±Partners and Sponsors
±Your Account
Membership:
New Today: 11
New Yesterday: 4
Overall: 26771
Visitors: 70±Latest Articles
· Browser Anti Forensics
· Coming apart at the SIEMs …
· WeChat Forensics
· DFRWS Europe 2014 Annual Conference – Recap
· Considering A Career in Audio-Video Forensics? Enhance Your Prospects With Continuing Education
· Forensics Europe Expo 2014 – Recap
· Windows Logon Password – Get Windows Logon Password using Wdigest in Memory Dump
· Windows Forensics and Security
· Samsung Galaxy Android 4.3 Jelly Bean acquisition using Joint Test Action Group (JTAG)
· Safer Internet Day
· Coming apart at the SIEMs …
· WeChat Forensics
· DFRWS Europe 2014 Annual Conference – Recap
· Considering A Career in Audio-Video Forensics? Enhance Your Prospects With Continuing Education
· Forensics Europe Expo 2014 – Recap
· Windows Logon Password – Get Windows Logon Password using Wdigest in Memory Dump
· Windows Forensics and Security
· Samsung Galaxy Android 4.3 Jelly Bean acquisition using Joint Test Action Group (JTAG)
· Safer Internet Day
±Follow Forensic Focus
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks 
.
icanhascheezburger.fil...-ninja.jpg
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Wipe Ram
Go to page 1, 2 Next
Wipe Ram
Posted: Fri Dec 28, 2012 8:00 am
Do it have a software to wipe o fill the unused ram in windows?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Tue Jan 01, 2013 10:56 pm
Not sure about a software solution, but there is a very effective hardware solution.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 3:15 am
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 9:26 am
- Passmark
It is the Power button.
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks .icanhascheezburger.fil...-ninja.jpg
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:46 pm
> When i inspect hiberfil.sys
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 3:04 pm
Disable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 3:22 pm
- avocadusDisable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member