Explorer
Pick an item in the tree to find out what it is for, what it contains, where it lives, which logs go with it and which Microsoft sources document it. Windows has more than 180,000 files: this documentation covers the most common native items. The risk level is shown each time, for information.
Browse by location
Each item is counted in one zone only.
- C:\36 itemsRoot of the system drive: top-level folders, paging and hibernation files, recycle bin, upgrade folders.
- C:\Windows88 itemsThe operating system, excluding System32: fonts, logs, updates, drivers, component store.
- C:\Windows\System3291 itemsThe core of the system: libraries, executables, drivers, registry and event logs.
- C:\ProgramData18 itemsApplication and service data shared by all users.
- C:\Users36 itemsUser profiles: documents, settings and application data (AppData).
- Logs50 itemsFiles that record events for diagnostics, wherever they live on the disk.
By type
Folders167
- C:\
- C:$GetCurrent
- C:$Recycle.Bin
- C:$Recycle.BinS-1-5-21-…
- C:$Recycle.BinS-1-5-18
- C:$SysReset
- C:$WINDOWS.~BT
- C:$WINDOWS.~BTSourcesPanther
- C:$Windows.~WS
- C:$WinREAgent
- C:Config.Msi
- C:Documents and Settings
- \EFI
- EFIMicrosoftBoot
- C:inetpub
- C:inetpublogsLogFiles
- C:inetpublogsLogFilesW3SVC1
- C:inetpubwwwroot
- C:PerfLogs
- C:Program Files
- C:Program FilesWindowsApps
- C:Program FilesWindowsPowerShellModules
- C:Program Files (x86)
- C:ProgramData
- C:ProgramDataMicrosoft
- C:ProgramDataMicrosoftCrypto
- C:ProgramDataMicrosoftDiagnosis
- C:ProgramDataMicrosoftNetworkDownloader
- C:ProgramDataMicrosoftSearch
- C:ProgramDataMicrosoftWindows
- C:ProgramDataMicrosoftWindowsHyper-V
- C:ProgramDataMicrosoftWindowsStart Menu
- C:ProgramDataMicrosoftWindowsStart MenuProgramsStartUp
- C:ProgramDataMicrosoftWindowsWER
- C:ProgramDataMicrosoftWindowsWERReportArchive
- C:ProgramDataMicrosoftWindowsWERReportQueue
- C:ProgramDataMicrosoftWindows Defender
- C:ProgramDataMicrosoftWindows DefenderSupport
- C:ProgramDataPackage Cache
- C:Recovery
- C:RecoveryWindowsRE
- C:System Volume Information
- C:Users
- C:Users<utilisateur>
- C:Users<utilisateur>AppData
- C:Users<utilisateur>AppDataLocal
- C:Users<utilisateur>AppDataLocalCrashDumps
- C:Users<utilisateur>AppDataLocalMicrosoft
- C:Users<utilisateur>AppDataLocalMicrosoftWindows
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsExplorer
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsINetCache
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsTemporary Internet Files
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsTemporary Internet FilesLow
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsWebCache
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsWER
- C:Users<utilisateur>AppDataLocalPackages
- C:Users<utilisateur>AppDataLocalTemp
- C:Users<utilisateur>AppDataLocalLow
- C:Users<utilisateur>AppDataRoaming
- C:Users<utilisateur>AppDataRoamingMicrosoft
- C:Users<utilisateur>AppDataRoamingMicrosoftCredentials
- C:Users<utilisateur>AppDataRoamingMicrosoftProtect
- C:Users<utilisateur>AppDataRoamingMicrosoftWindows
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsRecent
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsStart MenuProgramsStartup
- C:Users<utilisateur>Desktop
