Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Protected Storage on Windows XP |
|---|---|
| Date: | 24-Nov-2004 16:02:19 CET |
Hello List!
I'm not sure this is the right list to send this question but I'll give a
try.
I would like to know if it is possible to delete the protected storage
datas on Windows XP.
Supposing an user is using
PStoreView 1.0 - (c) 2002, Arne Vidstrom
- http://ntsecurity.nu
and can read the datas inside the Protected Storage. Now what if he's able
to delete them? Is this possible? Any tool which a user can use to wipe
this useful informations? Any really working "log cleaner" known for
windows? I tried several cleaners claiming they could wipe logs out from a
windows box but I honestly didn't find them working. I made a btach which
actually is a porting of any Linux Log cleaner (finding the string, copy
the log file without that string, substituing the new log to the old one)
but this doesn't work on Windows. Can't stop the process 'cause it has
SYSTEM privilegies and can't touch any system log nor event log. I think a
DLL injection would do the trick but I'm not honestly so skilled to do
that.
I'm trying to demonstrate to some friend of mine that even windows can
allow to wipe sensible informations such as logs and stuff. My friends are
sure that you cannot wipe all infos out of a Windows system and on the
contrary you can do that on a Linux machine for example.
Any help would be very appreciated
Regards
Marco
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | AS400 Hardening Guidelines, Jason . Burzenski |
|---|---|
| Next by Date: | Re: USB Security, GuidoZ |
| Previous by Thread: | AS400 Hardening Guidelines, Jason . Burzenski |
| Next by Thread: | RE: Protected Storage on Windows XP, Mark Spencer |
| Indexes: | [Date] [Thread] [Top] [All Lists] |