install / uninstall log file

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I need to know if it is possible to know what softwares have been installed
and uninstalled on a computer by the user?
Is that possible? does the system keeps like a log file in which it shows
all the programs installation/uninstallation activity? and how can this info
be accessed and viewed?

I would highly appreciate if somebody can help me with anything regarding
this issue cos i need to know what my brother is doing on my personal laptop.

Thank you very much.
 
In
elietabet said:
I need to know if it is possible to know what softwares have been
installed and uninstalled on a computer by the user?
Is that possible? does the system keeps like a log file in which it
shows all the programs installation/uninstallation activity? and how
can this info be accessed and viewed?

I would highly appreciate if somebody can help me with anything
regarding this issue cos i need to know what my brother is doing on
my personal laptop.

Thank you very much.

Your event logs may show you ...but if you're worried about this, either
don't let him use the laptop, or make sure he doesn't have any admin rights
at all and doesn't know the passwords for any accounts that *do* have admin
rights. Why lock the barn after the horses are gone?
 
Without delay, you need to make an image of your systems hard drive(s)
with a disk imaging tool. If you do not have access to such software
tools, take your laptop to your corner computer service depot and have
them make you an image and a complete backup on separate media, and
ask for a detailed receipt, something that can be traced to the media
such as CRC numbers etc.

|I need to know if it is possible to know what softwares have been
installed
| and uninstalled on a computer by the user?
| Is that possible? does the system keeps like a log file in which it
shows
| all the programs installation/uninstallation activity? and how can
this info
| be accessed and viewed?
|
| I would highly appreciate if somebody can help me with anything
regarding
| this issue cos i need to know what my brother is doing on my
personal laptop.
|
| Thank you very much.
|
 
I want to know what has been installed and uninstalled in the past 2 months.
I am not worried about what will happen next. I need to know what happened
before.
 
Go to Start > Programs > Accessories > System Tools > System
Information > View > System History > Software Environment or
Components
upper right corner select a date before the period of interest.
And you better be worried about what will happen next.

|I want to know what has been installed and uninstalled in the past 2
months.
| I am not worried about what will happen next. I need to know what
happened
| before.
|
| "Mungo Bulge" wrote:
|
| > Without delay, you need to make an image of your systems hard
drive(s)
| > with a disk imaging tool. If you do not have access to such
software
| > tools, take your laptop to your corner computer service depot and
have
| > them make you an image and a complete backup on separate media,
and
| > ask for a detailed receipt, something that can be traced to the
media
| > such as CRC numbers etc.
| >
| > | > |I need to know if it is possible to know what softwares have been
| > installed
| > | and uninstalled on a computer by the user?
| > | Is that possible? does the system keeps like a log file in which
it
| > shows
| > | all the programs installation/uninstallation activity? and how
can
| > this info
| > | be accessed and viewed?
| > |
| > | I would highly appreciate if somebody can help me with anything
| > regarding
| > | this issue cos i need to know what my brother is doing on my
| > personal laptop.
| > |
| > | Thank you very much.
| > |
| >
| >
| >
 
You made a point (twice) of stating you were not worried about what
will happen next, however it is my professional opinion that you
should be.
Just for arguments sake, lets say a fictitious laptop owner was
connected to a fictitious ISP called Comcast Cable Communications. Now
this same laptop owner has a fictitious brother who has been using his
laptop and has been let's say downloading games from one of his
friends and they have been playing on-line. Now on the surface, this
doesn't seem too bad, no hurt, no foul. Not even something you would
feel you would have to hide from your mother. None the less it could
be a violation of you Acceptable Use Agreement with your fictitious
ISP and if one of their routine snoops (those occasional unsolicited
connections that you firewall report) turns up activity which triggers
one of their "interest point" the laptop owner could lose his/her
account and be required to find a new ISP.
At best inconvenient, but the worst case scenario is far worse.
Take Lanwench's advice, and lock down your laptop. Give your brother
an account without Admin privileges.

| What do you mean "be worried about what will happen next"?
|
|
| "Mungo Bulge" wrote:
|
| > Go to Start > Programs > Accessories > System Tools > System
| > Information > View > System History > Software Environment or
| > Components
| > upper right corner select a date before the period of interest.
| > And you better be worried about what will happen next.
| >
| > | > |I want to know what has been installed and uninstalled in the
past 2
| > months.
| > | I am not worried about what will happen next. I need to know
what
| > happened
| > | before.
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > Without delay, you need to make an image of your systems hard
| > drive(s)
| > | > with a disk imaging tool. If you do not have access to such
| > software
| > | > tools, take your laptop to your corner computer service depot
and
| > have
| > | > them make you an image and a complete backup on separate
media,
| > and
| > | > ask for a detailed receipt, something that can be traced to
the
| > media
| > | > such as CRC numbers etc.
| > | >
message
| > | > | > | > |I need to know if it is possible to know what softwares have
been
| > | > installed
| > | > | and uninstalled on a computer by the user?
| > | > | Is that possible? does the system keeps like a log file in
which
| > it
| > | > shows
| > | > | all the programs installation/uninstallation activity? and
how
| > can
| > | > this info
| > | > | be accessed and viewed?
| > | > |
| > | > | I would highly appreciate if somebody can help me with
anything
| > | > regarding
| > | > | this issue cos i need to know what my brother is doing on my
| > | > personal laptop.
| > | > |
| > | > | Thank you very much.
| > | > |
| > | >
| > | >
| > | >
| >
| >
| >
 
ok i got your point, thank you.

Mungo Bulge said:
You made a point (twice) of stating you were not worried about what
will happen next, however it is my professional opinion that you
should be.
Just for arguments sake, lets say a fictitious laptop owner was
connected to a fictitious ISP called Comcast Cable Communications. Now
this same laptop owner has a fictitious brother who has been using his
laptop and has been let's say downloading games from one of his
friends and they have been playing on-line. Now on the surface, this
doesn't seem too bad, no hurt, no foul. Not even something you would
feel you would have to hide from your mother. None the less it could
be a violation of you Acceptable Use Agreement with your fictitious
ISP and if one of their routine snoops (those occasional unsolicited
connections that you firewall report) turns up activity which triggers
one of their "interest point" the laptop owner could lose his/her
account and be required to find a new ISP.
At best inconvenient, but the worst case scenario is far worse.
Take Lanwench's advice, and lock down your laptop. Give your brother
an account without Admin privileges.

| What do you mean "be worried about what will happen next"?
|
|
| "Mungo Bulge" wrote:
|
| > Go to Start > Programs > Accessories > System Tools > System
| > Information > View > System History > Software Environment or
| > Components
| > upper right corner select a date before the period of interest.
| > And you better be worried about what will happen next.
| >
| > | > |I want to know what has been installed and uninstalled in the
past 2
| > months.
| > | I am not worried about what will happen next. I need to know
what
| > happened
| > | before.
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > Without delay, you need to make an image of your systems hard
| > drive(s)
| > | > with a disk imaging tool. If you do not have access to such
| > software
| > | > tools, take your laptop to your corner computer service depot
and
| > have
| > | > them make you an image and a complete backup on separate
media,
| > and
| > | > ask for a detailed receipt, something that can be traced to
the
| > media
| > | > such as CRC numbers etc.
| > | >
message
| > | > | > | > |I need to know if it is possible to know what softwares have
been
| > | > installed
| > | > | and uninstalled on a computer by the user?
| > | > | Is that possible? does the system keeps like a log file in
which
| > it
| > | > shows
| > | > | all the programs installation/uninstallation activity? and
how
| > can
| > | > this info
| > | > | be accessed and viewed?
| > | > |
| > | > | I would highly appreciate if somebody can help me with
anything
| > | > regarding
| > | > | this issue cos i need to know what my brother is doing on my
| > | > personal laptop.
| > | > |
| > | > | Thank you very much.
| > | > |
| > | >
| > | >
| > | >
| >
| >
| >
 
I see I didn't explain the reasoning behind the image and backup. It
wasn't to restore anything in the future, it's what I like to call the
stack in the ground. It protects the past so you (or your brother)
don't destroy any information while you are looking for it. Who knows,
you may find this interesting and decide to make a career change.

