Last active
November 10, 2020 13:04
-
-
Save AdilHindistan/6e48a27a1c4e9b3d813d to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
##AH - Adil Hindistan - IE | |
IE9 Clearing Cache - Options | |
User Command: | |
rundll32.exe c:\windows\system32\inetcpl.cpl,ClearMyTracksByProcess {SomeNumber} | |
Preserve Favorites website data | |
-------------------------------- | |
Temporary Internet Files (Temp) | |
Cookies | |
History | |
Download History | |
Form Data | |
Passwords | |
ActiveX Filtering and Tracking Protection Data | |
============================================ | |
# Caputured numbers below via Process Explorer. It seems that both 264 or 8 (=264-256) do the same thing. | |
Temp............. = 264 (or 8) | |
Cookies.......... = 258 (or 2) | |
History.......... = 449 | |
Download History. = 16640 | |
Form Data........ = 272 | |
Password......... = 288 | |
ActiveX Filtering and Tracking Protection data = 2304 | |
TEMP + Cookies = 266 | |
TEMP + History = 457 | |
TEMP + History + Cookies = 459 | |
History + Cookies = 451 | |
Downloaded History + Temp = 16648 | |
Downloaded History + Temp + Cookies = 16650 | |
Downloaded History + Temp + Cookies + History = 16843 | |
Downloaded History + Temp + Cookies + History + Form Data = 16859 | |
Preserve Favorites website data = 8448 | |
Preserve Favorites website data + Temp = 8456 | |
Preserve Favorites website data + ALL = 27131 | |
Uncheck (Preserve) + Check ALL options below => creates two processes with flags 18939 & 23035 | |
=========================== | |
# Browsing History | |
rundll32.exe c:\windows\system32\inetcpl.cpl,ClearMyTracksByProcess 1 | |
Clear TemporaryInternet Files | |
rundll32.exe c:\windows\system32\inetcpl.cpl,ClearMyTracksByProcess 8 | |
Clear Cookies | |
rundll32.exe c:\windows\system32\inetcpl.cpl,ClearMyTracksByProcess 2 | |
Clear both Cookies and Temporary Internet Files | |
rundll32.exe c:\windows\system32\inetcpl.cpl,ClearMyTracksByProcess 10 | |
NOTE THAT browser will hang on to some (open/locked) files to show you the current pages, if it has any pages open. Once the browser is closed, those files will be deleted as well! | |
====================================== | |
## Above commands are meant to be run interactively; no use in system context | |
psexec -s \\ComputerName cmd | |
C:\>powershell -command "& {$users=gci c:\users\; foreach ($user in $users){if (test-path c:\users\$user\appdata\local\microsoft\windows\){gci c:\users\$user\appdata\local\microsoft\windows\Temporary*\* -force}}}" | |
Directory: C:\users\adil\appdata\local\microsoft\windows\Temporary | |
Internet Files | |
Mode LastWriteTime Length Name | |
---- ------------- ------ ---- | |
d--hs 6/23/2014 3:09 PM Content.IE5 | |
d--h- 2/20/2013 1:10 PM Content.MSO | |
d--h- 2/20/2013 1:25 PM Content.Word | |
d---- 6/23/2014 2:59 PM Low | |
d--h- 2/20/2013 11:28 AM Virtualized | |
---hs 6/23/2014 2:59 PM 67 desktop.ini | |
## Super Hidden folders above. They do not seem to show up even when Folder options to show hidden files, folders and drivers are selected in Windows 7 | |
## On Windows 8.1, "Temporary Internet Files" folder is a junction point (for backward compatibility) | |
>dir /a D:\Users\adil\AppData\Local\Microsoft\Windows | |
Volume in drive D is Win8 | |
Volume Serial Number is 346F-A723 | |
Directory of D:\Users\adil\AppData\Local\Microsoft\Windows | |
06/23/2014 02:50 PM <DIR> . | |
06/23/2014 02:50 PM <DIR> .. | |
04/28/2014 11:15 AM <DIR> INetCache | |
09/23/2013 11:49 AM <JUNCTION> Temporary Internet Files [D:\Users\adil\AppData\Local\Microsoft\Windows\INetCache] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment