Evidence of wiping ...
 
Notifications
Clear all

Evidence of wiping utility

2 Posts
2 Users
0 Likes
388 Views
(@jlindmar)
Posts: 30
Eminent Member
Topic starter
 

Has anyone encountered a situation where the majority of sector bytes on a HDD have been written with 00 but, certain sectors still contain data. I recently imaged a Seagate Momentus 40 GB 2.5 HDD which did have bad sectors (read errors) and an obvious internal, mechanical problem. I know a new, unused HDD and a wiped HDD (when wiped with 00) will show 00 througout if there are no problems. I suspect the owner of the laptop attempted to have the drive wiped but, the bad sectors and hardware issue caused an incomplete wipe.

I'm curious if anyone knows of any situations, other than a new disk or a wiped disk, where bad sectors/hardware flaws can cause the overwrite of data with 00.

 
Posted : 05/07/2006 9:15 pm
(@youcefb9)
Posts: 38
Eminent Member
 

that depends on how the OS implements file delete.
some secure operating system do wipe the unallocated space when a file is deleted as opposed to just deleting its entry.

If you can iron out the fact that another OS was installed, then you can narrow you assumption to a wipe utility bieng used.

 
Posted : 05/07/2006 10:26 pm
Share: