quick search for NTFS volumn files