Re: Checking when the OS was first installed

[Times Enemy <times () krr org>]

I like this a lot better than what i just posted!

Hostas.lt wrote:

> > On 2005-05-29 Lubrano di Ciccone, Christophe (DEF) wrote:
> >
> > > The date of the boot.ini file or the winnt folder (%systemroot%) may
> > > help you.
> >
> >
> > Maybe, but since it's the configuration file for the bootloader, it is
> > prone to changes, so this seems very unreliable to me.
> >
> > Regards
> > Ansgar Wiechers
> > --
> > "All vulnerabilities deserve a public fear period prior to patches
> > becoming available."
> > --Jason Coombs on Bugtraq
>
> There are system.sav and software.sav files in Windows\System32\Config 
> which are
> dated the system installation time.