From: WatsonR@IntelligenCIA.com   
      
   "Dean Earley"  wrote in message   
   news:4433838b$0$5004$db0fefd9@news.zen.co.uk...   
   > >> Can't someone just change the installed date using regedit?   
   > >> What good is this approach if either date can be changed?   
   > >   
   > > What you're saying doesn't make sense because in order to do this,   
   > > one has to know *where* --or what key among the thousands..   
   >   
   > Registry monitor form Sysinternals is fairly efficient at telling you   
   > which of the thousand keys it is.   
   >   
   > --   
   > Dean Earley (dean.earley@icode.co.uk)   
   > i-Catcher Development Team   
   >   
   > iCode Systems   
      
      
   Useless..   
      
   if you use "Now" then hash it (even a simple for - next XOR op with a value)   
   would cause a value that is meaningless to a viewer.   
      
   So you know the program writes to a certain registry key   
   but unless you know the algorithm or the meaning what good is it?   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)