Solved removing the index.dat - Windows 7

[grizzly]

Greetings. I used a utility called "super winspy 3.3" to find my index.dat file located in:
C:\Users\[username]\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat

I know the file is there and contains a ton of data even though my privacy settings in IE8 are set very private. I can view the file with Super Winspy but I would like to be able to purge the data from that file regularly or overwrite it with an empty file or delete it and let it re-create a new empty one, but no matter what I try, I get "Access Denied" message. Is there any free or open source (not trial versions or shareware) software that keeps index.dat file wiped clean.?

 

[Airbot]

You might give ccleaner a try.

 

[grizzly]

Thanks airbot - I thougt ccleaner would do the trick too but it didn't. When I first ran it (ccleaner) it found 4 index.dat files in my user profile with the analyzer. When I clicked on "Run Cleaner" it appeared that ccleaner removed the index.dat infestations, but when I look from the command line, they are still there and all of the old data is still there too. Also, when I use a different program like 'Winspy' they are still there and the old data is still in them.Now when I run ccleaner, it no longer finds them, probably thinking that it already got rid of them. Has to be a better way. I don't seem to be able to change the attributes on them either with the attrib command. They have changed something in Windows 7 (from vista / xp) to make it more difficult to rid yourself of the data in these files.

 

[XboxOmac]

I've never heard of Winspy. Might want to use Malware Bytes.

 

[Jacee]

Click on Internet options and check both privacy boxes at the bottom.

 

[grizzly]

Thanks for the suggestion Jacee. I tried that but the index.dat files are still there and still contain all of the old browser data and as far as I can tell are STILL accumulating data. I tried another utility called "Privacy Mantra". It too appears to clean the files. After an initial cleaning with only the index.dat selected, it says that they are already clean, BUT, they are still there and they STILL contain all of the old data. This is getting frustrating. With Windows XP, you could simply overwrite them with new, empty files of the same name, or boot into safe mode and delete them.

Ridding yourself of them in Vista wasn't that difficult either. Does anyone have any other suggestions on how to either remove, or to truly clean the index.dat infestations on Windows 7.?

 

[masterB]

Try this:
LockHunter
Download LockHunter 64/32 bit For Free
It is a free tool to delete files blocked by something you do not know. LockHunter is useful for fighting against malware, and other programs that are blocking files without a reason. Unlike other similar tools it deletes files into the recycle bin so you may restore them if deleted by mistake.

 

[Loganman67]

this is easy to do
1. Restart in "Safe Mode with Command Prompt"
2. type "cd.." (without quotes) as many times as needed to get to the root of C
3. type: del index.dat /s
4. type shutdown -r

system will restart normally with a new (and clean) index.dat file

 

[Pusspa]

what about deleting them from a linux live cd?

 

[Anak]

Hi! Loganman67, welcome to W7F

In step #2, instead of drilling down as you suggest wouldn't entering

cd\Users\[username]\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat

Get you there a little faster?

 

[grizzly]

I wanted something a little more automatic than having to manually clean the index.dat virus. Since the index.dat is a hidden system file and it can't be edited w/o changing the attributes every time (you can remove -h and -s attributes manually but the next time you log on they are reapplied) I wrote a simple batch file and put it in the folder where index.dat is located, and put a shortcut to it in my profile startup folder:
-----------------------
attrib -h -s index.dat
date /t > index.dat
time /t >> index.dat
------------------------
Then I put a shortcut to index.dat on my desktop. When I open it, I can verify that the only thing in the file is the date and time when I last logged on.

The only problem with this is when the batch file tries to run at logon, I get a security warning dialog each and every time that I have to OK before it will run. Surely there is a way to make windows recognize this as a safe file to run ?

 

[grizzly]

found a solution

" Surely there is a way to make windows recognize this as a safe file to run ?"

You have to give windows the OK to run bat files without the security warning first. Of course this will diminish the intended security settings of Windows 7 but in my case I run batch and vb scripts pretty regularly.

Open regedit and drill down to HKEY_CURRENT_USER\ Software \ Microsoft \ Windows \ CurrentVersion \ Policies
and add a new key "Associations" (if it's not already there) and in this new key, change or add a string value "LowRiskFileTyes" and set the value with the file extensions you want Windows to recognize as safe. Seperate the file extensions with a semicolon .vbs;.bat;.exe

Then close regedit and reboot.

 

[Corrine]

Hi, grizzly.

If you're serious about cleaning temp files, I suggest occasionally running TFC by Old Timer.

TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB).

Before running, it will stop Explorer and all other running applications. When finished, if a reboot is required the user must reboot to finish clearing any in-use temp files.
-- TFC only cleans temp folders.
-- TFC will not clean URL history, prefetch, or cookies. Depending on how often someone cleans their temp folders, their system hardware, and how many accounts are present, it can take anywhere from a few seconds to a minute or more. TFC will completely clear all temp files where other temp file cleaners may fail.

