Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computer Certification > Microsoft Certification > Re: pagefile.sys

Reply
Thread Tools

Re: pagefile.sys

 
 
Andrew K.
Guest
Posts: n/a
 
      04-25-2004
i don't trust u.
u are not a cop.
or u are very stupid cop which should fired ASAP.
because u posted here "closed doors" information.
or u wanna say some PD in america have no any MCP for solving this idiot's
problem?

"elvis" <lancepowser(removethis)@yahoo.com> wrote in message
news:14582AED-5B14-4CE7-8B3C-...
> The suspects machine (Windows XP) was involved in a yahoo IM chat with

our U.C. officers. The chat started at 3:11:10PM and went on until
6:01:21PM. The suspect was arrested at 8:00PM when he arrived at a meeting
place. A search warrant was obtained and a computer from a local college was
seized. This is where the suspect was chatting from. I have a P2P connection
established. And a yahoo profile site of our U.C. officer visited by the
suspect. These timestamps are in the correct time frame of when the chats
occurred and are in line with the suspects BIOS time. However, in the
pagefile.sys folder I have found numerous remnants of the chat. The time
stamp on on the last written and last accessed of the pagefile.sys folder
are 8:54:32AM. I am concerned about a defense attorney questioning why these
stamps are not in line with time of the chat. I don't see how the timezone
of where the yahoo server would be relevant as the remnants of the chats are
being stored in the pagefile.sys folder on the suspects Hard Drive. Why
wouldn't the time stamp be the same as when the chats were occurring? Please
feel free to contact me offline.
>


 
Reply With Quote
 
 
 
 
Colin Nash [MVP]
Guest
Posts: n/a
 
      04-29-2004
Still an interesting question though...


"Andrew K." <> wrote in message
news:...
> i don't trust u.
> u are not a cop.
> or u are very stupid cop which should fired ASAP.
> because u posted here "closed doors" information.
> or u wanna say some PD in america have no any MCP for solving this idiot's
> problem?
>
> "elvis" <lancepowser(removethis)@yahoo.com> wrote in message
> news:14582AED-5B14-4CE7-8B3C-...
> > The suspects machine (Windows XP) was involved in a yahoo IM chat

with
> our U.C. officers. The chat started at 3:11:10PM and went on until
> 6:01:21PM. The suspect was arrested at 8:00PM when he arrived at a meeting
> place. A search warrant was obtained and a computer from a local college

was
> seized. This is where the suspect was chatting from. I have a P2P

connection
> established. And a yahoo profile site of our U.C. officer visited by the
> suspect. These timestamps are in the correct time frame of when the chats
> occurred and are in line with the suspects BIOS time. However, in the
> pagefile.sys folder I have found numerous remnants of the chat. The time
> stamp on on the last written and last accessed of the pagefile.sys folder
> are 8:54:32AM. I am concerned about a defense attorney questioning why

these
> stamps are not in line with time of the chat. I don't see how the timezone
> of where the yahoo server would be relevant as the remnants of the chats

are
> being stored in the pagefile.sys folder on the suspects Hard Drive. Why
> wouldn't the time stamp be the same as when the chats were occurring?

Please
> feel free to contact me offline.
> >

>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57