A SHR C:\bootmgr
A SH C:\BOOTNXT
A C:\chrome.ext.7z
A SH C:\desktop.ini
SHR C:\GHLDR
SHR C:\ghldr.mbr
A SH I C:\hiberfil.sys
A C:\NILDR
A SH C:\pagefile.sys
A SH C:\swapfile.sys
$RECYCLE.BIN
360SANDBOX
Boot
Documents and Settings
dosh
NVIDIA
Program Files
Program Files (x86)
ProgramData
RECYCLER
System Volume Information
Users
Windows
** C盘根目录 (active) **
A SHR C:\bootmgr
A SH C:\BOOTNXT
A C:\chrome.ext.7z
A SH C:\desktop.ini
SHR C:\GHLDR
SHR C:\ghldr.mbr
A SH I C:\hiberfil.sys
A C:\NILDR
A SH C:\pagefile.sys
A SH C:\swapfile.sys
$RECYCLE.BIN
360SANDBOX
Boot
Documents and Settings
dosh
NVIDIA
Program Files
Program Files (x86)
ProgramData
RECYCLER
System Volume Information
Users
Windows
** C盘根目录 (system) **
A SHR C:\bootmgr
A SH C:\BOOTNXT
A C:\chrome.ext.7z
A SH C:\desktop.ini
SHR C:\GHLDR
SHR C:\ghldr.mbr
A SH I C:\hiberfil.sys
A C:\NILDR
A SH C:\pagefile.sys
A SH C:\swapfile.sys
$RECYCLE.BIN
360SANDBOX
Boot
Documents and Settings
dosh
NVIDIA
Program Files
Program Files (x86)
ProgramData
RECYCLER
System Volume Information
Users
Windows
Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......976765401
estimatedUsedCount.....0
numPartitions..............4
Version............0
# Ord Boot Id Ext First Num Last Used NTFS
0 0 1 7 No 2048 83920896 83922944 0 No
1 1 0 7 No 83923560 683129305 767052865 0 No
2 2 0 7 No 767053824 83886080 850939904 0 No
3 3 0 7 Yes 850941952 125829120 976771072 0 No
Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......0
estimatedUsedCount.....0
numPartitions..............0
Version............0
# Ord Boot Id Ext First Num Last Used NTFS
Fixed Drives
Drive 0 WDC WD5000AAKX-08U6AA0 WD-WCC2EMC26764
WinNT (Active)
Total Sectors 976773168
Bytes per Sector 512
MB 476940
Cylinders 60801
Heads 255
Sectors per Track 63
Successful IO Count 25
Remote Drives
AsyncIo : 0
Image Devices
Key[1] 1.1:
Key[2] 1:1
Key[3] C:
Path C:
Desc C: 1.1: [系统]
Type NTFS
Disk 0
Offset 2048
Key[1] 1.2:
Key[2] 1:2
Key[3] D:
Path D:
Desc D: 1.2: [Zong He]
Type NTFS
Disk 0
Offset 83923560
Key[1] 1.3:
Key[2] 1:3
Key[3] G:
Path G:
Desc G: 1.3: [win7系统]
Type NTFS
Disk 0
Offset 767053824
Key[1] 1.4:
Key[2] 1:4
Key[3] E:
Path E:
Desc E: 1.4: [Bei Fen]
Type NTFS
Disk 0
Offset 850941952
Filesystem Index: 0
Filesystem Descriptor:
ID's:
ID Type: 2
ID: C:
ID Type: 1
ID: 1.1:
ID Type: 4
ID: :
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 1
Filesystem Descriptor:
ID's:
ID Type: 2
ID: D:
ID Type: 1
ID: 1.2:
ID Type: 4
ID: ZONG HE:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: Zong He
Filesystem Index: 2
Filesystem Descriptor:
ID's:
ID Type: 2
ID: E:
ID Type: 1
ID: 1.4:
ID Type: 4
ID: BEI FEN:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: Bei Fen
Filesystem Index: 3
Filesystem Descriptor:
ID's:
ID Type: 2
ID: G:
ID Type: 1
ID: 1.3:
ID Type: 4
ID: WIN7:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: win7
*********************************
** GHOST 指纹信息(最近一次恢复) **
Symantec Ghost 11.0.2 Copyright (C) 1998-2007 Symantec Corporation. All rights reserved.
Disk Last Symantec Ghost Action Date Time Clone-ID
------------------------------------------------------------
1 File to Partition 05-08-2017 08:23 58f24193