A client brought to our attention today that a file on our network share was not the correct version of the file. In the course of investigating this issue, we have determined that there are two versions of the file in question, one with a modified
date of 12/10/2012, and one with a modified date of 1/14/2013. the 12/10 is the bad version, and purports to be located in the same folder as the 1/14 version, however, both versions of the file are not visible in the folder at the same time. The
unc path to the containing folder is "\\servername\data\#1 excel\", and if browsed to through the network or the file structure, the correct file is almost always displayed. If you search the filename from the server however, you can find
the bad version of the file, and when you open the containing folder it takes you to "\\servername\data\#1 excel\", but shows only the bad version of the file. If you refresh the view in the
window, the bad version vanishes, and the good version shows up. There is no offline file access enabled either on workstations or on the server. We are not maintaining previous versions of the file. Our backups are done offsite over the
internet. Any suggestions on troubleshooting this issue, or locating where the bad version of the file actually lives would be appreciated.
J. Duke Rogers Communicore Technologies & Triangle Forensics