Comments for Can Internet Explorer's History be undeleted?

Comment from Fiaz on 2008-11-26

2008-11-26T09:23:37Z

Leo, Is it possible to kill the IE explorer history/hide information from network administrator without using history kill software

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from kristina on 2008-10-01

2008-10-01T23:56:49Z

Leo - Can IE History be permanently DELETED?

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from jo on 2008-03-22

2008-03-22T18:58:49Z

Hi Leo great site thanks could either you or warren answer this one?
To Warren Whitney
re using system restore
Please can you tell me exaclty how you used system restore. I have windows xp etc and have carried out the system explore procedure and sure enough the list (ie the list: 'x weeks ago') has returned & for a minute I rejoiced but they do not expand ie they seem to be empty.

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Bubba R on 2007-11-20

2007-11-21T00:12:30Z

is there any way I can see the last time someone deleted the internet history, something in the command promt that I can type to see when it was last physically deleted by a user?

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Steve Burgess on 2007-10-19

2007-10-19T15:48:50Z

Leo,
Good article, and good comments. There's something that I think may have been left out, however. The discussion has centered around deleted index.dat files, but there is also a lot of Internet history left lying around when the History truncates its file by default. The user may have one or two weeks of history kept, but the old history doesn't just go away. It gets truncated, and orphaned off into unallocated space. So the text containing those history entries is a rich source of information for computer forensics guys like me. It is not unusual for me to find hundreds of thousands of old Internet history entries (I'm not exaggerating) by using various forensic utilities. There is information about this and related issues on my article pages - I hope it's okay to put that reference here: http://www.burgessforensics.com/articles.php
Thanks for your good work!
-Steve

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Peter Hess on 2007-07-27

2007-07-28T02:24:27Z

Re:IE history in the index.dat files which are locked and can't be deleted in Windows platform".
Opening new administrator account and then deleting previous administrator account and files, effectively deletes all index.dat files. Yes/No??

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Arthur on 2007-02-23

2007-02-23T11:25:36Z

Windows keeps IE history in the index.dat files which are locked and can't be deleted in Windows platform.
History Killer (from Emergency Soft) can delete index.dat files and erase IE history.
http://en.emergency-soft.com/category/historykiller

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Leo on 2007-01-20

2007-01-21T05:18:38Z

I want to hide my IE history from my network administrator.
Please let me know how I can achieve this

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Dmitry on 2007-01-15

2007-01-15T13:01:07Z

Hello!
You have a chance to restore history using 3-rd party software. Then you deleting history links from IE it does't delete all information related to visited sites.
1. History index.dat file can contains Host: entries, for visited sites. These records does't contain full path to visited pages but shows you visited sites.
2. You can explore Internet Explorer cookies and find visited domain names.
3. You can explore address bar history for domain names.
4. You can explorer Temporary Internet Files records and view visited domain names and visited URLs.

I my case i use IEHistoryX from http://www.585Soft.com, this tool is easy to understand and use and got all needed tools to work with history, cookies, cache entries.

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Renee on 2006-11-08

2006-11-08T17:12:42Z

In reference to Posted by: Warren Whitney at July 26, 2006 05:35 AM, does doing a system restore affect anything else? How far back will it retrieve the internet history?

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from nvjksdhfuarsh on 2006-09-12

2006-09-12T16:27:32Z

So how can you delete the index.dat file?

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Warren Whitney on 2006-07-26

2006-07-26T12:35:52Z

In Windows XP SP2 - the history absolutely CAN be restored - by using System Restore. I just did it.

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jerry on 2006-07-06

2006-07-06T22:48:59Z

Great info. Thanks for showing it.

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ivan Tadej on 2006-02-04

2006-02-05T02:33:53Z

Yes Leo, you're completely right ...

Files can be deleted and can be *deleted*; meaning that you can "recycle" a file (i.e. move it to the Recycle Bin), and then issue an "Empty Recycle Bin" command/operation, which in fact doesn't delete the actual contents of the (physical) file on a hard-disk, but it only makes these areas available for future writes; as Leo has already written in the article.

And in my opinion this is somehow similar to reformatting a partition, i.e. the actual data are not overwritten (like in case of the so-called "low-level" format; where the hard-disk is overwritten by zeros or random patterns), but only "marked" as non-occupied, however, the actual data are physically still intact on the hard-disk and can be therefore easily recovered till this area on hard-disk is written to for the first time after deleting the respective file. But even then the data can be retrieved by forensic professionals; but please don't ask me how, because I simply don't know.

From my own experiences, I would recommend two programs; as first an application called "Handyrecovery": http://www.handyrecovery.com/index.shtml (it was free back then when I've used it, but I think it's not anymore) and "PCInspector - File Recovery": http://www.pcinspector.de/file_recovery/welcome.htm, which is a program that besides recovering deleted files can even resce files from corrupted hard-disks and partitions.

P.S., If anyone is interested, please read the "I ACTUALLY DID IT ... I rescued the data from a totally screwed disk !!" thread: http://episteme.arstechnica.com/eve/ubb.x/a/tpc/f/99609816/m/758006059631, that I opened on ArsTechnica forum back then for more info on how I managed to get most of my data back from a totally corrupted/screwed partition with a PC Inspector - File Recovery program mentioned/linked above.

best regards,
Ivan Tadej, Slovenija, Europe
http://www.tadej-ivan.be (redirect)
http://users.volja.net/tayiper (direct)

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ivan Tadej on 2006-02-04

2006-02-05T02:32:42Z

Just a thought ...

I know one program that can nicely check/recover/export the contents of any "index.dat" type of file. It's a CLI application from Foundstone called "pasco"; please see here for the program's description: http://www.foundstone.com/resources/proddesc/pasco.htm and optionally you can download it here: http://www.foundstone.com/resources/termsofuse.htm?file=pasco.zip

best regards,
Ivan Tadej, Slovenija, Europe
http://www.tadej-ivan.be (redirect)
http://users.volja.net/tayiper (direct)

]]>

A comment on: Can Internet Explorer's History be undeleted?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.