next »

[jelv1]

How can an Excel spreadsheet which has been copied from one directory to another, is still the identical size, has identical last modified time have different contents when you compare it using fc?

Answers on a postcard please!

[wildmind]

I'm guessing it may be the date file attributes that are different - created/accessed dates

[biondani]

What AV do you use? I know Cheyenne used to add a new stream to files once scanned. The date/time properties are only shown for the primary stream.

Ian

[jelv1]

I'm guessing it may be the date file attributes that are different - created/accessed dates

Those are held in the directory information, not the file itself (you still have those attributes on a zero length file).

[biondani]

Yes but the explorer interface won't show the secondary streams. Check out http://www.snapfiles.com/get/streamexplorer.html to find if the file does have any other streams.

Ian

[jelv1]

What AV do you use?

McAfee VirusScan Enterprise 8.0.0

Checking with stream explorer now.

[jelv1]

Right both files have two streams: <no name> of size 208 and <default> of size 23552.

The difference shown by fc is at the end of the <default> stream. Screen dumps of end of the two files as shown by StreamExplorer attached. I can't see any difference in the <no name> stream.

(One of the file names has changed because I copied the files to local so that I didn't have to install StreamExplorer on the work PC! - it's still showing the same difference)