Sie sind auf Seite 1von 16

*********************************

Date : Wed Jun 18 11:30:49 2014


Error Number: (36002)
Message: User Abort
Version: 11.5.1.2269 (Feb 2 2010, Build=2269)
OS Version: Home Edition (Build 7600)
Command line arguments:
Active Switches :
AutoName
PathName
:
DumpFile
:
DumpPos
: 0
Last LFO Buffersize : 0
Last LFO Path
:
Full Path
: 1.1:\Users\XYZ\Downloads\\phone.GHO
Disk:Partition
: 1:1
Drive Letter
: C:\
Last LFO Filesystem : Native
FlagImplode
: 0
FlagExplode
: 0
Operation Details :
Total size.........0
MB copied..........0
MB remaining.......0
Percent complete...0%
Speed..............0 MB/min
Time elapsed.......0:00
Time remaining.....0:00
Thread #860 Call Stack
AbortLog
Generic_Abort
FileReq
WinGetDumpFile
WinDiskToFile
CopyPartToFile
CopyMainline
AttemptOperation
sub_main
main
Call Stack
Address
0x00000000774364f4
0x000000000012ade0
0x000000000061b67b
nloads\Ghost32.exe
0x000000000041beff
nloads\Ghost32.exe
0x000000000041c3c5
nloads\Ghost32.exe
0x00000000007c0730
nloads\Ghost32.exe
0x00000000570774ff
0x00000000229a22e8
0xffffffff8d8d5900
0xffffffffffffef88
0x000000001fd000e8
0xfffffffff44d8b00

Frame
0x000000000012aae0
0x000000000012aae4
0x000000000012ade0

Logical Addr
Module
KiFastSystemCallRet+0x0000000000000000
0x0000:0x0000000000000000
0x0001:0x000000000021a67b C:\Users\XYZ\Dow

0x000000000012af4c 0x0001:0x000000000001aeff C:\Users\XYZ\Dow


0x000000000012af50 0x0001:0x000000000001b3c5 C:\Users\XYZ\Dow
0x000000000041c3c5 0x0003:0x000000000003a730 C:\Users\XYZ\Dow
0x000000000041c3c9
0x000000000041c3cd
0x000000000041c3d1
0x000000000041c3d5
0x000000000041c3d9
0x000000000041c3dd

0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000

0x00000000000d8964
0x0000000059000000
0xffffffff8b5b5e5f
0xffffffffcd33f04d
0x00000000228b62e8
0x0000000055c3c900
0x000000000600ec81
0x000000006c8d0000
0x0000000050a1fc24
0x0000000033007c06
0x00000000008589c5
0x000000006a000006
0xffffffff8e38b838
0xffffffff99e80066
0xffffffff8b002290
0x0000000000061485
0xffffffffe4458900
0x000000003ad105c6
0xffffffffa163007e
0x00000000007c7ca8
nloads\Ghost32.exe
0x0000000000fc6583
End Call Stack

0x000000000041c3e1
0x000000000041c3e5
0x000000000041c3e9
0x000000000041c3ed
0x000000000041c3f1
0x000000000041c3f5
0x000000000041c3f9
0x000000000041c3fd
0x000000000041c401
0x000000000041c405
0x000000000041c409
0x000000000041c40d
0x000000000041c411
0x000000000041c415
0x000000000041c419
0x000000000041c41d
0x000000000041c421
0x000000000041c425
0x000000000041c429
0x000000000041c42d

0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0000:0x0000000000000000
0x0003:0x0000000000041ca8 C:\Users\XYZ\Dow

0x00000000007c7ca8 0x0000:0x0000000000000000

Start heap available: 2337067008


Cur heap available: 2369806336
Total Memory:
3735375872
Allocated
33500 ..\ghost.cpp:1511
Free
Fat details:
SRC:
FatType..........32
firstSector.......0
ClusterSize......2048
clusters.........973312
root_next_avail..0
data_next_avail..0
dir_sector.......0
root_sector......16384
data_sector......16384
FAT_sector.......0
NTFS details:
---------------NTFS Global Flags:
---------------contiguousWrite=1 forceDiskClusterMapping=0
inhibitCHKDSK=1 ignoreBadLog=0 ignoreCHKDSKBit=0
enable_cache=0 xfrbuflen=0
last_attr_type = 0
loadExact = 0
sameSize = 0
---------------Disk Info :

remote.............0
drive..............1
sectorsUsedCount.......3909632
estimatedUsedCount.....3388888
numPartitions..............1
Version............0
Full structure dump....
{
SVersion: 0
SCylinders: 243
SDiskFormat: 28
SMbr:
0x0000 eb 58 90 53 59 53
0x0010 02 00 00 00 00 f8
0x0020 00 a8 3b 00 b5 1d
0x0030 01 00 06 00 00 00
0x0040 80 00 29 8a 8c 37
0x0050 20 20 46 41 54 33
0x0060 bc 76 7b 52 06 57
0x0070 a5 8e d9 bb 78 00
0x0080 31 c0 b1 06 89 3f
0x0090 88 4d f8 50 50 50
0x00a0 a8 c1 ee 04 01 f2
0x00b0 2b f6 45 b4 7f 75
0x00c0 50 54 75 10 80 7d
0x00d0 75 e8 eb 0f 51 51
0x00e0 36 1c 7c b4 08 e8
0x00f0 08 42 89 16 1a 7c
0x0100 55 b4 41 e8 cb 00
0x0110 01 74 05 c6 06 46
0x0120 00 00 00 00 bb 00
0x0130 ae 1e 73 75 74 e9
0x0140 64 7b b9 10 00 eb
0x0150 10 89 e6 66 60 b4
0x0160 01 c3 66 60 31 c0
0x0170 7d 2b 66 60 66 0f
0x0180 66 f7 f6 31 c9 87
0x0190 77 17 c0 e4 06 41
0x01a0 2f 00 66 61 72 01
0x01b0 8e de 66 8f 06 78
0x01c0 0e bb 07 00 cd 10
0x01d0 fd 8a 16 74 7b 06
0x01e0 72 72 6f 72 0d 0a
0x01f0 00 00 00 00 00 00
0x0200
SIsSpanned: false
SOs2Name:
0x0000 00 00 00 00 00 00
SFingerprint: 0
SHeadsPerCyl: ff
SectorsPerTrack: 3f
SRemote: false
SEndOfImagePosition: 0
SFlags: 1
SPatchedFileCount: 0
SDrive: 1
SEstimatedUsed: 33b5d8
STotalSectors: 3ba800
SPartitions:
{

4c
00
00
00
74
32
1e
0f
89
50
83
25
b8
66
e9
83
72
7d
7e
f8
2b
42
e8
b7
ca
08
c3
00
eb
cd
00
00

49
00
00
00
4e
20
56
b4
47
cd
fa
38
ed
ff
00
e1
10
00
e8
00
66
e8
68
36
66
e1
e2
be
f2
13
00
00

4e
3f
00
00
4f
20
8e
37
02
13
4f
4d
75
75
72
3f
81
66
0e
66
52
77
00
18
f7
88
c9
da
31
07
00
fe

55
00
00
00
20
20
c1
0f
f3
eb
76
b8
0a
bc
13
89
fb
b8
00
03
66
00
66
7c
f7
c5
31
7d
c0
c3
00
02

00 00 00 00

58
ff
00
00
4e
fa
b1
a0
64
62
31
74
66
eb
20
0e
55
e4
66
06
50
66
61
66
66
88
f6
ac
cd
42
00
b2

00
00
00
00
41
fc
26
56
a5
8b
81
20
ff
07
e4
18
aa
9f
81
60
06
61
e2
0f
3d
d6
8e
20
16
6f
00
3e

02
00
02
00
4d
31
bf
20
8a
55
fa
66
75
51
75
7c
75
22
3e
7b
53
8d
da
b7
ff
b8
d6
c0
cd
6f
00
18

04
00
00
00
45
c9
78
d2
0e
aa
b2
3d
ec
51
0f
fb
0a
00
1c
66
6a
64
c6
3e
03
01
bc
74
19
74
00
37

96
00
00
00
20
8e
7b
78
18
8b
07
21
66
66
c1
bb
f6
66
7e
13
01
10
06
1a
00
02
68
09
f4
20
00
55

04
00
00
00
20
d1
f3
1b
7c
75
73
47
ff
ff
ea
aa
c1
ba
cf
16
6a
72
46
7c
00
e8
7b
b4
eb
65
00
aa

