2 May 2011

Retrieving USB History Log


Hi Friends!! Have u want to see the log of any USB device connected to your Computer.Today I am tell u a Method by which you can see log of USB Device which was connected to your Computer .By this Method you can check Pluged Pendrive,Mobile or any other USB Device Information in your Computer.
There are Two Methods to Check:-
1)Looking in Registry Editor.
2)By Using Third Party Tools(Good For Newbies)
1.First We start with Registry Trick:-
USB history can be found at two places in registry
Firstly open up  Run by going to Start==>Run and  type "regedit"  and hit enter.
In Registry Editor Go To following in Registry Editor(See Below Image)
1)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB
2)HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR
To see image in Large Right click on the Image and Select "View Image"  in Firefox

2.We can Also See the USB History By Third Party Software:-
i)For Windows We Can Use USB Deview(Only 68Kb) .Download at  USB Deview for Windows
USB Deview is a small utility that lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used. For each USB device, exteneded information is displayed: Device name/description, device type, serial number (for mass storage devices), the date/time that device was added, VendorID, ProductID etc.
To see image in Large Right click on the Image and Select "View Image"  in Firefox
 


ii)For Linux User you can use usbview(Only 301 KB) at  USB View for Linux
USBView is a GTK program that displays the topography of the devices that are plugged into the USB bus on a Linux machine. It also displays information on each of the devices. This can be useful to determine if a device is working properly or not.
To see image in Large Right click on the Image and Select "View Image"  in Firefox
 


Now we have retrieved the history of the USB  devices so,lets see how we can delete these history informations.
1.Open up the registry editor window as shown in the above steps then follow the on screen steps as shown in the image below.
To see image in Large Right click on the Image and Select "View Image"  in Firefox
 


2.After completing all the steps in the above image you will be able to delete the registry key or subkey.
To see image in Large Right click on the Image and Select "View Image"  in Firefox
 
By doing this the traces are removed....but still then  it can be detected
 Don't Copy My Article 




4 comments:

Anonymous said...

Thanx Bro.You Tell us in Very Simple Word

Anonymous said...

Thanx Dude. gr8 help to me.,

Anonymous said...

Hey man great article ! I have a little question: does this work for if you're connecting a memory card adapter into your laptop ?

mahasiswa teladan said...

hi..Im college student, thanks for sharing :)