- C:Users<utilisateur>Documents
- C:Users<utilisateur>Downloads
- C:UsersAll Users
- C:UsersDefault
- C:UsersDefault User
- C:UsersPublic
- C:UsersPublicDocumentsHyper-VVirtual Hard Disks
- C:Windows
- C:WindowsAppPatch
- C:Windowsassembly
- C:WindowsBoot
- C:WindowsCSC
- C:WindowsCursors
- C:Windowsdebug
- C:Windowsdebugadpreplogs
- C:Windowsdebugusermode
- C:WindowsFonts
- C:WindowsGlobalization
- C:WindowsIME
- C:WindowsImmersiveControlPanel
- C:WindowsINF
- C:WindowsInstaller
- C:WindowsLiveKernelReports
- C:WindowsLogs
- C:WindowsLogsCBS
- C:WindowsLogsDISM
- C:WindowsLogsDPX
- C:WindowsLogsMeasuredBoot
- C:WindowsLogsMoSetup
- C:WindowsLogsWindowsUpdate
- C:WindowsMedia
- C:WindowsMicrosoft.NET
- C:WindowsMinidump
- C:WindowsNTDS
- C:WindowsPanther
- C:WindowsPantherUnattendGC
- C:WindowsPolicyDefinitions
- C:WindowsPrefetch
- C:WindowsResources
- C:WindowsSecurity
- C:WindowsServiceProfiles
- C:Windowsservicing
- C:WindowsSoftwareDistribution
- C:WindowsSoftwareDistributionDataStore
- C:WindowsSoftwareDistributionDownload
- C:WindowsSystem
- C:WindowsSystem32
- C:WindowsSystem32catroot
- C:WindowsSystem32catroot2
- C:WindowsSystem32CodeIntegrity
- C:WindowsSystem32config
- C:WindowsSystem32configRegBack
- C:WindowsSystem32configSystemProfile
- C:WindowsSystem32dhcp
- C:WindowsSystem32dhcpbackup
- C:WindowsSystem32dns
- C:WindowsSystem32drivers
- C:WindowsSystem32driversetc
- C:WindowsSystem32DriverStore
- C:WindowsSystem32DriverStoreFileRepository
- C:WindowsSystem32GroupPolicy
- C:WindowsSystem32GroupPolicyUsers
- C:WindowsSystem32icsxml
- C:WindowsSystem32inetsrv
- C:WindowsSystem32LogFiles
- C:WindowsSystem32LogFilesFirewall
- C:WindowsSystem32LogFilesHTTPERR
- C:WindowsSystem32LogFilesSum
- C:WindowsSystem32LogFilesWMI
- C:WindowsSystem32Microsoft
- C:WindowsSystem32oobe
- C:WindowsSystem32ras
- C:WindowsSystem32Recovery
- C:WindowsSystem32restore
- C:WindowsSystem32spool
- C:WindowsSystem32spooldrivers
- C:WindowsSystem32spoolPRINTERS
- C:WindowsSystem32sru
- C:WindowsSystem32Sysprep
- C:WindowsSystem32SysprepPanther
- C:WindowsSystem32Tasks
- C:WindowsSystem32wbem
- C:WindowsSystem32wbemLogs
- C:WindowsSystem32wbemRepository
- C:WindowsSystem32WindowsPowerShellv1.0
- C:WindowsSystem32WindowsPowerShellv1.0Modules
- C:WindowsSystem32winevt
- C:WindowsSystem32winevtLogs
- C:WindowsSYSVOL
- C:WindowsSYSVOLdomain
- C:WindowsSYSVOLdomainPolicies
- C:WindowsSYSVOLdomainPolicies{GUID}
- C:WindowsSYSVOLdomainPoliciesPolicyDefinitions
- C:WindowsSYSVOLdomainscripts
- C:WindowsSYSVOLsysvol
- C:WindowsSysWOW64
- C:WindowsTasks
- C:WindowsTemp
- C:WindowsWeb
- C:WindowsWinSxS
- C:Windows.old
Files52
- EFIMicrosoftBootBCD
- EFIMicrosoftBootbootmgfw.efi
- C:ProgramDataMicrosoftSearchDataApplicationsWindowsWindows.edb
- C:RecoveryWindowsREWinre.wim
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsUsrClass.dat
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsPowerShellPSReadLineConsoleHost_history.txt
- C:Users<utilisateur>NTUSER.DAT
- C:UsersDefaultNTUSER.DAT
- C:WindowsLogsCBSCbsPersist_<AAAAMMJJhhmmss>.cab
- C:WindowsNTDSedb.chk
- C:WindowsNTDSntds.dit
- C:WindowsPanthermiglog.xml
- C:WindowsPantherunattend.xml
- C:WindowsSecurityDatabasesecedit.sdb
- C:WindowsSystem32configDEFAULT
- C:WindowsSystem32configSAM
