PSINFO from sysinternals has a "Install date:" field, I know it works in win2k and xp but I don't know about win9x-Me-NT. I never tested it to make sure it's completely right but it shows about the correct date on my win2k and xp computer. > Given the situation of a Windows (any flavour from 95 to 2000) partition > which has been Norton Ghosted to a laptop, can anyone think of a way to > determine when (date) that ghosting took place, or failing that when the > system was booted for the first time thereafter (assuming that it has been > booted a number of times after that)? ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Apr 03 2002 - 04:59:17 PST