Because there's more to life than one's self, status or material things.
(for those dealing with real-life issues and who enjoy participating in stimulating discussions on issues and ideas, crave the thrill of geographic, mental and spiritual exploration and discovery and value local and global community, belonging and old and new friendships)
Ingredients in our personal care products, cosmetics, foods, water, indoor air and building materials are also dangerous to our health. How to be a safe shopper.
Sold, recycled, donated and discarded computers, PDAs and cell phones can contain recoverable private data even after a delete, format or reset. How to securely erase your data.
Are popularity, accomplishment, recognition, respect, wealth, power, fame, even religion not cutting it? Have you tried all the world’s got to offer and in doing so come up empty and unsatisfied? Feel like there's nowhere to turn? How to make your life explode with relevance.
Was Jesus just a man who married Mary Magdalene? Has the church been hiding information from us for years about Jesus? Don't decide too quickly. Examine the evidence first.
Think conclusive cases can't be made for the Bible and Jesus' claim to be the God/Man Messiah? You'd be surprised. The overwhelming mountain of factual, historical evidence is too compelling, too convincing to be ignored.
''We are living in very interesting times. Too many people are confused about what the Bible says about the future, and a lot of that has to do with confusion about Israel.'' Learn more.
If an angel or a loved one who has died appears or speaks to you, don't automatically assume it's a good angel or your loved one. Here's why.
Don't automatically assume the growing fascination with Harry Potter, witches, wicca and the occult is harmless either. Explore these controversial topics.
Don't automatically assume that New Age / New Spirituality concepts and the alternative / holistic therapies and media influenced by them are harmless. Learn more.
Disclaimer: These instructions are in no way a guide for thorough erasing of all your private data stored on digital media. For that, please consult an expert.
And they're only intended for honest, law-abiding people who want to keep their very sensitive data on their nonjob-related home computers safe and private. If you were to attempt to use these instructions on a job-related home or office computer, you could be breaking the law.
If you intend to do so, I would much rather you go elsewhere, but if you must continue reading this page and applying these instructions, be aware that you do so at your own risk.
WARNING: Using a secure eraser / wiper / shredder makes your data virtually unrecoverable, in other words, very difficult or prohibitively expensive to recover, so be sure to back up your data before using it, and be careful to erase only the files you no longer want or need.
Note: The following instructions are hidden from sighted visitors and keyword searches with Javascript. If you prefer viewing them without having to click on the links to show them, or want to do a keyword search, or print this page, either disable Javascript in your browser, or
view the instructions without Javascript. | skip
Concerned or worried your spouse or child might be viewing pornography or that your child might be making information that can identify him or her available to predators? Here are some articles and software programs that'll allow you to view and monitor their online history.
Addicted to sex or pornography and want to get help to quit so you won't have a reason to visit this page anymore, among other reasons? Check out the following sites.
For Anyone Addicted to or Impacted by Sex or Pornography:skip
KickPorn.com (a free 6 Day Kick Porn E-Course e-book, articles, $10 reports, discussion forum, blog, support and resources for those who believe in God)
SMS text messages and MMS multimedia messages sent from and received by a cell phone are normally stored in your phone's inbox, but check with your phone's manual to make sure. Then follow the instructions for your phone to erase your private data before donating or throwing it away.
To erase all the data on your PDA, do a hard reset.
''The way of performing a Hard Reset differs from device to device: it may require a simultaneous press of several buttons, deactivation or removal of the main battery. Check your user manual for details.'' - PDAGold.com
WARNING: Doing a hard reset will permanently erase all the data on your PDA, so if there's anything you want to save, make sure you back up your data first. skip
A hard reset does not clear the data on a WM5 (Windows Mobile 5.0) device. Some Pocket PCs have a program installed to erase all data. Look under programs. If you don't see one, check your user manual for details. Or use the free HardReset for Pocket PC utility.
''Remote wipe is a new feature that enables administrators to erase sensitive data from a lost or stolen Pocket PC. This feature is enabled via a Web-based interface, which is restricted to Exchange Administrators by default. Other individuals (like help desk professionals) can be added as necessary.''
''After the remote wipe has been completed, the administrator will receive acknowledgement that [the] device has been wiped. Administrators can also set the Pocket PC to erase its memory when the PIN has been incorrectly entered a certain number of times.'' - Article by Dan Hanttula at PocketPCMag.com skip
The PalmOne LifeDrive mobile manager (based on PalmOS) and Sharp Zaurus SL-C3000 and SL-C3100 (based on GNU/Linux) PDAs now store data on a hard drive instead of flash memory. (Zaurus SL series devices are no longer sold by Sharp in the U.S. or Europe - only in Japan, but they're still popular.) skip
Without LifeDrive Update 2.0, ''any form of hard-reset [on a PalmOne LifeDrive] will erase the entire contents of the hard drive [- including PalmOS], without exception. When you issue the command for a hard reset, you're given two options: a fast erase that takes 5 minutes, and a 'secure erase' that takes 30 minutes.''
But with LifeDrive Update 2.0, you have three hard reset options. The new option only erases Program Memory.
''Given that the Lifedrive has government-use security certification, a secure erase presumably entails zeroing out all the data on the drive so that it can't be restored or recovered. Either way, you can't simply reset the device and expect to have your files waiting when it boots.'' - Adama D. Brown's Review of PalmOne LifeDrive at BargainPDA.com
After erasing your LifeDrive with secure erase, you'll have to reinstall PalmOS and restore your files. skip
Shred: If you plan on selling your iPod, but don't want to consider the likelihood of someone listening to your music and viewing your photos, use the Shred tool to permanently delete your iPod's media files and libraries.
This function can be easily replicated by using Apple's Disk Utility to re-format your iPod's hard drive with one of the the ''Secure Erase'' options and the latest iPod Software Updater to restore your iPod's software.
Looking for a CD or DVD eraser? Check your CD or DVD recording software for an erasing feature.
''Will Eraser erase CD-RW's and CD-R's [and DVD-RW's and DVD-R's]? You can use Eraser on a CD-RW [or DVD-RW], however you only need to use one pass, as only magnetic media needs multiple passes. You can't use Eraser on CD-R [or DVD-R], as they write protect themselves after the first write. The only way to secure a CD-R [or DVD-R] is to destroy it and then melt down the pieces. If you see a CD-R [or DVD-R] that has been 'erased / deleted,' more likely th[a]n not, just the file directory on the CD [or DVD] was changed, and the data still remains on the CD [or DVD].'' - Heidi Computers Ltd.
WARNING: Data deleted on USB keys, or pen or thumb drives, and other flash memory devices are easily recoverable.
''USB flash memory is not magnetic (so multiple passes won't help). Multiple overwriting passes are designed for magnetic media, and they would produce nothing but excessive wear on a memory card, since flash memory has a limited write/erase lifetime.'' -
If you have sensitive data on your hard drive and are serious about keeping it private, I strongly recommend reading the following four sections and completing all the steps that apply.
WARNING: Deleting files does NOT permanently remove them. Nor does formatting your hard drive or reinstalling Windows. They're still recoverable with sophisticated forensic data recovery methods. Learn why.
WARNING: Windows and some software programs save a history of pretty much everything you do in them, including copies of files you have viewed. And most web surfing history / tracks removers merely delete private files.
Question: Does formatting the hard drive or reinstalling Windows remove the index.dat files or other private data?
Answer: If by ''remove'' you mean securely, no, it doesn't, because even if you format the hard drive first, those files can still be recovered by data recovery software or experts.
To make that as improbable as possible, erase your private data with 3 to 7 passes on a modern, high-density hard drive*, or 35 passes on an old hard drive.
*Erasing expert Peter Gutmann made it clear in an epilogue to his paper that 35 passes don't make data any less recoverable than several passes on modern, high-density hard drives.
But for next time, since formatting also removes Windows and all your software, I recommend creating an image of your new, clean, configured Windows installation with one of these disk imagers to avoid going through the trouble of reinstalling and reconfiguring Windows and all your software.
To make files as unrecoverable as possible*, you need erasing software (also called a wiper or shredder) that overwrites the files several times with special alternating patterns of random data, using a complex algorithm.
*Unless you physically destroy your hard drive's disks, experts can recover some, if not all, of your erased files if they want to badly enough:
''Data overwritten once or twice may be recovered by subtracting what is expected to be read from a storage location from what is actually read.''
''Data which is overwritten an arbitrarily large number of times can still be recovered provided that the new data isn't written to the same location as the original data (for magnetic media), or that the recovery attempt is carried out fairly soon after the new data was written (for RAM).''
''For this reason it is effectively impossible to sanitise storage locations by simple overwriting them, no matter how many overwrite passes are made or what data patterns are written.''
''However by using the relatively simple methods presented in this paper the task of an attacker can be made significantly more difficult, if not prohibitively expensive.'' - Peter Gutmann
CAUTION: Erasing your data isn't the key to ultimate security.
''When overwriting data, you are simply trying to fix a security leak that already has happened. The best way to deal with this is to prevent the data from getting written to the disk in the first place - use strong encryption.''
''E4M and PGP can get you started, but cannot help you with Windows-related security holes. If you must use Windows, use NT/2000[/XP].'' - Heidi Computers Ltd.
