Tuesday, August 21, 2007

Active KillDisk Pro Suite 5.0 by FOSI

Active KillDisk is a quality security application that destroys data permanently from any computer that can be started using a DOS bootable floppy disk, USB Flash or CD-ROM. Access to the drive's data is made on the physical level via the Basic Input-Output Subsystem (BIOS), bypassing the operating systems logical drive structure organization. Regardless of the operating system, file systems or type of machine, this utility can destroy all data on all storage devices. Thus it does not matter operating systems and file systems located on the machine, it can be DOS, Windows 95/98/ME, Windows NT/2000/2003/XP, Linux, Unix for PC. Active KillDisk Professional conforms to US Department of Defense clearing and sanitizing standard DoD 5220.22-M. You can be sure that once you wipe a disk with Active KillDisk, sensitive information is destroyed forever.
If you use FDISK, FORMAT utilities, or DELETE standard operating system command for data removal, there is always a chance to recover deleted files (using undelete file or some data recovery software) and use against the owner's will. We highly recommend you to run this FREE utility for the hard and floppy drives you want to dispose of, recycle, re-use, sell or donate to somebody.

What’s new in version 5.0 (Windows application):
  • New Wipe function that wipes out all unused space on existing drives, not touching existing data.
  • Professional package now includes Windows Vista-based Bootable Disk Creator that allows you to boot Windows Vista from CD/DVD, and to erase or wipe out your disks in Windows environment. USB Plug'n'Play devices are supported.
  • Securely overwrites and destroys all data on physical drive or logical partition
  • Erases partitions, logical drives and unused disk space
  • Supports IDE / ATA / SATA / SCSI hard disk drives
  • Supports fixed disks, floppies, zip drives, FlashMedia drives
  • Supports large-sized drives (more than 128GB)
  • Supports Command Line mode (can be run with no user interaction)
  • Operates from floppy disk or bootable CD-ROM drive
  • Erases with one-pass zeros
  • Erases with one-pass random characters
  • Erases with user-defined number of passes (up to 99)
  • US Department of Defense 5220.22 M compliant
  • German VISTR compliant
  • Russian GOST p50739-95 compliant
  • Gutmann method compliant
  • Customizable security levels
  • Supports all detected hard disk drives
  • Erasing report is created and can be saved as a file
  • Includes Console Application to run and erase data under Windows
  • Displays detected drive and partition information
  • Scans NTFS and FAT volumes and displays existing and deleted files and folders
  • Data verification may be performed after erasing is completed
  • Disk Viewer allows you to preview any sectors or file clusters on a drive
  • Operates in DOS real mode, the most secure and reliable environment
  • Wipes out NTFS, FAT32, FAT16 and FAT12 volumes from areas containing deleted and unused data
  • Wipes out free clusters (unused by file data sectors)
  • Wipes out file slack space (unused bytes in the last cluster occupied by file)
  • Wipes out deleted MFT and ROOT system records
  • Wipes out unused space in any MFT records and compressed clusters
Product code: John Smith

Better as LOW LEVEL Format Tools which comes for free too???
It can work with DOS, Windows Vista, Windows XP / 2000 / NT / XP Professional x64 / XP Home x64/ 2003 Server x64, Linux, Unix for PC etc...
File Size: 133184 KB (~130 MB)
Download Sites: Site1 - Site2 - Site3

Active File Recovery Enterprise 7.1 by FOSI

Active File Recovery for Windows provides the ability to
effectively recover data as a result of having been accidentally
deleted, formatted or otherwise lost.

The Enterprise package of Active@ File Recovery also includes a
Partition Recovery tool. They can be launched from the bootable CD
to work with a crashed or failing computer system.

