BCwipe (transparent wiping) plus Returnil and Sandboxie - Recuva results

[caspian]

Here you go. This is after 3 days of surfing the web and deliberately searching for mass quantities of pictures and videos.

222935

Isn't that special? This is from using the combination of BCwipe (transparant wiping active), Returnil, and Sandboxie with Eraser all at once. I have no idea if some other recovery software would find more images but this is a far cry from what either of these tools alone can do (Sanboxie, Returnil, BCwipe). They have all failed miserably.

I tried BCwipe and Firefox in combination and Recuva pulled up tons of images. I have not tried BCwipe in combination with Sandboxie yet. But with all three of these applications running simultaneously, I am barely able to pull up so much as an icon.

[hugsy]

use eraser before you close the browser, browser may delete its history with "normal delete" and when eraser starts there is nothing to wipe other than free space.

[caspian]

-{ Quote: "use eraser before you close the browser, browser may delete its history with "normal delete" and when eraser starts there is nothing to wipe other than free space." }-

I don't know how to run Eraser without deleting the Sandbox. I didn't know that you could. How can you wipe all of the browsing data and images while the browser is still open?

[hugsy]

Hm.... I would go with something like this (didn't test it, so its only opinion):
Close all the tabs in your browser, leave only the homepage.
Start eraser and set it to erase content of the browsers temp folders and its subfolders (what and where are these folders depends on the browser, for firefox just type "about:cache" in the url field and you will find it)
Now you can close the browser.

Another method for firefox that i found interesting goes something like this:
1. type "about:config" in the firefox, right click and create "boolean" type key and name it "browser.cache.memory.enable", set it to "true"
2. create "integer" type key and name it "browser.cache.memory.capacity", set its value to the one that is good for you (i think the input must be in KB, not sure thou)
3 find "browser.cache.offline.enable" and "browser.cache.disk.enable" and set them both to false.

What i read is that now firefox wont store anything on the disk but will use RAM instead. And you can also set privacy mode back on.

Hope it works. Let me know :)

[rookieman]

Has anyone tried hugsy method posted above?

[siberianwolf]

@Caspian
what procedure did you follow when wiping the contents of the sandbox?
when i used it in the past, first i used to close all sandboxed apps, then close and exit sandboxie by right clicking its sys. tray icon; and then right clicking on the sandboxie folder found in "C:\Sandboxie" directory, then inintiate the wiping/erasing app.
but there used to be a big big problem with sandboxie which is:
when i browsed the web with a proxy service (ninjacloak.com, for instance), file names get to be longer than 255 characters (which is the theoretical limit for the win os), thus after wiping/erasing is complete, these files are left unwiped/unerased. then you have to manually rename some of the subfolders in sandboxie root directory, which is completeley inapropriate for secure wiping/erasing.
after shortening the names of several subfolders, these files become available for wiping.
but before you change the names of several subfolders, among these remnants of the sandbox folder content, you can see the files, preview them.
sometimes, even when you're not using proxy, some files in sandbox root folder, some files remain as remnants because of long names.
when this happened, i used to wipe/erase free space on my hdd, after i renamed the remnants and wiped them.
that's why i stopped using sandboxie.
anyone ever had a similar issue?

[caspian]

-{ Quote: "@Caspian
what procedure did you follow when wiping the contents of the sandbox?
" }-

I simply went into the system tray, opened up sandboxie control, and deleted the sandbox. I waited for the red X to disappear in the system tray and then I ran Recuva deep scan.

I will have to come back and re-read your post again when i have more time. I am out of town visiting with family right now. Thanks for your input.

[caspian]

-{ Quote: "Hm.... I would go with something like this (didn't test it, so its only opinion):
Close all the tabs in your browser, leave only the homepage.
Start eraser and set it to erase content of the browsers temp folders and its subfolders (what and where are these folders depends on the browser, for firefox just type "about:cache" in the url field and you will find it)
Now you can close the browser.

Another method for firefox that i found interesting goes something like this:
1. type "about:config" in the firefox, right click and create "boolean" type key and name it "browser.cache.memory.enable", set it to "true"
2. create "integer" type key and name it "browser.cache.memory.capacity", set its value to the one that is good for you (i think the input must be in KB, not sure thou)
3 find "browser.cache.offline.enable" and "browser.cache.disk.enable" and set them both to false.

What i read is that now firefox wont store anything on the disk but will use RAM instead. And you can also set privacy mode back on.

Hope it works. Let me know :)" }-

Okay I am going to give this a try a little later. No time right now. Have you done a Recuva deep scan after using this method?