Know if your computer has been hacked or used in your absence

Know if your computer has been hacked or used in your absence

 

 

Who used your computer?

There is a native Windows tool that lets you know when and when your computer was accessed. To launch it, press and hold the Windows key then press "R" to open the Run window. Type the "eventvwr.msc" command (without quotation marks) and click OK to validate.
Opens then a window which is the tool "Observer of events". In the left column, double-click "Windows Logs" and, in the tree that has grown, select "System." A lot of information is displayed on the middle column. Sort them by "Event ID" by clicking on the name of the corresponding column. Now, look for the codes that interest us, namely those corresponding to the standby output (6006) and the logon (6005). By double clicking on a line, you will have all the information you want to know (date, time, user, etc.)

Retrace the websites that have been visited

For that, you need to consult the history of the navigator:

     On Firefox and Chrome, you have to press CTRL + H
     With Internet Explorer, use the key combination ALT + G

Note however that this trick does not work if the person has deleted the history of his surfing session or if he has sailed in private mode.

Discover what software was run

There is a useful little utility that can list all the software used on your PC. This is ExecutedProgramList. Here's how to use it:

     Start by clicking this link to download ExecutedProgramList
     Double click on it to install it and once done, launch it.

It will then show you the list of all the software recently launched on your machine with the date and time of launch.

Know which files were viewed

Windows keeps a list of recently opened files. To find it, you must run Run again as before. Then type in "recent" then click on Ok. A window will open and you will be able to discover all the files that have been recently opened. Pay special attention to the "Modified on" column to know when the file was last saved.