SSN Scan FAQ

My output file has several lines that read 'GetStat64ByHandle: invalid file handle -1' - should i delete these?

Yes, these lines can be deleted from the output file.

The instructions advise that we run this overnight; does this mean I have to leave as logged in to Windows? Will it run if I am log out?

After you start the scan press CRTL-ALT-DEL buttons at the same time - this will bring up a 'Windows Security' window. Choose 'Lock Computer' - when you come back in the morning you can simply press CRTL-ALT-DEL and provide your password. If you logout you will terminate the scan.

What does the scan tool actually catch?

The SSN Scan Tool catches any string of nine consecutive numbers.

What if I can't finish scanning all of my machines by Dec. 1st?

Communicate with the EAS Tech Support Staff your need for assistance. It is important that we make this project a priority and bring it to completion as soon as possible.

Can I work while the scan is running?

It is recommended that you start the scan at the end of the day and allow the scan to run overnight. If you choose to run the scan during the day, you can continue to work by minimizing the scan window. DO NOT close the window. Closing the window will terminate the SSN scan process. You may notice that your machine runs a bit slower while the scan is running.

How do I know what to delete from the output file?

Evaluate each file listed for possible Social Security numbers. Don't be alarmed at the number of returns, there will be many false positives. You are primarily concerned with files that appear to have been created by a user. You can consider system files free of Social Security numbers.

I have an old machine that I don't want to scan. What are my options?

ALL university owned machines must be scanned including old machines that may be no longer in use. Surplussing old equipment is the only alternative to scanning. As part of the surplus process, hard drives are removed and destroyed. If you would like to surplus equipment, please contact eas-itap@purdue.edu and we will schedule a pickup time.

I found files with Social Security Numbers. What should I do to be in compliance?

In order to comply with state law and University policy, you have two options for a file that contains Social Security numbers:

Delete the file(s) - if you have no need for any of the information in the file, this is the best choice.

Move the file onto a secure server (hypocenter)

I have computers that are not listed on the SSN Scan Checklist. Does that mean I don't have to include them in the scan?

No, the SSN Checklist is NOT a complete inventory. It only serves as a starting point. If you find discrepancies or omissions from the checklist, use the area at the bottom of the list to make modifications, additions, and removals. Please be as complete as possible. This checklist will be a valuable resource for the Technology Support Staff. The checklist should be returned to the SSN Scan mailbox outside 2169C once you complete Phase I.