What you are doing is called computer forensics, the second fastest
growing fields of computer science.

So Elie, lock down your laptop and tell your brother there is stuff on
it that does not concern him.


| What do you mean "be worried about what will happen next"?
|
|
| "Mungo Bulge" wrote:
|
| > Go to Start > Programs > Accessories > System Tools > System
| > Information > View > System History > Software Environment or
| > Components
| > upper right corner select a date before the period of interest.
| > And you better be worried about what will happen next.
| >
| > | > |I want to know what has been installed and uninstalled in the
past 2
| > months.
| > | I am not worried about what will happen next. I need to know
what
| > happened
| > | before.
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > Without delay, you need to make an image of your systems hard
| > drive(s)
| > | > with a disk imaging tool. If you do not have access to such
| > software
| > | > tools, take your laptop to your corner computer service depot
and
| > have
| > | > them make you an image and a complete backup on separate
media,
| > and
| > | > ask for a detailed receipt, something that can be traced to
the
| > media
| > | > such as CRC numbers etc.
| > | >
message
| > | > | > | > |I need to know if it is possible to know what softwares have
been
| > | > installed
| > | > | and uninstalled on a computer by the user?
| > | > | Is that possible? does the system keeps like a log file in
which
| > it
| > | > shows
| > | > | all the programs installation/uninstallation activity? and
how
| > can
| > | > this info
| > | > | be accessed and viewed?
| > | > |
| > | > | I would highly appreciate if somebody can help me with
anything
| > | > regarding
| > | > | this issue cos i need to know what my brother is doing on my
| > | > personal laptop.
| > | > |
| > | > | Thank you very much.
| > | > |
| > | >
| > | >
| > | >
| >
| >
| >
 
The real question is, did you find the information you were looking
for?

| ok i got your point, thank you.
|
| "Mungo Bulge" wrote:
|
| > You made a point (twice) of stating you were not worried about
what
| > will happen next, however it is my professional opinion that you
| > should be.
| > Just for arguments sake, lets say a fictitious laptop owner was
| > connected to a fictitious ISP called Comcast Cable Communications.
Now
| > this same laptop owner has a fictitious brother who has been using
his
| > laptop and has been let's say downloading games from one of his
| > friends and they have been playing on-line. Now on the surface,
this
| > doesn't seem too bad, no hurt, no foul. Not even something you
would
| > feel you would have to hide from your mother. None the less it
could
| > be a violation of you Acceptable Use Agreement with your
fictitious
| > ISP and if one of their routine snoops (those occasional
unsolicited
| > connections that you firewall report) turns up activity which
triggers
| > one of their "interest point" the laptop owner could lose his/her
| > account and be required to find a new ISP.
| > At best inconvenient, but the worst case scenario is far worse.
| > Take Lanwench's advice, and lock down your laptop. Give your
brother
| > an account without Admin privileges.
| >
| > | > | What do you mean "be worried about what will happen next"?
| > |
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > Go to Start > Programs > Accessories > System Tools > System
| > | > Information > View > System History > Software Environment or
| > | > Components
| > | > upper right corner select a date before the period of
interest.
| > | > And you better be worried about what will happen next.
| > | >
message
| > | > | > | > |I want to know what has been installed and uninstalled in the
| > past 2
| > | > months.
| > | > | I am not worried about what will happen next. I need to know
| > what
| > | > happened
| > | > | before.
| > | > |
| > | > | "Mungo Bulge" wrote:
| > | > |
| > | > | > Without delay, you need to make an image of your systems
hard
| > | > drive(s)
| > | > | > with a disk imaging tool. If you do not have access to
such
| > | > software
| > | > | > tools, take your laptop to your corner computer service
depot
| > and
| > | > have
| > | > | > them make you an image and a complete backup on separate
| > media,
| > | > and
| > | > | > ask for a detailed receipt, something that can be traced
to
| > the
| > | > media
| > | > | > such as CRC numbers etc.
| > | > | >
| > message
| > | > | > | > | > | > |I need to know if it is possible to know what softwares
have
| > been
| > | > | > installed
| > | > | > | and uninstalled on a computer by the user?
| > | > | > | Is that possible? does the system keeps like a log file
in
| > which
| > | > it
| > | > | > shows
| > | > | > | all the programs installation/uninstallation activity?
and
| > how
| > | > can
| > | > | > this info
| > | > | > | be accessed and viewed?
| > | > | > |
| > | > | > | I would highly appreciate if somebody can help me with
| > anything
| > | > | > regarding
| > | > | > | this issue cos i need to know what my brother is doing
on my
| > | > | > personal laptop.
| > | > | > |
| > | > | > | Thank you very much.
| > | > | > |
| > | > | >
| > | > | >
| > | > | >
| > | >
| > | >
| > | >
| >
| >
| >
 