Enter this key, IF asked
Download: Active.File.Recovery.Enterprise.v7.1-FOSI.rar (4.3 MB) - Mirror1 - Site1 - Site2

Active Boot Disk 3.0

Active Boot Disk is a bootable CD that gives you a lightweight Windows VISTA (WinPE 2.0) environment with disk recovery, data recovery, password resetting, data erasure and network access tool. The WinPE 2.0 Operating System runs entirely from Random Access Memory (RAM), enabling you to insert a second CD that contains drivers or software or can be used for CD/DVD burning. Active Boot Disk comes with a collection of powerful utilities, giving you the confidence to repair failed systems:
Active Disk Image (Win Edition)
Imaged-based data backup and restoration tool
Active File Recovery
Deleted data recovery software
Active Partition Recovery
Lost partition recovery software
Active Hex Editor
Tool for editing disk in a binary format
Active Password Changer
Windows password resetting tool
Active KillDisk
Secure data erasure and disk wiping software
Active CD/DVD Data Burner
CD/DVD burning software
Network operations utilities
Map Network Drive
Remote Desktop Connection
Web browser
FTP Client
Telnet Client
Other Utilities
Partition Manager (Diskpart)
File Explorer
Task Manager
Command Prompt shell

Name : Horst Tacke

Download site1 - site2

This tools are posted in combination of Filesharing eMule, BitTorrent etc... to demonstrate how deleted files can be recovered but as well to check your Hardware reseller if a new storage device is really new or just an exchange and was have already an owner before.

Missing functions are:
  • Read S.M.A.R.T. Status include reset/manipulation info of the data such as reset device runtime, censor info from device. ->> See Hard Drive Inspector
  • Print analysis result incl. Storage Device Name with Serial Number and details.

Compare to MS format with command /U (format x: /u /...) utility shows that nothing is deleted. Compare to LOW LEVEL Format tools almost available from every HDD Manufactures for free (command prompt tools, NO GUI, if you didn't forgot how to deal with command prompt applications) it's a "nice program" for the generation who do not know much about dos/linux command prompt operation tools.

Test if you BUY as NEW declared storage Hardware
devices (USB Memory, HDD, Cam,.. Hardware include any storage such as a new computer, laptop, mobile phone with storage) if its really new or something was already stored on it. Is your Shop, Reseller, Mail order,... good or do they sell used for new?

As a security option I suggest to use the known methods as by secure systems are in use: HDD manufactures developers tools to lock devices in step deep 3,4,5 / motor spin up off* (Bios/Firmware Device Drive Tools) Active lock after Bios Device ID initialization w/o visual password interrupt display question.
Not the easy to bypass password only prompt after BIOS init. restriction setting in Mainboard Bios and/or HDD Bios.

Very funny is that locked devices given back to service technician even to retailers are almost unable to check ever that a device have been locked with spin up motor from them developers tools. They will just call it as "broken".
It's not far to change easy a "unwanted" HDD in warranty time by using the free developer tools to download from the manufactures support sites.

Some may be able by buying a "new" HDD to restore the first owners wpa.dbl / oembios info by a windows pre installed OEM version and other software genuine registration keys if its ever
been in use before but future more the whole filesharing download folders if someone have ever used emule/torrent or any Filesharing services such as Rapidshare include the premium account cookie.
Repair Service may have a whole collection from peoples private data include all access passwords/mail/registration serials,... from customer returned storage devices. A undercover service technician in a bigger retailer store working for MPAA / RIAA will have possible more success as monitoring uTorrent/BitTorrent's Webserver.


Hiren Boot CD (Hirens.BootCDv9.2.rar - Mirror)
Avanquest Partition Commander Professional v10.1 - Website
TestDisk 6.8 is a powerful free data recovery program! It was primarily designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally deleting your Partition Table). - Freeware - Website
Hard Drive Inspector Hard.Drive.Inspector.Pro.2.44.build.412.rar - Mirror - DDL - Hard.Drive.Inspector.Pro.2.33.build.385.rar - Mirror - DDL
Harddisk tools from Device Manufactors (Harddisk device lock developer tools / HDD Bios access and config tools) + SMART Status read/write modify/editing tools. - Freeware (NO 3th party tools such as dongle,... GUI based tools)
universal Low Level Format tools - Freeware - Hidden Secrets, Recovering Secret HD Space!
Ultimate Boot CD Assembles over 100 PC hardware diagnosis tools into one bootable CD to analyze and repair hard drives and boot problems. UBCD for Windows - Mirror
Jetico BestCrypt v8.02.4 allows encrypting data with many encryption algorithms (AES, Blowfish, Twofish, CAST, Rijndael, GOST28147-89 and others). Every algorithm is implemented with the largest possible key size defined in the algorithm's specification. BestCrypt v8 can utilize LRW Encryption Mode, which is specially designed for applications working on disk sector level and more secure than other popular modes used earlier (like Cipher Block Chaining (CBC) mode). The data stored on a BestCrypt disk is stored in the container file. A container is a file, so it is possible to backup a container, move or copy it to other disk (CD-ROM or network, for instance) and continue to access your encrypted data using Jetico.BestCrypt.v8.02.4-YAG.rar (11.41 MB). Latest Version: Jetico BestCrypt v8.02.8 YAG
Bios Editors to enable hidden features as almost in Award/Ami/Phoenix Bios menu to found a hidden section called "Low Level Format". - Freeware
Acronis TrueImage OEM Version 10.0.4942 (Seagate DiscWizard OEM) and Version 10.0.5018 (Maxtor Maxblast); Seagate DiscWizard Download: DE - EN and Maxtor Maxblast (102 MB) Info DiscWizard - Download MaxBlast:EN - DE
Borg Number One Bios Tool Collection v5 [ BNOBTC ] (bnobtcv5.rar)
It contains really all new versions of CBROM, AWDBEDIT, Awdflash, AmiBCP and many more great utilities. (bnobtcv5.rar @ 2xUpload.de - bnobtcv5.rar @ QuickSharing.com) info (German) - (English)
Bios editing tools to:
- extract BIOS-modules from AMI, Award, Phoenix, Intel Compaq BIOS etc.
- view all the different logo formats. (Phoenix, AMI, Award)
- modify the mentioned BIOSes
- enable hidden bios features (disabled by default) etc...
Wipe Tools for Windows/DOS (5220.22 M and others compliant) - Freeware
USB / CD-DVD and Floppy Start up Disc creator + Driver - Freeware
Diag tools for Windows (System ANalyser, Diagnostic and Reporting Assistant - GUI based): SiSoftware.Sandra.Pro.Business.XII.v2008.1.12.30-FOSI.rar (15.91 MB) - Mirror site | Everest Ultimate build 1106
...some more tools are listed here and here

*Some may know that changing the circuits (hdd bios and all electronic with the same unit for the device) will give the result by the first bootup that it's locked. It will before access can be given writes the lock in step 3, 4 (Motor spin up lock) automatically back (the "locked device information") Since the password is stored on the surface, it cannot be removed by swapping circuit boards. And, since the Firmware Area cannot be read with any widely available software, the password cannot be easily read or removed. Motor Spin up lock will not even show a password prompt. The disk lock is a built-in security feature in the disk. It is part of the ATA specification, and thus not specific to any brand or device.

A disk always has two passwords: A User password and a Master password. Most disks support a Master Password Revision Code, which can tell you if the Master password has been changed, or it it still the factory default. The revision code is word 92 in the IDENTIFY response. A value of 0xFFFE means the Master password is unchanged.

A disk can be locked in two modes: High security mode or Maximum security mode. Bit 8 in word 128 of the IDENTIFY response tell you which mode your disk is in: 0 = High, 1 = Maximum.

In High security mode, you can unlock the disk with either the user or master password, using the "SECURITY UNLOCK DEVICE" ATA command. There is an attempt limit, normally set to 5, after which you must power cycle or hard-reset the disk before you can attempt again.

In Maximum security mode, you cannot unlock the disk! The only way to get the disk back to a usable state is to issue the SECURITY ERASE PREPARE command, immediately followed by SECURITY ERASE UNIT. The SECURITY ERASE UNIT command requires the Master password and will completely erase all data on the disk. The operation is rather slow, expect half an hour or more for big disks. (Word 89 in the IDENTIFY response indicates how long the operation will take.
atapwd - DDL2 - DDL3 - Mirrors)

No comments:

Post a Comment