COEUR D'ALENE, Idaho - When waitress Amber Deahn spotted 8-year-old Shasta Groene at a Denny's restaurant around 2 a.m., something about the little girl's face was familiar.

Cautiously, carefully, she talked to the child and the man with her, bringing her a milkshake and offering her crayons to keep her occupied. The child looked so much like photos of a girl who had been missing since her mother, brother and mother's boyfriend were slain a few miles away that the waitress called police.

"It clicked in my brain," said Deahn, 24. Her restaurant and businesses across the area had been displaying photos of the girl and her brother since the youngsters disappeared six weeks earlier.

As the officers arrived and talked to the little girl early Saturday, Shasta broke down and told them her name.

The man with her, a 42-year-old registered sex offender, was arrested. But Shasta's 9-year-old brother, Dylan, remained missing Saturday and was feared dead, Kootenai County Sheriff's Capt. Ben Wolfinger said.

He said investigators believe the boy had been alive when he disappeared and were continuing to search for him, but initial information wasn't promising. He wouldn't elaborate.

The man Shasta had been eating onion rings, cheese sticks and chicken fingers with was identified by authorities as Joseph Edward Duncan III, of Fargo, N.D. He was charged Saturday with kidnapping and was being held without bond, with more charges possible, Wolfinger said.

It was not known whether Duncan had any connection to the victims.

"We don't have any idea who Duncan is, other than a very, very sick individual. Sick and stupid to go to a Denny's at 2 a.m. with a child," Bob Price, Shasta Groene's paternal uncle, said by telephone from Tacoma, Wash.

Shasta's father, Steve Groene, and her oldest brother, Vance, spent much of the day Saturday at a hospital with Shasta. They did not make any statements to reporters, but when asked when he was driving away from the hospital if he was relieved, Vance Groene said, "more than relieved."

Duncan had seemed jittery and jumpy, Deahn said, not unusual for Denny's at 2 a.m., the hour that bars close in Idaho. But she wondered about the little girl.

The waitress said she gave Shasta crayons and coloring papers and a mask from the movie "Madagascar" to keep her busy while she talked to the restaurant manager and called police.

"I was trying to figure out a way to keep them there so the officers would have time to get there," Deahn said.

She offered the girl dessert and then took her time making a vanilla milkshake. She said she and manager Linda Olsen were careful not to alert other co-workers or customers to the situation as they discussed whether the girl might be the missing Shasta.

Duncan had an outstanding warrant for failing to register as a high-risk sex offender and was facing charges of molesting a 6-year-old boy in Minnesota. He had been released on bail in April, a few weeks before the children disappeared.

When Deahn spotted the two, they were less than 10 miles from the home where Shasta's mother and two others were discovered bound and bludgeoned to death on May 16.

It was not yet known where the girl had spent the past six weeks. She was being interviewed at the hospital Saturday but appeared physically well, Wolfinger said.

"She's a little girl," Wolfinger said. "Obviously she's been through a pretty traumatic time."

Tom Kraus, Brenda Groene's great-uncle in Whitefish, Mont., said family members were elated by the news.

"Obviously, we were very excited they found Shasta," Kraus said. "We are hopeful they can find Dylan. We're very happy those folks at Denny's recognized her and that they found her."

Dylan and Shasta had been missing since at least May 16, when sheriff's deputies responded to their rural home after a neighbor reported that dogs were barking and the door of one vehicle was open but no one was in sight.

The deputies found the bound, brutalized bodies of Brenda Groene, 40, Slade Groene, 13, and Mark McKenzie, 37.