Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

How to get list of files that were copied on a certain date?

Status
Not open for further replies.

jdouthit

IS-IT--Management
Jun 15, 2004
14
US
I've just been asked to retrieve the names of files that a user copied on a Windows 98 machine. They apparantly copied them over to a floppy drive. I haven't a clue how to get a list of the files that were copied on this date. Any help would be much appreciated. Thanks in advance.
 
If you look at the start menu, and choose "documents" you can see the last 15 files accessed. Might help...
I don't know of any way to see a history of what files might have been coppied to the floppy.

If you're going through Hell...keep going... (Winston Churchill)
RocKeRFelLerZ
 
From the Start button select > Find > Files and Folders > Select the Date tab here you are give the option to enter 2 dates to search between. Enter your dates and run the search, if you know more about the files that were copied there is the Advanced Tab, select from the menu which search will suit you best.

M
 
Well, I don't have the floppy to search on. That's why we want to know what was copied to it that day.
 
jdouthit;
first thing is to tell them to STOP using the box - to keep from overwriting the file info, which "probably" will NOT be retreivable - that said However - there are ways to view activity and see which Files were "viewed" and /or "downloaded" and saved. This is all highly dependent upon OS ver, but moreso the IE version, and Cache and Advanced tab settings in IE and Documents, History folders. Also whether or not certain apps (built in or otherwise) are set up to clean the caches. What I mean is - I have one of my boxes set to clear all caches (Run, Documents, Open, Find, etc)..some thru TweakUI and some other ways. Then there's always the M$s internal spyware to explore - to find out what it's archiving "behind your back".

So - Firstly - if it won't kill them to Stop using the box till you can get there and search...tell them to stop.

Post back with some more info if possible
IE version?
Power Users? (set up to delete caches?)
Does it seem the person who copied would have "viewed" the files first before transfer?
AFAIK - there's not really a way to just find out what you ask in that context, unless some software was set up previous to copying, to catch and record this type of info.
Is the box Networked?
Were the copied files on the Network?

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top