- C:WindowsSystem32configSECURITY
- C:WindowsSystem32configSOFTWARE
- C:WindowsSystem32configSYSTEM
- C:WindowsSystem32dhcpdhcp.mdb
- C:WindowsSystem32dns<zone>.dns
- C:WindowsSystem32dnscache.dns
- C:WindowsSystem32driversetchosts
- C:WindowsSystem32driversetclmhosts.sam
- C:WindowsSystem32driversetcnetworks
- C:WindowsSystem32driversetcprotocol
- C:WindowsSystem32driversetcservices
- C:WindowsSystem32GroupPolicyMachineRegistry.pol
- C:WindowsSystem32GroupPolicyUserRegistry.pol
- C:WindowsSystem32inetsrvconfigapplicationHost.config
- C:WindowsSystem32RecoveryReAgent.xml
- C:WindowsSystem32csrss.exe
- C:WindowsSystem32hal.dll
- C:WindowsSystem32lsass.exe
- C:WindowsSystem32ntoskrnl.exe
- C:WindowsSystem32services.exe
- C:WindowsSystem32smss.exe
- C:WindowsSystem32svchost.exe
- C:WindowsSystem32wininit.exe
- C:WindowsSystem32winload.efi
- C:WindowsSystem32winlogon.exe
- C:WindowsSYSVOLdomainPolicies{GUID}GPT.INI
- C:Windowsexplorer.exe
- C:WindowsMEMORY.DMP
- C:Windowsregedit.exe
- C:Windowssystem.ini
- C:Windowswin.ini
- C:bootmgr
- C:DumpStack.log.tmp
- C:hiberfil.sys
- C:pagefile.sys
- C:swapfile.sys
Logs50
- C:inetpublogsLogFilesW3SVC1u_ex*.log
- C:ProgramDataMicrosoftWindows DefenderSupportMPLog-<AAAAMMJJ>-<HHMMSS>.log
- C:Users<utilisateur>DesktopWindowsUpdate.log
- C:Windowsdebugusermodegpsvc.log
- C:Windowsdebugusermodeuserenv.log
- C:Windowsdebugdcpromo.log
- C:Windowsdebugdcpromoui.log
- C:WindowsdebugDfsr*.log
- C:Windowsdebugmrt.log
- C:Windowsdebugnetlogon.bak
- C:Windowsdebugnetlogon.log
- C:WindowsdebugNetSetup.LOG
- C:WindowsINFsetupapi.app.log
- C:WindowsINFsetupapi.dev.log
- C:WindowsINFsetupapi.setup.log
- C:WindowsLogsCBSCBS.log
- C:WindowsLogsDISMdism.log
- C:WindowsLogsWindowsUpdateWindowsUpdate.*.etl
- C:WindowsNTDSedb.log
- C:WindowsPanthersetupact.log
- C:WindowsPanthersetuperr.log
- C:WindowsSecurityLogsscesrv.log
- C:WindowsSoftwareDistributionReportingEvents.log
- C:WindowsSystem32dhcpDhcpSrvLog-<jour>.log
- C:WindowsSystem32dnsdns.log
- C:WindowsSystem32LogFilesFirewallpfirewall.log
- C:WindowsSystem32LogFilesSrtSrtTrail.txt
- C:WindowsSystem32winevtLogsApplication.evtx
- C:WindowsSystem32winevtLogsDFS Replication.evtx
- C:WindowsSystem32winevtLogsDirectory Service.evtx
- C:WindowsSystem32winevtLogsDNS Server.evtx
- C:WindowsSystem32winevtLogsForwardedEvents.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-GroupPolicy%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-PowerShell%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-PrintService%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TaskScheduler%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-Windows Defender%4Operational.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
- C:WindowsSystem32winevtLogsMicrosoft-Windows-WindowsUpdateClient%4Operational.evtx
- C:WindowsSystem32winevtLogsSecurity.evtx
- C:WindowsSystem32winevtLogsSetup.evtx
- C:WindowsSystem32winevtLogsSystem.evtx
- C:WindowsSystem32winevtLogsWindows PowerShell.evtx
- C:WindowsDtcInstall.log
- C:Windowsntbtlog.txt
- C:WindowsPFRO.log
- C:Windowssetupact.log
- C:Windowssetuperr.log
Getting started
- C:WindowsSystem32Core of the system: libraries, drivers, tools and configuration. On 64-bit Windows it holds the 64-bit binaries.
