IT Employment

Ask something
Discussion Locked

Dos File Entry (digital forensics)

0 helpful
2 replies

by cyber_guy

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

What does the following mean in a DOS file entry? "0-00-80" and "12:00:00 am"
it is not a virus. I assumed it was when i got a response the other day, but when i was certain it was it wasnt. apparently it does the same thing as the medical virus but it has to do with Digital Forensics.

2 replies

by gralfus

Is this for a class? The way you ask the question makes it sound like a homework question.

The virus could certainly have changed the date and then have been removed, leading to the same results.

The mobo battery could have died, wiping the time set in BIOS. DOS would then only have the bogus time to go on.

Any time you are trying to determine what happened on a system by looking at the current digital evidence, that is dealing with digital forensics. That includes the remnants of virus attacks.

by cyber_guy

But this question is only a bonus, the answer has nothign to do with a virus. ineed a better answer then that (no offence) i mean, i just need to know what it means, when you see that, not what it is or what it does.

This discussion is closed to new replies.