-
Hi all,
I have a problem. I'm in Uni every Thursday, and when I get into work on a Friday morning, I always find that my computer is not swithed off at the mains, which basically means that someone is using my computer, or looking at my files when I'm in Uni.
I could lock everyone out quite easily but...
I'd like to be able to know what has been accessed.
Question: Is there anyway I could write an application that would run invisibly in the background once the system is booted, that will record and save details of what docs. or programs etc have been opened, and at what time, so that I could open up a 'snooperlog.doc' file and see what's been going on in my absence, or more importantly see if anything has been altered.
Perhaps someone out there has written something similar...
Some advice, guidance or code would be greatly appreciated
Hoping someone will respond
GRAHAM :)
-
you could look at the file details of each file. They all have a "last accessed" piece of information, and you could compare that with the accessed times before you left the computer.
bob
-
Hi Bob,
The only problem is, there are just too many files to check.
I just need something that will give me a list of files that were accessed, because it would take me hours to check them all. I don't think the people who have access to my office would do anything malicious, but I,m curious as to what they are doing on my computer.
Thanks
GRAHAM
-
-
This may be silly but have you tried looking in the Recent folder of windows or are they accessing the files by remote?
-
Hi, thanks for responding.
Yes Ed, I've looked at the 'recent', but whoever is using the computer covers their tracks. That's why I'm so curious as to what they are doing.
Lyla, I'll take a look at your link now, and get back to you
Thanks
GRAHAM :)
-
Hello again'
That's an interesting site Lyla, I'll have to explore it in detail when I get time. I'm assuming the 'Boss Everyware' was the focus; from the description that would do the job, but unfortunately, due to a temp. internet error, I couldn't
download it for evaluation, plus it's an .exe which means I can't see how it tracks events codewise.
Apparently, Windows 95/98 does not have a function that returns the file that was changed/created. I have some samples of code that log keystokes, and I might be able to utilize that somehow.
I was hoping someone had tried designing what I,m looking for, and point me in the right direction on how to tackle this, so I'll be patient...you never kwow.
Thanks again
GRAHAM ;)
-
I use NT, but I assume that Win 95/98 has the same thing. Go to Start>Find>Files or Folders, type *.* and then click on "Date Modified" and enter the date you want to check. If that doesn't work, email me. I have a program that I could modify for you that would find the files that have for example been modified in the last 2 days.
