Does Windows log file moves/deletions?

Gimpymoo

Gimpymoo

Gimpymoo

Soldato
Joined
31 May 2005
Posts
15,640
Location
Nottingham
I think my PC was attacked by my 19 month old this morning. He is just at the height to move the mouse and bash the keyboard.

I have come to use the PC and some profile settings and shortcuts no loger work.

I did also have a file move prompt on the screen when I logged in which I cancelled.

Unsure what has been moved, does Windows log such activity?

Many thanks.
 
IIRC unless Auditing is explicitly enabled already there isn't a way. Could be wrong though, I've been up all night
 
Thanks.

Will have to specifically try to locate something which I know has been moved and try to backtrack I think.
 
Windows key + L

/captain hindsight


If files have been removed, you could try Recuva to check they're not deleted. Failing that I'd search for filenames that you knew existed in said folders and pray that you find them :D
 
It was "locked", on the Welcome screen... the thing is, I recently removed my user password as got fed up entering it - lol.

I remember why I set a password in the first place now, I was lured into a false sense of security.

Seems to be local user settings which have been changed, like appdata for example but I cannot see what.

Stupid Windows 8, no Shadow copy as such enabled by default... GRRR. That was rather usefull in Windows 7.
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom