+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Microsoft Windows (https://hackforums.net/forumdisplay.php?fid=347)
+---- Thread: Tutorial | Clear Event Viewer (All System/Network Logs) (/showthread.php?tid=4035882)
Tutorial | Clear Event Viewer (All System/Network Logs) - NoodleBot™ - Feb 1, 2014
Got a LOT of requests for this after mentioning it on a thread somewhere for somebody.
So here it is. The extremely useful and anti-forensic batch code.
Proof:
Before: As you can see, over 4600 logs in one area alone (Security)
![[Image: dcb642b04b8b6b0272263f3bdc6e8bb4.png]](https://gyazo.com/dcb642b04b8b6b0272263f3bdc6e8bb4.png)
After:
![[Image: fa558dd7fecc1f4738dc03867b345d20.png]](https://gyazo.com/fa558dd7fecc1f4738dc03867b345d20.png)
Quote:@echo off
FOR /F "tokens=1,2*" %%V IN ('bcdedit') DO SET adminTest=%%V
IF (%adminTest%)==(Access) goto noAdmin
for /F "tokens=*" %%G in ('wevtutil.exe el') DO (call :do_clear "%%G")
echo.
echo goto theEnd
:do_clear
echo clearing %1
wevtutil.exe cl %1
goto :eof
:noAdmin
exit
If you don't know what to do beyond this point.. 😠
Save it in notepad and name it whateveryouwant.bat and then you may enjoy some privacy. I run this one a week + injunction with CCleaner DAILY.
Example:
![[Image: 6H0wT.png]](https://puu.sh/6H0wT.png)
* - Null Byte - Feb 1, 2014
This is good, but you could just turn off event logging so nothing will be recorded in the first place. Also please add spoilers :P
* - NoodleBot™ - Feb 2, 2014
(Feb 1, 2014 11:41 PM)DogeCoin Wrote: This is good, but you could just turn off event logging so nothing will be recorded in the first place. Also please add spoilers :P
It would still record about 80% of the logs there, as they are not displayed on event viewer.
* - Aura - Feb 2, 2014
Noodle, you and your batch scripts for Windows eh 😝
* - Jagster™ - Feb 2, 2014
nice code mate, but quick question:
Cant you just use CCleaner to remove these logs? I have an option for "WIndows Events Logs" to be removed.
* - NoodleBot™ - Feb 2, 2014
(Feb 2, 2014 09:44 AM)Jagster Wrote: nice code mate, but quick question:
Cant you just use CCleaner to remove these logs? I have an option for "WIndows Events Logs" to be removed.
Ty it yourself and see what it cleans.
Cleaner is the worst anti forensic tool in history. It's a cleaner.
* - Krox - Feb 8, 2014
Very useful batch file :P thanks for your guide