IE10 uses WebcacheV01.dat vs index.dat files. How to clear/delete?

UsernameIssues · 14 Nov 2013

@Anak,
There is not much harm in deleting the entire folder. I just want people to see what is in there before blowing it away (or leaving it alone - if desired).

Use this tool [BrowsingHistoryView - View browsing history of your Web browsers] to see some of the contents of that database. There is nothing to install with that tool. When you exit the tool, it creates a config file to save its settings.

I seem to recall that the first time that I looked at the database, it held history going back almost a year. Even a total reset of IE does not clear this history. If you are willing, let us know how far back your history goes.

If you close IE (make sure IE is out of RAM)...
...kill taskhost*
...then you can delete the folder**

*other apps might close when you do this

**as long as you do not wait too long. Some other process might call the INET API and thus cause a dllhost process to lock the folder again. Killing all instances of dllhost will also close apps like the Windows Photo Viewer. Restarting IE or restarting the computer will create a fresh set of files related to this database. If you restart IE without restarting the computer, then the folder/files are locked via a dllhost process.

It is possible to block the creation of this database via NTFS permissions, but doing so messes up a few things. Those things would vary from system to system since they depend on what apps are installed.

Anak · 14 Nov 2013

All Folders, Files, Drives, and protected Operating System Files were set to "show".

The build date on my system is July of 2009 and that's the start date setting I used for BrowsingHistoryView (BHV) the "load history from" setting was "current running system (All current users)" and it came up with over 85K "items". The earliest Item on the list is from a little over a year ago on 10 - 16 - 2012.

I could not see any particular rhyme or reason to any of the items, but did notice a pecularity with the IE listings.

Whenever one of these items showed up, the timings for a corresponding web site appeared

:Host: technet.microsoft.com - 10/16/2012 7:54:22 AM
Microsoft Security Bulletin MS12-054 - Critical : Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594) - 10/16/2012 7:56:15 AM

:Host: Google - 10/16/2012 8:12:58 AM
Google - 10/16/2012 8:14:52 AM

:Host: Bing - 10/16/2012 8:02:56 AM
Kerberos - Bing - 10/16/2012 8:02:56 AM

Whenever one of these would show; :Host: Computer, the next item most often was a reference to a file I accessed on my machine, now that's a little disconcerting.

When I used the "load history from a specified Folder or profile" setting(s) where I could drill down to

Code:

C:\Users\My Username\AppData\Local\Microsoft\Windows\WebCache\

The result was "0 items"

Until I understand this more I'm going to let sleeping dogs lie.....

UsernameIssues · 14 Nov 2013

Thanks for the details.

It is rather puzzling that you got 0 items - but reading the file can be hit and miss at times - even with that tool.

And yes, I too see records of some files being opened.

Anak · 14 Nov 2013

Your welcome, for the both of you,

I was doing some research on WebCacheV01.dat and came across something that I believe the both of you will be interested in: Delete WebCacheV01.dat, WebCacheV01.dat Viewer & Deleter - Wilders Security Forums the program is here: Free PC cleaner

I can't find it now, but all you need to do is run the program to either delete V01 or view it with no special adjustments like killing taskhost or running a third-party, the program takes care of that.

There is a user guide and how to's on the Support page. I downloaded it, but its getting late for me and I'm going to wait till tomorrow to look it over and use it.

There is a way to run it in portable mode, but for now I can only see that option on the installer help page | Step #3.

Wait, I did find it, the portable version link is on the Download page.

PrivaZer v2.8
. Compatible : XP, Vista, Win7, Win8/8.1, 32bits & 64bits
. Compatible : HDD and SSD

Source: Free PC cleaner - Download

Be nice if it's as good as it sounds........

UsernameIssues · 14 Nov 2013

My guess is that our OP (Lexus45) is the same person as (Lex2345) in the Wilder Security Forums.

As far as the cleaning app. I might look to see what it does using Process Monitor - but for now, my method is automated. It clears the entire folder (among other things) each time IE exits RAM

Anak · 14 Nov 2013

I thought the same about the OP, let me know what you find out using Process Monitor.

I'm going to sign-out and hit the sack, till tomorrow.......

Lexus45 · 15 Nov 2013

Yep that's me.

I located that site the other day.
Based on the site, the actual program to handle WebcacheV01.dat is not yet available.

The PrivaZer also appears to have decided to add it to the PrivaZer software vs making it a separate program.

I dont know anything else about this program, its safety record, or who the folks behind this are.

If you use the link and go to the PrivaZer site, then Support, then PrivaZer review and discussion, it will bring you to their forum - but I did not see anything yet about our issue which is still the stand alone thread.

Anak · 15 Nov 2013

I installed and ran PrivaZer (PZ) this morning and liked what I saw, but I still want to wait until I read more about it before I go and start trusting it.

6.9MB download - 18.3MB installed.

Lexus, good to know that's you, and thanks for the clarification about the inclusion of the WebCacheV01 cleaner in later versions, it was getting late last night and these ol' eyes don't see as well as they used to.

In my previous post I quoted PZ's specs where it is x64 compatible. but when I installed it, it asked to be installed in my C:\Program Files (x86) Folder, I've seen other dual bit programs do this so I didn't think it out of the ordinary.

Don't know how your notifications are set at Wilders, but M0rris0n replied last night: Wilders Security Forums - View Single Post - Delete WebCacheV01.dat, WebCacheV01.dat Viewer & Deleter

p.s. Saw your first attempt to create your thread: https://www.sevenforums.com/browsers-...ml#post2592468 There are two possible ways to delete a thread.

Go back to that thread and click on Edit, then click on Go Advanced. At the top of the page you should see an area where you can delete the message, click on delete. Fill out the reason, and that should do it, if not.
Click on the in the upper right corner of the post, fill out the message that you would like the thread deleted, then click on send report. I usually start a report with Dear Mods or Admins, and end with a thank you.

UsernameIssues · 16 Nov 2013

Anak said:

I thought the same about the OP, let me know what you find out using Process Monitor.

I'm going to sign-out and hit the sack, till tomorrow.......

The PrivaZer app changes the entries in the webcache database...

IE10 uses WebcacheV01.dat vs index.dat files. How to clear/delete?-webc.png

...but leaves the info in the other columns intact. You can know that I surfed to somewhere at a certain time, you just won't know where (unless you ask my ISP or the NSA

I take the more draconian approach and just delete the database.

There was nothing new to learn via process monitor.

Anak · 17 Nov 2013

What "Load history from" setting are you using in BrowsingHistoryView (BHV)?