Laptops forum


How to diagnose the HW change

by hw_inq / August 30, 2012 12:40 AM PDT

I would like to know that is there any method to diagnose the HW change of a laptop. Does the bios store any log about that? We have laptops in our university that are borrowed by students. Recently we found that the harddisk of one laptop was changed from 320 to 80 GB. We found it when we tried to install our custom OS image (250GB), but it deletes all previous OSes, including boot record. We don't know who did it, but if we can find when the HDD was changed (the date), then it is possible to find who did the crime. Thank you.

Answer This Ask For Clarification
Discussion is locked
You are posting a reply to: How to diagnose the HW change
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: How to diagnose the HW change
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

All Answers

Collapse -
I'm afraid not.
by Kees_B Forum moderator / August 30, 2012 12:54 AM PDT

If the old disk was cloned to the new one (seems unlikely if your image is 250 GB) nobody it's totally transparent for everything you can imagine, even before you erased all evidence by overwriting it with the first 80GB of your image.

Only if they did a clean install on that 80GB (and didn't change the BIOS date before doing that) and the disk wouldn't have been overwritten, you could have seen the creation date of, say, the Windows folder.


Collapse -
hw_inq P.I.
by R. Proffitt Forum moderator / August 30, 2012 1:57 AM PDT

Put on your P.I. hat and get all those that had the laptop from the past year. Now wait for another incident and do the same. Any names match?

Popular Forums
Computer Help 51,224 discussions
Computer Newbies 10,453 discussions
Laptops 20,090 discussions
Security 30,722 discussions
TVs & Home Theaters 20,937 discussions
Windows 10 1,295 discussions
Phones 16,252 discussions
Windows 7 7,684 discussions
Networking & Wireless 15,215 discussions


What do the color stripes mean on your tires?

Brian Cooley tells you why you might see various color lines on the wheels of your automobile.