timescanner and IE history
There has been some discussion lately about some limitations to timescanner in regards to the reading of timestamps in various index.dat files. More precisely Windows decided that it would store timestamps using different timezones depending on the location of the index.dat, instead of sticking with the good old UTC format. So for instance the history files (index.dat that is stored in the History.IE5 folder) are stored using local timestamps, while the daily and weekly history files have timestamps that are stored using both UTC and the time zone of the machine in question (all timestamps are still stored as a Windows FILETIME format).
So as a quick fix to the current release (and nightly built) I’ve just excluded the daily and weekly files from the tool timescanner. But in the coming 0.50 release (keep mentioning that) I’ve included a more intelligent scanner, whereas I take into consideration the location of the file in question and apply the appropriate settings to the timestamps. So timestamps that are stored in an index.dat file that have different meaning depending on their location will have the correct meaning and description in version 0.50 as they should be.
I will provide examples and more details about this new feature when I will release the tool.