Re: I'm having an image problem...

From: Adam Daniel <adamd(at)forensicdata.com.au>
Date: Tue Feb 18 2003 - 00:57:46 EST

Theres nothing very sinister about checksums like this.

We get this all the time with drives that have been freshly installed or havent been used much and dont have much data written to them.

If the drive has lots of free space ..a defrag may not be needed to create this result.

most of the time ..if a file can be written in a continuous order to the data blocks, then it will be.

Fat only tends to get scary if the drive has been used alot and defragged then used more etc

FF on a drive tends to be the lowlevel format marks left by the manufacturer you'll also come across FE or 00 depending on who it is.

Adam

On Thu, Feb 13, 2003 at 09:40:21PM +0000, James wrote:
> Hello,
-

Technical Consultant

---

FORENSIC DATA SERVICES PTY LIMITED
http://www.forensicdata.com.au

---

The information contained in this e-mail is confidential and is intended solely for the addressee. If you received this e-mail by mistake please notify us immediately and delete all copies of this message. You must not disclose or use in any way the information in the e-mail. It is the responsibility of the recipient to virus scan this e-mail and any attachments included.

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Feb 18 07:54:31 2003