Microsoft
Windows-based computer operating systems utilize
a special file as a "scratch pad"
to write data when additional random access
memory is needed. In Windows, Windows 95 and
Windows 98, these are called Windows swap files.
In Windows NT and Windows 2000 and Windows XP
they are called Windows page files but they
have essentially the same characteristics as
Windows swap files. Windows swap/page files
are huge and most computer users are unaware
of their existence.
The size of these files can range from 100
million bytes over a gigabyte and the potential
exists for these huge files to contain remnants
of word processing, E-Mail messages, Internet
browsing activity, database entries and almost
any other work that may have occurred during
past Windows work sessions. This situation
creates a significant security problem because
the potential exists for data to be transparently
stored within the Windows swap file without
the knowledge of the computer user. This can
occur even if the work product was stored
on a computer network server.
The result is a significant computer security
weakness that can be of benefit to the computer
forensics specialist. Windows swap files can
actually provide the computer forensics specialist
with investigative leads that might not otherwise
be discovered. Use a Windows Cleaner to safeguard your privacy.
|