Tracing IE visited sites

[stingerbee]

Does anyone know a way of tracing the sites a user has visited through Ineternet Explorer?

I know that you can view the typed URL's in the registry, but if they clear their history etc this disappears.

Any ideas?

[skroo]

Does anyone know a way of tracing the sites a user has visited through Ineternet Explorer?

I know that you can view the typed URL's in the registry, but if they clear their history etc this disappears.

Any ideas?

Yes. See this link. Honestly, you should really only use IE to run Windows Update - grab a copy of Mozilla for your everyday browsing needs.

[ttickzz]

grab a copy of Mozilla for your everyday browsing needs.

I perfectly agree with the IE, but what about Opera compared with Mozillla?
Anyone here having estimated those two with each other ?

[skroo]

I perfectly agree with the IE, but what about Opera compared with Mozillla?
Anyone here having estimated those two with each other ?

I've run both Opera and Mozilla at various times in the (recent) past, and was actually quite heavily involved with the development of Opera on a non-Windows platform for about a year and a half at one stage (this was during the Opera 3-4 cycle).

I liked Opera, but found that Mozilla better suited my needs. Not for any one specific reason - but if I had to pick something, it'd be that Mozilla's relation to Netscape made it a lot more usable for real-world work. Opera has some pecularities in how it handles certain CSS and HTML elements that mean it doesn't always play nicely with things that work in Mozilla.

Having said that, I haven't looked at Opera in over 6 months, so don't really know the up-to-the-minute state of play. Try both, use whichever one suits your needs best.

[astcell]

Okay I downloaded Mozilla. No difference between that and netscape. Opera has many differences. What is mozilla supposed to do for me? Am I l33t now?

[highwizard]

Okay I downloaded Mozilla. No difference between that and netscape. Opera has many differences. What is mozilla supposed to do for me? Am I l33t now?

It depends on what your doing with it. Mozilla has the Blowjob feature that Opera doesn't have.

[skroo]

Okay I downloaded Mozilla. No difference between that and netscape.

That's the point. I can use things like Ciscoworks under Mozilla since they were designed to work under Netscape, but not Opera. Also, because it is Netscape-based, there's a better chance that under casual browsing you won't run into redering oddities or 'this site doesn't support your browser' messages. Tabbed browsing is also nice (particularly if you need to run multiple instances of a single toolset), as is the built-in popup blocker.

One other nice thing: I can run Mozilla relatively comfortably (note I say relatively) on a P133. Opera and Netscape don't play nicely on that kind of hardware. Plus, Mozilla's free if you feel like tweaking it, and hasn't suffered historically from the same number of security issues Opera has.

Opera has many differences. What is mozilla supposed to do for me? Am I l33t now?

If you need a high degree of compatibility, go for Mozilla. Otherwise, stick with Opera if you like it. Ultimately, it comes down to what you want to use it for and whether or not you like it.

[astcell]

I guess it's like women. What you like depends on what you want. I have them all installed, and each has it's plusses and minusses.

[Chris]

I have been using Galeon for the past four months or say as my primary browser and like it very much. It is Mozilla based (Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030915 Galeon/1.3.9). Same issues that I have run into in the past with Mozilla, making sure the plugins are all there and in the right place, occasional incompatibility with sites designed specifically for IE or later versions of Netscape (<--that one is rare but I have had it a couple of times). Overall, I like it.

There is no mail client built in like there is for Mozilla. Not a big deal because you can still use Mozilla (or Netscape) mail, but those both call their respective browsers if you click a link in an email message.

Now, does anyone know of a good media player that I can use in Linux to play .wmvs?

[Webster]

Speaking of I.E. there is a new vuln. Didn't want to make a thread just for the link so thought I'd post it in here.

http://www.zapthedingbat.com/security/ex02/vun1.htm

Causes' I.E. to crash, not that you would need any help doing so :\

[Chris]

Now, does anyone know of a good media player that I can use in Linux to play .wmvs?

Just in case anyone was curious about this. Both gxine and mplayer can play .wmvs you just have to install the win32 codecs that you can download from the mplayer site. It's very easy and solves the .wmv problem that I was having.

Once I R'd TFM I was in good shape.

[icycold]

Okay I downloaded Mozilla. No difference between that and netscape. Opera has many differences. What is mozilla supposed to do for me? Am I l33t now?

Try the CRLT-T command you can get tab which is a lot cleaner than IE.

[enCode]

I say this alot
It's all personal prefrence
:D

[moebetta]

Sector Scan

Does anyone know a way of tracing the sites a user has visited through Ineternet Explorer?

I know that you can view the typed URL's in the registry, but if they clear their history etc this disappears.

Any ideas?

To get this data you will need to run a sector scanner or undelete utility and retrieve each and every sector on the drive or try and retrieve deleted files. There are a few on the market that allow you to pull deleted files. File Scavenger will let you undelete up to 64K files for free. A good tool I use is EnCase it can get anything off the drive even partially overwritten areas of the drive. Unfortunately this tool is expensive; $2.500. I used to use a Norton utility to do the sector scan and then use the search utility looking for common text like http://, www. , etc...

I hope this helps. Lots of work. The best thing to get is IKS. Invisible Keylogger Stealth. So far there are no antivirus or vulnerability scanners out there that can detect it, if installed properly, not the default install; you must mod it; not hard to do. You will need to get to the computer for about 3 minutes without the user knowing. I have used many scanner to try and detect it, i.e. Retna, Qualys, VAM, etc... These tools cost around $35,000 - $90,000. They suck. All you have to do is change the registry key and rename the IKS.dat to some other name and change the iks.sys to the same name and it is completely invisible. It will even capture the ctrl. att delete username and password. The tool is under $100. Very good, but don't let if fall into the wrong hands. :-)

[mit578]

look for the index.dat or any .dat files xp home keeps them here
* C:\Documents and Settings\username\cookies
* C:Documents and Settings\username\Local Settings\History
* C:Documents and Settings\username\Local Settings\Temporary Internet Files