probably the system restore (or shadow copy, or whatever they call it now)