QUOTE(Dan Penny @ Jun 23 2008, 12:56 AM)

Just check the Properties of files associated with those functions. For example, C:\IO.SYS. It will tell you when it was last accessed. (ie; machine booted. See attached pic.)
There are ways to "clear" these things, but it sounds like it's your brothers machine, and assisting you to do this would be unethical.
how do i open this file trough run , and waht program do you have to select