How FBI is competent to recover evidence from computer knotty drives, even after a user have erased/deleted the files?

Answers:
If you are selling your computer, thoroughly clean your frozen drive. Deleting files and reformatting is not enough. Reformatting does not overwrite every sector, and private information can remain retrievable. Use a in safe hands delete or disk wiping utility to overwrite every sector on adjectives hard drives. Be sure to use a utility that supports the U.S. DoD standard of seven pass or wipes. While this method is polite enough for most ethnic group, be aware that the only real way of destroying adjectives traces of everything your hard drives is to own these disks degaussed (demagnetized) and physically destroyed.
Suggested: BCWipe, Evidence Eliminator, or SDelete. Source(s): http://www.tom-cat.com/security.html
    when you erase a file from your computer...own you ever noticed how it take virtually no time to delete a massive file...but it take several minutes to write a large folder to a disk. When you delete files all it is in truth doing it erasing the pointers to where the notes resides on the disk...it doesn't actually disappear. When the pointers are erased it tell the operating system that "ok you can now write to this space".So It purely sits on the disk waiting for something to be written over it.
    When you delete a file you are really freshly deleting a pointer to it. The information still exists on the firm drive until overwritten several times. Here is a link to a utility that will erase a complicated drive completely http://dban.sourceforge.net/ Remember that this utility destroys all information so make sure you enjoy important background backed up and the re-install disks earlier using it. :)
    THey can look deep surrounded by your cache file of your cpu or any cpu esepcially if the computer have a cable network to communicate beside your computer. All deleted files are stored contained by this folder even after you have completely delete them from your Recycle Bin. THey have lots of ways of doing it this is not one of them. Source(s): Experience Self
    Ok, im going to turn abstractly on this, I hope you can follow me =)

    Think of your Hard drive as a Piece of paper beside a thin vein of sand on it. Those pieces of Sand represent the 1s (the empty spaces represent the 0's) on your complicated drive.
    Now, imagine another piece of tabloid, with manuscript writen on it like this..

    somefile.txt -> 3.2 x 2.9

    This is the index within which your computer finds files. So if you wanted to see somefile.txt, your computer would look at index, and see 3.2 x 2.9, so it will goto your harddrive and look at the page 3.2 inches over, and 2.9 inches down and surrounded by that location will be the data which make up somefile.txt.

    I hope that made sense.. Now, if you delete a file, your computer doesn't in fact remove the pieces of sand, instead it will remove the entry in the index, so the wallet still exists, it just can't be read from the index.

    Since the record still exists, there are ways to scan the entire drive looking for delete files which don't use the index paper.

    If you looked-for to be paranoid and make sure theres almost no kismet of reading deleted files, you'll want to invest contained by a drive cleaning program. (I dont have any recommendation, search yahoo for 'CIA drive cleaner')

    There are two ways to verbs a drive, the standard wipe, and the CIA wipe
    The Standard wipe just removes adjectives those bits of sand from the paper. But, the style magnetic medium works, its still possible to recover the data..
    a 'CIA' wipe, instead of removing the sand, add sand to it covering the entire surface with 1s. This works better as in that arent as many residual imagery of files left.
    The files arent in fact deleted when you delete them. The computer of late tells the system that these files can be overwritten. It doesnt be a sign of they are!
    It is quite simple. When you delete a profile the computer doesn't actually delete the folder it just grades the file as delete so that the space can be used later by another record however until another file in reality overwrites the space then the info can be smoothly recovered.
    because acc to reserch data on a intricate disc never gets delete it just get disappered whn u del it n other data is written over it... bt acc to reserch facts can be recovered even after formatting ur hard disc for 35 times...


    Related Questions:
  • Recover delete files. HELP!?
  • Deleted File Recovery/ System Restore?
  • How do I recover facts from a burned USB flash disk ?
  • How can I recover my facts on the harddisk?
  • Hi, i recovered a delete txt folder, but very soon it is not readable shows like DŠæïÍy½ any solution to fix it?
  • Need to recover background from laptop...?

Contact Us Terms of Use

Copyright 2010 RecoveryDataFAQ.com