Home page logo
/

basics logo Security Basics mailing list archives

Re: Checking when the OS was first installed
From: Times Enemy <times () krr org>
Date: Wed, 01 Jun 2005 01:02:15 -0700

I like this a lot better than what i just posted!

Hostas.lt wrote:

On 2005-05-29 Lubrano di Ciccone, Christophe (DEF) wrote:

The date of the boot.ini file or the winnt folder (%systemroot%) may
help you.


Maybe, but since it's the configuration file for the bootloader, it is
prone to changes, so this seems very unreliable to me.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


There are system.sav and software.sav files in Windows\System32\Config which are
dated the system installation time.



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]