- C:WindowsWinSxSWinSxS: the Windows component store, holding system file versions for installing, repairing and updating. Never empty it by hand.
- C:ProgramDataApplication data shared by all users of the machine (configuration, caches, logs); hidden by default.
- C:Users<utilisateur>AppDataHidden profile folder where applications keep per-user data, in three branches: Local, LocalLow and Roaming.
- C:WindowsLogsCBSCBS.logMain Component-Based Servicing log: update installation and detailed sfc /scannow results ([SR] entries).
- C:WindowsSystem32winevtLogsFolder holding the Windows event logs in .evtx format, read by Event Viewer.
Breakdown by risk level
- Safe26
- Caution162
- Do not touch81
Safe26
- C:inetpublogsLogFilesW3SVC1u_ex*.logSafe
- C:PerfLogsSafe
- C:ProgramDataMicrosoftWindowsWERSafe
- C:ProgramDataMicrosoftWindowsWERReportArchiveSafe
- C:ProgramDataMicrosoftWindowsWERReportQueueSafe
- C:Users<utilisateur>AppDataLocalCrashDumpsSafe
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsExplorerSafe
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsINetCacheSafe
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsTemporary Internet FilesLowSafe
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsWERSafe
- C:Users<utilisateur>AppDataLocalTempSafe
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsRecentSafe
- C:Users<utilisateur>DesktopWindowsUpdate.logSafe
- C:Windowsdebugusermodegpsvc.logSafe
- C:WindowsLiveKernelReportsSafe
- C:WindowsLogsCBSCbsPersist_<AAAAMMJJhhmmss>.cabSafe
- C:WindowsMinidumpSafe
- C:WindowsPrefetchSafe
- C:WindowsSoftwareDistributionDownloadSafe
- C:WindowsSystem32driversetclmhosts.samSafe
- C:WindowsSystem32LogFilesSrtSrtTrail.txtSafe
- C:WindowsTempSafe
- C:WindowsMEMORY.DMPSafe
- C:Windowsntbtlog.txtSafe
- C:Windowssetupact.logSafe
- C:Windowssetuperr.logSafe
Caution162
- C:\Caution
- C:$GetCurrentCaution
- C:$Recycle.BinCaution
- C:$Recycle.BinS-1-5-18Caution
- C:$SysResetCaution
- C:$WINDOWS.~BTCaution
- C:$WINDOWS.~BTSourcesPantherCaution
- C:$Windows.~WSCaution
- C:$WinREAgentCaution
- C:Config.MsiCaution
- C:inetpublogsLogFilesCaution
- C:inetpublogsLogFilesW3SVC1Caution
- C:inetpubwwwrootCaution
- C:Program FilesCaution
- C:Program FilesWindowsPowerShellModulesCaution
- C:Program Files (x86)Caution
- C:ProgramDataCaution
- C:ProgramDataMicrosoftCaution
- C:ProgramDataMicrosoftDiagnosisCaution
- C:ProgramDataMicrosoftNetworkDownloaderCaution
- C:ProgramDataMicrosoftSearchCaution
- C:ProgramDataMicrosoftSearchDataApplicationsWindowsWindows.edbCaution
- C:ProgramDataMicrosoftWindowsCaution
- C:ProgramDataMicrosoftWindowsStart MenuCaution
- C:ProgramDataMicrosoftWindowsStart MenuProgramsStartUpCaution
- C:ProgramDataMicrosoftWindows DefenderSupportCaution
- C:ProgramDataMicrosoftWindows DefenderSupportMPLog-<AAAAMMJJ>-<HHMMSS>.logCaution
- C:ProgramDataPackage CacheCaution
- C:UsersCaution
