nvmd i think i found my answer,, can delete if you want
Printable View
nvmd i think i found my answer,, can delete if you want
Don't use the HDD............not ever...............nohow............noway............nowhen...........
Now, you need a backup.............
Please explain the situation for your question............or just use some C4
I can tell you how to recover stuff, but it might take a bit of effort.......I can also tell you how to destroy it.............
"encase"................. well you are entitled to your sense of humour I suppose?
It all depends how well it was wiped in the first instance?...................... (but you won't turn a sow's (pig's) ear into a silk purse ;))
And very much on how much they are prepared to pay to get ya :D
I'm realy curious and somewhat shocked after I did a little search about this topic. I knew it was somehow possible to retrieve some deleted files, but I didn't know you can bring them back completely even after you formated your hard drive.
Do you need additional software to "permantly, as in wipe from the world forever" delete files from your computer, or can you do it by hand?
I find a six pound sledge hammer the best.Quote:
Originally Posted by Unimatrix 2
:D
Cheers:
Or, you can try out DBAN.Quote:
Originally Posted by DjM
http://dban.sourceforge.net
((note: not complaining, just informing you))
FYI, it is considered bad form to start a thread, then edit the original information out of the original topic; much better to reply with your "nevermind, I found a solution" to the thread. In fact, part of being a member of a forum kind of suggests one would post their findings if they had any, so others in the future who may have related problems can learn from your experience.
Just so you know. :)
Hi zen~
I can't remember the original question, but it was something like "can overwritten data be recovered?"
The answer is "yes, but not easily"
It depends on whether it really was overwritten with something else. If it was, then normal software won't do it............. otherwise you computer wouldn't work?
Encase is an evidence collection tool........... not a data recovery one :D
There are lots of considerations. The bottom line, though, is that data overwritten is pretty much unrecoverable by ANY means, episodes of "NCIS" notwithstanding.
The trick is to actually overwrite it. There are some very good tools out there (e.g. DBAN, Eraser) that will do this. As far as I know, only the Host Protected Area on a disk is beyond such overwriting. A normal format, even a low-level one, might not do the job.
There have been rumors of more exotic methods of data recovery post-overwriting (they involve imaging the platters with scanning microscopes and/or analyzing the raw signal output from the read heads), but actual attempts to do this by researchers have usually only succeeded under some pretty strict assumptions, such as already knowing the data to be recovered, knowing the overwrite pattern and only one overwrite pass.
Whenever I want to start fresh on a drive or take it out of commission permanently, I always start with DBAN.
well, over written data can be recovered with special hardware. Most easily if you know what it was over written with. For example say a 0 on a hard drive all the particles are aligned - and a 1 is |. If you over write all data on a drive with a single pass of just 0s, most of the particles will be -, however just a few will be | still where the 1s were. Get sensetive enough equipment and you can detect that.
Theoretically, it's possible. But again, when researchers have actually tried to do it, the signal is buried in the noise--more sensitivity doesn't help.Quote:
Originally Posted by Aardpsymon
Usually, what's done is to attach the raw analog signal output from the read heads to a spectrum analyzer or oscilloscope (or similar test equipment). If you do that, you can see the old data if there's only been one overwrite pass. Of course, you have to read the same area 100 times to get the noise low enough to see the signal, the old data has to be a repeating pattern, and again, you have to know the overwrite pattern (always use a pseudo-random overwrite pattern!). And after more than one overwrite pass, the signal disappears, no matter what crutches you may have for finding it.
Here's a great example:
http://www.tomcoughlin.com/Techpaper...,%20042502.pdf
This is one of those things that's often been rumored, but never demonstrated in practice. Everyone who has tried to find someone who can actually recover data in this way has come up disappointed, and most conclude it's an urban legend.
The government, out of an abundance of caution, recommends overwriting with multiple passes. If that makes you more comfortable, do that.