6
2
I have got an external disk probably stolen from my computer at work. Is there any way to see in some system logs at what time this device was removed / unmounted? My operating system is Windows 7 (recently installed).
Michal Czardybon
Posted 2010-12-15T11:07:27.753
Reputation: 296
3
Windows 7's Event Viewer does not log USB mount times. Instead, you can use the freeware called USBDeview.
USBDeview is a small utility that lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used. For each USB device, exteneded information is displayed: Device name/description, device type, serial number (for mass storage devices), the date/time that device was added, VendorID, ProductID, and more...
USBDeview also allows you to uninstall USB devices that you previously used, disconnect USB devices that are currently connected to your computer, as well as to disable and enable USB devices.
Please try and let us know if it solves your problem.
Mehper C. Palavuzlar
Posted 2010-12-15T11:07:27.753
Reputation: 51 093
1Unfortunately I only see "Created Date". The "Last Plug/Unplug Date" has value "N/A" :-(. But at least I now have the serial number, which is also important. Thanks for that. Any further clues? – Michal Czardybon – 2010-12-15T12:50:59.683
This is all I can suggest. Nice to know you got the S/N. – Mehper C. Palavuzlar – 2010-12-15T13:05:17.520