Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Forensic Downloads
· Forensics Feedback
· Forums
· Members List
· Statistics
· Surveys
· Top 10
· Topics
· Training Reviews
· Web Links
· Your Account

Our Membership

Latest: bradshaw48
New Today: 1
New Yesterday: 1
Overall: 29280

Computer Forensics
This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.

Recent Posts

 Final Year Project
 Android devices with PIN screen lock and without USBdebb. on
 Can file creation and modifications on pendrives be found?
 Viewing real MAC times of a timestomped file
 software that can view files in Volume Slack

Computer Forensics World Forums


Pages Served
We received
49762078
page views since August 2004

Security Sources

FTC
OnGuard Online
ISO 17799 ISO 27001
ISO 27000 Toolkit
ISO 27001 & 27000
Cryptography
Security Policies

Computer Forensics World: Forums

Computer Forensics World :: View topic - Tool 2 remove traces of pc use after certain date
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Tool 2 remove traces of pc use after certain date

 
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Forensic Software and Tools
View previous topic :: View next topic  
Author Message
moonboots
Newbie
Newbie


Joined: Mar 29, 2015
Posts: 2

PostPosted: Mon Mar 30, 2015 3:05 am    Post subject: Tool 2 remove traces of pc use after certain date Reply with quote

Hi,

Thank you for reading this. I am absolutely new to the topic of forensics Confused and was wondering if some of you can refer me towards a software tool that can remove selectively traces of pc-use in a windows7 based system (remove a time period).
I mean that there will be windows event logfiles and probably registry and other values on the system that can show that the pc has been used after a certain date and I would like to change such data in a way that the pc seems not to be used after a certain date.

Do you know a tool for that?
Idea Thank you very much!


(for who wants to know my motivation:
It may sound strange, but the situation is that a friend of mine went into psychosis and I had to check roughly what he has been doing online all the time just before the psychosis started, in order to understand the course of events and maybe intervene. But he will use his pc again after some time and is an intelligent and paranoid person who will freak out when he somehow discovers that his pc has been used and re-enter a fictional existence in conspiracy theories, which will again destabilize him. I can't tell him either, since I need to keep his trust in order to be able to guide/help)
Back to top
View user's profile
cybercop
Newbie
Newbie


Joined: Nov 01, 2005
Posts: 551
Location: Marion, Indiana, USA

PostPosted: Mon Mar 30, 2015 6:14 am    Post subject: Reply with quote

I seriously doubt you are going to be able to remove all traces of the system having been used since you did your examination on his actual computer instead of using an image of that drive (which is what you should have done). As it is, the only thing you could do is hope he doesn't notice that you were looking through his system.
Back to top
View user's profile
moonboots
Newbie
Newbie


Joined: Mar 29, 2015
Posts: 2

PostPosted: Thu Apr 02, 2015 12:59 am    Post subject: Reply with quote

Thanks for you input Cybercop.
2Late for the image way now. I will hope my efforts will go unnoticed for his sake, but was hoping as well that some of you could help with the most obvious traces, like changes in the windows event logs. I've already removed the recent locations superficially.
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Forensic Software and Tools All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.10 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

TMs property of their respective owner. Comments property of posters. 2007 Computer Forensics Science World.
Digital forensic computing news syndication: Computer Forensics Training News or UM Text
Software is copyrighted phpnuke.org (c)2003, and is free under licence agreement. All Rights Are Reserved.