How to forensic disk wiped or not

by Jane / Thursday, October 20, 2016 / PUBLISHED in Wipe Hard Drive

We'll guide you how to wipe disk partition using Macrorit Disk Partition Wiper and how to check the result in WinHex, before we start, we can show you the partition we wipe before, here's G: partition with file system in it:

    before_wipe

Now, we use Wiper to wipe this partition, Steps of wiping partition in Wiper.

  1. Run Wiper and click YES to the UAC window;
  2. Click "Entire Drive", "Fill Sectors with zero" and click one partition to wipe, for example, G: Partition, in my case;
  3. Type "wipe" to confirm your wiping, and click Start;

type_wipe success_wipe

Now Wiper is wiping G partition and fill all sectors with "0", we can download Winhex, the data recovery and forensic tool, to check if we wiped G partition or not, here're the steps to check G Partition in Winhex:

  1. Run Winhex, click YES to UAC window, (yes, in Windows 10);
  2. Click Tools > Open disk. or just press F9 to open disk; For example, G: Partition; Winhex will show you an error message, of course, there's on file system in it, we just wiped everything.
  3. edit_disk_winhex
  4. Click OK, then we can see the result of each sector filled with 0
  5. fill_sector_with_0
  6. or Filled sectors with "1"
  7. fill_sector_with_1

You can use the same method to wipe disk/partition clicking: sectors with "0 and 1", DoD 5220.22-M (3-passes), and DoD 5220.28-STD (7-passes) in Wiper

Tagged under:,
TOP