Otherwise, for the best security, always use GNU/Linux or Mac OS X (based on FreeBSD) or better yet, OpenBSD on an ext2 partition.
Because of their journaling nature, the other file systems (ext3, ReiserFS, XFS, JFS, etc.), while providing better file integrity and stability, collect significant amounts of data about your activities. To learn more, read ''Data Security for GNU/Linux Power Users.''
WARNING: If a hardware or software key logger is installed on your computer, storing private data on your hard drive leaves them vulnerable to viewing or theft, even if encrypted, and the following options will be unable to keep them sufficiently secure and private.
I also strongly recommend moving your private documents, browsing history, e-mail and chat conversations to an encrypted removable medium, securely erasing the private data on your hard drive and switching to portable software.
Because of Windows' activity tracking and logging, and the overwhelming onslaught of spyware being targeted at Windows, Internet Explorer and Outlook / Outlook Express, if you have sensitive data you need to keep private, it's a lot safer to choose one of the following options.
And if you choose the safest or next safest option, using alternative browser and e-mail programs, antivirus and antispyware software and security updates isn't necessary. skip
Uninstall Windows and install GNU/Linux or get a Mac (based on FreeBSD) or better yet, OpenBSD (recommended for experienced Unix users only), save your data in encrypted form on an ext2 partition or removable medium from the time you start using your new computer, hard drive or removable medium, and use erasing / wiping / shredding software to securely erase sensitive data.
Security Guides for Mac OS X, GNU/Linux and BSDskip
Disk Utility (has 3 erasing options: Zero Out Data - not secure, 7-Pass Erase - sufficient for modern hard drives and 35-Pass Erase - designed for old hard drives and according to Peter Gutmann no more secure than 7 passes on modern hard drives)
If you want to keep using Windows, it's a lot easier to use IE Privacy Keeper (free) or one of the following free or commercial privacy software to securely erase your desktop and Internet history and other private files than to do it with Heidi Computers Ltd.'s Eraser. skip
Privacy Cleaner (DOD and NSA - erases Internet history - supports Windows, including Vista - can schedule to erase at startup or shutdown and claims to be able to erase index.dat files...how? at shutdown?...but can't erase free space or autocomplete data)
CyberShredder (NSA and 2 other methods - drag and drop only)
Free Internet Eraser (DOD and NSA - free version can erase or schedule to erase at startup or shutdown, but can't erase free disk space, autocomplete data, swap or page file or index.dat files, and doesn't include a file shredder for personal files, or support for plug-ins - commercial version supports over 200 free, pre-configured plug-ins that clean tracks of popular applications)
PGP Wipe (part of PGP Tools in PGP since PGP 6.0 - modified Gutmann doesn't work in Windows 95 or 98)
Simple File Shredder (no standards, but supposedly a secure algorithm with random data)
SuperShredder (Gutmann and NISPOM (DOD) - browse and select location or drag and drop)
Zilla Data Nuker (DOD - browse and select location or drag and drop - can schedule to erase at startup or shutdown)
XP Privacy Pro (DoD, NSA and Guttman - claim of awards appears to be untrue - can remove individual restore points - supports Windows 98, NT, 2000, Me, XP, 2003 and Vista)
Privacy Guardian (DOD - supports Windows 98, NT, 2000, Me, XP, 2003 and Vista)
PurgeIE Pro (DOD - supports Windows 98, NT, 2000, Me, XP, 2003 and Vista)
Privacy Expert Suite (8 methods, including DOD and Gutmann - supports Windows 98, NT, 2000, Me, XP and 2003 - PC Magazine Editor's Choice, May 2005)
Window Washer (DOD - easy to use - supports Windows 98, NT, 2000, Me, and XP - PC Magazine Editor's Choice, May 2005)
Cyberscrub (award-winning eraser - DOD - supports Windows 98, NT, 2000, Me, and XP)
Max PC Privacy (DOD - supports Windows 98, 2000, Me and XP)
Winclear (DOD, Gutmann - supports Windows 98, NT, 2000, Me, XP and 2003)
East-Tec Eraser (DOD, Gutmann - supports Windows 98, NT, 2000, Me, XP and 2003)
Here's what I recommend doing in Windows Vista or XP Professional to set up Heidi Computers Ltd.'s Eraser to securely erase your private data, and how to go about doing that every time after you finish working or playing on your computer:
CAUTION: Reading the following steps carelessly could cause you to disable your system and / or lose data you want to keep. So be sure to read them carefully.
Using Windows Vista with User Account Control (UAC) and Data Execution Prevention (DEP) disabled, and without a CPU (the main computer chip) that supports DEP and virtualization, leaves your operating system vulnerable to corruption and control and your data to theft by malware and web sites set up for such purposes.
If you use Windows 95, 98, Me or XP, your hard drive most likely has malware (viruses, trojan horses or trojans, worms, rootkits, key loggers and spyware) and adware on it - including cookies and PIEs (persistent identification elements) - that are collecting data about your computing habits with (some adware) or without (malware and some adware) your permission.
Windows XP's default settings were configured for ease of use and connectivity, not security, and Service Pack 2 only changes a few of those settings, unfortunately, so even with SP2 installed, Windows XP is still very unsecure and vulnerable to attack.
If you use Windows Me or XP, using your default account, which unfortunately is your administrator account, for everyday use, especially going online, leaves your private data vulnerable to those determined to view them.
If your sensitive data - e-mail, Temporary Internet Files, Most Recently Used lists, etc. - aren't encrypted, they're accessible to prying eyes.
More and more sensitive, private, personal data and money are being stolen or conned / defrauded out of people and businesses for personal or business gain from or through their laptop or notebook computers, cell phones, PDAs and other handheld devices and wireless keyboards and networks.
If you want your computer and data to be sufficiently secure, first either:
use a GNU/Linux Live CD or DVD on a read-only CD-R or DVD-R with your private data on an encrypted removable medium such as a USB drive (most secure option);
reconfigure the default settings of Windows' files, folders, registry, software and services.
Then encrypt your operating system (if you're not using a GNU/Linux Live CD or DVD or a virtual operating system in a secured operating system) and data, remove all malware and adware, switch to a wired or USB wireless keyboard if yours isn't either one, and secure your laptop and / or wireless router / firewall, cell phone, PDA or other handheld device, if it's possible and you have one.
WARNING: Storing private data on your hard drive leaves them vulnerable to viewing or theft, even if encrypted, if a key logger is installed on your PC.
I strongly recommend moving your private documents, browsing history, e-mail and chat conversations to an encrypted removable medium, switching to portable software and checking for hardware and software key loggers before entering your encryption key.
Note: If you use Internet Explorer and want to keep its cache for faster web page viewing, I recommend either moving your Temporary Internet Files folder to a separate encrypted partition on your hard drive (fairly secure) or removable medium (more secure) created and sized only for that folder...
...or better yet, switching to a portable, alternative browser to minimize privacy risks, significantly reduce defragmentation of your system files and help keep Windows from committing errors or slowing down.
If you don't need the cache, disable it. (I recommend doing that even if you're going to switch to a more private and secure browser, to maximize your privacy.)
WARNING: Failing to securely erase your private data after copying or moving them to a removable medium, leaves them accessible to those willing and able to recover them from their original location.
(all Carry it Easy software are commercial and require administrative access)
Carry it Easy (commercial - portable Outlook Express only - U3 edition available for U3 smart drives, which will be replaced by StartKey in last half of 2008)
Carry it Easy +Plus (commercial - creates portable Outlook and Outlook Express e-mail - U3 edition available for U3 smart drives)
To minimize the risks to your privacy, I recommend switching to safer, alternative browser and e-mail programs with your browsing history and e-mail on an encrypted, removable medium or better yet, portable versions stored on an encrypted, removable medium that leave your sensitive data significantly more private and secure than Internet Explorer, Outlook Express and Outlook do, which is especially important when using a laptop / notebook, PDA, smartphone or public computer.
And use one one or more of these or the following software and web-based services for anonymous searches or Web surfing, to prevent profiling and the resulting risk of misuse or theft of your private data.
Then, use one of the two options I recommend for virtually worry-free computing and sufficiently secure, private browsing.
Or at least use antimalware and antiadware to help keep your data private. And download updates for them often.
Note: As I said in section 2, using those software programs and updates isn't necessary if you choose one of the options I recommend.
RoboForm2Go (formerly Pass2Go) (stores personal form and login data on an encrypted USB key or dongle, a secure thumb drive - defeats phishing sites and key loggers)
Portable Privacy Machine (based on QEMU emulator - includes Firefox, PrivacyBar, NoScript Extension, Thunderbird, Enigmail GPG and a persistent home directory)
The latest version of Firefox or better yet Portable Firefox running in Sandboxie with its cache on an encrypted removable medium and with NoScript, CookieSafe, Adblock Plus, Adblock Updater and either Stealther or PrivacyBar extensions for private browsing, or xB Browser (formerly Torpark), FoxTor or OperaTor for anonymous browsing. skip
Safe And Secure Surfing With Firefox
(how to change the default settings for cookies and Javascript, change the default Clear Private Data rules, clear private data - not secure - and install the Adblock Plus, Adblock Filterset.G Updater, NoScript, FlashBlock, CookieSafe, RefControl and User Agent Switcher extensions)
Sandboxie (version 2.64 does not support Windows Vista - only the newer beta versions support Vista)
OperaTor (a free combination of Opera web browser, Tor anonymity network and Privoxy content filter)
xB Browser (formerly Torpark) (a free, fully configured combination of Portable Firefox and Tor anonymizer for Windows - GNU/Linux and Mac OS versions being developed)
Software for U3 Smart Drives (the discontinued U3 platform replaced by Microsoft's StartKey lets you run applications on any PC without leaving data on the host machine) skip
Note: U3-based products will be available until the second half of 2008, when SanDisk will roll out the new smart drives. For an alternative, try MojoPac.
System Restore and now also Shadow Copy, or Previous Versions, in Windows Vista occasionally take snapshots of your system at different times and save not only them, but also copies of your private files, as Restore Points in hidden folders which are located on each partition and hard drive.
C:\System Volume Information\ in Windows Vista and XP
C:\_Restore\ in Windows Me
WARNING: Leaving System Restore enabled saves viruses and other malware your antivirus software has gotten rid of, which will reinfect your system when taken back to an infected Restore Point.
It also saves system files corrupted by some other cause, which when restored, may mess up or disable your system.
And it leaves your private data accessible to prying eyes by allowing others to easily restore and view them, including all the files you've deleted and even the ones you've securely erased.
You could just erase the Restore Points without disabling System Restore, but that would leave your private data vulnerable if Windows were to create any more Restore Points between erasing sessions.
I strongly recommend saving an image of your clean-installed Windows partition instead, with one of these disk imagers. skip
(other free erasers / wipers / shredders that claim to meet or exceed Gutmann, U.S. Department of Defense (DOD) and / or National Security Agency (NSA) standards)
Log into your admin account (for security, you should be reading this in a Limited User account), close all running programs and services and install Eraser or the Eraser plugin. skip
SmartClose (free - closes all running programs and services, except protected services - can also restart them with a system snapshot)
If you have Windows Me or XP, either load it in Safe Mode (press the F5 button repeatedly when starting or restarting your computer) and log in to your Administrator account (when I tried this method, two files were left that can't be erased)...
...or set the BIOS to boot from your CD drive (here's how), then put BartPE or better yet Ultimate Boot CD for Windows with the Eraser or Drive Eraser plugin in your CD drive and restart.
If you have both Windows 95, 98 or Me and XP installed on FAT partitions, install Eraser in your nonXP Windows.
Click on each _Restore (Windows Me) or System Volume Information (Windows XP) folder to view its contents.
Press Ctrl and A to select all the contents.
Right-click on them, select Erase and click OK to erase them.
Other Options
If you're not afraid of using the command line, try one of these options.
To set up for one of them, start or restart your computer, set your BIOS to boot from the floppy drive first, or if you don't have a floppy drive, your CD drive, and save your BIOS settings.
Now choose one of the following options to get you to the command prompt.
Put a SimplyMEPIS (my favorite GNU/Linux distro) or Knoppix Live CD or DVD in your CD or DVD drive or a Live USB in your USB port, restart your computer and after the Live distro loads, use Wipe to erase your restore points.
I'm not sure whose Wipe program SimplyMEPIS and Knoppix come with, so here are the instructions for both, just in case the instructions for one of them don't work.
If you have Windows Me, put your emergency recovery disk in your floppy drive and restart your computer.
If you have Windows XP, put your Windows XP CD in your CD drive, or if your CD doesn't have the Recovery Console, either put a Setup boot disk in your floppy drive, or if you don't have a floppy drive, put BartPE with the EZBoot plugin or better yet Ultimate Boot CD for Windows in your CD drive. Restart and press any key when indicated, to load Windows Setup. Then press R for the Repair option to load the Recovery Console / command prompt. skip
Now complete the following steps to securely erase your restore points from the command line.
Caution: Eraser Launcher (eraserl.exe) does not ask for a confirmation before erasing your data.
At the command prompt (a:\> or c:\>), navigate to the folder Eraser is in using the cd FOLDER NAME command.
a. I type e: and press Enter or Return (I have Eraser on a different partition than the one Windows is on);
b. I type cd eraser and press Enter or Return to open the Eraser folder;
If Eraser is installed in the Program Files folder on your computer...
a. type cd program files or if that doesn't work, cd progra~1
(always the first 6 letters of the folder's name plus the tilde or squiggly line and the number 1 when a folder name consists of two words)
b. Press Enter or Return to open the Program Files folder.
c. Then type cd eraser (or whatever name you gave Eraser's folder) and press Enter or Return to open the Eraser folder.
Now enter the following command for each partition or hard disk drive:
For example:
eraserl -folder "c:\system volume information" -subfolders -keepfolder -method DoD
(eraserl is not a typing error - make sure you include the l - DoD is 7 passes, DoD_E is 3 passes - for a list of available parameters, type eraserl at the command prompt and press enter)
If you're familiar with and prefer typing MS-DOS's abreviated names for folders with names that contain spaces between two or more words, use the eraserd command instead.
In Windows Me, be sure to also click Start > Run, enter msconfig, select the Startup tab and disable *statemgr from loading. Then restart your computer.
WARNING: The virtual memory file (called a swap file - WIN386.swp - in Windows 95, 98 and Me, and a page or paging file - pagefile.sys - in Windows 2000 and XP) can contain sensitive private data, such as passswords, etc.
To protect that data, either encrypt your swap or page file with CryptoSwap Guerilla (not recommended! least secure - Microsoft recommends never encrypting individual files), or by encrypting your Windows partition (more secure) or better yet, your whole hard disk drive (even more secure), or, if you have 1GB of RAM (Random Access Memory) or more, securely erase it, then disable virtual memory (most secure).
Note: If you don't use Photoshop, Adobe, 3D games, or other memory-intensive programs, 512MB of RAM may be enough to prevent popup warnings and crashes, but I strongly recommend at least 1GB to be safe.
The swap or page file is inaccessible while Windows is running, but it can be deleted at shutdown (Windows 2000 and XP) or reboot / restart (Windows 95, 98 and Me) or it can be deleted or securely erased from either the DOS or command prompt, BartPE or better yet Ultimate Boot CD for Windows with the Eraser plugin or Drive Eraser plugin, or a GNU/Linux Live CD or DVD.
WARNING: ''There are applications that claim to overwrite swap file contents while Windows is running. They are usually trying to accomplish this by allocating huge amounts of memory and hoping that the operating system will write it to the disk (overwriting previous data).''
''Doing this may even prove to decrease security instead of increasing it - instead of flushing the memory allocated by the overwriting program to the swap file, Windows may as well decide to save the memory allocated by some other application to the disk, possibly causing sensitive data that otherwise would have remained in the memory to end up on your drive.''
''And even if the user is real lucky and everything goes as planned, the data currently allocated in the swap file still cannot (and will not) be accessed.'' - Heidi Computers Ltd.
WARNING: You can set Windows 2000 and XP to clear (delete or zero out) the page file at shutdown or reboot / restart, but this does not securely erase it.
Note: Setting Windows to clear the page file at shutdown or reboot / restart will cause Windows XP to take longer to shut down; long enough that you may think shutdown has hung. It'll also clear the hibernation file at shutdown, when hibernation is disabled on a portable computer.
To set it in Eraser, start Eraser, or if it's already running, make sure its window is selected by clicking on its border. Then press Ctrl and P to show the general settings. Now click on the box next to ''Enable clearing of page file (swap) at shutdown'' to put a check in it, and select OK.
To set it in XP-AntiSpy (not recommended), start XP-AntiSpy, and under ''Miscellaneous Settings,'' check ''Clear pagefile at shutdown.''
To securely erase the page file at shutdown or reboot / restart, click on Scheduler in Eraser and create a task for it. When creating the task, select the Schedule tab in Task Properties, and select Reboot (the last option on the list).
WARNING: On an unencrypted Windows partition, putting your computer on hibernation mode, a temporary shutdown feature in Windows that's a deeper version of sleep than standby mode, is a security risk, even if you encrypt private files, because it saves all the contents of your PC's memory, which might contain plaintext of encrypted files, onto your hard drive, which are then easily accessible to prying eyes.
So if you must put your computer on hibernation mode, be sure to encrypt your Windows partition (least secure) or your whole hard drive (fairly secure).
Otherwise, find hiberfil.sys, a hidden system file on each partition that Windows saves your data in before going into hibernation mode. Right-click on it and select Erase. Eraser will then securely erase the hibernation file. Then disable hibernation.
How to Disable Hibernation Mode in Windows XP
Click Start, click Run, type cmd and then click OK.
At the command prompt, type the following command, and then press Enter:
WARNING: Setting your browser, especially Internet Explorer, to save your usernames, passwords, web addresses and form entries, leaves them vulnerable to those determined to view them.
WARNING: Saving passwords to e-mail, medical, banking and other commercial sites in your browser's password manager leaves not only your passwords vulnerable to theft, but also your money and private data. skip
Internet Explorer's AutoComplete data is stored in Windows' registry files, without which Windows can't function. So if you've saved private data in Internet Explorer, you have two options. You can delete their registry keys, but that leaves your private data available for easy recovery and viewing. I recommend the safer option.
''If you need to wipe (not just delete) registry keys, I only know of one way to do it: Have autoexec.bat wipe your entire system.dat & user.dat files on start-up, and replace them from known clean backups. (Remember to update the backups when you install or remove applications!)'' - Steve K
Enter RegBack1 and RegBack2, ''two sets of batch files, one with the file-wiper Scorch.com (fast) and another set with Eraserd.exe (slower...but more efficient) both of which will back up your registry to a folder;...''
''...and then upon a reboot of the computer, they run DOS commands from the Autoexec.bat at startup to erase the contents of your static swap-file, wipe the old registry files, and restore a clean registry to the system from previously sanitised files in their registry backup folder. They clean up your system before Windows even loads.''
''This gets rid of extraneous reg keys from temporary software installations, nullif[ie]s pesky run commands from trojans and virii, and eliminate[s] web-surfing tracks and all other information relating to your usage of the computer; everything that was logged into the registry since the last time the files [were] run.''
''In addition, Regback2 will destroy all the cookies, history lists and 'index.dat' files in the Windows dir[ectory]; or any other self-replicating files you may find that log your personal usage statistics.'' - The SCD Team
Encrypt your Windows partition (fairly secure) or your whole hard drive (more secure), or delete your AutoComplete data with Internet Explorer, an alternative browser or one of the following free software and your MRU (most recently used) lists for Windows Explorer, Internet Explorer and third-party applications with Spybot, Ad-Aware or MRU-Blaster.
Back up your sanitized registry.
Erase your swap or page file (Windows recreates it on startup) and system.dat and user.dat files and restore your sanitized registry with RegBack1 or RegBack2 (I recommend RegBack2).
Disable AutoComplete in Internet Explorer, or if you use an alternative browser, its private data-saving features. And save your usernames and passwords in RoboForm or RoboForm2Go (formerly Pass2Go) (free), a very convenient and secure username and password manager with automatic form entry and antiphishing / antikeylogger technology. Your private data are saved in strongly encrypted files.
If you use Mac OS X, extend Keychain's abilities with 1Passwd. (limited free and full commercial password manager and autofill extension for Safari, Camino, Firefox, Flock, OmniWeb 5.5, DEVONagent 2.0 and NetNewsWire browsers - based on Mac OS X Keychain - better than Keychain, RoboForm and Safari's AutoFill - the only Mac password manager with antiphishing / antikeylogger technology)
Switch to one of these alternative browsers that leave your sensitive data significantly more secure and private than Internet Explorer does.
Take Charge of What Web Sites Know About You (how to clear or selectively delete cookies, dowload history, cache, passwords and form fillers in Internet Explorer, Firefox and Opera - not secure)
WARNING: Some of these data cleaners may not securely erase your data, only delete it or use zeros (not as secure as using random data with a complex algorithm) So if you have any sensitive data you need to securely erase, I strongly recommend using Eraser or one of these other free secure-erasing software instead.
IE Privacy Keeper (claims to be able to erase index.dat files without restarting Windows...don't believe it - you can set it to erase your surfing history after closing your Internet Explorer or Firefox browser - a take-along version is available for use on public PCs and in limited-access accounts)
If your browser has ever saved sessions / tabs when it crashed, you've set it to save them, or have installed an extension or plugin that saves them, encrypt them if you want to keep them, or erase them, then disable or uninstall the session / tabs saver.
(if startup option/preference is or was set to ''Show my windows and tabs from last time.'')
In Firefox's profile folder:
sessionstore.js
sessionstore.js.moztmp
Other private files you should also encrypt or erase if you've downloaded or read private data in Firefox:
Encrypt Registry or Erase, Then Disable MRUs (includes Run and Open/Save entries, links to recently opened files and URLs or addresses of web sites and pages typed in Internet Explorer's address bar) skip
WARNING: Windows and many software programs keep track of your recent activities in very revealing logs called MRU (most recently used) lists, which even include shortcuts to recently viewed or edited files, mainly to make your work experience quicker and more convenient.
As with AutoComplete data, MRU lists are stored in the Windows Registry files, and erasing those files makes Windows unusable, so you have two options. You can delete the MRUs' registry keys, but that leaves your private data available for easy recovery and viewing.
I recommend the safer option: erase the registry files and restore sanitized backup copies with RegBack1 or RegBack2, a set of batch files. (Remember to update your registry backup when you install or remove applications!)
Encrypt your Windows partition (fairly secure) or your whole hard drive (more secure), or delete your AutoComplete data with Internet Explorer, an alternative browser or one of these free cleaners and your MRU (most recently used) lists for Windows Explorer, Internet Explorer and third-party applications with Spybot, Ad-Aware or MRU-Blaster.
Back up your sanitized registry.
Erase your swap or page file (Windows recreates it on startup) and system.dat and user.dat files and restore your sanitized registry with RegBack1 or RegBack2 (I recommend RegBack2).
Disable MRU lists with security templates, group policy or the following registry hack. And check your software programs for such a feature or setting. If they don't have one, and you don't have security templates or group policy, find and remove their MRU lists often. skip
How To Clear (Delete) MRU Lists (clearing MRU lists data without erasing after sanitized backup not recommended - data can be easily recovered with available software)
Take Charge of What Web Sites Know About You (how to clear or selectively delete cookies, dowload history, cache, passwords and form fillers in Internet Explorer, Firefox, Opera - not secure)
To selectively delete typed URLs in the registry (not recommended! editing the registry could corrupt or disable Windows and deleted entries can easily be recovered):
Select Start > Run and enter regedit
Go to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs
Delete the entries for the URLs you want to get rid of.
To selectively delete visited URLs in Internet Explorer (not secure):
Click on the History toolbar button
Delete the entries for the URLs you want to get rid of.
Before deleting MRU registry keys or doing the registry hack to stop Windows from logging your recent activities, a word of warning...
WARNING: Carelessness and honest mistakes in editing the registry can mess up, if not completely disable, your system. So pay attention and back up the registry before editing it, and if your data is on the same partition as Windows (not recommended), back up your data too.
Note:
The ''UserAssist'' registry key contains the list of programs that you recently used.
The ''TypedURLs'' registry key contains the list of URLs (addresses of web sites and pages) that you typed in Internet Explorer's Address bar.
Visited sites' URLs are stored in Index.dat files.
The Registry Hack to Disable Windows' MRU Lists:
At Start > Run, enter regedit and click OK.
Open HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\Comdlg32.
Create a subkey and name it NoFileMru, of type REG_DWORD, if it isn't listed.
Set the DWORD value to 1.
Open HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\Explorer
Create a subkey and name it NoRecentDocsMenu, of type REG_DWORD, if it isn't listed.
Set the DWORD value to 1. (You can set it instead to clear the Recent Documents folder at shutdown if you wish (ClearRecentDocsOnExit), but it won't be secure.)
WARNING: Like cookies, PIEs (persistent identification elements), also known as local shared objects (LOS) and Flash cookies stored by Adobe's Flash Player when viewing a Flash file, collect ''data that may include not only user-tracking information but any personal data that [you enter] in any Flash-based application, whether it be stand-alone or Web-based.'' - Wikipedia
They also may be programmed to restore deleted and even securely erased cookies.
Caution: Clearing all of my PIEs with Adobe's Web-based Settings Manager left two PIEs behind. I recommend either encrypting your Windows partition (fairly secure) or your whole hard drive (more secure) or erasing the contents of the #SharedObject folder instead.
WARNING: Setting your instant messenger to log, save, or archive your sensitive, private chat conversations, leaves them vulnerable to those determined to view them, even if saved in encrypted form, if a key logger is installed on your system. And even if you don't log them, a key logger can.
To be safe, never set your instant messenger to log your sensitive, private conversations. If your instant messenger is set by default to log them, and it allows you to disable that function, disable it. Or, if you must log them, save them in encrypted form with strong encryption.
Otherwise, if you have logged your private conversations, be sure to erase them with secure erasing / wiping shredding software. And check often for spyware, including software and hardware key loggers, which save and transmit your conversations.
Detect and remove software key loggers and other spyware with SpyCop (commercial - highly recommended). Or, if you want to do it for free, try using System Safety Monitor and / or Process Guard (not recommended).
WARNING: ''Word documents contain hidden information that can provide clues to your identity and the identity of people to whom you e-mailed a file using Outlook. Word 97 goes so far as to retain logs of the last ten people who revised your document, often with easily extractable e-mail addresses. Unrevised versions of your text may also be hidden in your files.'' - PC Magazine
WARNING: ''Microsoft Word's Find Fast scans and indexes every file it can read on your hard drive! If you have ever had problems with scandisk or defrag restarting, it's because Find Fast was indexing your hard drive in the background. It loads every time you start your computer up and is constantly scanning and indexing your hard drive.'' - The Riddler
WARNING: Unless I'm mistaken, if there's a key logger on your computer, enabling Auto-Complete in Adobe Reader before filling an encrypted PDF form to save your form entries leaves your private data vulnerable to spyware and prying eyes.
WARNING: If you installed Google Toolbar (in the current version) or Yahoo! Toolbar (in older versions) when installing Adobe Reader, either by accident or by choice, the searches you make in the toolbar are saved and if you enabling AutoFill before filling a form, your private data are too, so if they're unencrypted or there's a key logger on your system, they're also vulnerable.
To appreciate the privacy risks created by browser toolbars, seriously consider this comment.
