Jump to content

The Mad Rapper

Members
  • Posts

    3
  • Joined

  • Last visited

Posts posted by The Mad Rapper

  1. Forensic IT Investigator that does not know indext.dat are always open when Windows is running. Hence why they cant be deleted. which is why ccleaner should be run at startup.

     

    So we are supposed to know everything about everything?

     

    How about you lose your attitude problem? The other forum manner made the situation clear without being rude. Perhaps try that next time.

  2. After a reboot of the machine the dat should be clean

     

    ccleaner marks the dat for deletion at reboot

     

    wow o wow Glad to hear from a FITS that they approve of other parts of the program :)

     

    Also windows 7 is in testing for a little longer with the devs of CCLeaner (Starting with ie8 dat.s are everywhere and so it seems to be a bit harder to track them and clean them when asked for and not clean them when not)

     

    (BTW I'm just a user not a team member or developer)

     

    That's interesting. I'll try it and report back.

     

    Credit where credit is due - so far it does exactly what it says on the tin.

  3. Hello there.

     

    I am a Forensic IT Investigator, and I have ran an experiment with various wiping tools that are commonly available. I set CCleaner to wipe 3 times. I then examined the test HDD using Encase V6.14

     

    While CCleaner correctly wiped the files in the Temp Internet folder (as well as overwriting the relevant MFT entries), it did not touch the index.dat at all. All of the history entries could easily be seen, the file was completely intact.

     

    Can you pease provide an explanation?

     

    The test system O/S is the latest Windows 7 RC.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.