How do I see what my friend was up to on my laptop?


  1. Posts : 1
    windows 10
       #1

    How do I see what my friend was up to on my laptop?


    I let my friend use my laptop today (windows 10) for about half an hour while I was out. Later when he had gone home, I went on to "recent files" in file explorer to continue writing a document I had been working on earlier. However, I discovered that there were no files there! (in recent files). Suspicious, I thought. Could This be explained by anything other than that my friend had accessed some files he shouldn't have and then tried to cover his tracks by clearing the "recent files" list? I have gone onto recent files since, and the documents I've opened appear there.

    So my question is: How can I find out what files were accessed (not modified - but opened/accessed) over the last few hours/days? Bearing in mind that some may have been individually deleted (if he was extra sneaky) from the "recent files" list. If this method could show me apps which were recently run, I'd be extra appreciative.

    Of course, "get better friends" is some good advice, but it's somthing for the future. What I want right now is information about today. I'd much appreciate your help!
      My Computer


  2. Posts : 824
    Win10/64 Pro 1511 (and 2 Win 7/64 Ult & Pro systems)
       #2

    Hi:

    How can I find out what files were accessed (not modified - but opened/accessed) over the last few hours/days?
    Without frightfully expensive forensic analysis, I'm not sure you can.

    At the very least, you might want to get some expert help scanning the system for possible malware.
    If you do not trust this person, in the worst case scenario, one might have to assume that all the data on this computer have potentially been compromised.
    If there are passwords, financial information and other sensitive data stored on it, then you might need to change all of your banking and other credentials from a different, known clean computer, and then wipe the drive and reinstall Windows.

    MM
      My Computer


  3. Posts : 26,984
    Windows 10 (Pro and Insider Pro)
       #3

    MoxieMomma said:
    Hi:



    Without frightfully expensive forensic analysis, I'm not sure you can.

    At the very least, you might want to get some expert help scanning the system for possible malware.
    If you do not trust this person, in the worst case scenario, one might have to assume that all the data on this computer have potentially been compromised.
    If there are passwords, financial information and other sensitive data stored on it, then you might need to change all of your banking and other credentials from a different, known clean computer, and then wipe the drive and reinstall Windows.

    MM
    What MoxieMomma said!

    But you can take a look at temp folder (drive:Users\name\Local\Temp ). If he didn't cleaned up this folder, you could get some info from there. Far from everything, but some applications can leave an idea about what was going on. Get Quick View Plus application, I believe there is 30 days trial of it and take a look what is in there. Quick View Plus will show you file content regardless of current file extension (some .tmp files are really part of files that can be viewd...)

    If he cleared temp files, than no luck with this...

    Edit: Get Quick view plus from Softpedia, or you will have to provide personal info...
      My Computers


  4. Posts : 1,249
    Windows 10 Pro
       #4

    Windows doesn't log this kind of thing by default. File and folder access auditing would tell you want you want to know but this needs to be configured before the access. Logging this would have a serious impact on performance and produce large log files in a short period of time.
      My Computer


  5. Posts : 3,502
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3
       #5

    Your friend might have cleared things so their passwords and other personal information wasn't retained. It might not be anything you need to be suspicious about ... your answers will have to come from your friend - just ask "Did you clear things after you used my computer?"

    The best advice I can offer is to set up a 2nd account (local / standard) to let other people use if you loan out your machine again.
    The person can do what they need, but they can't affect your data and they can't change your machine.

    It was nice of you to let your friend use your computer ... I don't even let me use mine
      My Computer


  6. Posts : 4,439
    Win 11 Pro 22000.652
       #6

    Slartybart said:
    Your friend might have cleared things so their passwords and other personal information wasn't retained. It might not be anything you need to be suspicious about ... your answers will have to come from your friend - just ask "Did you clear things after you used my computer?"

    The best advice I can offer is to set up a 2nd account (local / standard) to let other people use if you loan out your machine again.
    The person can do what they need, but they can't affect your data and they can't change your machine.

    It was nice of you to let your friend use your computer ... I don't even let me use mine
    Exactly 3333 posts - is that real, or did you hack that somehow?
      My Computers


  7. Posts : 12,429
    Win10 Version 21H2 Pro and Home, Win11 Pro
       #7

    bobkn said:
    Exactly 3333 posts - is that real, or did you hack that somehow?
    Click on the 3333 and on the list go back a few posts/replies.
      My Computers


  8. Posts : 3,502
    Win_8.1-Pro, Win_10.1607-Pro, Mint_17.3
       #8















    Aw heck, 3333 was nothing .... this is much more difficult -->
    How do I see what my friend was up to on my laptop?-post3456.png
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:12.
Find Us




Windows 10 Forums