Securely erased HDD...
 
Notifications
Clear all

Securely erased HDD, Recuva finding 0, but 250 ignored.  

  RSS
williamsonn
(@williamsonn)
Member

Hello

I tried to use RECUVA on one of my windows formatted, wiped, overwritten(7 passes)hard drives. Deep scan. Results 0 files found but 250 ignored…..Whar are these ignored files? I thought nothing would be found? ?

Quote
Posted : 29/01/2013 6:34 am
randomaccess
(@randomaccess)
Active Member

is there a file system on the drive?

ReplyQuote
Posted : 29/01/2013 7:01 am
williamsonn
(@williamsonn)
Member

I am not sure. There is a thread about these two intriguing for me hard drives.

http//www.forensicfocus.com/Forums/viewtopic/t=9821/

Altough I formatted them and deleted securely woth 7 passed, some used space appears.

ReplyQuote
Posted : 29/01/2013 7:20 am
TuckerHST
(@tuckerhst)
Active Member

First of all, as I pointed out here, it's not surprising to see wiping artifacts left on the drive, given that CCleaner is intended for use on active, formatted volumes.

I believe Recuva, in its deep scan mode, attempts data carving. In your example, it thought it might be able to recover 250 files (possibly because segments of CCleaner's erase pattern matches file header signatures), but gave up because there was nothing to recover.

ReplyQuote
Posted : 29/01/2013 8:16 am
Share: