Please Scroll Down to See Forums Below
Hard Drive Evidence Cleaner
- Thread starter baza
- Start date
sermon_of_mockery
Snurd Nurdler
this should be in chat
hillbilly21
New member
ill bump for it. i also want to know
liquidmuscle
Well-known member
correct me if i am wrong but you should right click on the internet icon and go down to properties click on delete file and temp file and clear history
A
acneman
Guest
liquidmuscle
that will help but if you are worried you need more
mabey evedence eliminator
star knows something about this
shes a nice lady
that will help but if you are worried you need more
mabey evedence eliminator
star knows something about this
shes a nice lady
I spent a few years working for Symantec Corp here in Toronto.
The program which I was mostly involded in was Norton Utilities.
The was a "WIPE CLEAN" option in an earlier version of NU. I don't recall which one though.
Anyways, the point is...
We had a call where a Gov employee got fired for some illegal crap and his employee wanted to aquire some evidence.
The employee. did the following to cover his tracks.
He formatted his drives.
Blew away the partitions and re formatted into a new partition.
He then used a Norton Utilities tool called Disk Edit and wrote 10101010101010101010 across the majority of his drive.
Teh drive was then sent to a data recovery team in Cupertino Cali and they recoverd all the required data.
So.... Unless you plan on taking a Chain saw and a sledge hammer to the drive. The date will still be accessable.
Kro!
The program which I was mostly involded in was Norton Utilities.
The was a "WIPE CLEAN" option in an earlier version of NU. I don't recall which one though.
Anyways, the point is...
We had a call where a Gov employee got fired for some illegal crap and his employee wanted to aquire some evidence.
The employee. did the following to cover his tracks.
He formatted his drives.
Blew away the partitions and re formatted into a new partition.
He then used a Norton Utilities tool called Disk Edit and wrote 10101010101010101010 across the majority of his drive.
Teh drive was then sent to a data recovery team in Cupertino Cali and they recoverd all the required data.
So.... Unless you plan on taking a Chain saw and a sledge hammer to the drive. The date will still be accessable.
Kro!
THE BOUNCER
New member
Go to www.pcmag.com click on downloads on the left hand side then click utilities and look for shred 2. you might have to register with them but just put in anything it's free. it takes a while when you run the program but it works if your trying to get rid of evidence.
creep
New member
Kro,
That’s a rare (unlucky) situation. Well not so much unlucky, he just didn't do it right. When data is written to a hard drive it is always written to first available address. When data is erased it is not really removed, only its address is removed. A good example is like removing the address from the front of a house. The house is still there but you won’t be able to find it without the address. Same thing with your computer the information is still there until new data is written on top of it. Even if you repartion and format your drive the data is still recoverable until new data is written where the old data used to be. By default your hard drive will always write to new areas. For instance if you have a 10 GB HD and only 6 GB are used; new data will be written to the remaining 4 GB first. Even if you repartion, format and start writing new data, the new data will be written on the remaining unused 4 GB until they are taken up, after those remaining 4 GB are written on then it will start back at the beginning. So in order to permanently erase data you need a program to tell your HD to write where you old data was before it rights to unused addresses. I’ll do so research in a bit and get you guys’ names of software that will do this.
I tried to explain this so everyone would understand. I can go in depth if needed.
That’s a rare (unlucky) situation. Well not so much unlucky, he just didn't do it right. When data is written to a hard drive it is always written to first available address. When data is erased it is not really removed, only its address is removed. A good example is like removing the address from the front of a house. The house is still there but you won’t be able to find it without the address. Same thing with your computer the information is still there until new data is written on top of it. Even if you repartion and format your drive the data is still recoverable until new data is written where the old data used to be. By default your hard drive will always write to new areas. For instance if you have a 10 GB HD and only 6 GB are used; new data will be written to the remaining 4 GB first. Even if you repartion, format and start writing new data, the new data will be written on the remaining unused 4 GB until they are taken up, after those remaining 4 GB are written on then it will start back at the beginning. So in order to permanently erase data you need a program to tell your HD to write where you old data was before it rights to unused addresses. I’ll do so research in a bit and get you guys’ names of software that will do this.
I tried to explain this so everyone would understand. I can go in depth if needed.
Baby Gorilla
New member
Nothing's perfect....
I have NU2000 (Norton Utilities). It came with WipeInfo.
One option is to wipe all free space on the HD. The government format for free space is to write all 1's then 0's 3 consecutive times then write a final value (257 I think) once. In doing all that, I suppose the space is overwritten enough times that data can't be recovered.
That Gov't employee probably messed up by not overwriting the HD enough times to obscure the data code. I'm sure a "latant print" remains for some time, and a recovery expert can reconstruct the data. How well NU2000's WipeInfo actually works is uncertain. The issue is how important the data is to someone. Most people don't have anything important enough to spend the $$$ it costs for a recovery expert to reconstruct overwritten data from a hard drive.
I have NU2000 (Norton Utilities). It came with WipeInfo.
One option is to wipe all free space on the HD. The government format for free space is to write all 1's then 0's 3 consecutive times then write a final value (257 I think) once. In doing all that, I suppose the space is overwritten enough times that data can't be recovered.
That Gov't employee probably messed up by not overwriting the HD enough times to obscure the data code. I'm sure a "latant print" remains for some time, and a recovery expert can reconstruct the data. How well NU2000's WipeInfo actually works is uncertain. The issue is how important the data is to someone. Most people don't have anything important enough to spend the $$$ it costs for a recovery expert to reconstruct overwritten data from a hard drive.
liquidmuscle
Well-known member
creep said:
shit, that scares me all this time i have been surfing elite at work and i thought i was covering my tracks
I downloaded this one:
http://download.com.com/3000-2144-10124452.html?tag=lst-0-1
It works well. One click, nice and simple, just what I was looking for.
It's only a 30day free trial though, then $50.
http://download.com.com/3000-2144-10124452.html?tag=lst-0-1
It works well. One click, nice and simple, just what I was looking for.
It's only a 30day free trial though, then $50.
creep
New member
liquidmuscle said:
The IT department in most work places do not have the capability of recovering data on their own. They would have to send the HD to a software recovery company which could be expensive. So unless you embezzling money or giving away company secrets chance are they wouldn't waste their time/money on you.
Similar threads
