Member Avatar for PcPro12

Hey guys...anyone know how to find a computer log in the computer? Like a log that tells when and which program i installed and all the details of what my computer does in the background?

Is there even anything that does this?

Thanks
PcPro12

  • 2 Contributors
  • 4 Replies
  • 128 Views
  • 2 Weeks Discussion Span
  • Latest Post Latest Post by PcPro12

Dani AI

Generated

As pointed out, Windows already records a lot of activity. For Vista Home Premium there are several additional places to check when you need to know what was installed and roughly when, plus ways to capture much more detail going forward.

Installed programs

  • Many installers register entries under the Uninstall keys in the registry. Check:
    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • On 64-bit installs also inspect the Wow6432Node path.
  • Some entries include an InstallDate value; others do not. To enumerate MSI-based installs from the command line:
wmic product get name,version,installdate

( WMIC reports only MSI-based installers and can be slow. )

File-based evidence and logs

  • Installer logs are often left in %TEMP% or C:\Windows\Temp.
  • C:\Windows\WindowsUpdate.log records update/install activity.
  • C:\Windows\inf\setupapi.dev.log captures driver/setup events; C:\Windows\Logs\CBS\CBS.log records component servicing actions.
  • C:\Windows\Prefetch contains files created when executables run and can give timestamps for first/last runs.
    Open these logs in a text editor and search for the program name or "install" to build a timeline.

Capture more detail going forward

  • Enable process auditing in Local Security Policy (secpol.msc -> Local Policies -> Audit Policy -> Audit process tracking) to log process creation (this produces many records).
  • For MSI installers, force a detailed log when installing:
msiexec /i path\package.msi /l*v C:\install.log
  • Use Sysinternals Procmon for real-time capture (must be running before the event). Combine registry entries, installer logs, file timestamps and prefetch data for the most reliable timeline. Back up the registry before editing and be aware logging can grow large.

Recommended Answers

All 4 Replies

Member Avatar for PcPro12

Oh, also...Im using WINDOWS VISTA HOME PREMIUM...any other details needed?

Member Avatar for PcPro12

anyone have any idea what im talking about? or if its even possible?

Member Avatar for Smalls

Hello,

Not sure if this is what you're looking for
but, if you go to the start menu, and just type "admin"
w/o quotes
"Administrative Tools" should pop-up
click on this
You can go into "Event Viewer" or "Reliability and Performance Monitor"
I recommend that you do not change any settings in either one of these
but, you can find out all sorts of things just by snooping through these 2

Hope this is what your looking for!!!

commented: was very helpful and helped me found what i was looking for... +2
Member Avatar for PcPro12

yes this is what i was looking for:icon_biggrin: THANK YOU VERY MUCH!!!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.