Is windows still storing a secret copy of my browsing history ?

BreadedChicken · 10 Mar 2018

Hello guys.

It was known that in previous versions of windows, the OS keeps a list of visited websites on a file called INDEX.DAT on the hard drive. I'm not talking about the data that can be erased within each web browser, but a list that persists even after the browser's has been cleared. That, to me, is really troublesome.
It is my understanding that the file no longer exists with that name (newer versions changed the database name and location), but that it still exists.

Can anyone shed some light on the matter? Are there any other places that browsing information is cached? Any way to protect ourselves from snooping eyes?

Bree · 10 Mar 2018

You need to consult a forensics expert. Here's one...

Since IE10 browsing history records are no longer stored in Index.DAT files, but are instead stored in an Extensible Storage Engine (ESE) database format, and Microsft Edge is no different. In fact most of the Edge artefacts are stored in ESE databases....

...Being Microsoft there is of course a legacy version of IE (version 11) included in Windows 10 (just in case you don’t like the new browser) and interestingly enough both Edge and IE history records are stored in the same database...

https://www.linkedin.com/pulse/windo...ics-brent-muir

Clearing the browsing history should clean that database though, particularly if you use something like CCleaner afterwards. The article seems to cover all other the places that some urls may have been kept.

Kari · 10 Mar 2018

Might be off topic, yet I want to express my sincere opinion:

I simply do not understand this! I assume we all are honest citizens in our respective countries. What could be the reason for someone to be afraid of his / her own computer storing information about websites he / she has visited?

I mean, I am four times divorced currently single man with normal needs, my last wife leaving over 4 years ago. I am not ashamed to admit that my browsing history would reveal I have visited some so called adult sites. Likewise, I am not ashamed that my browsing history reveals some dating sites, Apple & MacOS forums and other sites considered as shameful.

What is the problem? Who has access to my browsing history? NSA, my ex-wives, my past, present and future employers? None of them but even if they all had access to my browsing history, who cares? I am not doing anything illegal on my PC, I am just an average man doing what an average man does on the PC.

My suggestion: disconnect from Internet, never go online. Amazon, at least Amazon UK, has tinfoil on sale; order some and consult this website to see how to use it: Worst-Case Wednesday: How to Make an Effective Tinfoil Hat | Quirk Books : Publishers & Seekers of All Things Awesome

Kari

SoFine409 · 11 Mar 2018

Kari said:

Might be off topic, yet I want to express my sincere opinion:

I simply do not understand this! I assume we all are honest citizens in our respective countries. What could be the reason for someone to be afraid of his / her own computer storing information about websites he / she has visited?

I mean, I am four times divorced currently single man with normal needs, my last wife leaving over 4 years ago. I am not ashamed to admit that my browsing history would reveal I have visited some so called adult sites. Likewise, I am not ashamed that my browsing history reveals some dating sites, Apple & MacOS forums and other sites considered as shameful.

What is the problem? Who has access to my browsing history? NSA, my ex-wives, my past, present and future employers? None of them but even if they all had access to my browsing history, who cares? I am not doing anything illegal on my PC, I am just an average man doing what an average man does on the PC.

My suggestion: disconnect from Internet, never go online. Amazon, at least Amazon UK, has tinfoil on sale; order some and consult this website to see how to use it: Worst-Case Wednesday: How to Make an Effective Tinfoil Hat | Quirk Books : Publishers & Seekers of All Things Awesome

Kari

Same thing occurred to me. Great post.

lx07 · 11 Mar 2018

History and Cookies are stored in "%localappdata%\Microsoft\Windows\WebCache\WebCacheV01.dat" since IE10 when it replaced index.dat.

There are some programs to view/delete contents (like WebCacheV01.dat Viewer & Deleter) but I never tried them.

You may find this interesting: Windows 10 Forensics Cyber Forensicator

TairikuOkami · 11 Mar 2018

If you use MS account/Cortana, your browsing history is stored online, so CCleaner will not do.

https://support.microsoft.com/en-us/...rowser-history

lx07 said:

History and Cookies are stored in "%localappdata%\Microsoft\Windows\WebCache\WebCacheV01.dat" since IE10 when it replaced index.dat.

(WinINet Caching/V01.log/WebCacheV01.dat)

I have disabled all those and no issues, though I do not use Edge.

Code:

Take Ownership of the Registry key - https://www.youtube.com/watch?v=M1l5ifYKefg
reg delete "HKCR\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f
reg delete "HKCR\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f
reg delete "HKCR\Wow6432Node\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f
reg delete "HKCR\Wow6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f
reg delete "HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f
reg delete "HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f
schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable
rd "%LocalAppData%\Microsoft\Windows\INetCache" /s /q
rd "%LocalAppData%\Microsoft\Windows\WebCache" /s /q

Kari said:

I am not doing anything illegal on my PC, I am just an average man doing what an average man does on the PC.

It is about prejudice. People have been fired, bullied and worse for doing completely legal things, like watching porn or supporting a political party. In a perfect world, it should not matter, but it does.