Windows Logs, usb disconnection!

Ricio · 04-21-2008, 04:13 PM

How can I see at what time was a USB device disconnected?

Please help me out, my usb got stolen!

Urgent

elliott678 · 04-21-2008, 04:23 PM

You can check your kernel.log for something like:

Code:

Apr 20 02:49:46 acer-arch usb 3-2: USB disconnect, address 3
Apr 21 03:25:13 acer-arch usb 1-2: USB disconnect, address 2
Apr 21 14:47:37 acer-arch usb 2-2: USB disconnect, address 2

This is the command I used to get that output "grep disconnect /var/log/kernel.log"

Oops, just realized this was a Windows thread.

Ricio · 04-21-2008, 04:38 PM

Quote:

Oops, just realized this was a Windows thread.

hehehehe is not that normal for me either to be asking windows questions!

still I need someone to help me out!

elliott678 · 04-21-2008, 04:45 PM

Have you checked the Windows Event Viewer? I'm not sure that it logs stuff like that, but that is all I can think of.

Ricio · 04-21-2008, 04:54 PM

Im actually watching the windows event viewer, but since I dont know how windows registers such events im looking at all events that happened at the presumpt time the ipod was stolen!!

Men, next ipod, im definitely encripting all files! and backup regularly. last backup was about a week ago!! too much time!