[shezza]

Can tell by last access date (vs. file creation date) that won't match, virus programs that are supposed to run at particular times, other red flags that would indicate clocks had been doctored. No such indications on these computers.

[shezza]

RE who was using the computer at what time:
screen print 39-41 (#39 = screen print of get message, email message on 1-12-02)