- C:Users<utilisateur>Caution
- C:Users<utilisateur>AppDataCaution
- C:Users<utilisateur>AppDataLocalCaution
- C:Users<utilisateur>AppDataLocalMicrosoftCaution
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsCaution
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsTemporary Internet FilesCaution
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsWebCacheCaution
- C:Users<utilisateur>AppDataLocalPackagesCaution
- C:Users<utilisateur>AppDataLocalLowCaution
- C:Users<utilisateur>AppDataRoamingCaution
- C:Users<utilisateur>AppDataRoamingMicrosoftCaution
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsCaution
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsStart MenuProgramsStartupCaution
- C:Users<utilisateur>AppDataRoamingMicrosoftWindowsPowerShellPSReadLineConsoleHost_history.txtCaution
- C:Users<utilisateur>DesktopCaution
- C:Users<utilisateur>DocumentsCaution
- C:Users<utilisateur>DownloadsCaution
- C:UsersDefaultCaution
- C:UsersDefaultNTUSER.DATCaution
- C:UsersPublicCaution
- C:UsersPublicDocumentsHyper-VVirtual Hard DisksCaution
- C:WindowsCSCCaution
- C:WindowsCursorsCaution
- C:WindowsdebugCaution
- C:WindowsdebugadpreplogsCaution
- C:WindowsdebugusermodeCaution
- C:Windowsdebugusermodeuserenv.logCaution
- C:Windowsdebugdcpromo.logCaution
- C:Windowsdebugdcpromoui.logCaution
- C:WindowsdebugDfsr*.logCaution
- C:Windowsdebugmrt.logCaution
- C:Windowsdebugnetlogon.bakCaution
- C:Windowsdebugnetlogon.logCaution
- C:WindowsdebugNetSetup.LOGCaution
- C:WindowsFontsCaution
- C:WindowsIMECaution
- C:WindowsINFsetupapi.app.logCaution
- C:WindowsINFsetupapi.dev.logCaution
- C:WindowsINFsetupapi.setup.logCaution
- C:WindowsLogsCaution
- C:WindowsLogsCBSCaution
- C:WindowsLogsCBSCBS.logCaution
- C:WindowsLogsDISMCaution
- C:WindowsLogsDISMdism.logCaution
- C:WindowsLogsDPXCaution
- C:WindowsLogsMeasuredBootCaution
- C:WindowsLogsMoSetupCaution
- C:WindowsLogsWindowsUpdateCaution
- C:WindowsLogsWindowsUpdateWindowsUpdate.*.etlCaution
- C:WindowsMediaCaution
- C:WindowsPantherCaution
- C:WindowsPantherUnattendGCCaution
- C:WindowsPanthermiglog.xmlCaution
- C:WindowsPanthersetupact.logCaution
- C:WindowsPanthersetuperr.logCaution
- C:WindowsPantherunattend.xmlCaution
- C:WindowsPolicyDefinitionsCaution
- C:WindowsResourcesCaution
- C:WindowsSecurityLogsscesrv.logCaution
- C:WindowsSoftwareDistributionCaution
- C:WindowsSoftwareDistributionDataStoreCaution
- C:WindowsSoftwareDistributionReportingEvents.logCaution
- C:WindowsSystemCaution
- C:WindowsSystem32catroot2Caution
- C:WindowsSystem32configRegBackCaution
- C:WindowsSystem32dhcpCaution
- C:WindowsSystem32dhcpbackupCaution
- C:WindowsSystem32dhcpDhcpSrvLog-<jour>.logCaution
- C:WindowsSystem32dnsCaution
- C:WindowsSystem32dns<zone>.dnsCaution
- C:WindowsSystem32dnscache.dnsCaution
- C:WindowsSystem32dnsdns.logCaution
- C:WindowsSystem32driversetcCaution
