Removing "naughty" internet history

[Deano6]

Let's say someone's work computer got a trojan, and say that work computer had been looking at sites it shouldn't of oughta. Other than the internet browsing history, what else should be searched for and deleted (temporary files, registry entries etc) to remove incriminating evidence before turning it over to IT support?

[saint_stevo]

Cookies?

 

Search- *.tmp and delete everything

 

Internet Explorer options- General Tab- Settings (under browser history)View Files/View Folders- Delete everything in those folders.

 

But if your company have an agent on your P.C (like i have on our P.c's here) then as soon as it is plugged into the LAN it will report back it's history and flag up certain sites

[badgerx16]

Depending on the sites, the Java cache might also be incriminating. There are some other things to look at, or at least that I would look at in my professional capacity, including uncovering things that have at face value been deleted, but I'm not going to give away all my secrets.

 

If you go through a proxy, or a firewall, there will also be log files there that you cannot access, but the IT staff most certainly will.

[Deano6]

To be clear, my "friend" has a laptop and only ever looked at stuff while not connected to the work intraweb (ie just using standard wifi).

[badgerx16]

To be clear, my "friend" has a laptop and only ever looked at stuff while not connected to the work intraweb (ie just using standard wifi).

I suggest "he" hopes that the relevant IT support aren't as throrough or zealous as I tend to be

 

The standard, easy way out for IT support is to simply re-image the HDD. I suggest that your 'chum' simply says that he thinks it got a nasty virus and wants them to clear it off.

Edited 24 June, 2011 by badgerx16

[Block 5]

Let's say someone's work computer got a trojan, and say that work computer had been looking at sites it shouldn't of oughta. Other than the internet browsing history, what else should be searched for and deleted (temporary files, registry entries etc) to remove incriminating evidence before turning it over to IT support?

 

I'd start checking the situation vacant pages if I were you.

[Gigersaint]

I almost caused a Divorce of my in-laws with a similar sort of issue. Upon getting a trojan they handed their laptop over to me to fix it for them.

 

Unfortunately I discovered the cause of it in the presence of my Wife, which she found extremely funny and was promptly on the phone to her Mother to tell her why in laughter...

 

What followed was also an extremely uncomfortable evening for me... upon angry demand I found myself presenting hard core porn sites to my mother in law who wanted to see what her husband had been looking at to introduce such a trojan into their machine.

 

The worst thing was seeing him sat there tapping his fingers and gazing at the ceiling and at me knowing he was being busted by the minute.

 

The best I could offer to say to the Mother in law as they left was... try not to worry about it, at least you know it was all legal! It's not that bad!

 

It is funny looking back now but at the time I was mortified to being put in that position and being asked to check history on the laptop for some months after!

[AussieDog]

If I was that person and I was really bothered about what might be found, I think I would find a piece of disk wiping software and wipe it myself before handing it over,on the pretense of being helpful! Better to be in trouble for having nothing on there, than the consequences of finding sites that may actually be reason to terminate that person's employment....

[sambosa75]

I almost caused a Divorce of my in-laws with a similar sort of issue. Upon getting a trojan they handed their laptop over to me to fix it for them.

 

Unfortunately I discovered the cause of it in the presence of my Wife, which she found extremely funny and was promptly on the phone to her Mother to tell her why in laughter...

 

What followed was also an extremely uncomfortable evening for me... upon angry demand I found myself presenting hard core porn sites to my mother in law who wanted to see what her husband had been looking at to introduce such a trojan into their machine.

 

The worst thing was seeing him sat there tapping his fingers and gazing at the ceiling and at me knowing he was being busted by the minute.

 

The best I could offer to say to the Mother in law as they left was... try not to worry about it, at least you know it was all legal! It's not that bad!

 

It is funny looking back now but at the time I was mortified to being put in that position and being asked to check history on the laptop for some months after!

 

When I first moved to Spain with my girlfriend we were briefly living with her parents. I was using her Dads computer when I stumbled across his favourites. Among them were 3 websites for massage parlours and whore houses in the local vicinity... This was about a week after I moved over. It made the next couple of months rather awkward but I decided to keep schtum.