Hi guys,
Basically we have a computer which has been connected to the internet in 2 different ways A broadband connection and a USB Dongle.
Now we know that the broadband connection was installed on a particular date, and to assume any content relating to the use of the internet, that was prior to this date, would be a result of the use of the Dongle.
However, my question is this; Does anyone know of any way of telling if the Dongle was used before this date? It is the most logical conclusion, but we are trying to look for definitive proof of its use (the client was not sold on the conclusion) rather than the use of a different connection or such.
Thanks
Can you not check when the USB dongle was installed?
The ISP should have logs when it was first used.
The broadband can actually be live before the official activation date given by the ISP. I have been able to use my ADSL connection 2/3 days before 02 said it was activated.
However, my question is this; Does anyone know of any way of telling if the Dongle was used before this date? It is the most logical conclusion, but we are trying to look for definitive proof of its use (the client was not sold on the conclusion) rather than the use of a different connection or such.
I know of several ways, but they're all for Windows…sorry.
With this sort of case, i've found connections via a dongle have had entries in the event log for at least two different cases in the past, with different model of dongle, so i think you've got a good chance you'll find evidence there. Obviously this depends on how far your event logs go back 😉
Rich
I would check date stamps and other information in some of the Registry keys associated with the dongle including it's USBSTOR key, its Software key, its Interfaces keys, and perhaps even the WZCSVC key (although it may not have used wireless zero configuration services since it's a dongle).
Restore point analysis might help too perhaps.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\USBSTOR\…
HKEY_LOCAL_MACHINE\Software\…
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\…
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WZCSVC\Parameters\Interface
I know of several ways, but they're all for Windows…sorry.
What is the point of a post like that?
If you're not going to answer the question constructively, why bother posting?
What is the point of a post like that?
If you're not going to answer the question constructively, why bother posting?
Because I can't answer the question…or, rather, I could spend all day writing a post that has sections like, "If the system you're analyzing is a Mac…", and then move on to Windows, FreeBSD, Linux, etc. Let's not get into XBox's, PSPs, etc.
*IF* the OP wants a constructive answer, there's a minimum of information required…something that is not only common sense, but also been covered time and again in this forum, as well as many others.
I mean, really…what is expected? Don't post the OS and version…what would you expect?
What is the point of a post like that?
If you're not going to answer the question constructively, why bother posting?
Because I can't answer the question…or, rather, I could spend all day writing a post that has sections like, "If the system you're analyzing is a Mac…", and then move on to Windows, FreeBSD, Linux, etc. Let's not get into XBox's, PSPs, etc.
*IF* the OP wants a constructive answer, there's a minimum of information required…something that is not only common sense, but also been covered time and again in this forum, as well as many others.
I mean, really…what is expected? Don't post the OS and version…what would you expect?
Considering the market share windows has, you could fairly safely go on the assumption that it is Windows. Or, try asking?
The event logs of an XP OS may tell you when the USB Dongle was first attached if you identify the dongles VID & PIN.
On a MAC, search for the Dongles SIM card ICCID number and you may find a log of when it was first connected.
JonN,
I see you have not yet become accustomed to Harlan's little dig's at those that ask for help and omit essential information in their posts. You will in time, see the funny side of such riposts!
JonN,
I see you have not yet become accustomed to Harlan's little dig's at those that ask for help and omit essential information in their posts. You will in time, see the funny side of such riposts!
The sad thing is that I am accustomed to them, there just is a point at which they become a bit much to be honest. You have managed to give an answer in two sentences, not a lot more than Harlan's obscure post.
Harlan, we all know that you are a clever guy who knows his stuff, I read your books, I read your blog and all of the associated links that come from it and I've learned a lot from it whilst I have done so. Professionally you have my respect every time, but your curt answers sometimes show a complete lack of respect for anyone who seems to know less than you. This is an open forum on which a lot of people come to learn. I really do think that you are doing more damage than good by 'digging' at people in the way that you do. The guy is just coming here looking for help. Why not try to be more constructive and ask him what OS he is referring to. You say you know of several ways - so why not tell him what they are, or give him a quick clue so he can go and look further. If you can take the time to post, post something useful. I can understand your frustration sometimes at some of the questions that come up on here, but I actually think that this question is a good one, and the wording of the question itself shows that the poster has done some background work before asking, rather than expecting the forum to do his work for him.
Maybe I've had a bad day, but this just irked me, and I hazard to guess I'm wasting my time anyway.
Apologies for taking the thread off track.