/*/AppData/Local/ElevatedDiagnostics
/*/AppData/Local/Microsoft/Windows/UsrClass.dat
/*/AppData/Local/Microsoft/Windows/UsrClass.dat.LOG1
/*/AppData/Local/Microsoft/Windows/UsrClass.dat.LOG2
/*/NTUSER.DAT
/*/ntuser.dat.LOG1
/*/ntuser.dat.LOG2