1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Does formatting really get rid of everything

Discussion in 'Windows XP' started by ChrisP, 2004/01/09.

Thread Status:
Not open for further replies.
  1. 2004/01/09
    ChrisP

    ChrisP Inactive Thread Starter

    Joined:
    2002/04/14
    Messages:
    46
    Likes Received:
    0
    I have received some spam mail from a software called Evidence Eliminator. They claim that formatting a drive doesn't really get rid of all the files you have had on your computer.

    Is that true?

    Regards
    Chris
     
  2. 2004/01/09
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Yes, it's true.
    Almost all data can be recovered using drive recovery software.

    Deleted data is never really cpompltely deleted. It is marked by windows as 'usable drive space' and gets overwritten by new data. Formatting does not get rid of all the data on the disk.

    There are only two basic methods of eliminating most all the data on the disk:
    1. use a program such as Eraser, which overwrites the drive numerous times with complex strings of gibberish data and
    2. destroy the drive physically using a hammer or a magnet or similar force.
     
    Last edited: 2004/01/09

  3. to hide this advert.

  4. 2004/01/09
    ChrisP

    ChrisP Inactive Thread Starter

    Joined:
    2002/04/14
    Messages:
    46
    Likes Received:
    0
    Ok, So if you format and then re-install windows all the old info from the previous format will be removed or???
     
  5. 2004/01/09
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Only where it is overwritten - and then probably not completely.

    There are standard methods of wiping data from a disk by overwriting, e.g. DoD 5220.22-M/NISPOM 8-306 technology of the U.S. Department of Defense.

    Steganos Shedder utilises this technology to destroy files, but must be applied to the files - it does not touch areas of disk marked as 'usable free space.'

    Since current operating systems store data on the hard drive, the risk of finding confidential data lying somewhere on the hard drive cannot be totally eliminated - even though they have been 'deleted'

    As TonyT posts physical destruction is the only totally safe method - preferably in a furnace.
     
  6. 2004/01/09
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    clarification

    If you are asking whether your settings and data will still be there after you format, the short answer is "no ". They will still, as the others have explained, be on the disk, but they will not be available to you immediately or easily retrieved. Do not format without doing all of your important backups. Be prepared to reinstall all of your software.

    Johanna
     
  7. 2004/01/09
    ChrisP

    ChrisP Inactive Thread Starter

    Joined:
    2002/04/14
    Messages:
    46
    Likes Received:
    0
    This is quite scarry,

    We have 3 computers in the office that we wanted to sell, however, it seems that we would be breaking our confidentiality agreement with our customers by doing so.

    :confused:

    CP
     
  8. 2004/01/09
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    The utility that Pete discusses is included in Norton SystemWorks.

    It is under Utilities > System Maintenance > Wipe info

    You have to use this utility while the files "exist" on the harddisk. It can not wipe deleted files.

    It is possible to choose the whole "My documents" folder and wipe it.

    It is possible to choose a "quick wipe" that write zeros one time only or to choose "government wipe" which is more thorough with three passes writing different stuff.

    I´ll check further Norton options because I seem to remember a utility being able to wipe complete harddisks. I think it is included in GDISK, Nortons equivalence to FDISK.

    I´ll post back if I find that information.

    Christer
     
  9. 2004/01/09
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    The utility is included in Norton Ghost.

    Download ghost2003_guide.pdf and find, Managing partitions using GDisk > Deleting and wiping your disk.

    HTH,
    Christer

    Edited:

    gdisk.exe is a small program that fits on a bootable floppy. This means that You can run it on the complete harddisk, once You have decided to sell the computer.

    You will have to learn the command line switches to get it right and You will have to re-install the OS or let the new owner do that.
     
    Last edited: 2004/01/09
  10. 2004/01/09
    ChrisP

    ChrisP Inactive Thread Starter

    Joined:
    2002/04/14
    Messages:
    46
    Likes Received:
    0
    That's handy to know. i bought Norton Ghost about 3 months ago and still haven't installed it.

    I think it is time to open the packaging and take a clser look. i thought it was just for cloning my hard drive

    CP
     
  11. 2004/01/09
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    How sensitive is the data on the hard disks? If it absolutely must be confidential, and you think the hard drives might end up in unfriendly hands, then there are several thorough steps you can take to wipe the disks so clean that even Law Enforcement would have a difficult time retrieving it, and it would be beyond the grasp of the average user. If the data is not going to violate laws, ethics or ruin your business, if it gets into the wrong hands, a complete format and reinstall of the OS should be sufficient to protect your interests.

    If you boot to an ME floppy that has NFDisk (does that stand for no-freaking-disk?) on it, theoretically it takes 7 runs to overwrite all data. I use it once, and have never had old stuff pop up on me. I once tried to find some old stuff after doing that, and was unsuccessful, however, I didn't put forth the effort the authorities could. Your privacy requirements may be a lot stricter than mine need to be!

    My point is that it takes motivation, determination and third party software to recover the data, and the data might be corrupt anyway, so if it's not a major security risk (and only you can determine that) a full format and fresh install is enough of a deterrent to shield your customers' privacy.

    Johanna
     
  12. 2004/01/09
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Hi Johanna!

    On several occasions have You mentioned NFDisk. I have searched the web and found some information but no information on what it really is and how to use it.

    Is it the SCSI tool or what?

    Any good web site to recommend?

    Christer
     
  13. 2004/01/09
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Sdelete from sysinternals.com is a free utility that does as good a job of wiping both FAT & NTFS drives as any I know.

    There is a good explanation on the link for exactly what it does and how. It will clean free space with one exception. All data will absolutely be destroyed from both occupied and free space. Gone. Never to be recovered by anyone.

    File names from free space will not be removed. So some names of previously deleted files can remain on the drive.
     
  14. 2004/01/09
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    Well, I misspelled it, which doesn't help. It's NFDisc. I should know that, because it has to be typed out to zero zap. I searched the web, too, and found nothing helpful on it, which amazes me, because it is a handy tool.
    I have no idea where I got it, but I've had it a long time and used it often. It's not a big file, but it's powerful. Maybe someone with more experience can give us some history on it. It doesn't work with XP (DOS based) hence the ME boot floppy to use it.

    Johanna
     
  15. 2004/01/09
    Abraxas

    Abraxas Inactive

    Joined:
    2002/08/16
    Messages:
    2,361
    Likes Received:
    3
    Too bad I can't remember the name of the so-called wiping software that was used by a guy in the news arrested for child ****. Apparently it didn't work too well for him. A good thing in this case, but it was a well-known product.

    I'd go with the SysInternals tool that Newt mentioned. They are reputable and know what they are doing.

    You should be suspicious of any tool that claims to be able to clean a disk while Windows is running.

    It looks like Johanna's Nfdisc comes with Sygate disk software. Here is a list of cammand line options:

    http://206.204.105.35/support/kb/disc/tb/nfdisc_switch.html#NFDISC_0

    After searching their Ftp site for a while, I found this:

    ftp://ftp.seagate.com/techsuppt/seagate_utils/nfdisc12.exe
     
    Last edited: 2004/01/09
  16. 2004/01/11
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    That was interesting, Abraxas, thank you for the links. I had no idea it was a Sygate tool, or any of the other things it does. All I have ever used nfdisc for is wiping a system prior to a clean install, and it has always done that very well. I would have guessed it to be a Norton tool! I appreciate the information, and the time it took to find it.

    Johanna
     
  17. 2004/01/11
    Abraxas

    Abraxas Inactive

    Joined:
    2002/08/16
    Messages:
    2,361
    Likes Received:
    3
    Hi, Johanna.

    You mentioned "zap" so that must be the one.

    It really didn't take long to find it. I never use Google, maybe one of the only people who doesn't. Guess it's because I hate the word, "Google ", and because it returns too many results to be useful ( to me).

    But, I seem to find things anyway:)
     
  18. 2004/01/11
    RayH

    RayH Inactive

    Joined:
    2002/01/10
    Messages:
    740
    Likes Received:
    0
    A lot depends upon how sensitive the information on the hard drive is. Despite everything, some forensics programs are better than others. I mean sometimes it may be just a matter of how much time and money one wants to spend.

    A crook may spend more time on a bank's throwaway than on my computer and the government will spend all kinds of time on an Al Qida computer.

    Low level formats a couple of times ought to clean out most hard drives good enough.

    As for those erasure programs, how do YOU know they acutally work? You have to have your computer seized homebrew!

    The only 100% effective thing is to melt the hard drive platter!
     
  19. 2004/01/11
    Abraxas

    Abraxas Inactive

    Joined:
    2002/08/16
    Messages:
    2,361
    Likes Received:
    3
    I have EnCase, a rather annoying piece of recovery software that is used by law enforcement.

    It is constantly trying to prepare "case files" for presentation as evidence, though that is not what I am using it for. In fact, I never use it. Just got it to be prepared for that recovery day.

    But it is very good at finding things.

    To be exact, you need only heat the drive to the Curie Point of the magnetic material, but melting will do the job ;)
     
  20. 2004/01/11
    Neil D

    Neil D Inactive

    Joined:
    2003/02/19
    Messages:
    31
    Likes Received:
    0
    I believe if you do a low level format all info will be wiped. Maxtor has a utility on their website to do this.
     
  21. 2004/01/12
    rcerrato

    rcerrato Inactive

    Joined:
    2002/01/07
    Messages:
    155
    Likes Received:
    1
    Last edited: 2004/01/12
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.