What was the BIOS date & time of the system?
Could the OS install date in the registry of 2006 be because of an upgrade that has taken place? and there can be files on the drive from 1999 and up?
That's what I was thinking, either an upgrade or a "fix" of a corrupted o/s by laying windows over itself.
These files that are on the drive from 1999 and on are exe, png, jpg, powerpoint 97/98 templates word templates, program files, it looks to be a mix of everything. For the registry to show the OS install date in 2006 and there to be files from 7 years prior is odd.
It is difficult without knowing the exact details but finding template files from 99 would be consistent with an old version of Office being installed onto a new machine. The dates would be from the original installation media, e.g. 1999.
From memory I think this would tie in with Office XP.
For the executables you should check out the version information in the PE header and the optional Version information section. To do this I can recomend http//
Say the old version of office was installed onto the new system if the dates from the original installation media are 1999 once installed wouldnt the created time file system meta data for those files be that of when they were installed on the system. Thanks for the help everyone
I'm pretty sure it would munge the create date to match that of the file.
Back in the 90's the date/time stamp on a file was the only way to check the versions of files, remember the MSDOS timestamp, so when stuff installed the installation process would munge the timestamp to match the product release.
It has only been since Windows 2000, mostly XP or later, the actual version information on a file has been used exclusively. (early patches never rev'd the version number).
Office 2000 was released in 1999 and from my copy the main cab file is timestamped 25 March 1999.
Best way is to get hold of a copy and install it yourself and check.
Alright thanks alot for the help everyone