Directory

Description

G\Windows\System32\drivers\etc\hosts

DNS file

C\Windows\System32\drivers\etc\networks

Network Config file

G\Windows\System32\config\SAM

Usernames and Password

G\Windows\System32\config\SECURITY

Security Log

G\Windows\System32\config\SOFTWARE

Software Log

C\Windows\System32\config\SYSTEM

System Log

G \Windows\System32\winevt\

Windows Event Logs

G.\Windows\repair\SAM

Backup of User and Password

GNDocuments and Settings\AII Users\Start Menu\Programs\Startup\

Windows XP All User Startup

G\Documents and Settings\User\Start Menu\Programs\Startup

Windows XP User Startup

G\ProgramData\Microsoft\Windows\StartMenu\Programs\StartUp

Windows All User Startup

G\Users\*\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Windows User Startup

C \Windows\Prefetch

Prefetch files

G\Windows\AppCompat\Programs\Amcache.hve

Amcache.hve

C\Windows\UsersnNTUSER.dat

NTUSER.dat