Here’s a very handy little command that will list files in any directory you choose by the latest date.
The example below creates a list of all the files in c:WindowsSystem32 arranged by latest date (this example does not include sub-directories. You can specify /S for recursive sub directory scanning/listing):
- Open a command prompt.
- Enter the following command – dir c:windowssystem32 /o:-d > c:tempnew-files.txt
- Press Enter
- Open the text file in c:temp to see the latest files created in system32.
While it’s not exactly easy to read a long list of files it does really allow you to narrow down suspicious files by seeing when they were created in the directory in question (which can then be uploaded to virus total for example).
Directories to run this command on:
C:Windows
C:WindowsSystem32
C:Documents and Settings (must use /s switch)
C:Users (must use /s switch)
