±Partners and Sponsors

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 11
New Yesterday: 4
Overall: 26771
Visitors: 70

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Wipe Ram

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Wipe Ram

Post Posted: Fri Dec 28, 2012 8:00 am

Do it have a software to wipe o fill the unused ram in windows?  

avocadus
Newbie
 
 
  

Re: Wipe Ram

Post Posted: Tue Jan 01, 2013 10:56 pm

Not sure about a software solution, but there is a very effective hardware solution.

It is the Power button.

Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.

Goggle "zero-page thread" and "Demand Zero faults" for details.  

Passmark
Senior Member
 
 
  

Re: Wipe Ram

Post Posted: Wed Jan 02, 2013 3:15 am

I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.  

avocadus
Newbie
 
 
  

Re: Wipe Ram

Post Posted: Wed Jan 02, 2013 9:26 am

- Passmark

It is the Power button.

AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja Shocked hacker to quickly disassemble the machine and freeze your RAM sticks Wink .
icanhascheezburger.fil...-ninja.jpg


I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.

Yep, but that would be part of "Windows used memory" and not part of "unused" one.

A similar recent thread:
reboot.pro/topic/17935-wipe-ram/

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Wipe Ram

Post Posted: Wed Jan 02, 2013 2:46 pm

> When i inspect hiberfil.sys

You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.

If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.

You might also want to zero the page file via the registry change.

[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001  

Passmark
Senior Member
 
 
  

Re: Wipe Ram

Post Posted: Wed Jan 02, 2013 3:04 pm

Disable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?  

avocadus
Newbie
 
 
  

Re: Wipe Ram

Post Posted: Wed Jan 02, 2013 3:22 pm

- avocadus
Disable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?

Please define "unused memory" (whilst a Windows NT based OS is running).

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next