Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


I need help using event viewer in Win 7

  • Please log in to reply
2 replies to this topic

#1 why2kwill


  • Members
  • 35 posts
  • Local time:06:22 PM

Posted 02 October 2016 - 10:00 PM

I've spent a lot of time trying to wrap ,my mind around windows event viewer until I had to admit that I am no match for the evil genius who developed it.  I'm just trying to determine if  anyone was using my machine on 9/29 between 9:30 - 10:30 a.m.  I'm assuming that the answer can be found somewhere in event viewer and I'm hoping that someone can help me out.

Thank you,


BC AdBot (Login to Remove)


#2 hamluis



  • Moderator
  • 56,556 posts
  • Gender:Male
  • Location:Killeen, TX
  • Local time:04:22 PM

Posted 03 October 2016 - 08:04 AM

IMO...Event Viewer is a great tool...but it (nor anything else) is capable of projecting information about events which do not have clearly defined cause-and-effect.  It doesn't know when a file is damaged or the wrong file..or just poorly written.  It cannot possibly define cause-and-effect where the variables in the equation might be numerous.  But, in a large number of instances, it can shout "This is not right" and possibly alert the user that there may be a problem existing or coming.  The user must interpret...what is reported.


Normally...the only items that a user has to even try to interpret...are those reflected as "errors"  "information items can be ignored.  Generally, the only useful items for the user are found in Applications and System...unless there is a known problem, no point in even looking at the other categories.


Please download MiniToolBox  , save it to your desktop and run it.
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
Click Go and paste the content into your next post.
Also...please Publish a Snapshot using Speccy taking care to post the link of the snapshot in your next post.

   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course): p22004369.gif

     Now, at the top, click File > Publish Snapshot. You will see the following prompt:


     Click Yes > then Copy to Clipboard


Now, once you are back in the forum topic you are posting in, click the p22004370.gif button. Right-click in the empty space of the Reply box and click Paste. Then, click Add Reply below the Reply box.



#3 dc3


    Bleeping Treehugger

  • Members
  • 30,809 posts
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:02:22 PM

Posted 03 October 2016 - 01:02 PM

Press the Windows keywindowskey_zps092d5c75.png and the R key together and type beventvwr.msc, then click OK or press Enter.
Expand Windows Logs, then select  Security
You will see a log listing the Date and Time, Source, Event ID, and Task Category. 
In the Task Category find the date and time you are looking for, then double click on it.
This will open a page with any details of the event.  And that's the rub... there has to have been an event for this to be listed in the Event Viewer.
There really isn't much in the way of options to see who was using your computer.  But you can set it up the Event Viewer to audit login events.  For instructions for doing this go here.

Edited by dc3, 03 October 2016 - 01:04 PM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users