2007-03-30 05:39:51 · 2 answers · asked by Gary M 1 in Computers & Internet ➔ Security
The arrival and removal of PnP devices like a USB flash drive is not recorded in the registry. However, it is logged in the System Event log.
==== An arrival would look like,
Type:Information
Source:Removable Storage Service
Event ID:134
Event Time:3/13/2007 8:30:48 PM
User:n/a
Computer:bluemangroup1
Description:
Received a device interface ARRIVAL notification for device:
\\?\USBSTOR#Disk&Ven_Kingston& Prod_DataTraveler_U3&Rev_6.50#0D817960A1F1997E&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
==== A removal would look like,
Type:Information
Source:Removable Storage Service
Event ID:135
Event Time:3/13/2007 8:30:49 PM
User:n/a
Computer:bluemangroup1
Description:
Received a device interface REMOVAL notification for device:
\\?\USBSTOR#Disk&Ven_Kingston& Prod_DataTraveler_U3&Rev_6.50#0D817960A1F1997E&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
2007-04-01 12:32:00 · answer #1 · answered by Kevin 7 · 4⤊ 0⤋
No, not in the registry.
2007-03-30 05:45:06 · answer #2 · answered by Kokopelli 6 · 0⤊ 0⤋