ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\hidden\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=hidden
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\hidden
LOGONSERVER=\\hidden
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 16 Model 6 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=16
PROCESSOR_REVISION=0602
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
USERDOMAIN=hidden
USERNAME=hidden
USERPROFILE=C:\Documents and Settings\hidden
windir=C:\WINDOWS
_DFX_INSTALL_UNSIGNED_DRIVER=1
** C盘根目录 **
A C:\AUTOEXEC.BAT
SHR C:\boot.ini
A SHR C:\bootfont.bin
A C:\CONFIG.SYS
SHR C:\GHLDR
A SHR C:\IO.SYS
A SHR C:\MSDOS.SYS
A SHR C:\NTDETECT.COM
A SHR C:\ntldr
A SH C:\pagefile.sys
$RECYCLE.BIN
360SANDBOX
Documents and Settings
dosh
Program Files
RECYCLER
System Volume Information
WINDOWS
** C盘根目录 (active) **
A C:\AUTOEXEC.BAT
SHR C:\boot.ini
A SHR C:\bootfont.bin
A C:\CONFIG.SYS
SHR C:\GHLDR
A SHR C:\IO.SYS
A SHR C:\MSDOS.SYS
A SHR C:\NTDETECT.COM
A SHR C:\ntldr
A SH C:\pagefile.sys
$RECYCLE.BIN
360SANDBOX
Documents and Settings
dosh
Program Files
RECYCLER
System Volume Information
WINDOWS
** C盘根目录 (system) **
A C:\AUTOEXEC.BAT
SHR C:\boot.ini
A SHR C:\bootfont.bin
A C:\CONFIG.SYS
SHR C:\GHLDR
A SHR C:\IO.SYS
A SHR C:\MSDOS.SYS
A SHR C:\NTDETECT.COM
A SHR C:\ntldr
A SH C:\pagefile.sys
$RECYCLE.BIN
360SANDBOX
Documents and Settings
dosh
Program Files
RECYCLER
System Volume Information
WINDOWS
Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......312571904
estimatedUsedCount.....0
numPartitions..............4
Version............0
# Ord Boot Id Ext First Num Last Used NTFS
0 0 1 7 No 2048 83888128 83890176 0 No
1 1 0 7 Yes 83892224 57907200 141799424 0 No
2 2 0 7 Yes 141801472 57436160 199237632 0 No
3 3 0 7 Yes 199239680 113340416 312580096 0 No
Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......0
estimatedUsedCount.....0
numPartitions..............0
Version............0
# Ord Boot Id Ext First Num Last Used NTFS
Fixed Drives
Drive 0 ST3160811AS 6PT483K6
WinNT (Active)
Total Sectors 312581808
Bytes per Sector 512
MB 152627
Cylinders 19457
Heads 255
Sectors per Track 63
Successful IO Count 31
Remote Drives
AsyncIo : 0
Image Devices
Key[1] 1.1:
Key[2] 1:1
Key[3] C:
Path C:
Desc C: 1.1: []
Type NTFS
Disk 0
Offset 2048
Key[1] 1.2:
Key[2] 1:2
Key[3] D:
Path D:
Desc D: 1.2: []
Type NTFS
Disk 0
Offset 83892224
Key[1] 1.3:
Key[2] 1:3
Key[3] E:
Path E:
Desc E: 1.3: [新加卷]
Type NTFS
Disk 0
Offset 141801472
Key[1] 1.4:
Key[2] 1:4
Key[3] F:
Path F:
Desc F: 1.4: []
Type NTFS
Disk 0
Offset 199239680
Symantec Ghost 11.0.2 Copyright (C) 1998-2007 Symantec Corporation. All rights reserved.
Disk Last Symantec Ghost Action Date Time Clone-ID
------------------------------------------------------------
1 File to Partition 03-01-2016 07:31 56d4cf12