Windows stores information about the programs that you use

Martin Brinkmann
Jan 22, 2007
Updated • May 27, 2013

I really had troubles finding an appropriate title for this article. Windows XP displays a list of the most recent programs that you have accessed by default in the start menu.

Did you know that those information are continuously updated even though the option to show them has been disabled? A check on my personal account revealed that Windows stored information from 2005 until today.

The information are stored in the Registry using a simple ROT-13 encryption. Windows XP saves the full path and name of the program, last access and the number of total executions.

UserAssist is a nice little tool that decrypts the information and displays them it its main window. You can clear single entries by right-clicking and selecting clear. If you do have many entries in that list you might want to clear them all by clicking on commands, clear them all.

This does not disable the logging, it simply clears the current state. Windows XP will continue to log all activity unless you disable the whole process by clicking on commands > logging disabled in the program interface. This will take effect once you restart, log off and on again or kill the explorer.exe task in the task manager.

The manual way to disable logging is to open the Windows Registry editor. This can be done by using the shortcut Windows-R to open the run dialog box, typing in regedit, and hitting the enter key. You then need to navigate to the following key:


and set the value of that key to 1. This can be done by double-clicking the key and changing the value when the prompt appears.

Windows stores the encrypted information in the key


Please note that you should not disable or clear the feature if you want to work with the recent items in your start menu.


Tutorials & Tips

Previous Post: «
Next Post: «


  1. Martin said on January 23, 2007 at 7:15 pm

    I did not expect speed drops after I removed and disabled this “feature”. Don’t think prefetch is affected at all by this

  2. Bob Jones said on January 23, 2007 at 6:59 pm

    Will this not affect the pre-fetching feature? I wouldn’t put privacy over speed in this instance.

  3. Hornswaggled said on January 22, 2007 at 8:35 pm

    I dont mind the tracking, I just dont like how its hidden. If there was a list of recent programs, just like recent docs that may actually be of some use to people though the start menu does this itself.

    I dont like the idea of tracking anymore than the next guy. We all need to start using and learning linux and try to get away from all the tracking OS’s that the big guys use.

    I remember an article on Digg describing hoe the fbi, cia can remotely access any computer running xp through a backdoor and access everything undetected. I dont have much of anything to hide but I dont think they should have that much power.

  4. Me said on January 22, 2007 at 4:31 pm

    I didn’t use the program but I read the registry key using a ROT13 converter.
    On Windows Millenium, the content of the key is the list of the IE favorites, including the deleted ones.
    Thank you Martin, once again ! Very interesting !

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.