HKLM\SOFTWARE\Microsoft\SchedulingAgent\LastTaskRun	3/14/2006 12:00 AM	16 bytes	Data mismatch between Windows API and raw hive data.
C:\Program Files\Common Files\Symantec Shared\VirusDefs\20060308.007\vscanmsx.dat	3/14/2006 12:51 AM	2.02 KB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\00010001.ci	3/14/2006 1:02 AM	16.06 MB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\00010001.dir	3/14/2006 1:23 AM	128.00 KB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.000	3/14/2006 1:00 AM	240 bytes	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.001	3/14/2006 1:01 AM	192.00 KB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.002	3/14/2006 1:01 AM	192.00 KB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffd.000	3/13/2006 11:02 PM	240 bytes	Visible in Windows API, but not in MFT or directory index.
C:\System Volume Information\catalog.wci\CiFLfffd.001	3/13/2006 11:02 PM	192.00 KB	Visible in Windows API, but not in MFT or directory index.
C:\System Volume Information\catalog.wci\CiFLfffd.002	3/13/2006 11:02 PM	192.00 KB	Visible in Windows API, but not in MFT or directory index.
C:\System Volume Information\catalog.wci\CiML0001.000	3/14/2006 1:03 AM	240 bytes	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiML0001.001	3/14/2006 1:03 AM	64.00 KB	Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiML0001.002	3/14/2006 1:03 AM	64.00 KB	Hidden from Windows API.