601a5fe6fa0d74880 7/5/2007 1:05 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_6cc4492ec0e1777c5ef264ac761d87f9 7/5/2007 1:15 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_6ef00aaaba42538410f5c49b3725a72a 7/5/2007 1:34 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_6f28ae8ff4f2665bb33f0434333d9855 7/5/2007 1:53 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_70123e5a4d9f045a98a3bccc96d2b9a1 7/5/2007 1:33 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_71775e9eaa7966750ea1b2007c67ebe1 7/5/2007 1:27 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_71a1b59a3f50beb54918d8c83cafa4a2 7/5/2007 1:59 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7279a119d79a6aa39906a2a511a05f1a 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_749976372e74f147134a149ab70d0c02 7/5/2007 1:51 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_75b2670c2ef6de262bf9138e9128c7c0 7/5/2007 1:00 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7918a1976e168f3c0d7eff6d23b89092 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_798b16e789a36f6a5d10c64478b96bc0 7/5/2007 1:25 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7b4d8b35e79e7e5cde4e1857c1c74cef 7/5/2007 1:07 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7bdf1828c0867da72d237967f4101758 7/5/2007 12:51 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7c11687bf724d51868a6024c8a9f4cbb 7/5/2007 1:38 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7c3de76f55cd1ed6248919c9970d9d88 7/5/2007 1:08 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7c4ae4fe12f66cf689267fea733121b1 7/5/2007 1:55 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_7dab40a7fa1af9b2a73f1c1fc259eadf 7/5/2007 1:31 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_80b475f8e7a95233b1b697977979351d 7/5/2007 1:41 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_82c7cd5223e2801fa0a2d85caf30e423 7/5/2007 1:23 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_82cadf47e740e23780a689077da26ae2 7/5/2007 1:45 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_8352499073a24cdf1ce06be8d4d3fafd 7/5/2007 1:31 PM 440 bytes Hidden from Windows API. L:\PHP\Sessions\sess_847a5198ffa95de226a3edff3490c830 7/5/2007 1:40 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_851e45b4277c1e90f10ab31956bf27d5 7/5/2007 1:12 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_86b3c59e361f6300bd6146b479dc7d93 7/5/2007 1:55 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_891068dda3eabcc48382be98593a29f2 7/5/2007 2:03 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_89bc117ef5a7c67116a752b5782c6071 7/5/2007 1:18 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_8c0486e5630bfc3f6d4707a9f259947b 7/5/2007 1:04 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_8ea2335c717b847f698a93b46be9aa44 7/5/2007 1:40 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_90a46041220cabd4d886fb44d6087b7c 7/5/2007 2:03 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_92c2ec8d8213ac5f2b2727ec6b9ceaed 7/5/2007 1:58 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_92c6157efd9baa62a185e10d63637513 7/5/2007 1:55 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_93f7282d00312979465bf758ff210030 7/5/2007 1:23 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_952906474ef974e2a1008a7a3e11dc9a 7/5/2007 1:45 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_97d3e030f514ac68866830c4bd85dfe6 7/5/2007 1:20 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_98a1aecc22d6f413997f1f89f5a6b5fb 7/5/2007 1:00 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_98a852d91b62ce4e1190ad101d001be1 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_9d358ff75ada7c4a8692eaae5be77c57 7/5/2007 12:53 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_9de4f14c054bff19f9de607cfe4140cd 7/5/2007 1:30 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_9e25bddce9638e34351e4edff4ff635a 7/5/2007 1:44 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_a1c97c942751d1146992821a0cd4b67f 7/5/2007 1:31 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_a39c29e20ddb141180e77e2468928616 7/5/2007 1:44 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_a53c5b06fabddf1ac3511329e3ba3baa 7/5/2007 1:51 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_ab56f0de8650aa3b6c5f8cd5199d1f97 7/5/2007 1:36 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_b186330e4fad96a896f162aca53b7789 7/5/2007 1:04 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_b2560c8b325cd788f8e52fc56b44a2e1 7/5/2007 1:49 PM 516 bytes Hidden from Windows API. L:\PHP\Sessions\sess_b8fdd599ddbdc3e55070cd5f895749b3 7/5/2007 1:34 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_bca716cf7e3fcce364b9f1123b498805 7/5/2007 1:16 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_bd4d47a4ebd03af4a48f27a0d69b41d9 7/5/2007 2:03 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_bfcbac4345d7c7a6e8a99700c6be7d86 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_c082b93a41462cd069b7545b47dbc4c5 7/5/2007 1:20 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_c1305845a17e8828a776dec64e9922be 7/5/2007 1:41 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_c258d80fbbec287e75977ea1a3892c17 7/5/2007 2:01 PM 0 bytes Hidden from Windows API. L:\PHP\Sessions\sess_c3502274f476b38e804e63489f124229 7/5/2007 1:46 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_ca4715776ce820f97b564d5e43eff433 7/5/2007 1:38 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_cb00e1cb01554f73ea0e3b8b6ae62921 7/5/2007 1:16 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_cbedf962f1b05062fd8e0677043d7fff 7/5/2007 1:22 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_cc89d5204464d0402b00c9b49952287b 7/5/2007 1:48 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_cd278d478071dbc11a1ce7dce1ea8a2c 7/5/2007 1:55 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_cd553a8fd1fe5ea5edb4836169233272 7/5/2007 1:23 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_d30071526220c3980e2d5befbed88423 7/5/2007 1:17 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_d5c68ac3876aebdf61a0c4415a8a1e5c 7/5/2007 1:17 PM 440 bytes Hidden from Windows API. L:\PHP\Sessions\sess_db26c3683b7c93c639881ee842ea225a 7/5/2007 12:58 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_db4f9838d412a1426603109c143ec74c 7/5/2007 2:04 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_db9601d06ccecdd93a1627b193fb4f55 7/5/2007 1:20 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_de7efcc16e9737ee12dc4c948a2943c8 7/5/2007 1:08 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_df99a91864d72f20144c7d7a92af32ca 7/5/2007 1:42 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_dfbb8c992e9fb840bffce4a85cfc32cf 7/5/2007 1:22 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_e2f1ae3a4b3155a1a1e697ad3f93fc8b 7/5/2007 1:24 PM 440 bytes Hidden from Windows API. L:\PHP\Sessions\sess_e43acee934501ac40d9ddbad80afc5f9 7/5/2007 1:24 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_e79ef20480ad9dcde29e2bd03457d3c0 7/5/2007 1:39 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_e817015d4e6b86730994d3678ee8b9be 7/5/2007 2:01 PM 441 bytes Visible in directory index, but not Windows API or MFT. L:\PHP\Sessions\sess_ebbe79fe2e2779cb7d948a33715c3e45 7/5/2007 1:31 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_ec2665dfac20b3761097f3a7053f38f6 7/5/2007 1:40 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_ed0dd04b60827574488076dfe63c0608 7/5/2007 1:17 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_eebc12b90a6abdc7f242291c6cbd6652 7/5/2007 1:06 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_f3ac3dc7193e892b243879ba8abd9369 7/5/2007 1:21 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_f999127aaa3e6cf0f524716083e57499 7/5/2007 1:20 PM 441 bytes Hidden from Windows API. L:\PHP\Sessions\sess_fc368bbf2c1707dff9f2d3f465475260 7/5/2007 2:03 PM 441 bytes Visible in direc