Jsmply
asked on
Good (free) app to securely wipe free space within Windows? Ccleaner reliable?
Hi Experts,
We are looking for a reliable way to securely wipe free space within Windows. Anoterwords, users have deleted information via normal Windows delete and they want to make sure it's not easily retrievable via data recovery software. If we were formatting the machine we would just use Boot and Nuke or something similiar, however, anyone have any good recommendations for the apps that work within Windows?
Ccleaner has an option to do this but it seems to work very fast. The DOD standard wipe only takes a few hours at best and even the long 35 passes option seems to finish up quikcer than we would think. Is this reliable? Is there any downside to adding this to the maintenance cycle of production machines?
We are not talking about super classified secrets here, but at least want to do what we can to protect data that is deleted from machines (that will remain in use) that we don't want easily restorable.
Thanks!
We are looking for a reliable way to securely wipe free space within Windows. Anoterwords, users have deleted information via normal Windows delete and they want to make sure it's not easily retrievable via data recovery software. If we were formatting the machine we would just use Boot and Nuke or something similiar, however, anyone have any good recommendations for the apps that work within Windows?
Ccleaner has an option to do this but it seems to work very fast. The DOD standard wipe only takes a few hours at best and even the long 35 passes option seems to finish up quikcer than we would think. Is this reliable? Is there any downside to adding this to the maintenance cycle of production machines?
We are not talking about super classified secrets here, but at least want to do what we can to protect data that is deleted from machines (that will remain in use) that we don't want easily restorable.
Thanks!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yes, If you use scure wipe hard drive t on daily basis . It will reduse life & performance of your HDD.
ASKER
Thanks, that's about the only con we could think of. We didn't mean on a daily basis, perhaps monthly, semi-anually, etc. Thanks!
Yes, I do it when we don't need data when someone of high level employee left our company.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Anyone have experience with ccleaner and its drive wipe results
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks breadtan. Very interesting. Have you used Ccleaner to wipe free space and the MFT free space and then tried a data recovery app?
We will do more testing on it. It just seems to finish up quick. It starts out with a long estimate (for instance, 35 passes says it will take 5-7 hours) but then it always finishes in much less than that. Doesn't seem like a HUGE difference between the 3, 7, or 35 passes. It's hard to tell because you have to be watching it when it finishes as it doesn't seem to keep any log of start and stop time. Presumably the 35 passes even with a small amount of space (say 100 GB free) should take a LONG time, correct? Obviously hardware varies, will run some approximate numbers based on read/write speed in a bit.
We will do more testing on it. It just seems to finish up quick. It starts out with a long estimate (for instance, 35 passes says it will take 5-7 hours) but then it always finishes in much less than that. Doesn't seem like a HUGE difference between the 3, 7, or 35 passes. It's hard to tell because you have to be watching it when it finishes as it doesn't seem to keep any log of start and stop time. Presumably the 35 passes even with a small amount of space (say 100 GB free) should take a LONG time, correct? Obviously hardware varies, will run some approximate numbers based on read/write speed in a bit.
Pardon for the lengthy replies, thought I wanted to do a more in depth check online and share out :)
Topic of recoverability
=================
I did not use CCleaner though but review of it so far is fairly well since it does its work to clean the "craps" in the system. Actually do note that originally CCleaner is developed to clean up unused temporary files and traces left by a myriad of programs (like a registry cleaner, uninstaller etc). It was then enhanced to go further to wipe the slack and free spaces, more that I see it to stay on par with other competitor especially Eraser. But it does not means it is below par
I see the real cleaning as to have the clean up the machine (like CCLeaner original intent) first before we go into wiping (or erasing), and at times we do it on specific file to wipe it away. This overall process will make it harder to recover. On how many passes, you can check out this forum article shared. It should suffice even with one pass
@ http://bbs.heidi.ie/viewtopic.php?f=42&t=5509
Note also that CCleaner can only securely delete files which have not yet been deleted from the Recycle Bin. If you have already delete files insecurely (for example, using Windows Explorer), you can delete them securely using Recuva. Secure deletion does not overwrite file names, which continue to exist in the MFT (Master File Table). In order to overwrite names of deleted files, please use the Wipe MFT Free Space option in CCleaner.
MFT can accumulate free space which may contain remnants of index pointers to deleted files. You can now set CCleaner to wipe the MFT free space, just as you have been able to set it to wipe free drive space. If you select both Wipe Free Space and Wipe MFT Free Space, CCleaner will wipe the MFT free space first.
Topic of Speed
=================
On top of the link I shared where it talks about the why CCleaner is faster compared to Eraser e.g. CCleaner is coded in C++, which is good for high speed.
