Three weeks ago my laptop was stolen from campus. I immediately reported it to police and on manufacturer's website. A couple of days ago a man called the manufacturer and said he bought a second-hand laptop on the web and wanted to check the warranty through the serial number. The manufacturer saw it was stolen, and the police contacted the poor buyer and took the laptop from him and returned it to me.
The police told me they would try and locate the thief from the buyer's description; however, they just returned the laptop to me without even looking it over!
I turned it on to see the thief reinstalled Windows (Windows 7 Professional) before selling it.
I'm positive there must be clues in the system as to who reinstalled, like perhaps an IP address where the installation took place etc', or perhaps licenses of reinstalled software that could give me clues as to the thief's identity.
- Where in the logs can I find details as to where the computer first connected to the web after installation?
- Where do I find information as to the product keys\licenses of the installed windows and office?
- Any other ideas as to how I could trace the SOB (who also probably stole another computer a week before)?