I like the "history -c" before logging out, while leaving downloaded files and extracted archives all over the place.

Oh yeah, he's really covered his tracks now...