±Partners and Sponsors
±Your Account
Membership:
New Today: 0
New Yesterday: 3
Overall: 26001
Visitors: 58±Forensics Europe Expo
±Latest Articles
· Safer Internet Day
· Webmail Forensics – Digging deeper into Browsers and Mobile Applications
· Operation Endeavour: The Tip of the Iceberg?
· Forensic analysis of the ESE database in Internet Explorer 10
· WhatsApp – discovering timestamps of deleted messages
· Man In The Middle Attack: Forensics
· Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases
· Windows 8 File History Analysis
· Understanding Rootkits: Using Memory Dump Analysis for Rootkit Detection
· Bitcoin Forensics Part II: The Secret Web Strikes Back
· Webmail Forensics – Digging deeper into Browsers and Mobile Applications
· Operation Endeavour: The Tip of the Iceberg?
· Forensic analysis of the ESE database in Internet Explorer 10
· WhatsApp – discovering timestamps of deleted messages
· Man In The Middle Attack: Forensics
· Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases
· Windows 8 File History Analysis
· Understanding Rootkits: Using Memory Dump Analysis for Rootkit Detection
· Bitcoin Forensics Part II: The Secret Web Strikes Back
±Follow Forensic Focus
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks 
.
icanhascheezburger.fil...-ninja.jpg
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
Wipe Ram
Go to page 1, 2 Next
Wipe Ram
Posted: Fri Dec 28, 2012 7:00 am
Do it have a software to wipe o fill the unused ram in windows?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Tue Jan 01, 2013 9:56 pm
Not sure about a software solution, but there is a very effective hardware solution.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
It is the Power button.
Also Windows automatically zeros free memory pages in the background. This is done for security reasons, so that one process doesn't get given data from another process when additional RAM is requested.
Goggle "zero-page thread" and "Demand Zero faults" for details.
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:15 am
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
When i inspect hiberfil.sys i see the text again into.
The "zero-page thread" not works when hibernate?
Do it is possible to launch "zero-page thread" via c++ code?
ty.
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 8:26 am
- Passmark
It is the Power button.
AND wait 35/40 seconds attending the machine after having switched it off , to prevent a ninja
hacker to quickly disassemble the machine and freeze your RAM sticks .icanhascheezburger.fil...-ninja.jpg
I tryed to load a file in notepad.exe, then close it.
When i inspect hiberfil.sys i see the text again into.
Yep, but that would be part of "Windows used memory" and not part of "unused" one.
A similar recent thread:
reboot.pro/topic/17935-wipe-ram/
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 1:46 pm
> When i inspect hiberfil.sys
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
You asked about RAM. The hiberfil.sys file is a file on the disk & not RAM. Although like many files on the hard disk it contains content that was in RAM at some point.
If your real question is how to avoid data in the hiberfil.sys, then you can turn off hibernation.
You might also want to zero the page file via the registry change.
[HKEY_LOCAL_MACHINESystemCurrentControlSetControl Session ManagerMemory Management] "ClearPageFileAtShutdown"=dword:00000001
-
Passmark - Senior Member
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:04 pm
Disable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
-
avocadus - Newbie
Re: Wipe Ram
Posted: Wed Jan 02, 2013 2:22 pm
- avocadusDisable hyberation, clear page file, power off pc... I Know!
But i would use hyberation and reset to zero unused memory on the fly when I want.
Do it is not possible?
Please define "unused memory" (whilst a Windows NT based OS is running).
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member