Heidi may use something other than C++. Perhaps CCleaner uses system entry points that are different from Heidi's chosen set. There would be CCleaner already executed analysis before and there is caching to make the application run smarter and faster. But really only the development team will know, I doubt it would be the reason for what you facing
But I see that there would be more that would contribute to what you described (maybe config or limitation). Mostly from it FAQs that I try to make some hypothesis @ http://www.piriform.com/docs/ccleaner/using-ccleaner/wiping-free-disk-space
a) only delete files in Windows Temp folders older than 48 hours. Selected by default. This prevents CCleaner from deleting temporary files that may be currently in use.
b) At the moment CCleaner supports cleaning the current user's account only. Although you can still run this as a normal or restricted user, however, some files may not be deleted. Ideally running CCleaner in Admin mode is preferred.
c) Additionally some users have reported that viruses or malware may hide files from CCleaner operation, so make sure your antivirus software is up-to-date, and do a full system scan. Some security product may also prevent CCleaner from accessing those files - it cna be their false positive
d) the type of wipe such as "Free Space Only" will leave your normal files intact while "Entire Drive" will erase all of the files on the drive. The latter is longer and it also means that the whole of the partition will be erased. The drive will still be formatted, but all data will be erased. For safety reasons, this feature is disabled for the boot drive.
e) CCleaner does NOT wipe files in the Recycle Bin (because the space is still allocated and not free).
f) Also see this forum @ http://www.worthinstalling.com/2009/03/update-ccleaner-217853-free-disk-space-wiping.html. Some excerpt below
>It just allows you to wipe disk space that’s not used up by files. Usually, software that implements wiping or secure deletion routines work with files not free disk space, so this is a very interesting feature. It doesn’t make your HDDs faster, though.
> I used the wipe clean feature [cclean v 2.19.901] that took about 10 min to complete with 24,397.4 MB of free space. Winxp SP3 and latest patches as of 6/10/09, 2.8GHz P4.
Overall, even the FAQ mentioned that it should be slower but like you stated the hardware would play a part, probably should test using the older OS and not so fast hardware. Also running other wiping tool that support such passes should also help to gauge whether there are such "anomalies"
Topic of recoverability
=================
I did not use CCleaner though but review of it so far is fairly well since it does its work to clean the "craps" in the system. Actually do note that originally CCleaner is developed to clean up unused temporary files and traces left by a myriad of programs (like a registry cleaner, uninstaller etc). It was then enhanced to go further to wipe the slack and free spaces, more that I see it to stay on par with other competitor especially Eraser. But it does not means it is below par
I see the real cleaning as to have the clean up the machine (like CCLeaner original intent) first before we go into wiping (or erasing), and at times we do it on specific file to wipe it away. This overall process will make it harder to recover. On how many passes, you can check out this forum article shared. It should suffice even with one pass
@ http://bbs.heidi.ie/viewtopic.php?f=42&t=5509
Note also that CCleaner can only securely delete files which have not yet been deleted from the Recycle Bin. If you have already delete files insecurely (for example, using Windows Explorer), you can delete them securely using Recuva. Secure deletion does not overwrite file names, which continue to exist in the MFT (Master File Table). In order to overwrite names of deleted files, please use the Wipe MFT Free Space option in CCleaner.
MFT can accumulate free space which may contain remnants of index pointers to deleted files. You can now set CCleaner to wipe the MFT free space, just as you have been able to set it to wipe free drive space. If you select both Wipe Free Space and Wipe MFT Free Space, CCleaner will wipe the MFT free space first.
Topic of Speed
=================
On top of the link I shared where it talks about the why CCleaner is faster compared to Eraser e.g. CCleaner is coded in C++, which is good for high speed.
Heidi may use something other than C++. Perhaps CCleaner uses system entry points that are different from Heidi's chosen set. There would be CCleaner already executed analysis before and there is caching to make the application run smarter and faster. But really only the development team will know, I doubt it would be the reason for what you facing
But I see that there would be more that would contribute to what you described (maybe config or limitation). Mostly from it FAQs that I try to make some hypothesis @ http://www.piriform.com/docs/ccleaner/using-ccleaner/wiping-free-disk-space
a) only delete files in Windows Temp folders older than 48 hours. Selected by default. This prevents CCleaner from deleting temporary files that may be currently in use.
b) At the moment CCleaner supports cleaning the current user's account only. Although you can still run this as a normal or restricted user, however, some files may not be deleted. Ideally running CCleaner in Admin mode is preferred.
c) Additionally some users have reported that viruses or malware may hide files from CCleaner operation, so make sure your antivirus software is up-to-date, and do a full system scan. Some security product may also prevent CCleaner from accessing those files - it cna be their false positive
d) the type of wipe such as "Free Space Only" will leave your normal files intact while "Entire Drive" will erase all of the files on the drive. The latter is longer and it also means that the whole of the partition will be erased. The drive will still be formatted, but all data will be erased. For safety reasons, this feature is disabled for the boot drive.
e) CCleaner does NOT wipe files in the Recycle Bin (because the space is still allocated and not free).
f) Also see this forum @ http://www.worthinstalling.com/2009/03/update-ccleaner-217853-free-disk-space-wiping.html. Some excerpt below
>It just allows you to wipe disk space that’s not used up by files. Usually, software that implements wiping or secure deletion routines work with files not free disk space, so this is a very interesting feature. It doesn’t make your HDDs faster, though.
> I used the wipe clean feature [cclean v 2.19.901] that took about 10 min to complete with 24,397.4 MB of free space. Winxp SP3 and latest patches as of 6/10/09, 2.8GHz P4.
Overall, even the FAQ mentioned that it should be slower but like you stated the hardware would play a part, probably should test using the older OS and not so fast hardware. Also running other wiping tool that support such passes should also help to gauge whether there are such "anomalies"
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thx all, all great suggestions.
ASKER