Print

Welcome to Smokey's Security Forums.

Guests have only limited access to the board and it's features, please consider registering to gain full access!

Registration is free and it only takes a few moments to complete.

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Jetico]

Firstly, we did not change CryptoSwap in BCWipe v4. Exactly the same module works in both versions.

It is certainly not possible to read the contents of acrive pagefile with any text editor.
Any text editor will read the disk sectors through the CryptoSwap driver, so the contents will be decrypted by the driver.
To see the real contents of the pagefile you have to read the file when the operating system is not loaded.
For example, move the hard drive to other computer and insert it as non-system drive, or - if your have dual-boot system - boot to other operating system and read the file.

I have no idea how you read the pagefile with version 3 of BCWipe and were able to see the encrypted contents.

[lordbeau]

Cryptoswap on BCWipe 3 worked fine on Windows 7 RC7100 but BCWipe 4 with Windows 7 RTM does not work for me. Yes, I set Cryptoswap, rebooted, and it says "active" but when I examine the pagefile with a text editor, it is all sitting there in plain text. Anyone else have this experience? (Use Flexhex to examine the page file and look for the word 'Windows' under a search - if it displays it for you, then the pagefile is in the clear).