Examining index.dat using X-Ways Trace Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Support Forum » Miscellaneous » Examining index.dat using X-Ways Trace « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Anders
Posted on Wednesday, Mar 9, 2005 - 17:18:   
I've read a lot of articles that says that the Index.dat file in the Content.IE5 folder stores all the URLs that a user ever visited, and the information should still be there after clearing the TIF folder.

When I use X-Ways Trace after I emptied the TIF folder in the Internet options in Internet Explorer, the index.dat file seem to be empty.

I've also looked at the index.dat file using Winhex and it seems that the file is overwritten with a common pattern (0x0BADFOOD). The file size is still the same.

I use Windows XP home SP2 and IE6

My questions are:
What version of Internet Explorer started to overwrite the index.dat file? Is there any other way to trace the Internet Activity if the index.dat file has been overwritten?

Thanks in advance!

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have an account.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.