RE: When the program was installed

[<Nichol.Deaddis () TelecityRedbus com>]

Go to program files and check the last modified date for the program's
folder.

Nichol



--  
Nichol Deaddis
Microsoft Systems Engineer

TelecityRedbus UK Limited
10th Floor
6&7 Harbour Exchange Square
London E14 9GE
United Kingdom

Tel: +44 207 005 6017
Fax: +44 207 005 6060
Mob: 
Email: Nichol.Deaddis () TelecityRedbus com

www.telecityredbus.com

Europe's leading independent provider of colocation, data centre, hosting and connectivity services.
Winner Best Pan European Data Centre Operator Award 2007, Data Centres Europe Awards.
TelecityRedbus UK Limited. Registered in England 3607764  Registered Office: Masters House, 107 Hammersmith Road, 
London W14 0QH UK.-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Juan B
Sent: 06 June 2007 12:15
To: security-basics () securityfocus com
Subject: When the program was installed

Hi All !

I am working with a win 2000 pro machine.
I need to do some basic forensics and know when a
particilar program was installed, in which date and
hour (optional). the program is seen in the Add and
remove programs.

How can I know when it was installed?

Thanks a lot.

Juan


 
________________________________________________________________________
____________
We won't tell. Get more on shows you hate to love 
(and love to hate): Yahoo! TV's Guilty Pleasures list.
http://tv.yahoo.com/collections/265 
This e-mail is intended only for the use of the addressees named above and may be confidential. 
If you are not an addressee you must not use any information contained in nor copy it nor inform any person other than 
the addressees of its existence or contents. 

please consider the environment before printing this e-mail.