Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How can I securely delete pagefile.sys and hiberfil.sys?


28 Dec 2011   #1

Windows 7 Home Premium 64-bit
 
 
How can I securely delete pagefile.sys and hiberfil.sys?

I run Windows 7-64 bit Home Premium and work on encrypted containers with TrueCrypt. I'm afraid that such sensitive information (including passwords) may be unencrypted on pagefile.sys or hiberfile.sys. How can I securely delete both of these files? I know there's a method in Windows 7 to delete pagefile.sys at shutdown but I heard from different sources on the net, this is unreliable and does not in fact SECURELY delete the content inside pagefile.sys. Any suggestions?

My System SpecsSystem Spec
.

28 Dec 2011   #2

Microsoft Windows 8.1 Professional
 
 

Just disable them and wipe the free space with 0's after that?
My System SpecsSystem Spec
28 Dec 2011   #3

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit
 
 

This will disable hyberfil. It works I have it set disabled on my SSD.> Hibernate - Enable or Disable

I'll post back on page file when I find it.
My System SpecsSystem Spec
.


28 Dec 2011   #4

Microsoft Community Contributor Award Recipient

Windows 7 Ult. x64 Windows 8.1 x64 Ubuntu 12.04 LTS Tri-Boot
 
 

Hi Problemo,

You might want to try Mark Russinovich's SDELETE, from here

SDelete

It runs from the CMD command line. SDELETE is DoD 5220.22-M compliant. A single pass should be sufficient for your needs.

Regards,
Golden
My System SpecsSystem Spec
28 Dec 2011   #5
Microsoft MVP

Windows 7 Ultimate X64 SP1
 
 

Page File Encryption - Enable or Disable
This will help with the pagefile.
My System SpecsSystem Spec
28 Dec 2011   #6

Windows7 Pro 64bit SP-1; Windows XP Pro 32bit
 
 

The only two things I found in sevenforums tutorials is to move the page file to a different hard drive or this> Page File Encryption - Enable or Disable

Encryption.
All I could find.
Good luck.
Mike
My System SpecsSystem Spec
28 Dec 2011   #7

Windows XP and Windows 7
 
 
sdelete and truecrypt

From a forensic standpoint your data is always on your hard drive the only way to securely get rid of it is to write zeros over that data numerous times. However you DO NOT want to delete or overwrite the pagefile.sys as its a critical system file and Windows caches much of its data on to it. For non system critical files you may want to use sdelete by sysinternals the command is sdelete -p <Times to write over> <File or Directory Path>. E.g. sdelete -p 15 "c:\textfile".

Someone mentioned Truecrypt, it is very stable and very secure. You should use AES 256-bit encryption which has not been cracked.
My System SpecsSystem Spec
28 Dec 2011   #8

Windows 7 Professional SP1 32-bit
 
 

pagefile.sys is not a cache for anything stored on the disk, it just stores data paged out of system RAM. It's virtual memory. Of course that doesn't mean it's any less likely to contain unencrypted data that was worked with at any point in time.

The only 100% reliable solution against leaving any unencrypted remnants behind is to encrypt the Windows system partition itself, including the pagefile.sys stored within it as well as any and all cache and temporary files created or modified during a Windows session.

(However, it depends on what's on those Truecrypt-encrypted volumes and how the OP is working with their contents in the first place.)

Another effective, though uncommon, method is to use software to automatically create and format a fixed-size RAM disk at boot time and allocate it with a pagefile.sys, enabling you to keep the pagefile out of any disk-based volumes without having to disable it altogether. Of course using a RAM disk to store a file that's used as virtual memory is a bit...backward.

(I do this on my laptop though, since it has a full 1GB of RAM that my 32-bit Windows can't see but my RAM disk software is able to use separately.)

Clearing the pagefile.sys file at every Windows shutdown is an obvious and simple method requiring a single registry key change which is pretty trivial, but it'll delay the shutdown a lot, and this doesn't address the remaining issue of various cache and temp files left behind on the system volume.

For the record: Clear the page file at shutdown
My System SpecsSystem Spec
Reply

 How can I securely delete pagefile.sys and hiberfil.sys?




Thread Tools



Similar help and support threads for2: How can I securely delete pagefile.sys and hiberfil.sys?
Thread Forum
Solved Can't delete hiberfil.sys Performance & Maintenance
Solved Unmoveable System Files other than pagefile and hiberfil? General Discussion
How to delete hiberfil.sys from a non-system drive? Performance & Maintenance
Solved PageFile.sys & Hiberfil.sys - Delete Safe? Performance & Maintenance
Does disabling pagefile.sys delete it from the system? General Discussion
Win7 Memory hog pagefile and hiberfil? Performance & Maintenance
pagefile.sys & hiberfil.sys General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:51 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33