- C:WindowsSystem32driversetchostsCaution
- C:WindowsSystem32driversetcnetworksCaution
- C:WindowsSystem32driversetcprotocolCaution
- C:WindowsSystem32driversetcservicesCaution
- C:WindowsSystem32GroupPolicyCaution
- C:WindowsSystem32GroupPolicyMachineRegistry.polCaution
- C:WindowsSystem32GroupPolicyUserRegistry.polCaution
- C:WindowsSystem32GroupPolicyUsersCaution
- C:WindowsSystem32icsxmlCaution
- C:WindowsSystem32inetsrvconfigapplicationHost.configCaution
- C:WindowsSystem32LogFilesCaution
- C:WindowsSystem32LogFilesFirewallCaution
- C:WindowsSystem32LogFilesFirewallpfirewall.logCaution
- C:WindowsSystem32LogFilesHTTPERRCaution
- C:WindowsSystem32LogFilesSumCaution
- C:WindowsSystem32LogFilesWMICaution
- C:WindowsSystem32oobeCaution
- C:WindowsSystem32rasCaution
- C:WindowsSystem32RecoveryCaution
- C:WindowsSystem32restoreCaution
- C:WindowsSystem32spoolCaution
- C:WindowsSystem32spooldriversCaution
- C:WindowsSystem32spoolPRINTERSCaution
- C:WindowsSystem32sruCaution
- C:WindowsSystem32SysprepCaution
- C:WindowsSystem32SysprepPantherCaution
- C:WindowsSystem32wbemLogsCaution
- C:WindowsSystem32winevtCaution
- C:WindowsSystem32winevtLogsCaution
- C:WindowsSystem32winevtLogsApplication.evtxCaution
- C:WindowsSystem32winevtLogsDFS Replication.evtxCaution
- C:WindowsSystem32winevtLogsDirectory Service.evtxCaution
- C:WindowsSystem32winevtLogsDNS Server.evtxCaution
- C:WindowsSystem32winevtLogsForwardedEvents.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-GroupPolicy%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-PowerShell%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-PrintService%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TaskScheduler%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-Windows Defender%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtxCaution
- C:WindowsSystem32winevtLogsMicrosoft-Windows-WindowsUpdateClient%4Operational.evtxCaution
- C:WindowsSystem32winevtLogsSecurity.evtxCaution
- C:WindowsSystem32winevtLogsSetup.evtxCaution
- C:WindowsSystem32winevtLogsSystem.evtxCaution
- C:WindowsSystem32winevtLogsWindows PowerShell.evtxCaution
- C:WindowsSYSVOLdomainPoliciesPolicyDefinitionsCaution
- C:WindowsSYSVOLdomainscriptsCaution
- C:WindowsTasksCaution
- C:WindowsWebCaution
- C:WindowsDtcInstall.logCaution
- C:WindowsPFRO.logCaution
- C:Windowsregedit.exeCaution
- C:Windowssystem.iniCaution
- C:Windowswin.iniCaution
- C:Windows.oldCaution
- C:hiberfil.sysCaution
- C:pagefile.sysCaution
- C:swapfile.sysCaution
Do not touch81
- C:$Recycle.BinS-1-5-21-…Do not touch
- C:Documents and SettingsDo not touch
- \EFIDo not touch
- EFIMicrosoftBootDo not touch
- EFIMicrosoftBootBCDDo not touch
- EFIMicrosoftBootbootmgfw.efiDo not touch
- C:inetpubDo not touch
- C:Program FilesWindowsAppsDo not touch
- C:ProgramDataMicrosoftCryptoDo not touch
- C:ProgramDataMicrosoftWindowsHyper-VDo not touch
