Windows 10: How do I see what my friend was up to on my laptop?

  1.    14 Aug 2016 #1

    How do I see what my friend was up to on my laptop?


    I let my friend use my laptop today (windows 10) for about half an hour while I was out. Later when he had gone home, I went on to "recent files" in file explorer to continue writing a document I had been working on earlier. However, I discovered that there were no files there! (in recent files). Suspicious, I thought. Could This be explained by anything other than that my friend had accessed some files he shouldn't have and then tried to cover his tracks by clearing the "recent files" list? I have gone onto recent files since, and the documents I've opened appear there.

    So my question is: How can I find out what files were accessed (not modified - but opened/accessed) over the last few hours/days? Bearing in mind that some may have been individually deleted (if he was extra sneaky) from the "recent files" list. If this method could show me apps which were recently run, I'd be extra appreciative.

    Of course, "get better friends" is some good advice, but it's somthing for the future. What I want right now is information about today. I'd much appreciate your help!
      My ComputerSystem Spec

  2. MoxieMomma's Avatar
    Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       14 Aug 2016 #2

    Hi:

    How can I find out what files were accessed (not modified - but opened/accessed) over the last few hours/days?
    Without frightfully expensive forensic analysis, I'm not sure you can.

    At the very least, you might want to get some expert help scanning the system for possible malware.
    If you do not trust this person, in the worst case scenario, one might have to assume that all the data on this computer have potentially been compromised.
    If there are passwords, financial information and other sensitive data stored on it, then you might need to change all of your banking and other credentials from a different, known clean computer, and then wipe the drive and reinstall Windows.

    MM
      My ComputerSystem Spec

  3.    14 Aug 2016 #3

    MoxieMomma said: View Post
    Hi:



    Without frightfully expensive forensic analysis, I'm not sure you can.

    At the very least, you might want to get some expert help scanning the system for possible malware.
    If you do not trust this person, in the worst case scenario, one might have to assume that all the data on this computer have potentially been compromised.
    If there are passwords, financial information and other sensitive data stored on it, then you might need to change all of your banking and other credentials from a different, known clean computer, and then wipe the drive and reinstall Windows.

    MM
    What MoxieMomma said!

    But you can take a look at temp folder (drive:Users\name\Local\Temp ). If he didn't cleaned up this folder, you could get some info from there. Far from everything, but some applications can leave an idea about what was going on. Get Quick View Plus application, I believe there is 30 days trial of it and take a look what is in there. Quick View Plus will show you file content regardless of current file extension (some .tmp files are really part of files that can be viewd...)

    If he cleared temp files, than no luck with this...

    Edit: Get Quick view plus from Softpedia, or you will have to provide personal info...
      My ComputerSystem Spec

  4.    14 Aug 2016 #4

    Windows doesn't log this kind of thing by default. File and folder access auditing would tell you want you want to know but this needs to be configured before the access. Logging this would have a serious impact on performance and produce large log files in a short period of time.
      My ComputerSystem Spec

  5. Slartybart's Avatar
    Posts : 3,506
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3
       14 Aug 2016 #5

    Your friend might have cleared things so their passwords and other personal information wasn't retained. It might not be anything you need to be suspicious about ... your answers will have to come from your friend - just ask "Did you clear things after you used my computer?"

    The best advice I can offer is to set up a 2nd account (local / standard) to let other people use if you loan out your machine again.
    The person can do what they need, but they can't affect your data and they can't change your machine.

    It was nice of you to let your friend use your computer ... I don't even let me use mine
      My ComputerSystem Spec

  6.    14 Aug 2016 #6

    Slartybart said: View Post
    Your friend might have cleared things so their passwords and other personal information wasn't retained. It might not be anything you need to be suspicious about ... your answers will have to come from your friend - just ask "Did you clear things after you used my computer?"

    The best advice I can offer is to set up a 2nd account (local / standard) to let other people use if you loan out your machine again.
    The person can do what they need, but they can't affect your data and they can't change your machine.

    It was nice of you to let your friend use your computer ... I don't even let me use mine
    Exactly 3333 posts - is that real, or did you hack that somehow?
      My ComputerSystem Spec


  7. Posts : 2,953
    Win10 Home and Pro, Win10 Insider Preview, Win7 Home, Linux Mint
       14 Aug 2016 #7

    bobkn said: View Post
    Exactly 3333 posts - is that real, or did you hack that somehow?
    Click on the 3333 and on the list go back a few posts/replies.
      My ComputerSystem Spec

  8. Slartybart's Avatar
    Posts : 3,506
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3
       22 Aug 2016 #8















    Aw heck, 3333 was nothing .... this is much more difficult -->
    Click image for larger version. 

Name:	Post3456.PNG 
Views:	25 
Size:	48.1 KB 
ID:	97663
      My ComputerSystem Spec


 

Related Threads
Solved Share My IP With A Friend in Network and Sharing
How can i do that? VPN, VLAN, Proxy would work?
Check the system I built for friend in PC Custom Builds and Overclocking
Hi, My friend wants to build new PC & he asked me to help with building & I built this system so far, but problem is, I fell behind all these hardware stuff & I'm not sure if I did that build right. I mean if there is anything incompatible, can you...
What are the steps to upgrade/keep files? And will it activate if it is done clean by deleting all partitions and installing thereafter. TIA Mark
Hey everyone, so my friend and I updated Windows 7 to Windows 10 today. We have set up Cortana, but mine acts differently than his. When I say "Hey Cortana" she responds with a beep, and then I can ask questions. However, my friend can start a...
I have 8.1. For future reinstallation, I downloaded and burned an ISO from here: http://windows.microsoft.com/en-us/windows-8/create-reset-refresh-media What I want to know is if this will work for a friend's computer and I can just use his...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 06:59.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums