I believe it is possible to tell when a hard drive was formatted under Windows 95 by running the 'vol' command and looking at the volume serial number. We looked into this a while back and the volume serial number appears to represent some kind of offset fro a given point in time. We tested this by changing the time on our systems and formatting disks. It changes and there is a pattern. Is there any one out there who has figured this one out? ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Oct 10 2002 - 07:40:26 PDT