[prev in list] [next in list] [prev in thread] [next in thread] 

List:       security-basics
Subject:    Re: Checking when the OS was first installed
From:       "Hostas.lt" <klientai () hostas ! lt>
Date:       2005-05-31 13:23:35
Message-ID: 20050531162335.io346uay5eck4kso () webmail ! hostas ! lt
[Download RAW message or body]

> On 2005-05-29 Lubrano di Ciccone, Christophe (DEF) wrote:
>> The date of the boot.ini file or the winnt folder (%systemroot%) may
>> help you.
>
> Maybe, but since it's the configuration file for the bootloader, it is
> prone to changes, so this seems very unreliable to me.
>
> Regards
> Ansgar Wiechers
> --
> "All vulnerabilities deserve a public fear period prior to patches
> becoming available."
> --Jason Coombs on Bugtraq
>

There are system.sav and software.sav files in Windows\System32\Config 
which are
dated the system installation time.

[prev in list] [next in list] [prev in thread] [next in thread]