Home Client Support FAQs Why do documents contain erroneous creation dates (such as 01/01/1901) or creation dates that are more recent than the last modification date?
Why do documents contain erroneous creation dates (such as 01/01/1901) or creation dates that are more recent than the last modification date? PDF Print E-mail

The problems of the file creation date can be traced back to the inconsistency in Microsoft's various file management utilities.  It seems that the purpose of three distinct variations in the file date values were never clearly defined by the designer of the feature. Below are some examples of how the file creation date can become comprimised:
 
When one performs a copy operation of a file using Microsoft Windows’ copy utility, the file creation date will change to the current date if said operation results in a new physical copy of the file. This will normally be the case when copying files across volumes. 
 
When one moves a file across a volume boundary (e.g., from C: to D:) using Windows’ move utility, the move operation is carried out as a file copy action followed by a file delete action. The file in the new location will receive a new file creation date. This will also affect the Last Access Date. 
 
There are ways to prevent this and in some cases restore the original values. Users can safely copy files across volumes using specialized file copy utilities as well as by placing files in secured file archives (e.g. WinRar) prior to performing data copies. If the integrity of the data is paramount, Windows should never be used to copy files. In terms of resoring files’ original values, this can be done forensically in some cases. There are also some invasive ways to check to see if these dates exist anywhere in files (some files have sections within the header which may contain history of modifications. It should be noted, however, that in many cases, these date reconstructions are, in actuality, “best guess efforts” based on the findings of the examiner.  




















 

Contact Info


17795 W, 106th St, Suite 201
Olathe, KS 66061

Sales & Support: 
1-888-474-7370

  Other Locations