During Adobe Reader 8's installation process in Windows 2000, Windows XP and probably also Windows Vista, the downloader gives the option to download and install Google Toolbar in Internet Explorer 6 or 7. The option is checked by default. If unchecked, it supposedly will only download Adobe Reader 8.
And when downloading Adobe 6 or 7 in , you may or may not have been given the option to download Yahoo! Toolbar, which in some, if not all, cases was downloaded anyway. Then during installation, you may or may not have been asked if you wanted to install Yahoo Toolbar.
''Adobe was once a trusted resource. They are not now. It is sad to see them join the leagues of companies that need to be handled with care.'' - RMorrisson in PCMag.com forums
If you want to keep using your Google or Yahoo! toolbar, I recommend encrypting its search index and erasing your private search keywords after your search. Otherwise I strongly recommend securely erasing the search history saved by Google's or Yahoo!'s toolbar and uninstalling the toolbar.
If you've saved your Adobe Form entries in Adobe Reader and want to keep them for future form entry, I recommend encrypting them, preferrably on a removable medium, to keep them private. Otherwise, securely erase them and disable Auto-Complete in Adobe Reader.
The Adobe Reader folder in the following steps instructions is in this location.
In Windows Vista:
C:\Users\UN\AppData\Roaming\
In Windows XP:
C:\Documents and Settings\UN\Application Data\
The Google Toolbar and Yahoo! Toolbar folders are in this location.
In Windows Vista:
C:\Users\UN\AppData\Local\
In Windows XP:
C:\Documents and Settings\UN\Local Settings\Application Data\
Left-click on My Computer and go to the following location or locations:
Adobe\Reader\VN
(older versions of Flash Player are located in the Macromedia folder instead of the Adobe folder - replace VN with Adobe Reader's version number: 8.0, 7.0 or 6.0)
Right-click on and select Erase, then Yes.
If you also have Google Toolbar, go to the Google folder, right-click on Autofill.dat and select Erase, then Yes.
If you also have Yahoo! Toolbar, go to the Yahoo folder, right-click on and select Erase, then Yes.
C:\Documents and Settings\UN\Local Settings\Application Data\Google\Autofill.dat
Note: I don't yet know where Adobe Reader stores form entries. When I do, I'll give instructions on how to securely erase them. skip
WARNING: '' Nearly all software applications create helpful work-in-progress or backup files during normal operation. These files contain your private data...'' - Jiiva, Inc. - Autosave backups are made automatically by Microsoft Word, Excel, and other programs in case of a crash.
''Eraser will wipe the current file 100% but because MsWord and unerase type programs keep copies of any deleted file or in the case of MsWord a backup while you are editing, erasing the current document will only erase the current document. Backups are still scattered all over the drive.'' - Heidi Computers Ltd.
''Backups are a wonderful source of discoverable information...''
''Backups can take many forms. A computer user may backup his data to tapes or other devices. A thorough subpoena requests all backups of every kind and nature. There may be daily, weekly and even archival backups that are often stored off-site. Make sure that you clarify what the backup routine is and make sure that you get all of the backups.''
''Backups can also take the form of individual file copies. Many programs routinely and automatically create copies of data files. They often get automatically assigned extensions like 'bak.' ''
''For example, I might call this file 'column.doc' and WordPerfect might automatically create a file called 'column.bak' as a backup in case this file gets corrupted. These 'bak' files can hold wonderful tidbits and may be unencrypted although the file, in its final form, is encrypted and therefore unreadable.'' - Mark Grossman | skip
RAID (Redundant Array of Independent Disks), recovery software like GoBack and unerase software that take over and protect Windows' Recycle Bin like Norton Unerase, also save backups.
Securely erase backups you no longer need, that you or your software have saved on stationary and removable media.
Encrypt backups you need, if you haven't already, and put them in a secure place, or better yet, in two separate buildings.
Disable your software's backup autosaving feature, if they have one.
Encrypt your RAID drive or drives or consider disabling RAID, if you have it and it's enabled.
Securely erase your unerase software's recycle bin folder, then either uninstall your unerase software or disable its recycle bin protection.
Note: If you have Norton Unerase installed and Norton Protected Recycle Bin enabled, Eraser 5.8 and later versions erase Norton unerase files when erasing the recycle bin. skip
WARNING: If your hard drive or drives and inserted or connected removable media contain private data, the index that a desktop search software program creates after scanning everything on your accessible storage media, contains copies of your private data, and makes them easy to find after a quick search.
And the index that web-based, personalized search services create as you provide personal preferences and other personal information, search for keywords and click on links, contains a history of that data.
''Google maintains a lifetime cookie that expires in 2038, and records the user's IP address. But more recently it has begun to integrate services which record the user's personal search history, email, shopping habits, and social contacts.''
''If search history, e-mail and registration information were combined, a company could see intimate details about a person's health, sex life, religion, financial status and buying preferences.'' - Elinor Mills, CNET news.com
''After first promising not to tie its [Gmail] email service to its search service, Google went ahead and opted its users in anyway. It's all part of CEO Eric Schmidt's promise to create a 'Google that knows more about you.' '' - Andrew Orlowski, theregister.co.uk
''It's only a matter of time before...attorneys realize that a person's entire search history is available for the asking, and the subpoenas begin to fly. This could happen in civil lawsuits or criminal prosecutions.''
''If the Electronic Communications Privacy Act does not apply, all that's required is a subpoena from a prosecutor, and no prior approval from a judge is necessary. [''...in many cases you wouldn't even be notified in time to challenge it.'' - eff.org] One Harvard law professor calls the subpoena power 'akin to a blank check.' - Declan McCullagh, zdnet.com
''Don't install ANY toolbars. None. Not one. I don't care how 'convenient' they are, if you care at all about privacy, toolbars are forbidden.''
''If you're one of those folks complaining about privacy issues and you have the Google toolbar installed, or the Alexa toolbar installed, you are a hypocrite. ;) You've given up a portion of your privacy willingly for the sake of convenience.'' - Dean Bloomfield, a.k.a. DigitalGhost
If you have private data on your hard drive, I strongly recommend either encrypting the search index, the partition it's on or your whole hard drive (fairly secure), disable indexing of private folders and files and certain websites (more secure), or securely erasing the search index and uninstalling your desktop search software (most secure).
If you also don't want your Web searches, site visits and possibly also your email to be indexed, I strongly recommend deleting its search index in your personalized search account and not using either its personalized search or its email service, or both, any more.
There are many different desktop search software and personalized search services, so I'll only list erasing instructions for Google's and Yahoo!'s search software and services here.
Check your desktop search's, personalized service's and / or search toolbar's help file or forum for indexing or autocomplete options and disable them, if enabled, or for the location of its search index or autocomplete data and securely erase it or them. skip
Securely erase search engine cookies either every time after closing your browser (fairly secure) or once and then, as part of Step 1: Secure Windows and Your Data, block them with your browser's cookie settings if you can, or with a separate cookie manager. skip
''The way serious people protect their web-searching privacy [and prevent profiling] is through anonymization.'' - Bruce Schneier on Security, schneier.com
WARNING: If your hard drive contains private data and you enable Google Desktop 3.0's optional ''Search Across Computers'' function that allows it to search for data stored on multiple computers simultaneously, its search index, which contains copies of your private data, gets stored on one of Google's servers for up to 30 days.
''EFF urges consumers not to use this feature, because it will make their personal data more vulnerable to subpoenas from the government and possibly private litigants, while providing a convenient one-stop-shop for hackers who've obtained a user's Google password.'' - eff.org
''If you use the Search Across Computers feature and don't configure Google Desktop very carefully - and most people won't - Google will have copies of your tax returns, love letters, business records, financial and medical files, and whatever other text-based documents the Desktop software can index.''
''The government could then demand these personal files with only a subpoena rather than the search warrant it would need to seize the same things from your home or business, and in many cases you wouldn't even be notified in time to challenge it.''
''Other litigants - your spouse, your business partners or rivals, whoever - could also try to cut out the middleman (you) and subpoena Google for your files.'' - EFF Staff Attorney Kevin Bankston, eff.org
WARNING: ''Google does not automatically encrypt the index or data files it stores on its servers. This is an option that has to be turned on by a savvy user. In fact, Google discourages the privacy-protecting choice to encrypt your data by warning that enabling this feature will 'reduce the performance of Google Desktop.' '' - unknown
I strongly recommend either enabling encryption in Google Desktop, leaving ''Search Across Computers'' disabled, or disabling it if you've enabled it.
The search index is located in the following directory. Securely erase it or create a task for it in Eraser.
C:\Documents and Settings\UN\Local Settings\Application Data\Google\Google Desktop Search
Replace UN with your user name. This will erase the whole index. Uninstalling and reinstalling Google Desktop creates a new index. (not recommended)
Set the directories, chat logs, etc. that you don't want your desktop search program to index. Especially, uncheck the box next to ''Secure pages (HTTPS) in web history.''
''To turn off Shared Gadget Settings, from the 'Google Account Features' tab, please uncheck the box next to: 'Access my gadget content and settings like To Do lists, Scratch Pad notes, favorite stocks, and more from any computer.' ''
''To turn off Search Across Computers, from the 'Google Account Features' tab, please uncheck the box next to: 'Index and search my documents and viewed web pages from across all my computers,' under the Google Desktop Preferences 'Google Account Features.' '' - Google.com
''As with the Personalized Homepage, the Google Toolbar stores your history, but it doesn't track you like the Personalized Homepage does.'' - unknown
''In essence what Google has done has made it such that if you sign in to Gmail, you are also agreeing to have all your searches tracked on Google. You don't have a choice about this one.'' - DeWitt Clinton, blog.unto.net
''Numerous issues come to mind: how do they track my search terms and links I click on? How is this information matched with my Gmail, Calendar and other (future) Google services?''
''Do they sell this data to marketers? To ChoicePoint? To private investigators? What legal constraints exist to prevent law enforcement from getting this data? Do they need a warrant? A supeona? These questions remain not only unanswered, but not properly explored.'' - michaelzimmer.org
''When you create a Google Account, you automatically gain access to a number of Google services, including Personalized Search, Google Groups, Google Alerts, and your personalized homepage.''
''If you'd like to delete the Personalized Search service from your Google Account, click on the 'My Account' link from the Google homepage and choose 'Delete Personalized Search' from the menu on the left. Make sure you're signed in to your Google Account to see the 'My Account' link.'' - Google.com
WARNING: To load pages faster, Web acceleration software programs keep copies of viewed web pages in a cache on your hard drive and precache some other popular pages.
Some of these may be copies of secure web pages visited when ordering products or services online, which may contain contact and credit card information and possibly other private data, such as the person's social security number.
If you use a Web accelerator, either securely encrypt its cache, its partition or the whole hard drive (fairly secure), or securely erase its cache and then uninstall the Web accelerator (more secure). skip
Educate yourself about safe computing and Internet habits and practices. If you don't, the rest of these steps won't do you much good, to keep your data private.
CAUTION: Reading the following steps carelessly could cause you to disable your system and / or lose data you want to keep. So be sure to read them carefully.
If you try to find your index.dat files by looking in your directory with the file search, My Computer, Windows Explorer or the command prompt, even when you have ''Show hidden files and folders'' checked and ''Hide protected operating system files'' unchecked, you won't find any of them in Windows 95 or 98 and some or most of them in Windows XP because Microsoft has hidden them very well. To see where they're located, run Spider (free), click on Options, select Complete drive, click on Accept, click the magnifying glass (Start Search), then click on the printer icon to print out the results.
WARNING: ''If you defragment a drive first and then do a freespace erase after, you may find traces of an erased file because the original file is potentially moved all over the disk. The current copy is erased but a forensic scan of the drive may locate parts of the file where it was being moved around during the defragmentation ... In addition to never defragmenting your drive before erasing you should run chkdsk / scandisk to recover any lost clusters and erase those first.'' - Heidi Computers Ltd.
So don't defragment your hard drive before erasing your data. Erase the files and especially the free space first. And don't empty your recycle bin. Securely erase it's contents instead with erasing software. skip
Note: I have the page file and temporary Internet files, and my software programs on their own partitions separate from the Windows XP Pro operating system to stop certain viruses from spreading. I may be misinformed, but I believe it does.
To do the same on a new computer or new hard disk, create partitions with FDISK. If you've already installed software and saved files on your hard drive, be sure to create partitions with one of these partitioning programs instead. Fdisk removes all the data!
If none of your private files were locked when Windows is running, like index.dat files are, which makes Eraser unable to erase them, or eraserl, the command line version of Eraser, had the feature the GUI version has that, when enabled, erases locked files after restart...
...the easiest way to securely erase your browsing history and other private data in Windows 2000, XP Pro or Vista with Eraser would be to create a batch file that executes a list of eraserl or eraserd commands telling Eraser to erase the contents of the folders containing your private data, save it to your desktop and click on it when you want to log off or shut down your computer.
Note: To do that you would need to end the script with one of the following commands:
Logoff: shutdown -l
Shutdown: shutdown -s (it gives you 30 seconds to save your work and then shuts down - for more time, add the -t parameter plus the number of seconds - for example: shutdown -s -t 120 for two minutes)
WARNING: Forgetting to click on the batch file to log off or shut down and doing so the usual way, leaves private data vulnerable.
Since there is that risk and some of your private files are locked and can't be erased when Windows is running, the best and most secure way is to have the batch file run automatically at logoff or shutdown.
WARNING: Including commands in the batch file to run a defragmenter like DIRMS before erasing files and free or empty space, leaves parts of private data behind, as explained earlier.
If you include a command or commands to run a defragmenter, make sure you put the command(s) after or below the eraserl commands for files and empty space.
Note: Erasing empty space can take several hours, so if you log off or shut down your computer more than once a day, I recommend putting the empty space and defragmenter commands in a separate batch file and running it at your last logoff or shutdown of the day.
You can also save the batch file anywhere on your hard drive and set Group Policy to run it when logging off or shutting down, or use Xecutor (free for noncommercial use).
WARNING: Xecutor's default setting for the Shutdown Position feature, Mid, keeps eraserd or eraserl from erasing locked, private files. I recommend setting it to Last, which runs your script after closing all the background services first.
If you have an earlier version of Windows, try Karen's Show Stopper. (free - requires Visual Basic Runtime v6.0)
Another way is to put it in the Shutdown folder created with HSLAB Shutdown Folder, the commercial version.
Note: HSLAB Shutdown Folder Lite, the free version, is unable to run the eraserl batch file at shutdown. It shuts down just as the batch file starts to run. With HSLAB Shutdown Folder Lite, HSLAB Tech Support said you can only run scripts with short execution time, like deleting or renaming a file or folder.
WARNING: Putting the batch file in the Startup folder leaves your private data vulnerable until the next time your computer is started up. I strongly recommend running it on shutdown instead.
WARNING: Eraser Launcher (eraserl.exe) does not ask for a confirmation before erasing your data.
Note: Eraser has a scheduler that erases data on reboot, or startup, but besides leaving your data vulnerable, deleting tasks you no longer want may not remove them from the registry, and they'll run again on the next startup.
If in spite of those facts you choose to use the scheduler anyway and deleted tasks remain in the registry, use Startup Control Panel (free) to disable or remove them.
''In IE7's Protected Mode - which is the default in other than the Trusted security zone - the IE process runs with Low rights, even if the logged-in user is an administrator...''
''Since a Low process lacks the privilege to write to most locations in the file and registry, the File & Registry Compat Shim virtualizes some common file system folders and registry keys.''
''Those file and registry locations are redirected to per-user Low-integrity virtual locations where they can't affect the real versions. The virtualized file system is in the Temporary Internet Files (TIF) - the same general place IE caches web files.'' -
''Application Data'' is now in: C:\Users\UN\AppData\Roaming
''Local Settings'' is now in: C:\Users\UN\AppData\Local
Create tasks for the following folders.
(replace UN with your user name)
C:\Windows\Temp
In C:\ProgramData\Microsoft\Search\Data
Applications\Windows
Temp
In C:\Users\UN\Microsoft\Search\Data
Applications\Windows
Temp
In C:\Users\UN\Local Settings
Temp
Temp\Low
History\History.IE5
History\History.IE5\MSHist01...
History\Low\History.IE5
History\Low\History.IE5\MSHist01...
Temporary Internet Files\Content.IE5
Temporary Internet Files\Low\Content.IE5
In C:\Users\UN\AppData\Local
Temp
Temp\Low
In C:\Users\UN\AppData\Local\Microsoft\Windows
History\History.IE5
History\History.IE5\MSHist01...
History\Low\History.IE5
History\Low\History.IE5\MSHist01...
Temporary Internet Files\Content.IE5
Temporary Internet Files\Low\Content.IE5
In C:\Users\UN\AppData\Roaming\Microsoft
Internet Explorer\UserData
Internet Explorer\UserData\Low
Windows\Cookies
Windows\Cookies\Low
Windows\Recent
Windows\Recent\Low
C:\Users\UN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
Local Settings\Temporary Internet Files\Content.IE5
If you've created one or more additional accounts with administrator or Limited User access, create tasks for them as well.
Note: If you only have a Limited User account (you don't have administrative access), you can't erase the contents of the folders listed above in someone else's account. But you can erase them in your own account.
After Moving Your Temporary Internet Files Folder skip
After erasing the contents of the Temporary Internet Files (TIF) folder in its default location, change the folder's location in the TIF task to its new location. For example:
D:\Temporary Internet Files\Content.IE5\
Or if you've created more than one account and a new folder for each account:
D:\NAME\Temporary Internet Files\Content.IE5\
(Replace D with the drive letter you'ved moved the folder to, if different, and NAME with the name you've chosen for the new folder.)
Again, create a task for each user account you've created.
The following folders are also likely to contain private data. Just to make sure you've gotten everything, you may want to create tasks for them as well.
Some of them may contain no data at all, and some may only need to be erased once, after which - if you find that to be true - you may want to delete those tasks.