That's why you need to lock down, and don't use your name in your news
reader account, change it to Nice2No or Curious Indianapolis what
ever.

| ok ok i got your point .... and how did you know my name ??!!!!
|
| "Mungo Bulge" wrote:
|
| > I see I didn't explain the reasoning behind the image and backup.
It
| > wasn't to restore anything in the future, it's what I like to call
the
| > stack in the ground. It protects the past so you (or your brother)
| > don't destroy any information while you are looking for it. Who
knows,
| > you may find this interesting and decide to make a career change.
| >
| > What you are doing is called computer forensics, the second
fastest
| > growing fields of computer science.
| >
| > So Elie, lock down your laptop and tell your brother there is
stuff on
| > it that does not concern him.
| >
| >
| > | > | What do you mean "be worried about what will happen next"?
| > |
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > Go to Start > Programs > Accessories > System Tools > System
| > | > Information > View > System History > Software Environment or
| > | > Components
| > | > upper right corner select a date before the period of
interest.
| > | > And you better be worried about what will happen next.
| > | >
message
| > | > | > | > |I want to know what has been installed and uninstalled in the
| > past 2
| > | > months.
| > | > | I am not worried about what will happen next. I need to know
| > what
| > | > happened
| > | > | before.
| > | > |
| > | > | "Mungo Bulge" wrote:
| > | > |
| > | > | > Without delay, you need to make an image of your systems
hard
| > | > drive(s)
| > | > | > with a disk imaging tool. If you do not have access to
such
| > | > software
| > | > | > tools, take your laptop to your corner computer service
depot
| > and
| > | > have
| > | > | > them make you an image and a complete backup on separate
| > media,
| > | > and
| > | > | > ask for a detailed receipt, something that can be traced
to
| > the
| > | > media
| > | > | > such as CRC numbers etc.
| > | > | >
| > message
| > | > | > | > | > | > |I need to know if it is possible to know what softwares
have
| > been
| > | > | > installed
| > | > | > | and uninstalled on a computer by the user?
| > | > | > | Is that possible? does the system keeps like a log file
in
| > which
| > | > it
| > | > | > shows
| > | > | > | all the programs installation/uninstallation activity?
and
| > how
| > | > can
| > | > | > this info
| > | > | > | be accessed and viewed?
| > | > | > |
| > | > | > | I would highly appreciate if somebody can help me with
| > anything
| > | > | > regarding
| > | > | > | this issue cos i need to know what my brother is doing
on my
| > | > | > personal laptop.
| > | > | > |
| > | > | > | Thank you very much.
| > | > | > |
| > | > | >
| > | > | >
| > | > | >
| > | >
| > | >
| > | >
| >
| >
| >
 
Yes yes i found the info i needed ... you have no idea how much i appreciate
the valuable professional information that you provided with regard to this
matter ... thank you sooooo much.
 