Following are the instructions:

Download TFC by Old Timer from here (direct download): http://www.itxassociates.com/OT-Tools/TFC.exe

• First, save any files as TFC will close ALL open programs including your browser!
• Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
• Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
• Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

TFC requires a reboot immediately after running. Be sure to save any unsaved work before running TFC.

 

[grizzly]

Thanks Corrine. I don't know anything about TFC and I'm sure it probably does a good job removing temporary files, but the index.dat is a different kind of file. Very few utilities including temporary file removers will do anything to the index.dat and that's the file I want cleaned. My batch file is handling it very well and automatically at every logon without any manual steps on my part. As far as I can tell, these files are nothing more than viral-like infestations, tracking viruses, that Microsoft, for whatever reason, includes in Windows. They retain almost all of your internet and other computer use history long after all of your temporary files, cookies and browsing history has been deleted. They are a little more difficult to clean or get rid of.

 

[winsupertweaker]

this is easy to do
1. Restart in "Safe Mode with Command Prompt"
2. type "cd.." (without quotes) as many times as needed to get to the root of C
3. type: del index.dat /s
4. type shutdown -r

system will restart normally with a new (and clean) index.dat file

The above method is the smartest method. Good job Loganman67.
forward slash after cd.

2. type cd/

 

[nicki8]

i went throught the steaps, and it's telling me it can't find index.dat files. is there any other way to delete index files in Win 7 64 bit? or did it actually delete them?

 

[Gerald X]

Do not attempt to remove the Index.dat file in Windows 7. There is not one Index.dat file. There are several buried away in different locations. In Windows XP it was easy. There is a program called Index Dat Suite. Index Dat Suite when run located all the Index.dat files and created a batch file which kicked in on the next bootup. On the reboot the batch file deleted all the Index.dat files before Windows took over. Very simple. Windows XP once loaded recreated its Index.dat files. but all your previous browsing history was gone. I tried this in Windows 7 and it led to untold problems later on. Flashget my download manager failed to function anymore. I tried a reinstallation. I tried installing different versions. No luck! Suffice to say Microsoft Windows 7 is always in control. Any attempts to remove or modify its Index.dat files are doomed to failure. Safe mode and a series of DOS commands doesn't work. There are too many Index.dat files buried away in too many locations for the user to access. I strongly advise not to mess around with Windows 7.

 

[Gerald X]

There are several Index,dat files in Windows 7 but the main body of data is contained in one large one. Tweak Now 7.26 (Freeware) detects this and safely remove it after a reboot.

 

[Callender]

How to delete index.dat file

Here's a free and easy solution that works for me. Perhaps you'd like to do your own research on it before deciding if you'd like to use it.

I installed a utility called MRU Blaster from brightfort.com (link not provided). I usually run it with admin rights from an elevated shortcut.

To delete the main index.dat file run the program and from the main window choose "Settings" then "Go to plugins"

On the "temporary internet file cleaner menu" you'll find options to select file deletion and to run now.

If you choose to run now - the index.dat file will be deleted on reboot.

If you wish to remove the index.dat file for privacy reasons be aware that copies of the file will exist in volume shadow copies.

Note: Be careful what you're selecting in the main settings window as it will delete items that you might not want to be deleted.

 

[Tinytox]

Edit: I've been had. It looks like someone here just bumped a necro-post.
Oh well. if anyone sees this in the future maybe it will help them.

Before I make my point, I'd like to point out that I've ALWAYS been told IE is a terribly insecure browser, I see many users with viruses who use IE as their primary browser, and from my experience it's always the slowest. I personally prefer Google Chrome, but I've always heard Firefox and Opera have good security- I can't vouch for that, but I would stay clean from IE personally.

This is just speculation- but maybe it will work for you:

Try disabling UAC. I've always been able to run batch files on boot up without any nag prompts when i have UAC disabled, this may make your system more vulnerable to viruses though. You can disable it in User Account Controls.

Perhaps taking ownership of the folder containing the said file would prevent the nag prompt.

To do this:
You'll want to take ownership of the parent folder of folder index.dat is located within, according to you that's:
"C:\Users\[username]\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5"
Locate Content.IE5 -> Right Click -> Properties -> Security (tab) ->Advanced -> Owner (tab) -> Edit (Button) ->

If your username is available from the list, click it and hit apply, otherwise click "Other users or groups" and type in your username.

You should now get a message that says if you took ownership of the file to close and reopen properties, so do that. Close it and right-click properties on the folder again.

Properties-> Security(tab) -> Advanced -> Change Permissions -> Click your username (Not Administrator unless it is the actual built-in administrator account) -> Uncheck "Include inheritable permissions from this objects parent" -> Remove -> Edit ->

It's really your choice what you set, but you want to make sure "delete" is checked on allow, and NOT checked on deny, furthermore, make sure "apply to" has any setting containing "files", as that will still allow you to delete files contained within this folder, manually or through batch script, or any other way. or at least, I think it should.

If you do try this, I'd love to hear your results, unfortunately i don't appear to have the path specified on my machine (perhaps due to a lack of internet explorer updates.) so I cannot test it myself. If it as a matter of permissions and not a matter of "In use" this should solve the problem.