Windows Vista
In C:\Users\Administrator
In C:\Users\Default User
Windows XP
In C:\Documents and Settings\Administrator
In C:\Documents and Settings\Default User
And in C:\WINDOWS(or WINNT)\
system32\config\systemprofile:
Recent
Cookies
Local Settings\Temp
Local Settings\History\History.IE5
Local Settings\Temporary Internet Files\Content.IE5
Windows Vista
In C:\Users\LocalService
In C:\Users\NetworkService
Windows XP
In C:\Documents and Settings\LocalService
And in C:\Documents and Settings\NetworkService:
Cookies
Local Settings\Temp
Local Settings\History\History.IE5
Local Settings\Temporary Internet Files\Content.IE5
WARNING: Firefox 2.0 and later versions have an option called ''Clear Private Data,'' but it only deletes - not securely erases - your browsing history. It can be easily recovered. If you use Firefox, securely erase your browsing history by creating tasks for the following cache folder and cookie file.
(Firefox's cache, cookies, passwords and form data may be stored in one or both of the following two locations - replace UN with your user name - replace NAME with the folder's name)
Windows Vista
In C:\Users\UN\AppData\Roaming\
Windows XP
In C:\Documents and Settings\UN\Application Data\
Mozilla\Firefox\Profiles\NAME.default:
Cache
cookies.txt
One or more of them may be in the following location.
Windows Vista
In C:\Users\UN\AppData\Local\
Windows XP
In C:\Documents and Settings\UN\Local Settings\Application Data\
WARNING: Opera has an option in the Tools menu called ''Delete private data'' and options in Tools > Preferences > Advanced > History called ''Clear''(addresses) and ''Empty now,''(cache) and in Tools > Preferences > Advanced > Cookies called ''Delete new cookies,'' but they only delete - not securely erase - your browsing history. It can be easily recovered.
If you use Opera, securely erase your browsing history by creating tasks for the following cache folder, cookie file, and if you've saved passwords and / or form data, the Wand file.
''If you chose to 'Use separate settings for each user' when installing Opera, all settings are kept separate for each user on systems that support this. In Windows 2000 and XP, this directory is:''
C:\Documents and Settings\UN\Application Data\Opera
In Windows Vista: C:\Users\UN\AppData\Roaming\Opera\
''If your system does not support multiple users or you chose to not install Opera with separate user settings, all files and directories are located in the profile directory, which is a sub-directory of your Opera installation directory.'' - Opera.com
''C:\Program Files\Opera\profile\''
If you don't know or remember which installation you chose, start Opera and select Help > About Opera to see where your profile folder is located.
Windows Vista
In C:\Users\UN\AppData\Roaming\
Windows XP
In C:\Documents and Settings\UN\Application Data\
Opera\Opera\profile:
Or in C:\Program Files\Opera\profile:
cache4
cookies4.dat
wand.dat (if you've saved a master password, you may also want to create a task for opcert6.dat)
WARNING: Because Outlook and Outlook Express are the e-mail programs used most, they're one of the three main targets of malicious code writers - Windows and Internet Explorer are the other two. So using them in Windows XP exposes your computer to viruses, worms and trojans designed specifically for these popular programs.
WARNING: Believe it or not, Outlook and Outlook Express's index files store more than just your sent and received e-mail. ''These databases are...creepy, and I strongly recommend you take [a look] at the files. Just from my outbox.dbx file I was able to view some of my old browsing history, bring up previously-visited websites in HTML format, and even read ancient e-mail from my Eudora client.'' - The Riddler
WARNING: Erasing your e-mail index files will erase all your e-mail and your address book. So make sure you back them up first, preferrably in encrypted form. Then store the backup in a safe place.
If you've used Outlook or Outlook Express and / or have chosen to use it in spite of the risks, create tasks for the following files (select File instead of Files on folder). Then, I strongly recommend erasing them often, after backing up your e-mail and address book.
To lessen security and privacy risks, I recommend using Mozilla Thunderbird as your e-mail program. If you use Thunderbird, create a task for the following files.
(remember to select File instead of Files on folder)
(replace UN with your user name, NAME with the name of the folder, and AN with the account name)
The more you do in Windows, the bigger your index.dat files become. Index.dat files grow bigger and bigger every time you use the programs they're related to, as more and more history of your activities is added to them.
But because they're in use when Windows is running and you're logged into a user account, Windows locks them, probably to maintain stability and prevent corruption. This keeps you from erasing them, so you need to erase them some other way. The following are some ways to do that.
Note: Only the index.dat files of the currently logged on user are locked when Windows is running.
So if you have one or more user accounts (you should create a Limited User account for secure online use) Eraser can - if you're logged on to an administrator account - erase all the index.dat files of a different user account than the one you're currently logged on to, without shutting down or rebooting.
It can also erase all the index.dat files in the numbered Content.IE5 subfolders of the currently logged on account. The only index.dat files it can't erase are the ones located in the main Content.IE5 folders - not their subfolders - of the currently logged on account (each Content.IE5 folder has one).
WARNING: Because the currently logged on user's index.dat files are locked when Windows is running, the claim made by software makers that their software is able to delete, clear or erase them when Windows is running is false, unless achieved by Microsoft's technique to delete - not securely erase - the contents of the files without erasing the files themselves.
Unless they're erased from a different user's account, at shutdown or when Windows isn't running, index.dat files won't even be deleted, let alone securely erased. So I strongly recommend securely erasing them with one of the following methods instead.
The easiest and most secure way to securely erase all the locked index.dat files in the user account you're logged into is to run a batch file at logoff or shutdown that executes a list of eraserl or eraserd commands telling Eraser to erase the contents of the folders containing index.dat files.
If you prefer, you may have the batch file erase individual index.dat files instead.
Caution: Eraser Launcher (eraserl.exe) does not ask for a confirmation before erasing your data. skip
One way to securely erase all the locked index.dat files in the user account you're logged into is to click on Scheduler in Eraser and create tasks to set Eraser to securely erase them on reboot, or restart. (their locations are listed below)
For each task, select the Schedule tab in Task Properties, and select Reboot (the last option on the list).
Windows Vista - Before or Without Moving Your Temporary Internet Files Folder skip
(replace UN with your user name)
In C:\Users\UN\Local Settings
In C:\Users\UN\AppData\Local\Microsoft\Windows
History\History.IE5\index.dat
History\History.IE5\MSHist01...\index.dat
History\Low\History.IE5\index.dat
History\Low\History.IE5\MSHist01...\index.dat
Temporary Internet Files\Content.IE5\index.dat
Temporary Internet Files\Low\Content.IE5\index.dat
C:\Users\UN\AppData\Local\Microsoft\Windows\
Temporary Internet Files\Virtualized
Windows XP - Before or Without Moving Your Temporary Internet Files Folder skip
(replace UN with your user name)
In C:\Documents and Settings\UN:
Cookies\Index.dat
Local Settings\History\History.IE5\Index.dat
Local Settings\History\History.IE5\MSHist01...\Index.dat
Local Settings\Temporary Internet Files\Content.IE5\Index.dat
After Moving Your Temporary Internet Files Folder skip
If you've chosen to create tasks for the index.dat files instead of their folders: After erasing the Temporary Internet Files (TIF)'s main index.dat file in its default location, change its location in the TIF task in Eraser to its new location. For example:
D:\Temporary Internet Files\Content.IE5\Index.dat
Or if you've created more than one account and a new folder for each account:
D:\NAME\Temporary Internet Files\Content.IE5\Index.dat
(Replace D with the drive letter you'ved moved the folder to, if different, and NAME with the name you've chosen for the new folder.)
The following index.dat files are also likely to contain private data. Just to make sure you've gotten everything, you may want to create tasks for them as well.
Some of them may contain no data at all, and some may only need to be erased once, after which - if you've found that to be true - you'll want to delete those tasks to avoid getting ''not found'' errors.
(replace UN with your user name)
Windows Vista
In C:\WINDOWS(or WINNT)\
system32\config\systemprofile
In C:\Users\Administrator
In C:\Users\Default User
In C:\Users\LocalService
In C:\Users\NetworkService:
History\History.IE5\index.dat
History\History.IE5\MSHist01...\index.dat
History\Low\History.IE5\index.dat
History\Low\History.IE5\MSHist01...\index.dat
Temporary Internet Files\Content.IE5\index.dat
Temporary Internet Files\Low\Content.IE5\index.dat
In C:\Users\UN\AppData\Roaming\Microsoft:
Internet Explorer\UserData\index.dat
Internet Explorer\UserData\Low\index.dat
Windows\Cookies\index.dat
Windows\Cookies\Low\index.dat
C:\Users\UN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\
Windows XP
In C:\WINDOWS(or WINNT)\
system32\config\systemprofile
In C:\Documents and Settings\Administrator
In C:\Documents and Settings\Default User
In C:\Documents and Settings\LocalService
In C:\Documents and Settings\NetworkService:
Cookies\index.dat
Local Settings\History\History.IE5\index.dat
Local Settings\History\History.IE5\MSHist01...\index.dat
Local Settings\Temporary Internet Files\Content.IE5\index.dat
Note: Some people believe the index.dat files for the currently logged on account aren't locked in Safe Mode, making it possible to erase them. But after testing that belief myself, Eraser gave me an error message saying it couldn't access the files because another process was using them. The following method solves that problem.
Start up Windows in Safe Mode (press the F5 button repeatedly when starting or restarting your computer) and log in to your main, and normally hidden, Administrator account (unless you've changed them, the default username is administrator and the password is blank).
Run all the tasks in Eraser every time after going online.
WARNING: If you forget to close the temporary account every time after running Eraser in it, that account will add a significant security vulnerability to your system, even with a strong password, but setting a strong password for it, if you plan on keeping it, certainly lessens the vulnerability it creates.
