Clan x86

Technical (Development, Security, etc.) => General Security Information => Topic started by: topaz~ on March 11, 2008, 03:30:57 AM

Title: Secure file deletion tool on Windows
Post by: topaz~ on March 11, 2008, 03:30:57 AM
Does anyone know of a small (<10mb) utility that can securely delete files (via DOD 5220.22 with variable repeitions or via the Gutmann method) on Windows machines? I know I didn't pick the right forum for this topic, but there weren't better choices!
Title: Re: Secure file deletion tool on Windows
Post by: Blaze on March 11, 2008, 03:56:15 AM
http://www.heidi.ie/eraser/download.php

That looks like what you want, but I haven't tried it.  All I know is I think it is free.
Title: Re: Secure file deletion tool on Windows
Post by: Newby on March 11, 2008, 12:16:18 PM
This is a fine place to pick.

My friend TehUser made one a while ago. I'll ask about it.
Title: Re: Secure file deletion tool on Windows
Post by: iago on March 11, 2008, 12:25:52 PM
Does anybody know whether or not this is possible on NTFS? I know it's extremely difficult on ext3 and other journalled filesystems because even if you shred the main file, you still end up with unlinked copies. If NTFS moves stuff around (ie, defrags) without erasing/overwriting it, or if it keeps a history of the file, then you may not be able to delete it securely.

If the data is highly sensitive, you can also consider DBAN, it's a boot cd that'll wipe the drive. We use it in government for certain systems.
Title: Re: Secure file deletion tool on Windows
Post by: Skywing on March 11, 2008, 12:55:56 PM
If you want to clean existing space on the volume, use "cipher.exe /w" (ships with the OS).
Title: Re: Secure file deletion tool on Windows
Post by: iago on March 11, 2008, 01:29:02 PM
Nice! So can you just delete the file as usual, then run that, and it cleans up the remnants?
Title: Re: Secure file deletion tool on Windows
Post by: Skywing on March 11, 2008, 02:27:38 PM
That is the idea, yes.  The utility is intended to be used to wipe cleartext data after converting files to being encrypted via EFS.  It is present back to Windows 2000.