Tutorial: Digital Forensics/Data Wiping with WinHex

Author: ajatkinson2004
40569 View
5m 21s Lenght
29 Rating

Those files you deleted didn't REALLY get deleted! See how... My favorite video: http://www.youtube.com/watch?v=z00kuZIVXlU Blog: software releases and whitepapers http://binslashshell.wordpress.com !!! This video uses a builtin of X-Ways WinHex to find unwanted remains of old files and wipe them from the drive in a secure fashion. Visit my forum for more details...

Comments

  1. I think you overwrote a file name inside your Windows Registry (ntuser.dat), not the contents of any file. If that was the name of an active record (file or reg key), Windows may throw a fit if it encounters a null name.

    To wipe a file, you have to select it from the list above, then select a block in the data window below, and wipe that. The file may not be contiguous, and be interleaved with clusters from other files! In recent versions, Wipe is available directly on the right-click menu. The search is across all bytes on disk, not through a file listing. Overwriting a file without opening a disk should also wipe it on most disks..

    Overall I'm impressed with the versatility of WinHex, how it replaces an uneraser and a wiper, which often individually exceed the size of this program.
  2. Какой кривой и противный язык!
  3. Well done, thanks !!
  4. See, this old MS game supposedly does something to the boot sector, Safecast C-Dilla DRM, I restored the system partition from a partition image, everything seems in order. Now, just in case what I read on those forums is actually accurate, that something lingers in the hard drive's boot sector, even with a partition restore, how would you go about cleaning the boot sector? Cleaning, rewriting, over-writing, resetting, call it what you will. I know how to overwrite the MBR with a new one that works for my OS, but I still don't know if the MBR covers these sectors, 32 and 33, or if it's a reserved area that resides outside the area the MBR is written on.
  5. I have a test on this tomorrow, I still dont get it
  6. Thanks a lot. Really helped me a lot.
  7. lol "CS3 Keygen"
  8. One of the things I found amazing was that some of the more popular "cleaners" that are supposed to "securely wipe files" DON'T.
  9. does this work on the trial version?
  10. Huh?
  11. That is EXACTLY correct! Alot of times some of those utilities don't clean every nook and cranny! Glad you realized what point I wanted to get across.