Ee

Question

In the Evidence Eliminator Help Documentation,
it reports that sometimes Windows "keeps deleted filenames buried within the directory structure of the hard drive". How can you examine the directory structure and find these deleted filenames?

Is there any other information left over by files after they are deleted/overwritten?

*goes into paranoid mode*

Their everywhere, the windows knomes, they move and hide files on your computer, set up your modem to be a becon for hackers, and they copy and hide deleted files until they have enough to black-mail you, Oh and they also make your porn easy for your spouse or girlfriend to find :( Beware the Windows knomes!!!!!!!!!!!!!




*gets dragged off by the men in the white coats*

Here is what happens with a computer. When you delete something, it is left intact and tells the computer that the memory can be overwritten. Therefore, files or their pieces are actually on the computer until they are overwritten.

Is that how the old DOS undel.exe program works, by taking it and making it not "over-writable"?

When you delete a file, what happens is the first letter of the file name is deleted. Therefor nothing points to it. As time goes on, the space were this file is over writen making it no longer posible for someone to recover it.

Yes, I understand that it tells what areas on the hard disk can be overwritten, but my question involves information on the file that is never cleared. When the file is deleted, it must be overwritten, but if the filename is not removed from the root directory, it will never be overwritten.