Byte:

IIRC she said she uninstalled Norton at the beginning of the thread...

To be honest with everyone... This isn't a "how did this occur" issue... It's an "informal" forensic exercise... That comes from private conversations... Ideas as to how it happened aren't relevant... Ideas as to how to extract the dates of the events from the log files of the application mentioned are welcome, (if they even exist). I've asked Trend for assistance in extracting the dates... I'm not holding my breath... So if someone knows if they are there and how to decode them I'd appreciate it if you could clue me in...