How can I tell if somebody logged into my computer?

[Ready]

I left my hotel room and I swear I shutoff my computer. When I came back 4 hours later, Windows EX was l logged on and later on some guy tried to get into my room(definitly not house keeping)

 

[Leros]

its called a password

 

[FeuerFrei]

Check the timestamp on system files that are modified on startup.
Don't ask me for file names.

 

[Ready]

Originally posted by: JToxic
its called a password

Yes I had a password on my computer

 

[Ready]

Originally posted by: FeuerFrei
Check the timestamp on system files that are modified on startup.
Don't ask me for file names.

I found 2 log files
userenv.log
and
wbemprox.log
that were modified and created during the time I was out of the room
also a txt file call passwrd.log was created(del it forgot where it was)

 

[AgaBoogaBoo]

Might want to check for keyloggers

 

[Ready]

I'm almost certainn that somebody was using my computer while I was gone. What concerns me is rather or not they were able to login to my computer which was password protected.

 

[Tremulant]

My dad had his laptop stolen out of his hotel room once while he was out to dinner.

Hotel employees stole it, and they were caught. The police found his laptop in a crack house, but we only got it back because I knew the serial number.

There was also a string of hotel-room-robberies when my dad was there. Some people had stuff stolen while they were sleeping.

 

[sniperruff]

control panel-> admin tool -> event viewer.

 

[rh71]

^ yup event viewer. Security should tell you about logins.

 

[Ready]

Originally posted by: rh71
^ yup event viewer. Security should tell you about logins.

how do i use event viewer?

 

[Linflas]

Unless it was set up to log security events like login/logout the only thing the event log will tell you is the startup/shutdown type events or application related events.

Edit: You may want to look in Documents and Settings to see if a new profile was created.

 

[everman]

You can log pretty much everything, event viewer mentioned already.

 

[rh71]

Originally posted by: Linflas
Unless it was set up to log security events like login/logout the only thing the event log will tell you is the startup/shutdown type events or application related events.

hmm, my XP install by default does log Security in event viewer.

 

[HonkeyDonk]

dust for prints.

 

[RaWrulez]

linux boot disk??