Security problem.
in [Windows XP]
|
From: Paul on 18 Jun 2010 06:21 Frank Martin wrote: > "Mint" <chocolatemint77581(a)yahoo.com> wrote in message > news:d8d86dfc-34d7-4963-9ae1-d350a9404777(a)5g2000yqz.googlegroups.com... >> On Jun 16, 11:12 pm, "Frank Martin" <f...(a)general.com.au> >> wrote: >>> I have WindowsXP pro, SP3. >>> >>> I have just noticed in the Registry at: >>> >>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR >>> >>> that there is a list of all plug-in devices such as >>> cameras, >>> USB thumb drives etc that I use occasionally. Presumably >>> imbedded here are times of access of these to the >>> computer >>> and God knows what else. >>> >>> For security, can I delete these entries from the >>> registry >>> by adding their path to the CCleaner program for routine >>> daily deletion? Presumably the entries will be added >>> again >>> when I use any device again. >>> >>> Please help. >> Yes you can and you may want to delete the setupapilog as >> well. >> >> http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog > > > I cannot find the file "setupapilog" I have looked > everywhere. > Please help > > C:\WINDOWS\setupapi.log 91KB Jun.17 C:\WINDOWS\setupapi.log.0.old 1293KB Mar.18 C:\WINDOWS\setupapi.log.1.old 1013KB Apr.5 New files are created when they get big enough. You may have more than one file to delete. Paul
From: Frank Martin on 18 Jun 2010 19:52 "Paul" <nospam(a)needed.com> wrote in message news:hvfhav$tak$1(a)speranza.aioe.org... > Frank Martin wrote: >> "Mint" <chocolatemint77581(a)yahoo.com> wrote in message >> news:d8d86dfc-34d7-4963-9ae1-d350a9404777(a)5g2000yqz.googlegroups.com... >>> On Jun 16, 11:12 pm, "Frank Martin" >>> <f...(a)general.com.au> wrote: >>>> I have WindowsXP pro, SP3. >>>> >>>> I have just noticed in the Registry at: >>>> >>>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR >>>> >>>> that there is a list of all plug-in devices such as >>>> cameras, >>>> USB thumb drives etc that I use occasionally. >>>> Presumably >>>> imbedded here are times of access of these to the >>>> computer >>>> and God knows what else. >>>> >>>> For security, can I delete these entries from the >>>> registry >>>> by adding their path to the CCleaner program for >>>> routine >>>> daily deletion? Presumably the entries will be added >>>> again >>>> when I use any device again. >>>> >>>> Please help. >>> Yes you can and you may want to delete the setupapilog >>> as well. >>> >>> http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog >> >> >> I cannot find the file "setupapilog" I have looked >> everywhere. >> Please help > > C:\WINDOWS\setupapi.log 91KB Jun.17 > C:\WINDOWS\setupapi.log.0.old 1293KB Mar.18 > C:\WINDOWS\setupapi.log.1.old 1013KB Apr.5 > > New files are created when they get big enough. You may > have > more than one file to delete. > > Paul Thanks, I'll check this out. F
From: Frank Martin on 19 Jun 2010 23:48
"Paul" <nospam(a)needed.com> wrote in message news:hvfhav$tak$1(a)speranza.aioe.org... > Frank Martin wrote: >> "Mint" <chocolatemint77581(a)yahoo.com> wrote in message >> news:d8d86dfc-34d7-4963-9ae1-d350a9404777(a)5g2000yqz.googlegroups.com... >>> On Jun 16, 11:12 pm, "Frank Martin" >>> <f...(a)general.com.au> wrote: >>>> I have WindowsXP pro, SP3. >>>> >>>> I have just noticed in the Registry at: >>>> >>>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR >>>> >>>> that there is a list of all plug-in devices such as >>>> cameras, >>>> USB thumb drives etc that I use occasionally. >>>> Presumably >>>> imbedded here are times of access of these to the >>>> computer >>>> and God knows what else. >>>> >>>> For security, can I delete these entries from the >>>> registry >>>> by adding their path to the CCleaner program for >>>> routine >>>> daily deletion? Presumably the entries will be added >>>> again >>>> when I use any device again. >>>> >>>> Please help. >>> Yes you can and you may want to delete the setupapilog >>> as well. >>> >>> http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog >> >> >> I cannot find the file "setupapilog" I have looked >> everywhere. >> Please help > > C:\WINDOWS\setupapi.log 91KB Jun.17 > C:\WINDOWS\setupapi.log.0.old 1293KB Mar.18 > C:\WINDOWS\setupapi.log.1.old 1013KB Apr.5 > > New files are created when they get big enough. You may > have > more than one file to delete. > > Paul Hello, I am having trouble adding the registry file: MyComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR to the "Include" page of the CCleaner. Is there any special techniqe required to do this? Frank |