- C:ProgramDataMicrosoftWindows DefenderDo not touch
- C:RecoveryDo not touch
- C:RecoveryWindowsREDo not touch
- C:RecoveryWindowsREWinre.wimDo not touch
- C:System Volume InformationDo not touch
- C:Users<utilisateur>AppDataLocalMicrosoftWindowsUsrClass.datDo not touch
- C:Users<utilisateur>AppDataRoamingMicrosoftCredentialsDo not touch
- C:Users<utilisateur>AppDataRoamingMicrosoftProtectDo not touch
- C:Users<utilisateur>NTUSER.DATDo not touch
- C:UsersAll UsersDo not touch
- C:UsersDefault UserDo not touch
- C:WindowsDo not touch
- C:WindowsAppPatchDo not touch
- C:WindowsassemblyDo not touch
- C:WindowsBootDo not touch
- C:WindowsGlobalizationDo not touch
- C:WindowsImmersiveControlPanelDo not touch
- C:WindowsINFDo not touch
- C:WindowsInstallerDo not touch
- C:WindowsMicrosoft.NETDo not touch
- C:WindowsNTDSDo not touch
- C:WindowsNTDSedb.chkDo not touch
- C:WindowsNTDSedb.logDo not touch
- C:WindowsNTDSntds.ditDo not touch
- C:WindowsSecurityDo not touch
- C:WindowsSecurityDatabasesecedit.sdbDo not touch
- C:WindowsServiceProfilesDo not touch
- C:WindowsservicingDo not touch
- C:WindowsSystem32Do not touch
- C:WindowsSystem32catrootDo not touch
- C:WindowsSystem32CodeIntegrityDo not touch
- C:WindowsSystem32configDo not touch
- C:WindowsSystem32configSystemProfileDo not touch
- C:WindowsSystem32configDEFAULTDo not touch
- C:WindowsSystem32configSAMDo not touch
- C:WindowsSystem32configSECURITYDo not touch
- C:WindowsSystem32configSOFTWAREDo not touch
- C:WindowsSystem32configSYSTEMDo not touch
- C:WindowsSystem32dhcpdhcp.mdbDo not touch
- C:WindowsSystem32driversDo not touch
- C:WindowsSystem32DriverStoreDo not touch
- C:WindowsSystem32DriverStoreFileRepositoryDo not touch
- C:WindowsSystem32inetsrvDo not touch
- C:WindowsSystem32MicrosoftDo not touch
- C:WindowsSystem32RecoveryReAgent.xmlDo not touch
- C:WindowsSystem32TasksDo not touch
- C:WindowsSystem32wbemDo not touch
- C:WindowsSystem32wbemRepositoryDo not touch
- C:WindowsSystem32WindowsPowerShellv1.0Do not touch
- C:WindowsSystem32WindowsPowerShellv1.0ModulesDo not touch
- C:WindowsSystem32csrss.exeDo not touch
- C:WindowsSystem32hal.dllDo not touch
- C:WindowsSystem32lsass.exeDo not touch
- C:WindowsSystem32ntoskrnl.exeDo not touch
- C:WindowsSystem32services.exeDo not touch
- C:WindowsSystem32smss.exeDo not touch
- C:WindowsSystem32svchost.exeDo not touch
- C:WindowsSystem32wininit.exeDo not touch
- C:WindowsSystem32winload.efiDo not touch
- C:WindowsSystem32winlogon.exeDo not touch
- C:WindowsSYSVOLDo not touch
- C:WindowsSYSVOLdomainDo not touch
- C:WindowsSYSVOLdomainPoliciesDo not touch
- C:WindowsSYSVOLdomainPolicies{GUID}Do not touch
- C:WindowsSYSVOLdomainPolicies{GUID}GPT.INIDo not touch
- C:WindowsSYSVOLsysvolDo not touch
- C:WindowsSysWOW64Do not touch
- C:WindowsWinSxSDo not touch
- C:Windowsexplorer.exeDo not touch
- C:bootmgrDo not touch
- C:DumpStack.log.tmpDo not touch