take it take Posted July 9, 2007 Share Posted July 9, 2007 How can I tell if someone has been running a program in Windows XP? Let's say I let someone use my laptop and I want know if he/she opened any programs (say Firefox) and closed it. Are there any auditings and log files I can examine? Quote Link to comment Share on other sites More sharing options...
SomeoneE1se Posted July 9, 2007 Share Posted July 9, 2007 How can I tell if someone has been running a program in Windows XP? Let's say I let someone use my laptop and I want know if he/she opened any programs (say Firefox) and closed it. Are there any auditings and log files I can examine?ditto Quote Link to comment Share on other sites More sharing options...
Sparda Posted July 9, 2007 Share Posted July 9, 2007 look at the firefox history? Quote Link to comment Share on other sites More sharing options...
tanda333 Posted July 10, 2007 Share Posted July 10, 2007 im sorry this is a duh moment, you can do a search of the comp (windows search will work for this) and leave it blank. then sort by modified when categary, then see when certain files were modified (which often means last used) i use this often to tell if my bro was skipping school and was on comp. it wont catch it all, but it catches a good chunk of the stuff Quote Link to comment Share on other sites More sharing options...
Sparda Posted July 10, 2007 Share Posted July 10, 2007 If your not u=sing a retarded version of windows you could setup security auditing, so you have an exact list of when and which programs where run by which user. Quote Link to comment Share on other sites More sharing options...
Iain Posted July 10, 2007 Share Posted July 10, 2007 Look at HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist. The entries are ROT13 and date/time 64bit little endian. Quote Link to comment Share on other sites More sharing options...
meister_sd Posted July 10, 2007 Share Posted July 10, 2007 Holy Cow - all my keygen activity is there... :shock: Gonna have to clean this up - lucky I'm the admin LOL Quote Link to comment Share on other sites More sharing options...
Iain Posted July 11, 2007 Share Posted July 11, 2007 Holy Cow - all my keygen activity is there... :shock: Gonna have to clean this up - lucky I'm the admin LOL Yes, a sneaky registry location, isn't it? There are plenty more though! Quote Link to comment Share on other sites More sharing options...
jht129 Posted July 13, 2007 Share Posted July 13, 2007 If your not u=sing a retarded version of windows you could setup security auditing, so you have an exact list of when and which programs where run by which user. but you must have administrative rights to do this. Quote Link to comment Share on other sites More sharing options...
ChevronX Posted July 16, 2007 Share Posted July 16, 2007 Is there no way to list the recently accessed programs for a simpler solution. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.