I need to know if I can trust the Modified Date attribute of a file, there is any way to make a file seem older than it truly is?
Windows – When a file is copied on NTFS the Modified Date is also copied
ntfswindows
Related Solutions
Use the fsutil command:
fsutil fsinfo ntfsinfo [drive letter]
You'll have to run this command with administrator privileges.
At the command prompt, try chkdsk /f d: (change drive letter)
This should fix the NFTS structures and allow deletion later.
This is the same as using the GUI error checking tool in "properties"
Related Topic
- Windows – Why does File Copy from NTFS To FAT32 Change a File’s Modified Date
- Windows – How to disable the “last accessed” attribute on NTFS/Windows
- Windows – Does using a large NTFS disk allocation size for a file share make a difference
- Windows Server – How to Automatically Delete Files After X Days
- Why does .vhdx take up much more space than the actual files – NTFS
Best Answer
No, you cannot trust any of the date/time stamps on a file. It is relatively straightforward to change the timestamps