PID_POSITION_ID: 2.1:
SFlagInp: 3
SFileOperationOffset: 0
PID_VOLUME_NAME:
PID_FIND_FIRST: false
PID_FIND_BEST_FIT: false
SSlot: 0
PID_VOLUME_DRIVE_LETTER: H:
SNumSects: 3ba800
PID_FORMAT_TYPE: 3
SOrder: 0
SFpos: 0
PID_VOLUME_START: 0
SBootable: true
PID_CLEANLY_SHUTDOWN: true
SExtended: false
SSystemId: f7
SSizeAdjustment: 0
PID_IS_VOLUME_CONTAINER: false
PID_FORMAT: 1
PID_ACTIVE: true
PID_EXTENT:
{
PID_EXTENT_CONTAINER_EXTENT_INDEX: 0
PID_EXTENT_START: 0
PID_EXTENT_SIZE_MINIMUM: 77500000
PID_EXTENT_SIZE_MAXIMUM: 77500000
}
SFirstSect: 0
PID_READ_ONLY: false
PID_FIND_LAST: false
PID_NAME:
SFlags: 0
PID_ROLE_FORMAT_MATCHING_TYPE: 0
SEndFpos: 0
PID_VOLUME_SIZE_MINIMUM: 77500000
PID_FIND_WORST_FIT: false
SGflags: 18
PID_NO_HARD_ERROR: true
PID_VOLUME_SIZE_MAXIMUM: 77500000
PID_HIDDEN: false
PID_IS_VOLUME: true
PID_VOLUME_NOTIFY_OS: true
SSectorsUsed: 33b5d8
PID_ROLE: 2
}
SSectorsUsed: 3ba800
}
# Ord Boot Id Ext
0 0
1 f7 No

First
0

Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......0
estimatedUsedCount.....0
numPartitions..............0
Version............0

Num
3909632

Last
3909632

Used NTFS
3388888 No

Full structure dump....


{
SVersion: 0
SCylinders: 0
SDiskFormat: 1
SMbr:
0x0000 00 00 00 00 00
0x0010 00 00 00 00 00
0x0020 00 00 00 00 00
0x0030 00 00 00 00 00
0x0040 00 00 00 00 00
0x0050 00 00 00 00 00
0x0060 00 00 00 00 00
0x0070 00 00 00 00 00
0x0080 00 00 00 00 00
0x0090 00 00 00 00 00
0x00a0 00 00 00 00 00
0x00b0 00 00 00 00 00
0x00c0 00 00 00 00 00
0x00d0 00 00 00 00 00
0x00e0 00 00 00 00 00
0x00f0 00 00 00 00 00
0x0100 00 00 00 00 00
0x0110 00 00 00 00 00
0x0120 00 00 00 00 00
0x0130 00 00 00 00 00
0x0140 00 00 00 00 00
0x0150 00 00 00 00 00
0x0160 00 00 00 00 00
0x0170 00 00 00 00 00
0x0180 00 00 00 00 00
0x0190 00 00 00 00 00
0x01a0 00 00 00 00 00
0x01b0 00 00 00 00 00
0x01c0 00 00 00 00 00
0x01d0 00 00 00 00 00
0x01e0 00 00 00 00 00
0x01f0 00 00 00 00 00
0x0200
SIsSpanned: false
SOs2Name:
0x0000 00 00 00 00 00
SFingerprint: 0
SHeadsPerCyl: 0
SectorsPerTrack: 0
SRemote: false
SEndOfImagePosition: 0
SFlags: 0
SPatchedFileCount: 0
SDrive: 0
SEstimatedUsed: 0
STotalSectors: 0
SPartitions:
[
]
SSectorsUsed: 0
}
# Ord Boot Id Ext

First

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00

00 00 00 00 00

Num

Last

Used NTFS

Fixed Drives
Drive 0 TOSHIBA DT01ACA050
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

976771055
512
476938
60801
255
63

Drive 0 TOSHIBA DT01ACA050


WinNT (Active)
Total Sectors
976771055
Bytes per Sector
512
MB
476938
Cylinders
60801
Heads
255
Sectors per Track
63
Successful IO Count
17
Drive 1 SAMSUNG GT-S5570 Card 0100
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

3909632
512
1909
243
255
63

Drive 1 SAMSUNG GT-S5570


ASPI
Total Sectors
Bytes per Sector
MB
Successful IO Count

Card 0100

WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

3909632
512
1909
0
3909632
512
1909
243
255
63
5

Drive 2 Kingston DataTraveler G3 PMAP


Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

Z2FHS77FS

15646720
512
7640
973
255
63

Drive 2 Kingston DataTraveler G3 PMAP


ASPI
Total Sectors
15646720
Bytes per Sector
512

Z2FHS77FS

MB
Successful IO Count

7640
0

WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

15646720
512
7640
973
255
63
5

AsyncIo : 0
Image Devices
Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.1:
1:1
C:
C:
C: 1.1: []
NTFS
0
63

