6
Do you have the feeling that someone has been at your computer? You can find out by checking when it was last turned on and off. We will explain step by step how this works.
Instructions: When your computer was started up and shut down
If you want to know whether your computer was restarted in your absence, you can find out using the Windows event log. Just follow the instructions:
- Click the Start icon on the taskbar and type “eventvwr” in the search bar. Click Open and the Event Viewer will open.
- Click on “Windows Logs” in the left menu and then on “System”. This is where you will find the system logs.
- Click on “Filter current log…” on the right side. A new window will open. Right in the middle is
Delete the characters and enter the numbers 6009 and click “OK”.
- The window closes, and in the old window you will now see “Event 6009, EventLog” highlighted in blue. Click on “Event Properties” and the window will show you when a system start occurred.
- With ID 6006, the “Event Properties” show you when the system was shut down. To do this, proceed in the same way from “Filter current log…”.