Thanks for the help, BW!

Quote Originally Posted by ByTeWrangler View Post
Just a thought.. Lot of AV's have an option of keeping original time stamp (accessed because they will access the file to scan it).. I am sure there are software's out there that let you change time stams the way you want..
I think that's probably the case
I have dealt with a similar case on Vista (enterprise, shouldn’t matter though) and during my course of researching the only way a file will have a newer modified time (or uneven time stamps) is if the file is moved from different machine.

You can confirm this by checking owner / creator of the file that way at least you can see if it’s by the same user at least.
Single User
I am sure you can access the file and edit it through live CD without the host OS knowing about it..

What if the file was changed and time stamps reverted or something..

EDIT :


Lot of software's out there to let you change the time stamp of the file to what you want

http://www.codeproject.com/KB/files/timestamp.aspx

http://www.lifespy.com/2007/windows-...le-timestamps/



*I'm, maybe off the point here; for that please forgive me.. LONG WEEKEND AT WORK :x"
We're pretty sure is was not done intentionally.