Author Topic: Last changed time is set into the future after file was moved to chest  (Read 1973 times)

0 Members and 1 Guest are viewing this topic.

Kourin

  • Guest
Hi everyone

I have a small question, when I did a virus scan on my pc I got a virus warning so I moved that file into the chest, and checked it on virustotal (it was mostlikely a false postive but I still deleted the file since I didn't needed it anymore anyway). Afterwards I did a Boot-time scan and I got the same virus warning in System Volume Information\_restore... well I thought it is probably because I deleted the file before and it was backed up there but to be sure that it was the same file I moved it into the chest (it was the same file).

So and now comes my question, when I took a closer look at the file which was moved into the chest the "last changed" time (since it's the german version it's called "Letzte Ă„nderung" in the following pic) seemed a bit off, heres a picture of it(I marked it on the pciture):



I also uploaded the image to imagenvue in case imageshake doesn't work.



The "transfer time" is correct since it detected it around that time, but the "last change"  time is set into the future, (I looked into the virus chest around 5:00 AM, so at that time the last changed time was 1 hour in the future).

Well I tested avast afterwards and it seems to run fine, and the system also runs fine without any problems or odd occurences, but nevertheless it still makes me a bit uneasy and wonder why the last changed time was off, so I wonder what it could be.

Ah yeah I run Windows XP SP3 and have AVAST FREE 6.0.1289. Ah yeah I dont know if it matters but currently I run my win xp in japanese unicode (changed it from german to japanese), since a few programs I use dont run correctly without it, but I don't think that has caused it.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37146
  • Not a avast user
Re: Last changed time is set into the future after file was moved to chest
« Reply #1 on: October 02, 2011, 11:22:40 PM »
hmmmm..... the second pic you posted give porn popup ?


this URL
hxxp://imagevenue.advertserve.com/servlet/view/window/internal?cid=7&mid=39&pid=0&zid=3&default=false&position=0&random=29323334&timestamp=20111002142327&test=false&ip=62.16.143.128&referrer=http%3A%2F%2Fimg218.imagevenue.com%2Fimg.php%3Fimage%3D577700873_incorrecttime_122_624lo.jpg%26position%3D0%26exit%3Dtrue%26default%3Dfalse%26millis%3D1317590616968%26zid%3D3%26pid%3D0%26cid%3D0%26agent%3DMozilla%2F5.0%2B%28compatible%3B%2BMSIE%2B9.0%3B%2BWindows%2BNT%2B6.1%3B%2BTrident%2F5.0%3B%2BBOIE9%3BNBNO%29%26os%3D19%26mid%3D0%26browser%3D9%26hostname%3D62.16.143.128%26timestamp%3D20111002142327%26ip%3D62.16.143.128%26random%3D29323334%26test%3Dfalse%26refresh%3D0%26lookup%3Dfalse
« Last Edit: October 02, 2011, 11:25:32 PM by Pondus »