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.2:
1:2
D:
D:
D: 1.2: []
NTFS
0
244188063

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.3:
1:3
E:
E:
E: 1.3: []
NTFS
0
488376063

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.4:
1:4
F:
F:
F: 1.4: []
NTFS
0
732564063

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

2.1:
2:1
H:
H:
H: 2.1: []
FAT
1
0

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

3.1:
3:1
I:
I:
I: 3.1: [NEW VOLUME]
FAT
2
2048

Key[1]
Path
Desc
Type

G:
G:
G:
CD

Key[1]
Path
Desc
Type

@CD-R1
@CD-R1
@CD-R1 HL-DT-STDVDRAM GH24NS95
DVD

Volume attributes
=================
1.1:
Attribute dump
BiosId:128
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:TOSHIBA DT01ACA050
DiskSerialNumber:
Z2FHS77FS
VolumeSectorOffset:63
1.2:
Attribute dump
BiosId:128
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:TOSHIBA DT01ACA050
DiskSerialNumber:
Z2FHS77FS
VolumeSectorOffset:244188063
1.3:
Attribute dump
BiosId:128
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:TOSHIBA DT01ACA050
DiskSerialNumber:
Z2FHS77FS
VolumeSectorOffset:488376063
1.4:
Attribute dump
BiosId:128
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:TOSHIBA DT01ACA050
DiskSerialNumber:
Z2FHS77FS
VolumeSectorOffset:732564063
2.1:

Attribute dump
DiskModelNumber:SAMSUNG GT-S5570 Card 0100
VolumeSectorOffset:0
3.1:
Attribute dump
DiskSignature9x:2079852035
DiskSignatureNt:566823129
DiskModelNumber:Kingston DataTraveler G3 PMAP
VolumeSectorOffset:2048
80.1:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:63
80.2:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:244188063
80.3:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:488376063
80.4:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:732564063
80.5:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:976752640
80.6:
Attribute dump
DiskSignature9x:1978164454
DiskSignatureNt:153617170
DiskModelNumber:OS Volumes
VolumeSectorOffset:992397312
LargeMemoryAllocationFactory diagnostic...
==========================================
Heap available at construction: 2337189888
Current heap available:
2369077248
Total Memory:
3735375872

Allocated
DiskManager diagnostic...
=========================
Fixed Drives
Drive 0 TOSHIBA DT01ACA050
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

976771055
512
476938
60801
255
63

Drive 0 TOSHIBA DT01ACA050


WinNT (Active)
Total Sectors
976771055
Bytes per Sector
512
MB
476938
Cylinders
60801
Heads
255
Sectors per Track
63
Successful IO Count
17
Drive 1 SAMSUNG GT-S5570 Card 0100
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

3909632
512
1909
243
255
63

Drive 1 SAMSUNG GT-S5570


ASPI
Total Sectors
Bytes per Sector
MB
Successful IO Count

Card 0100

WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

3909632
512
1909
0
3909632
512
1909
243
255
63
5

Drive 2 Kingston DataTraveler G3 PMAP


Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track

Z2FHS77FS

15646720
512
7640
973
255
63

Z2FHS77FS

Drive 2 Kingston DataTraveler G3 PMAP


ASPI
Total Sectors
15646720
Bytes per Sector
512
MB
7640
Successful IO Count
0
WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

15646720
512
7640
973
255
63
5

FilesystemMounter diagnostic...
===============================
FilesystemManager diagnostic...
===============================
Volume 1
VolumePos: 1.1:
DriveLetter: C:
Description: 116.44GB Primary Disk 0 Offset
050
Z2FHS77FS
Type:
fsfNtfsWindowsXP
Name:
Volume 2
VolumePos: 3.1:
DriveLetter: I:
Description:
7.46GB Primary Disk 2 Offset
aveler G3 PMAP
Type:
fsfFat32
Name:
NEW VOLUME

