Author Topic: Virus Chest question  (Read 3023 times)

0 Members and 1 Guest are viewing this topic.

Gert

  • Guest
Virus Chest question
« on: May 19, 2010, 01:44:15 PM »
In Virus Chest please explain what "Last Modification Time" and "Last Changed" mean???

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89129
  • No support PMs thanks
Re: Virus Chest question
« Reply #1 on: May 19, 2010, 02:40:36 PM »
Well those two headings don't appear together one is in the main chest display and the other in the properties of an individual item within the chest.

The Last modified time and Last Changed are one and the same but by a different name. The Last modified time/Last Changed relates the the files properties, when that file in its original location was last modified
« Last Edit: May 19, 2010, 04:37:45 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Gert

  • Guest
Re: Virus Chest question
« Reply #2 on: May 19, 2010, 03:25:11 PM »
Thanks for answering my Q.  Sorry about the double post, it was a mistake, please don't beat me up about it.

Your answer "when that file in its original location was last modified" is not quite clear to me.  Is this the date it was installed in my computer from its source?  Or the date it did or tried to activate it?  Or the date the originator changed it?  What does "modified" mean and what date does it correspond with?

The reason for my question is that I know a Trojan was inserted on 5/18/2010.  I ran Avast Scan and it found something but the dates don't match.

Thanks for taking the time to help!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89129
  • No support PMs thanks
Re: Virus Chest question
« Reply #3 on: May 19, 2010, 04:45:27 PM »
All files when created on your system (downloaded/installed, etc.) have properties, a) when it was created and b) when it was last modified.

The last modified date could be the same as the creation date or earlier as the creation date on your computer might be later than when the file was originally created (which would also be the modified date).

It would probably be better to say what the file name, malware name and location of the detection is that you are concerned with.

So the Date modified could be changed by a 'virus' infection, but not by a trojan as they don't modify files or it may be totally unrelated. Unfortunately the actual file creation date isn't displayed anywhere in the chest info; it is why I mentioned if the file were outside the chest in its original location and you check the file properties (my second image left part) it shows when it was created.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security