How to delete my local Win7 syslog entries? CCleaner does not help.

pstein · 16 Feb 2014

Just for fun I downloaded the very good free and easy utility tools
LastActivityView from here: LastActivityView - View the latest computer activity in Windows operating system

and

MyEventViewer from here Alternative to standard event viewer of Windows

and run them.

Much to my surprise it shows ALL my activities since I setup my Win7 system in 2010.

I always thought that CCleaner would clean such entries but does not. Once again CCleaner failed for a security task.

So I ask here in this forum: How can I delete all my syslog entries?

Peter

DavidE · 16 Feb 2014

Here is an SF tutorial that might help:
Event Viewer One Click Clear

I run CCleaner file cleanup periodically to cleanup unneeded junk.
I ran TFC a day or two ago for the first time and it removed apx 800 MB - that surprised me!

I don't think of these utilities so much as "security" tools, to me they are clean-up tools ...
They may help with security, hopefully they help with performance, they do help with regaining some space ...
Maybe I'm wrong and someone will correct me.

For fun I looked in Event Viewer and it has a "Clear Log..." option.
That's something you could try.

I never bothered with deleting Event History as it never caused an issue for me.
This system is Win 7 32 Bit installed in 2009.

How to delete my local Win7 syslog entries? CCleaner does not help.-evlsp01.png

Slartybart · 16 Feb 2014

Here's another tutorial: Event Viewer: Clear All Events

Both teh tutorial David posted and the one above do the same thing - clear all events out of the event viewer.

Callender · 16 Feb 2014

Hi,

I could be wrong but I don't think that it's possible to clear all those entries as shown by LastActivityView.

On my machine I run the batch file mentioned to clear Event Logs on a regular basis but only to free up space (if everything is working correctly).

You can clear out some of those entries by using UserAssistView - Decrypt and displays the list of all UserAssist items in the Registry

and

CleanAfterMe - Clean Registry entries and files in your system

You might want to take a look at Prefetch and what is recorded in it:

Computer Forensics/E-Discovery Tips/Tricks and Information: Updated Prefetch Parser......

This program must be run as administrator and you must type a case numer with the .db extension. Additionally you must choose Windows 7 as the version of Windows. You must write the report into the same directory as the program and it's probably best to choose .html format for the report.

How to delete my local Win7 syslog entries? CCleaner does not help.-prefetch-parser.jpg

You can clear prefetch and windows history and lots of other stuff using Privazer but it's not particularly easy to get to grips with. See here:

PrivaZer PC cleaner

and read pages 3 to 7 here carefully:

IE10 uses WebcacheV01.dat vs index.dat files. How to clear/delete?

Folder view history is stored in Windows Shell Bags but deleting entries for existing folders will totally reset your folder view and template settings.

As far as I can work out it's not possible to clear your system of all history/ logs / registry entries/ .dat containers and databases where activity is recorded but if you run UserAssistView after cleaning up a bit - you should find that the list of entries has been reduced.

I don't believe it's possible to clear the list completely. See the following article:

https://stackoverflow.com/questions/...lled-on-column

How to delete my local Win7 syslog entries? CCleaner does not help.

How to delete my local Win7 syslog entries? CCleaner does not help.

Clearing Windows History