Who moved My computer? Skillfully use the system to help you find out the truth

Who moved My computer? Skillfully use the system to help you find out the truth

Our computers are more or less stored in their own privacy, even if these privacy is not important, but still do not want to be exposed under the eyes of others, so we are generally not willing to their own computer by others to use. But there are some people do not take into account our feelings, at random with our computer, still think we do not see, this idea is a bit out! Because the Windows system is still very intelligent. As long as someone moves our computer, we can find the truth by looking at some of the records in the system.

So what do we record when someone moves our computer? The first is the boot time. Windows will detail the computer's boot situation, which can be accurate to seconds. Next is the record of various events, as long as the other people run the program after a little problem, Windows will record it in the system's event log. Then there are the documents that have been run, and which documents have been opened, at a glance in Windows.

Every time windows turns on, it records the timing of the system startup in a text file called SchedLgU.Txt, which is hidden in the Windows directory of C. From the moment the system is installed, it will record the time that you turn on each boot. We go to the Windows directory to open this file, at the end of the file you can see the following words:

The end is the last boot time record, visible last boot time for March 30, 2011 22:06:55. If you're not booting at this point in time, it means your computer has been moved.

Windows has a powerful logging feature that logs can be viewed through Event Viewer, which is divided into "application", "Security", and "system" three pieces of content, as long as someone moves your computer, in general there will be some content recorded.

Open Control Panel → performance and maintenance → administrative tools → Event Viewer, we first switch to the "Application" column.

As an example of the first-ranked event, this shows the startup of the SecurityCenter program in Windows, indicating that when Windows started, the Security Center was started, and the process was logged.

So as long as someone drives a computer while you're away, it's hard to think about leaving traces here.

All two of these methods only know if someone has moved your computer, but there is nothing you can do to see which files are moving. The "My Recent document" feature is a good remedy for this void.

Click on the Start menu, find the "My Recent document" feature, hover over it, and soon the recently accessed files are displayed. So we can know if our privacy is being spied on.