31.50KB 116.44GB TOSHIBA DT01ACA

1MB

7.46GB Kingston DataTr

Volume 3
VolumePos: 1.2:
DriveLetter: D:
Description: 116.44GB Logical Disk 0 Offset 116.44GB 116.44GB TOSHIBA DT01ACA
050
Z2FHS77FS
Type:
fsfNtfsWindowsXP
Name:
Volume 4
VolumePos: 1.3:
DriveLetter: E:
Description: 116.44GB Logical Disk 0 Offset 232.88GB 116.44GB TOSHIBA DT01ACA
050
Z2FHS77FS
Type:
fsfNtfsWindowsXP
Name:
Volume 5
VolumePos: 1.4:
DriveLetter: F:
Description: 116.44GB Logical Disk 0 Offset 349.31GB 116.44GB TOSHIBA DT01ACA
050
Z2FHS77FS

Type:
Name:

fsfNtfsWindowsXP

Volume 6
VolumePos: 2.1:
DriveLetter: H:
Description:
1.86GB
Type:
fsfFat32
Name:
Volume 7
VolumePos: 80.1:
DriveLetter: C:
Description: 116.44GB Disk 79 Offset
Type:
fsfNtfsWindowsXP
Name:

31.50KB 116.44GB OS Volumes

Volume 8
VolumePos: 80.2:
DriveLetter: D:
Description: 116.44GB Disk 79 Offset 116.44GB 116.44GB OS Volumes
Type:
fsfNtfsWindowsXP
Name:
Volume 9
VolumePos: 80.3:
DriveLetter: E:
Description: 116.44GB Disk 79 Offset 232.88GB 116.44GB OS Volumes
Type:
fsfNtfsWindowsXP
Name:
Volume 10
VolumePos: 80.4:
DriveLetter: F:
Description: 116.44GB Disk 79 Offset 349.31GB 116.44GB OS Volumes
Type:
fsfNtfsWindowsXP
Name:
Volume 11
VolumePos: 80.5:
DriveLetter: I:
Description:
7.46GB Disk 79 Offset 465.75GB
Type:
fsfFat32
Name:
NEW VOLUME

7.46GB OS Volumes

Volume 12
VolumePos: 80.6:
DriveLetter: H:
Description:
1.86GB Disk 79 Offset 473.21GB
Type:
fsfFat32
Name:

1.86GB OS Volumes

LfoFilesystemManager diagnostic...
==================================
Filesystem Index: 0
Filesystem Descriptor:
ID's:
ID Type: 2

ID: C:
ID Type: 1
ID: 1.1:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 1
Filesystem Descriptor:
ID's:
ID Type: 2
ID: D:
ID Type: 1
ID: 1.2:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 2
Filesystem Descriptor:
ID's:
ID Type: 2
ID: E:
ID Type: 1
ID: 1.3:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 3
Filesystem Descriptor:
ID's:
ID Type: 2
ID: F:
ID Type: 1
ID: 1.4:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 4
Filesystem Descriptor:
ID's:
ID Type: 2
ID: G:
DriveType: 8
No FilesystemInfo structure.
Filesystem has no VolumePtr
Filesystem Index: 5
Filesystem Descriptor:
ID's:
ID Type: 2
ID: H:
ID Type: 1
ID: 2.1:

DriveType: 2
FilesystemInfo:
formatType: 3
volumeName:
Filesystem Index: 6
Filesystem Descriptor:
ID's:
ID Type: 2
ID: I:
ID Type: 1
ID: 3.1:
ID Type: 4
ID: NEW VOLUME:
DriveType: 2
FilesystemInfo:
formatType: 3
volumeName: NEW VOLUME
Filesystem Index: 7
Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.1:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 8
Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.2:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 9
Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.3:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 10
Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.4:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 11

Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.5:
ID Type: 4
ID: NEW VOLUME:
DriveType: 4
FilesystemInfo:
formatType: 3
volumeName: NEW VOLUME
Filesystem Index: 12
Filesystem Descriptor:
ID's:
ID Type: 1
ID: 80.6:
DriveType: 4
FilesystemInfo:
formatType: 3
volumeName:
Environment Variables
=====================
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\XYZ\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=XYZ-PC
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\XYZ
LOCALAPPDATA=C:\Users\XYZ\AppData\Local
LOGONSERVER=\\XYZ-PC
NUMBER_OF_PROCESSORS=4
OS=Windows_NT
Path=C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windo
ws\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\In
tel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Ma
nagement Engine Components\IPT
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 58 Stepping 9, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=3a09
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
PUBLIC=C:\Users\Public
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\XYZ\AppData\Local\Temp
TMP=C:\Users\XYZ\AppData\Local\Temp
USERDOMAIN=XYZ-PC
USERNAME=XYZ
USERPROFILE=C:\Users\XYZ
windir=C:\Windows

*********************************

Das könnte Ihnen auch gefallen