Joe - I have terrified folks by revealing what is on their company machines.

It is simple:

Use Sherlock with a MAC or Find with a PC

Select DATE

Select TIME One day etc

Select CREATED or MODIFIED

BINGO!

Still perplexed - Gibson Research Corporation (no guitars!!! GRC.com) "Spin Rite" has a whole tool-chest that will give you hexdec in a column right next to plain text. AWSOME - things "erased" years ago pop right up.

Remember - Mr. Norton began his fortune and empire with a simple device to replace the first integer of a file for recovery. Still Works.

The HD manufactor also has utilities for their hardware.

Sincerely,
Gargoyle