So I've noticed there is a little debate/confusion about the allhives function and I'm right in there. I hooked a drive up via USB today and used allhives for the first time. As seen in the attached image. It shows C:\windows as the only installation. That's fine. I've read that Spybot does not find inactive installations. But that isn't what is bothering me. I only have 2 users on my machine. Allan & Administrator... Possibly the system users that are located toward the bottom. However, the USB drive is E:\ but the users are being displayed as C:\documents and Settings instead of E:\documents and Settings. Anyone got an answer?. It's finding some of the spyware I knew was on this machine... Fraud.Antivirus08 etc.... and I know that if it did load the default user's registry, it's going to clean everything, I'm just curious is it a bug? AND/OR Is it finding everything it should be finding since it doesn't show E:\windows.