The invention relates to a USB device usage record recovery and check method for recovering a USB device usage record after a hard disk installed in an operating system is quickly formatted. After the formatted hard disk is obtained, the hard disk is inserted into a host which runs normally, and a SYSTEM file is recovered to obtain USB usage record information; then, the record information is compared with a log, the information completeness is judged, and if the record information is consistent with the log, recording is performed, or otherwise, recovery is performed; and in the recovery process, the usage record is maximally recovered with machine learning method, verification is performed after recovery, and if judgment cannot be performed by recovery for effective times, exiting is performed. With the adoption of the method, the related historical USB usage record of the operating system after the formatting can be recovered and analyzed, so that the security supervision strength can be improved.