Internet Explorer History

RuggieBear

Someone has been using the work computer to look at "naughty" sites.....now it happened three weeks ago so within IE the history just shows the sites as "3 weeks ago". Is it possible to narrow down when these sites were visited so it is possible to figure out which day/shifts they were visited on?

heggie

not sure but i'd imagine if you went into the cache, and browsed for the actual files there would be a creation date.

KdjaCL

What heggie said the cookies folder and check View Details it will show time and date of cookie and or website access time.


kdjac

astec123

Temporary internet files. Go to the settings menu. (not used IE in months) and there is a button to open the folder, it will tell you all about the file. Creation date ie first access and the last accessed. So you have 2 reference points. Also why are you
1. not using firefox
2. and not got the system secured with passwords to prevent this?

jacket

The index.dat file will be worth a look, it's hidden and you may need a special program to open it.

RuggieBear

Actually figured it out just after i posted it. Thanks anyway....

It's a work comp...that's really just used for email. Only the techonolgy illiterate mangers are suppossed to use it and no matter how many times i've told them they just doesn't understand websafety properly or how to download updates or even how to use the anti virus software.

i'm not suppossed to touch it so i just watch them do stupid things and keep my trap shut.

Nobody else is suppossed to touch it but i've been secretely keeping the bloody thing up to date and clean of viruses. (the last comp died when the idiots opened up all sorts of bad things in attachemnts).

Anyway one of my other co workers has been looking at porn and was idiot enough not to delete the history/cookies and even my managers were able to stumble upon it.

Basically, i'm under suspcion as it is only myself and this other punter who could have got at the computer. There is no way i'm getting tarred for looking at porn while at work. So i've got the dates and times of his asian schoolgirl fetish (and they all correllate to his shifts)

sinjin_smythe

But when you bdelet your history and stuff is it really ever gone ? i mean can you remove it all without restoring the hard drive ?? (Eh this question is by a friend of mine, yes yes a friend of mine thatll convince them )

jor el

There are plenty of tools for recovering deleted files, so I'm sure there are ones for recovering the history too, which would have been stored in a file anyway.

There are also tools for permenantly deleting files too. Though with good enough recovery software these can sometimes be recovered too.

RuggieBear

well this muppet didn't even delte the history or delete temp files.....

BrokenArrows

when you delete a file all that actually happens is its location is removed from the file allocation table so the data is still on the harddrive just not viewable by the operating system.

2k and XP dont have allocation tables but the theory is the same.