[John Jamieson]

In other words: if I have 100 pictures of flowers and one porno picture in say, My Pictures and open that directory, and then look at a flower picture, the last access date and time on all 101 would change to the current time, making it look like I looked at the porno picture too.

[sbnsd]

the last access date and time on all 101 would change to the current time, making it look like I looked at the porno picture too.

It doesn't seem like a very reliable way to determine when something was REALLY accessed last. The second you try looking at the properties, it timestamps it. I guess I need ENCASE; that was the name of the program, right? Or was it ENDCASE?

[nycgal]

That's interesting. I assume that's an XP feature. I don't think Win 98 works that way.