Laptops forum


How to diagnose the HW change

by hw_inq / August 30, 2012 12:40 AM PDT

I would like to know that is there any method to diagnose the HW change of a laptop. Does the bios store any log about that? We have laptops in our university that are borrowed by students. Recently we found that the harddisk of one laptop was changed from 320 to 80 GB. We found it when we tried to install our custom OS image (250GB), but it deletes all previous OSes, including boot record. We don't know who did it, but if we can find when the HDD was changed (the date), then it is possible to find who did the crime. Thank you.

Answer This Ask For Clarification
Discussion is locked
You are posting a reply to: How to diagnose the HW change
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: How to diagnose the HW change
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

All Answers

Collapse -
I'm afraid not.
by Kees_B Forum moderator / August 30, 2012 12:54 AM PDT

If the old disk was cloned to the new one (seems unlikely if your image is 250 GB) nobody it's totally transparent for everything you can imagine, even before you erased all evidence by overwriting it with the first 80GB of your image.

Only if they did a clean install on that 80GB (and didn't change the BIOS date before doing that) and the disk wouldn't have been overwritten, you could have seen the creation date of, say, the Windows folder.


Collapse -
hw_inq P.I.
by R. Proffitt Forum moderator / August 30, 2012 1:57 AM PDT

Put on your P.I. hat and get all those that had the laptop from the past year. Now wait for another incident and do the same. Any names match?

Popular Forums
Computer Help 49,613 discussions
Computer Newbies 10,349 discussions
Laptops 19,436 discussions
Security 30,426 discussions
TVs & Home Theaters 20,308 discussions
Windows 10 360 discussions
Phones 15,802 discussions
Windows 7 7,351 discussions
Networking & Wireless 14,641 discussions

CNET Holiday Gift Guide

Looking for great gifts under $100?

Trendy tech gifts don't require a hefty price tag. Choose from these CNET-recommended useful and high-quality gadgets.