Ccleaner internet explorer temporary internet files

Here is a snapshot of the just the web related artifacts found before running CCleaner.Д¬Cleaner was then installed on the test machine, just as a suspect would, accepting the default installation options. The test machine had artifacts from Chrome, Firefox and Internet Explorer 10, as well as numerous other application such as P2P, webmail, etc.

Using a well-used test machine (Windows 7) with several different types of Internet related artifacts, Internet Evidence Finder (IEF) was run using the default options to get a baseline of the artifacts that existed before running CCleaner. For this article, the focus will be on its effectiveness against the ability to recover Internet-related history after CCleaner has been run. CCleaner has the ability to clean and remove information from several different locations, including the registry, the recycle bin and even wipe the disk.

Running CCleaner on cases when examining digital evidence can have a varying degree of effectiveness, depending on exactly the types of artifacts you are trying to find/recover after its use. From the online documentation, CCleaner is said to protect privacy by cleaning out Internet browsing history and temporary internet files. CCleaner is a product from a company identified as Piriform ( and a version is freely available online and commonly used to вЂsanitizeвЂ™ user activity. A few questions recently came in about the effects of running Internet history sanitation tools such as CCleaner, when examining a computer looking for internet related artifacts.

Ccleaner internet explorer temporary internet files