Secure wiping insecure? Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Support Forum » Disk Tools » Secure wiping insecure? « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

brotherjoe
Username: brotherjoe

Registered: N/A
Posted on Saturday, Apr 12, 2008 - 1:04:   

One of the main reasons I purchased WinHex is it's initializing feature.
It's been quite a long time I've been using another popular freeware secure deletion utility, but I wanted to combine it with Winhex for even better privacy.
After initializing my hard disk's free space with CSPRNG and three passes I was quite surprised to find out (using Winhex search feature) that some of my long time ago "securely deleted" files are still there! How can that be?
I thought that Winhex initializing beats forensic software but now I am confused.

Any suggestions?
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Saturday, Apr 12, 2008 - 14:00:   

When you wipe free space, you wipe free clusters. You do not wipe slack space, unused FILE records, $LogFile, or other locations on a drive.
Top of pagePrevious messageNext messageBottom of page Link to this message

brotherjoe
Username: brotherjoe

Registered: N/A
Posted on Saturday, Apr 12, 2008 - 20:43:   

But I did wipe also obsolete MFT records.
Top of pagePrevious messageNext messageBottom of page Link to this message

brotherjoe
Username: brotherjoe

Registered: N/A
Posted on Saturday, Apr 12, 2008 - 20:57:   

Stefan, please, can you explain the most secure procedure to sanitize my PC? What should I do to make sure my PC is spyproof, safe and sane? What bothers me most is that even my TrueCrypt-encrypted filenames are exposed there. How can I fix it?
Top of pagePrevious messageNext messageBottom of page Link to this message

Patricia Monica Delbono
Username: pato

Registered: N/A
Posted on Sunday, Apr 13, 2008 - 18:43:   

It's very important for me to undestand how can winhex work to sanitize a disk, too. You explained me in another topic that i cannot erase folders but the files in it. I understand that once I erase these files those doesn't appear. Once of my services with winhex is to erase secure the information of my clients. So your answer is very important for me too.
Patricia
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Apr 13, 2008 - 19:28:   

In WinHex you can
- securely erase an entire hard disk
- securely erase an entire partition
- securely erase ranges of sectors
- securely erase clusters on a drive letter that are free according to the OS
- securely erase slack space on an NTFS/FAT volume
- securely erase unused MFT FILE records on an NTFS volume
- securely erase unused directory entries on a FAT volume
- securely erase the contents of selected files (not copies of the same contents elsewhere)

Which of these feature you would like to use and for what purpose is entirely up to. What you would like to do manually in addition to the above (e.g. erasing portions of the registry, erasing portions of $LogFile or other NTFS system files) is entirely up to you. Whether the result is still a functioning file system or operating system installation depends on what you do.

> Stefan, please, can you explain the most secure procedure to sanitize my PC?

Wipe the entire hard disk, while that hard disk is attached as a secondary hard disk to a computer. (Thereby you lose all the data on the hard disk.)

> What should I do to make sure my PC is spyproof, safe and sane?

I don't know.

> How can I fix it?

If you still find remnants of the data, then please find out where that is, you have an ideal tool for that in your hands already, how would I be able to guess that from remote?!? Maybe you simply forgot to take a new volume snapshot and that's why WinHex still lists the files when opening the volume.

> So your answer is very important for me too.

I can only tell you what functions are available in WinHex. How you do your job is entirely up to you. Because of the complexity of today's file systems and operating system often the only 100% secure option is to erase the entire hard disk.
Top of pagePrevious messageNext messageBottom of page Link to this message

Ian MacArthur
Username: nuqian

Registered: N/A
Posted on Sunday, Apr 20, 2008 - 11:15:   

I have a related problem.
I wish to completely wipe a disk before disposing of it so as to ensure it cannot be read by a subsequent owner.

Disk is locally attached and appears as HD2 or E: there should be no files open or in use.

Tools | File Tools | Wipe securely only allows me to erase files - see Patricia's comments above.

I wish to completely wipe the disk but cannot find out how to do this.
I can do this though not as securely using Partition Magic but it seems sensible to use Winhex's claimed more secure methods.
Top of pagePrevious messageNext messageBottom of page Link to this message

Kjeld Carlsen
Username: kjeldc

Registered: N/A
Posted on Sunday, Apr 20, 2008 - 11:59:   

Maybe - File - Fill disk sectors - is what you neeed
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Apr 20, 2008 - 13:16:   

Tools | Open Disk | HD2
Edit | Fill Disk Sectors
Top of pagePrevious messageNext messageBottom of page Link to this message

Ian MacArthur
Username: nuqian

Registered: N/A
Posted on Sunday, Apr 20, 2008 - 15:12:   

Thanks - just what I need.

That feature was well hidden!!
Any chance of explaining that in the Help file?
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Apr 20, 2008 - 15:36:   

> That feature was well hidden!!

Hidden? It's accessible right from the main menu, and for a program with 1,000 or so features as prominently placed as it gets.

> Any chance of explaining that in the Help file?

It is mentioned and explained in both the program help and the user manual.

Can easily be found through the menu reference or through a search for "wipe" (as well as many other related keywords) in the manual as well as a full-text index of the program help.
Top of pagePrevious messageNext messageBottom of page Link to this message

Ian MacArthur
Username: nuqian

Registered: N/A
Posted on Sunday, Apr 20, 2008 - 16:31:   

Obviously a case of RTFM, Ian
Thanks again

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have an account.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.