Re: Help with WinHex and Phantom Data on HD
From: J. Clarke (nospam1@nospam.invalid)
Date: 01/24/03
- Next message: Rene: "pgp-disk for linux"
- Previous message: Shannon Jacobs: "Security risk of JavaScript random system clock change?"
- In reply to: radon: "Help with WinHex and Phantom Data on HD"
- Next in thread: DaveK: "Re: Help with WinHex and Phantom Data on HD"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: J. Clarke <nospam1@nospam.invalid> Date: Fri, 24 Jan 2003 02:58:42 -0500
In article <hQkX9.53551$L47.7808163@read2.cgocable.net>, aaaa@bbbb.ccc
says...
> I am using Windows 2000 and am trying to wipe some sensitive information off
> a HD (without wiping the entire drive). I have used BCWipe to wipe the
> sensitive data properly (at least 3 wipes, along with the freespace) but I
> keep picking up keywords of the data using the hex editor WinHex. WinHex
> tells me what sector on the HD the data is at, but that doesn't do me much
> good -- How do I tell what file or directory this data is in so I can go
> after it??
I presume you have wiped the freespace, the recycle bin, etc? If not
then the data might not be in _any_ file. And even if you have wiped
the freespace, there still might be data at the end of a partially used
sector.
To tell what file the information is in you'll need to dig into the
details of the file system and then trace back through whatever data
structures it uses to get to the directory entry.
Something quick and dirty to try--backtrack through the sector until you
find an end-of-file mark (if any) and then see what precedes that. Then
try searching the disk for that text and see if you get hits. If so,
copy the file and then bcwipe the original and see if the sensitive data
goes away.
-- -- --John Reply to jclarke at ae tee tee global dot net (used to be jclarke at eye bee em dot net)
- Next message: Rene: "pgp-disk for linux"
- Previous message: Shannon Jacobs: "Security risk of JavaScript random system clock change?"
- In reply to: radon: "Help with WinHex and Phantom Data on HD"
- Next in thread: DaveK: "Re: Help with WinHex and Phantom Data on HD"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
