A+ | A- | Reset
Home arrow The Blogs arrow News/Commentaries arrow Witness: Computer data deleted

Witness: Computer data deleted PDF Print
Posted by admin   
Wednesday, 12 November 2008 14:52

Some data in the notebook computer seized from Malaysia Today editor Raja Petra Raja Kamarudin had been deleted, a computer forensic investigator told the Sessions Court yesterday.

Asst Supt Wa’ie Isqal Kria Abdullah, 38, said the user of the notebook had accessed the Malaysia Today website, but information about the access between April 11 and 26 was not found in the notebook.

Questioned by Deputy Public Prosecutor Farhan Read, the seventh witness said he believed the notebook user had used a program called “CleanIt.exe” to delete all temporary files.

“In the notebook, I found several access to www.malaysia-today.net for the year 2008 done by the administrator user,” testified ASP Wa’ie, who is with the Computer Forensic Investigation division.

Asked about the meaning of “administrator user”, he replied that such a user had “full access to edit, delete and add.”

In his report, he had stated that the user account named “Raja Petra” was an administrator user.

The blogger Raja Petra had on May 6 claimed trial to publishing a seditious article on his website on April 25. In the afternoon, in an unexpected move, the prosecution applied for permission to allow ASP Wa’ie to reanalyse two computers seized from Raja Petra.

Lead prosecutor DPP Ishak Mohd Yusof applied under Section 425 of the Criminal Procedure Code which empowers the court to summon and examine any person if his evidence was essential for a just decision.

He said ASP Wa’ie had analysed both computers based on an application by investigating officer Deputy Supt Mahfuz Abdul Majid.

He said DSP Mahfuz just ordered ASP Wa’ie to find an alleged seditious article titled “Let’s send the Altantuya murderers to hell” and accessibility to the Malaysia Today website.

“ASP Wa’ie, however, has testified to have spotted several folders in both computers, but he did not open and read those files as he wanted to follow the investigating officer’s order,” argued DPP Ishak on the seventh day of the sedition trial yesterday.

DPP Ishak urged the court to allow ASP Wa’ie to reanalyse both computers and extract several folders found in them.

Lead counsel J. Chandra objected to the application, saying that Section 425 was not applicable because the seventh witness was giving evidence.

Chandra argued that ASP Wa’ie had not been authorised to look into folders as his terms of reference was very specific on the request for his analysis.

Judge Rozina Ayob set today to deliver her decision. - The Star

Comments (19)Add Comment
...
written by Littlebird, November 12, 2008 15:11:45
How sure are they it was deleted? Why not it was never there in the first place?
report abuse
disagree 1
agree 17
...
written by Engineer, November 12, 2008 15:39:46
Ayo,

So stupid say computer data deleted. Always happens mah to everybody's computer lah.

What kind of computer forensic expert is this feller.


report abuse
disagree 0
agree 21
...
written by SocratesI, November 12, 2008 15:52:53

Feeble attempt to "manufacture" evidence against RPK by inserting folders and files previously not in the computer and claiming that these files and folders were RPK's !

The court should examine the computer and note down what is there and then only hand it over back to this MORON investigator, so that if any evidence is planted, the court would know ... unless the Judge is an UMNO Anjing, this is what it should do to ensure Justice is upheld !!

report abuse
disagree 1
agree 10
...
written by Harsher, November 12, 2008 16:24:54
i'm wondering... why "CleanIt.exe" and not the delete key on they keyboard or other programs?
report abuse
disagree 0
agree 5
...
written by Arubin, November 12, 2008 16:27:59
'Deleted' is not an excuse. Its not so easy to get rid of a file on a hard drive. Flushing you recycle bin is not enough. If you're a computer forensic expert of any degree of competence, you should not have any problem recovering a deleted file unless the hard drive has been zero-formatted more than 8 times (yeah, like he was able to do that after you confiscated his laptop).

Face it. RPK just outsmarted you all.
report abuse
disagree 0
agree 12
...
written by ploon, November 12, 2008 16:31:22
CleanIt! A great software, huh? Download it from here: http://www.silmarilsoftware.com/cleanit/

and it's free too!
report abuse
disagree 0
agree 7
...
written by buaya, November 12, 2008 16:50:10
Just find a software that can delete and write garbage data on the same location and it is not recoverable in any way.
report abuse
disagree 0
agree 1
...
written by Nunudada, November 12, 2008 16:59:35
I just want to know if this ASP wale kria whatever, is a true born here and bred Malaysian or a gift of the home ministry.Sounds to me like a foreigner granted citizenship.Any ideas anybody?
report abuse
disagree 1
agree 1
...
written by buaya, November 12, 2008 17:11:05
Combine and use this 2 software:

ccleaner http://www.ccleaner.com/
PC Shredder http://www.pcshredder.com/
report abuse
disagree 0
agree 2
...
written by matkreko, November 12, 2008 17:32:22
.... he believed the notebook user had used a program called “CleanIt.exe” to delete all temporary files.


How S2PID is this computer forensic investigator? CleanIt.exe is only deleting all the files, but not wiping them out of possible recovery. Even using normal wipeout program, there is still a possibility to read what the underlying data was prior to the wipeout action. Only by using military grade wipeout program that it is impossible to recover back the data! And this military grade wipeout cost you a fortune to have one!

And to top it up.... maybe, this investigator never know of index.dat file which recorded the history of user access to internet sites, even after they deleted the history the normal ways... of which I always use to catch my kids "misbehaviour" accessing the internet... smilies/cool.gif smilies/cool.gif smilies/cool.gif
report abuse
disagree 1
agree 2
...
written by sukinong, November 12, 2008 17:57:32
Why can't the judge just dismiss the case citing prosecution incompetency and shoddy police work?

Just put some XXX photo and point the finger. That's much easier. Computer forensic expert konon. Hogwash!
report abuse
disagree 0
agree 3
...
written by MalaysianFirst, November 12, 2008 18:25:43
Don't under estimate this Wa'ie nerd. For all you know, he just wants to take RPK's pc back and insert some "incriminating" files in and use it against RPK.
report abuse
disagree 0
agree 5
...
written by JohnQ, November 12, 2008 18:56:46
"Expert' must be "MARAH" grad that called himself forensic XP !!!

Want any consultation for 'deleted data' recovery ? Fees only rm300k! smilies/grin.gif smilies/grin.gif smilies/grin.gif
report abuse
disagree 0
agree 0
..., Lowly rated comment [Show]
...
written by Sabahfan, November 12, 2008 20:19:23
This Anti Relon, should be banned from this forum for continuuosly writing irrevant rubbish... or he is trying to ridicule christianity at every popularly visited site?

I dont care if he hates christianity or religion, but he should go to the correct site to air his views..

Now back to the topic here...I believe the data that were deleted were those who incriminate the C4 guy.. and not RPK....
report abuse
disagree 0
agree 3
...
written by binkah1, November 12, 2008 20:30:26
Hahaha..what a joke. It is rpk computer so what's wrong with him deleting records; using 'clean it' utilities or any other utilities prg for that matter? Comeon lah...wake up and be real malaysian!
report abuse
disagree 0
agree 1
...
written by Krepot, November 12, 2008 22:52:44
Having "CleanIt.exe" - IT expert assumes, files have been deleted?
1. Isn't that ASSUMING?

Having a trash can,
does that also make one believe,
that files had been deleted?

What real proof is there, that the file did exist?
Forensic my ass!
report abuse
disagree 0
agree 0
...
written by ahmadneil, November 13, 2008 10:25:24
There is nothing left to dig.
report abuse
disagree 0
agree 1
...
written by ROBERTNGTG, November 13, 2008 11:48:57
Some data in the notebook computer seized from Malaysia Today editor Raja Petra Raja Kamarudin had been deleted, a computer forensic investigator told the Sessions Court yesterday

IF THE COPS ARE SO DETERMINED TO KNOW WHAT WAS DELETED IN RPK'S PC, WHY DONT THESE BLOKES GO FIND OUT WHO DELETED THE IMMIGRATION RECORD ON ALTANTUNYA??? SHOW YOUR BLOODY IMPARTIALITY IN CARRYING OUT JUSTICE AND NOT TALK C*CK.
WHAT IS MORE IMPORTANT THAN RESOLVING A MURDER CASE.
report abuse
disagree 0
agree 1

Write comment
This content has been locked. You can no longer post any comment.
You must be logged in to a comment. Please register if you do not have an account yet.

busy
 
< Prev   Next >
 

Sponsored Links

World Futures  Moscow's Middle East conference: Should the Muslims depend only on the US to solve the Palestine crisis?

Future Fastforward  A controversial analysis by a controversial analyst, Matthias Chang, the lawyer-writer who unabashedly calls a spade a spade and offers no apology for doing so.

Internet TV 3000+ Channels  Pick your favorite internet TV channels straight to your PC! Yay!

Some Images Hosted With
Thank You ImageShack!
 BLOGGERS AGAINST ISA

Powered and Optimized for:
Malaysia Today by MT-TEAM