You're welcome.
We gone, bye bye


| Yes yes i found the info i needed ... you have no idea how much i
appreciate
| the valuable professional information that you provided with regard
to this
| matter ... thank you sooooo much.
|
| "Mungo Bulge" wrote:
|
| > The real question is, did you find the information you were
looking
| > for?
| >
| > | > | ok i got your point, thank you.
| > |
| > | "Mungo Bulge" wrote:
| > |
| > | > You made a point (twice) of stating you were not worried about
| > what
| > | > will happen next, however it is my professional opinion that
you
| > | > should be.
| > | > Just for arguments sake, lets say a fictitious laptop owner
was
| > | > connected to a fictitious ISP called Comcast Cable
Communications.
| > Now
| > | > this same laptop owner has a fictitious brother who has been
using
| > his
| > | > laptop and has been let's say downloading games from one of
his
| > | > friends and they have been playing on-line. Now on the
surface,
| > this
| > | > doesn't seem too bad, no hurt, no foul. Not even something you
| > would
| > | > feel you would have to hide from your mother. None the less it
| > could
| > | > be a violation of you Acceptable Use Agreement with your
| > fictitious
| > | > ISP and if one of their routine snoops (those occasional
| > unsolicited
| > | > connections that you firewall report) turns up activity which
| > triggers
| > | > one of their "interest point" the laptop owner could lose
his/her
| > | > account and be required to find a new ISP.
| > | > At best inconvenient, but the worst case scenario is far
worse.
| > | > Take Lanwench's advice, and lock down your laptop. Give your
| > brother
| > | > an account without Admin privileges.
| > | >
message
| > | > | > | > | What do you mean "be worried about what will happen next"?
| > | > |
| > | > |
| > | > | "Mungo Bulge" wrote:
| > | > |
| > | > | > Go to Start > Programs > Accessories > System Tools >
System
| > | > | > Information > View > System History > Software Environment
or
| > | > | > Components
| > | > | > upper right corner select a date before the period of
| > interest.
| > | > | > And you better be worried about what will happen next.
| > | > | >
| > message
| > | > | > | > | > | > |I want to know what has been installed and uninstalled in
the
| > | > past 2
| > | > | > months.
| > | > | > | I am not worried about what will happen next. I need to
know
| > | > what
| > | > | > happened
| > | > | > | before.
| > | > | > |
| > | > | > | "Mungo Bulge" wrote:
| > | > | > |
| > | > | > | > Without delay, you need to make an image of your
systems
| > hard
| > | > | > drive(s)
| > | > | > | > with a disk imaging tool. If you do not have access to
| > such
| > | > | > software
| > | > | > | > tools, take your laptop to your corner computer
service
| > depot
| > | > and
| > | > | > have
| > | > | > | > them make you an image and a complete backup on
separate
| > | > media,
| > | > | > and
| > | > | > | > ask for a detailed receipt, something that can be
traced
| > to
| > | > the
| > | > | > media
| > | > | > | > such as CRC numbers etc.
| > | > | > | >
| > | > | > | > "elietabet" <[email protected]>
wrote in
| > | > message
| > | > | > | >
| > | > | > | > |I need to know if it is possible to know what
softwares
| > have
| > | > been
| > | > | > | > installed
| > | > | > | > | and uninstalled on a computer by the user?
| > | > | > | > | Is that possible? does the system keeps like a log
file
| > in
| > | > which
| > | > | > it
| > | > | > | > shows
| > | > | > | > | all the programs installation/uninstallation
activity?
| > and
| > | > how
| > | > | > can
| > | > | > | > this info
| > | > | > | > | be accessed and viewed?
| > | > | > | > |
| > | > | > | > | I would highly appreciate if somebody can help me
with
| > | > anything
| > | > | > | > regarding
| > | > | > | > | this issue cos i need to know what my brother is
doing
| > on my
| > | > | > | > personal laptop.
| > | > | > | > |
| > | > | > | > | Thank you very much.
| > | > | > | > |
| > | > | > | >
| > | > | > | >
| > | > | > | >
| > | > | >
| > | > | >
| > | > | >
| > | >
| > | >
| > | >
| >
| >
| >
 
elietabet said:
i am not worried about what will happen next, i need to know what
happened before.

Well, as with most things, if you didn't have sufficient auditing enabled
prior to "The Incident", enabling it now will not help you. See prior
comment re barn door/horse....

And of course you ought to be worried about what might happen next. Do your
best to prevent anything from happening that you do not wish to happen,
instead of trying to catch up after the fact.
 
Back
Top