Quantcast
Channel: Comments on: Delete USB Device History from the Windows Registry (USBSTOR key) and the setupapi.log
Browsing latest articles
Browse All 16 View Live

By: EM

The registry value is still relevant to Win7, but the setupapilog has changed locations. Two files of interests are: C:\WINDOWS\INF\setupapi.dev.log and C:\WINDOWS\INF\setupapi.app.log.

View Article


By: EM

My understanding of the file is that it is simply a log. It is not read for any information. Replacing it or deleting it will not have any adverse affect. If it is deleted, it will be re-created though.

View Article


By: EM

Quite right. See http://support.microsoft.com/kb/927521 for more information.

View Article

By: Wibbly Bibbs

Deleting it? All that does is remove the pointer from the $MFT metafiles. It is still there until the computer decides to overwrite that section of the hard-drive. Even then the data is sometimes...

View Article

By: Anonymous

I’ve been suffering with this problem for so long I’d considered changing phones, Deleting the log cured EVERYTHING! Thank you VERY much!

View Article


By: Dave

Windows 7 won’t let me delete HKLM/CurrentControlSet/Enum/USBSTOR/* keys from registry even though I am logged in with administrator account. It just says “Error while deleting key”. Any solutions?

View Article

By: JD

I can find the registry value, just can’t delete. It won’t allow me to change the permissions.

View Article

By: Trilliarc

One should also note that an examiner will also look at LNK files to identify removable devices. LNK files will most likely show the drive letter that was used, last time used, creation time, and also...

View Article


By: himel

if the usbstor folder deleted in xp how can I find it out and how many ways are there to check the history even after deleted?

View Article


By: Paul

How I do that on a Linux system – Red Hat? any command or program?

View Article
Browsing latest articles
Browse All 16 View Live