Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Working a possible fraud case, need some advice
New Posts  All Forums:Forum Nav:

Working a possible fraud case, need some advice

post #1 of 4
Thread Starter 
So I will say all that I can, someone needs to know if a file was made and sent to someone. I have the recipients name and company name, when both are searched with a search in recuva I get the pagefile.sys from the drive, and some misc files about the company. Anyone have an idea? Any input would be great
post #2 of 4
So you want to read the pagefile.sys to see if it contains this file? IIRC, the pagefile.sys is not like a folder-structure with intact "files." It's just bits of data scattered without something like a data (file) allocation table--usually in small chunks, with no inherent correlations to other chunks. You could have a portion of a file sitting in the pagefile, or a all of a file in there--but there's no way to read it as intact files. It's like a window cut up into 1000 identical squares--they all physically fit together, but you have no idea if they're in the right place.

Oh, this might help: http://www.forensicswiki.org/wiki/Pagefile.sys

Probably can't do a whole lot with pagefile.sys.
    
CPUMotherboardGraphicsRAM
i5-2500K Biostar TP67B+ XFX HD5750 1GB 2x4GB DDR3 Corsair 1600 
Hard DriveOSMonitorPower
60GB OCZ SSD, 2x160GB HDD RAID0, 500GB+500GB+1.5TB Windows 7 Ultimate 64-bit Samsung SyncMaster 930B Antec SmartPower 450w 
Case
Antec 900 
  hide details  
Reply
    
CPUMotherboardGraphicsRAM
i5-2500K Biostar TP67B+ XFX HD5750 1GB 2x4GB DDR3 Corsair 1600 
Hard DriveOSMonitorPower
60GB OCZ SSD, 2x160GB HDD RAID0, 500GB+500GB+1.5TB Windows 7 Ultimate 64-bit Samsung SyncMaster 930B Antec SmartPower 450w 
Case
Antec 900 
  hide details  
Reply
post #3 of 4
An idea about what? The file, the file type?
Main Rig.
(14 items)
 
Battlefield 2 review.
Battlefield 2 PC Game EA
 
CPUMotherboardGraphicsRAM
Bulldozer FX4100 Gigabyte GA-M68MT-S2 MSI 7770 Kingston Hyper X | 2 x 2 GB 
Hard DriveOptical DriveCoolingOS
WD 2 TB  LiteON DVD/CD R-W Drive AMD Standard cooler Windows 7 Ultimate 
MonitorKeyboardPowerCase
32' Luxor Full HD TV Microsoft comfort curce Antec 450 Watt OcUK Value case 
MouseAudio
Microsoft wireless mouse Logitech speakers & Bass 
  hide details  
Reply
Main Rig.
(14 items)
 
Battlefield 2 review.
Battlefield 2 PC Game EA
 
CPUMotherboardGraphicsRAM
Bulldozer FX4100 Gigabyte GA-M68MT-S2 MSI 7770 Kingston Hyper X | 2 x 2 GB 
Hard DriveOptical DriveCoolingOS
WD 2 TB  LiteON DVD/CD R-W Drive AMD Standard cooler Windows 7 Ultimate 
MonitorKeyboardPowerCase
32' Luxor Full HD TV Microsoft comfort curce Antec 450 Watt OcUK Value case 
MouseAudio
Microsoft wireless mouse Logitech speakers & Bass 
  hide details  
Reply
post #4 of 4
Thread Starter 
Its gotta be some sort of text list.. A group of names and numbers was collected and exported from the computer
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Windows
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Windows › Working a possible fraud case, need some advice