一、查看开关机时间的记录

想知道有没有人动过你的电脑，不用你开口去问，先来查看一下开机、关机的时间。按win+r键，快速打开运行对话框，输入“eventvwr.msc”命令回车打开事件查看器。

在左侧点击展开“windows 日志”—选择“系统”，再往右边窗口看过来，查看某一天的第一条记录和最后一条记录就是相应的开关机记录。

一般开机记录的描述信息为“事件服务已启动” ，代表计算机开机或重新启动的时间;描述信息为“事件服务已停止”，即代表计算机的关机时间。

二、查看最近打开的文件

同时按Win+r键打开运行窗口，输入“recent”回车，再点击一下“修改日期”让文件时间有序的排列。现在就可以查看最近看过的文件记录了，包括看过什么图片、数据表格、文件、文档等数据，以及什么时候看的时间，都尽收眼底一目了然。

三、查看软件使用记录

最近在这台电脑使用过的软件所留下的记录也能翻出来哦。打开此电脑—C盘—windows—Prefetch。里面记录的是你在什么时间，运行过哪些程序。文件最前面的为程序名，后面的执行代码不用理。

In modern offices, computers are essential, and computer security is crucial, especially in shared workspaces. This article provides three methods to check if your computer has been used by others without using any software, directly on your own computer:

1. Check the startup and shutdown time records: Press the win+r keys to open the Run dialog box, enter the "eventvwr.msc" command and press Enter to open the Event Viewer. On the left side, expand "Windows Logs" and select "System". In the right window, the first and last records of a certain day are the corresponding startup and shutdown records. The startup record is usually described as "The event service has started", and the shutdown record is described as "The event service has stopped".
2. Check the recently opened files: Press Win+r to open the Run window, enter "recent" and press Enter, and then click "Modify Date" to sort the files by time. You can view the records of recently viewed files, including pictures, spreadsheets, documents, etc., and the viewing time.
3. Check the software usage records: Open This PC - C drive - windows - Prefetch. This folder records the programs you have run and the execution time. The file name at the beginning is the program name, and the execution code at the back can be ignored.

If you suspect that your computer has been used by others, you can try these methods to check the startup and shutdown times and recent computer usage records.