The Mudcat Café TM
Thread #53542 Message #826532
Posted By: JohnInKansas
14-Nov-02 - 11:01 PM
Thread Name: Tech: Checking a computers history
Subject: RE: Tech: Checking a computers history
I've just been upgrading one of my computers, and note that Norton AntiVirus 2003 Professional includes "undelete" and "filewipe" utilities. The undelete should let you see anything that's been deleted recently enough that it hasn't been overwritten. It should bring up a list of all "recoverable" files on the disk - which probably would include things that have been "emptied" from the "recycle bin."
The "filewipe" is not the "full utility" that was in older Norton Utilities, as it doesn't appear to give you the option of "wiping" the disk free space, but it does let you "obliterate" any existing file, by writing random bits over the whole file. Curiosly, it appears that it "wipes" the content from the file, but leaves the file name intact. I'm not sure I've figured out why this would be useful, (bait for the snoops, maybe?) but it certainly would keep anyone from reading your mail.
If you used the "undelete" to restore everything that Norton finds to be "recoverable" and then did a "filewipe" on the recovered files, it would appear that you should have a "very clean disk."
I don't know if these utilities are in the "standard grade" Norton AV, and they're not obvious in the AV-Pro unless you look for them. It's also possible that they're an "optional installation" so you might have to look at your installation CD.