<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Delete USB Device History from the Windows Registry (USBSTOR key) and the setupapi.log</title>
	<atom:link href="http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/feed" rel="self" type="application/rss+xml" />
	<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog</link>
	<description>Rendering computer investigations irrelevant</description>
	<lastBuildDate>Sat, 05 Nov 2011 19:36:26 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Wibbly Bibbs</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-2729</link>
		<dc:creator>Wibbly Bibbs</dc:creator>
		<pubDate>Sun, 04 Sep 2011 18:19:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-2729</guid>
		<description>Deleting it? All that does is remove the pointer from the $MFT metafiles. It is still there until the computer decides to overwrite that section of the hard-drive. Even then the data is sometimes recoverable to an extent.</description>
		<content:encoded><![CDATA[<p>Deleting it? All that does is remove the pointer from the $MFT metafiles. It is still there until the computer decides to overwrite that section of the hard-drive. Even then the data is sometimes recoverable to an extent.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EM</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-1815</link>
		<dc:creator>EM</dc:creator>
		<pubDate>Thu, 04 Aug 2011 23:12:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-1815</guid>
		<description>Quite right. See http://support.microsoft.com/kb/927521 for more information.</description>
		<content:encoded><![CDATA[<p>Quite right. See <a href="http://support.microsoft.com/kb/927521" rel="nofollow">http://support.microsoft.com/kb/927521</a> for more information.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EM</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-1814</link>
		<dc:creator>EM</dc:creator>
		<pubDate>Thu, 04 Aug 2011 23:11:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-1814</guid>
		<description>My understanding of the file is that it is simply a log. It is not read for any information. Replacing it or deleting it will not have any adverse affect. If it is deleted, it will be re-created though.</description>
		<content:encoded><![CDATA[<p>My understanding of the file is that it is simply a log. It is not read for any information. Replacing it or deleting it will not have any adverse affect. If it is deleted, it will be re-created though.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EM</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-1813</link>
		<dc:creator>EM</dc:creator>
		<pubDate>Thu, 04 Aug 2011 23:10:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-1813</guid>
		<description>The registry value is still relevant to Win7, but the setupapilog has changed locations. Two files of interests are: C:\WINDOWS\INF\setupapi.dev.log and C:\WINDOWS\INF\setupapi.app.log.</description>
		<content:encoded><![CDATA[<p>The registry value is still relevant to Win7, but the setupapilog has changed locations. Two files of interests are: C:\WINDOWS\INF\setupapi.dev.log and C:\WINDOWS\INF\setupapi.app.log.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JohnD</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-1265</link>
		<dc:creator>JohnD</dc:creator>
		<pubDate>Wed, 13 Jul 2011 18:39:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-1265</guid>
		<description>This doesn&#039;t seem to work in Windows 7? Anyone had any luck doing this in Win 7?</description>
		<content:encoded><![CDATA[<p>This doesn&#8217;t seem to work in Windows 7? Anyone had any luck doing this in Win 7?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: darkan9el</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-429</link>
		<dc:creator>darkan9el</dc:creator>
		<pubDate>Tue, 15 Mar 2011 08:09:37 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-429</guid>
		<description>For anyone else asking, in Vista and Windows7 the setupapi.log file is now called setupapi.dev.log and is located in C:\Windows\inf</description>
		<content:encoded><![CDATA[<p>For anyone else asking, in Vista and Windows7 the setupapi.log file is now called setupapi.dev.log and is located in C:\Windows\inf</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: USB Device Not Recognized - Android Forums</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-381</link>
		<dc:creator>USB Device Not Recognized - Android Forums</dc:creator>
		<pubDate>Fri, 03 Dec 2010 13:58:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-381</guid>
		<description>[...] It&#039;s a problem with Windows where the hardware identifier is recognized as an &quot;unrecognized device&quot;. You can resolve it by clearing the USB history, restarting the computer, and plugging in.  The following page describes the process, and the registry locations are the same for xp/vista/7. Usual disclaimers about going into the registry, if you&#039;re not sure what you&#039;re doing, have a professional tech do it for you. One wrong move can render your windows install useless.  Delete USB Device History from the Windows Registry (USBSTOR key) and the setupapi.log &#124; Anti-Forens... [...]</description>
		<content:encoded><![CDATA[<p>[...] It&#039;s a problem with Windows where the hardware identifier is recognized as an &quot;unrecognized device&quot;. You can resolve it by clearing the USB history, restarting the computer, and plugging in.  The following page describes the process, and the registry locations are the same for xp/vista/7. Usual disclaimers about going into the registry, if you&#039;re not sure what you&#039;re doing, have a professional tech do it for you. One wrong move can render your windows install useless.  Delete USB Device History from the Windows Registry (USBSTOR key) and the setupapi.log | Anti-Forens&#8230; [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: nithyanandam</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-267</link>
		<dc:creator>nithyanandam</dc:creator>
		<pubDate>Mon, 26 Jul 2010 17:01:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-267</guid>
		<description>What will happen if i delete the setupapi.log from my system and copy the setupapi.log from another system in the network ?</description>
		<content:encoded><![CDATA[<p>What will happen if i delete the setupapi.log from my system and copy the setupapi.log from another system in the network ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ezight</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-263</link>
		<dc:creator>Ezight</dc:creator>
		<pubDate>Mon, 12 Jul 2010 05:29:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-263</guid>
		<description>Use a live LINUX CD/DVD Slax,puppy,Knoppix, ETC and you will not have to worry about an OS that records every little thing you do.</description>
		<content:encoded><![CDATA[<p>Use a live LINUX CD/DVD Slax,puppy,Knoppix, ETC and you will not have to worry about an OS that records every little thing you do.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: poke</title>
		<link>http://www.anti-forensics.com/delete-usb-device-history-from-the-windows-registry-usbstor-key-and-the-setupapilog/comment-page-1#comment-258</link>
		<dc:creator>poke</dc:creator>
		<pubDate>Sat, 10 Jul 2010 04:14:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.anti-forensics.com/?p=506#comment-258</guid>
		<description>try search for setupapi.log in the from run</description>
		<content:encoded><![CDATA[<p>try search for setupapi.log in the from run</p>
]]></content:encoded>
	</item>
</channel>
</rss>