So if you use this method, either make sure you close the account every time after running Eraser or set a strong password for it.
Caution: Eraser Launcher (eraserl.exe) does not ask for a confirmation before erasing your data.
If you installed Eraser in C:\Program Files\Eraser, double-left-click (or single click, if you changed the setting) on My Computer > C: drive icon > Program Files > Eraser.
Press Ctrl+C or right-click on the eraserl.exe or eraserd.exe file and select Copy, go back two views or pages to C: drive (the view after clicking on the C: Drive icon) and press Ctrl+V or right-click on an empty space and paste the file.
Restart your computer and press the F8 key several times until a menu appears.
Select Command Prompt or Safe Mode with Command Prompt.
At the C prompt, type in the following command for each main folder containing index.dat files in that folder and its subfolders, or for each index.dat file (listed after these steps). For example:
Windows Vista
eraserl -folder "c:\users\UN\history" -subfolders -keepfolder -method DoD
If you're familiar with and prefer typing MS-DOS's abreviated names for folders with names that contain spaces between two or more words, use the eraserd command instead.
eraserd -folder c:\users\UN\history -passes 7
Windows XP
eraserl -folder "c:\documents and settings\UN\history" -subfolders -keepfolder -method DoD
Or with eraserd:
eraserd -folder c:\docume~1\UN\history -passes 7
For each index.dat file:
Windows Vista
eraserl -file "c:\users\UN\cookies\index.dat" -method DoD -queue -silent
If you're familiar with and prefer typing MS-DOS's abreviated names for folders with names that contain spaces between two or more words, use the eraserd command instead.
(eraserl and eraserd are not typing errors - make sure you include the l or d and replace UN with the user name of the administrator account: the first created account - DoD is 7 passes, DoD_E is 3 passes - optional parameters: queue tells eraserl to wait until previous instances have finished and silent keeps it from giving an error message when the file isn't found - for a list of available parameters, type eraserl or eraserd at the command prompt and press enter)
Note: You should only use your administrator account to install software and security updates and erase your computing history, and create a Limited User account for secure online use.
Instead of putting a copy of the eraserl.exe or eraserd.exe file on the C: drive, you may navigate to the folder Eraser is in using the cd FOLDER NAME command.
a. If Eraser is installed in the Program Files folder on your computer, type c: and press Enter or Return;
Type cd program files or if that doesn't work, cd progra~1
(always the first 6 letters of the folder's name plus the tilde or squiggly line and the number 1 when a folder name consists of two words)
b. Press Enter or Return to open the Program Files folder.
c. Type cd eraser (or whatever name you've given Eraser's folder) and press Enter or Return to open the Eraser folder.
Press Enter or Return and repeat the command for each file.
Note: You don't need to repeat the following commands for other user accounts if you follow my instructions and create tasks to erase the contents of the indicated folders in those accounts. Eraser will erase all the index.dat files in the other accounts.
The locked index.dat files in your currently logged on account are the only ones you need to erase at the command prompt, if you choose that method.
WARNING: Running your browser, e-mail program, word processor or other program in Sandboxie with its cache, or sandbox, in unencrypted form leaves your browsing history, e-mail, private documents or other private files vulnerable.
I recommend either encrypting your Windows partition or your whole hard drive, or moving the sandbox to an encrypted removable medium.
To move the sandbox:
Create a folder on an encrypted removable medium, called Sandbox.
Select Start > Programs > Sandboxie > Sandboxie Control > Configuration > Global Settings > Set Sandbox Top-Level Folder and enter your new drive, followed by Sandbox\%SID%.
Example: E:\Sandbox\%SID%
WARNING: A program running in the sandbox locks the sandbox, keeping Eraser from erasing it.
Before erasing the sandbox in Windows, make sure all programs running in the sandbox have been terminated / stopped / closed.
Note: Closing all processes (programs) running in Sandboxie may or may not unlock the files. If it doesn't, when erasing the sandbox Eraser will, if you've checked the locked files setting in the preferences, pop up a message saying ''File locked by another process. Do you want to Erase after restart?'' Click on Yes.
Note: Deleting or erasing the top-most Sandbox folder won't harm anything. It'll just be re-created the next time Sandboxie is started.
WARNING: If you're comfortable with editing the registry, you can configuring Sandboxie to use eraserl or some other secure erasing program to erase the sandbox when Sandboxie is closed, but you have to close it every time before logging off or shutting down. Forgetting to do that every time leaves your private data vulnerable.
If in spite of the risk you choose that option anyway, follow the Secure Delete instructions below with one difference: replace the default delete command with the following one:
eraserl.exe -folder "%SID%" -subfolders -method DoD
(%SID% is the sandbox, DoD is 7 passes, DoD_E is 3, Gutmann, for older, less dense drives only, is 35)
To avoid leaving your data vulnerable and dealing with locked files, I recommend creating a batch file instead to erase the sandbox on logoff or shutdown.
Caution: Eraser Launcher (eraserl.exe) does not ask for a confirmation before erasing your data.
Once you've finished creating the tasks, export a backup file of these settings to a floppy disk by clicking File and selecting Export and the location to save it to, name the file, and click on OK.
Having done all that, now do the following five things every time you use your computer. Before shutting it down, first run chkdsk / scandisk to recover any lost clusters, right-click on them and erase them with Eraser.
Start and run Eraser. Here's how: if Eraser's window isn't selected, click on it's top bar, press the Ctrl and A keys at the same time, to select all the tasks in the list, and click on the Run button to erase the unnecessary files that have accumulated and the subfolders they're in.
Then repeat this step in a second user account (if you don't have one, create a temporary one) to erase all your index.dat files. (Make sure you delete the temporary account after you're done, for security.)
CAUTION: If you prefer, instead of pressing Ctrl and A, you may press and hold the Ctrl key and select the tasks for the index.dat files in other user accounts than the one you're currently logged in to. But I strongly recommend pressing Ctrl and A and selecting all the tasks, even though most of them have already been done. Otherwise you may miss some index.dat files.)
If you don't erase temporary and history files, your computer will slow down. My dad's computer was extremely slow after a year of accumulation, and it took 16 hours, instead of the usual 1 to 10 minutes when done every day, to delete these files!
'Course that's because it was set to 35 passes per file, I later found out, instead of 7 or 3. But it still would've taken quite a while. So try to do it every day, if you can.
Incidently, I've since learned that erasing expert Peter Gutmann, in an epilogue to his paper, said ''performing the full 35-pass overwrite [a method meant only for old, low-density hard drives] is pointless [for modern, high-density hard drives]...a few passes of random scrubbing is the best you can do.'' So the DOD's 7 passes setting should be sufficiently secure.
To erase your swap or page file or files (each partition has one), either create a Scheduler task for each one in Eraser (see Set Up Eraser for instructions), to erase the file(s) on reboot, or follow the steps below to erase it or them from the command prompt.
Restart your computer and press the F8 key several times until a menu appears.
Select Command Prompt.
At the C prompt, navigate to the folder Eraser is in using the cd FOLDER NAME command, and enter the following commands to securely erase the swap or page file(s) and the free, unused space on your hard drive, which contains fragments of private files.
Note: Erasing free space takes several hours. If you prefer, you may erase your free or empty space in Windows with Eraser's interface, but it won't be as thorough as the command prompt from the boot menu, because some files are in use and it can't erase them.
eraserd -file c:\pagefile.sys -passes 7
eraserd -disk c: -passes 7
Now, if you've followed these instructions, your computer is virtually* free of bloat and ''deleted'' files, especially private ones, for FREE!
*As I said in my disclaimer, these instructions are in no way a guide for thorough erasing of all your private data stored on digital media. For that, please consult an expert.
(in other words, only after you've backed up all the data you want to keep onto durable, reliable backup media, and stored it in a safe place - preferably two backups stored in separate buildings - and if sensitive, with strong encryption)
Seagate has introduced the Momentus, a laptop / notebook hard drive with full, or whole, disk encryption (FDE) and support for the Trusted Platform Module, that allows you to protect or securely erase sensitive, confidential, private data.
Seagate Momentus drives come with ''a disk erase feature that lets [you] quickly and securely wipe drives of sensitive data. Seagate claims this can happen in seconds regardless of the drive's capacity because there is no software initialisation required.'' - article at Techworld.com
And if your laptop / notebook or its hard drive gets stolen before you securely erase your sensitive data, that data will remain fully protected even when the hard drive is repurposed (installed on another computer).
If you have Norton Ghost, BartPE or better yet Ultimate Boot CD for Windows and are comfortable using the command-line, use GDisk or the GDisk plugin for BartPE, with one of the following commands. (Replace disk with the disk number - 1 to 8, and n with the desired, customized number of passes.)
For 7 overwrite passes: gdisk disk /DISKWIPE /DOD
For up to 100 passes: gdisk disk /DISKWIPE /CUSTOM:n
If you have Knoppix* and are comfortable using the command-line, use shred*. (* shred is part of GNU fileutils, which is now part of the GNU coreutils package, so most, if not all GNU/Linux Live CDs and DVDs should have it, but some may not)
A disk accessible from a GNU/Linux system may be erased by repeating the following command 3 - 7 times:
dd if=/dev/random of=/dev/hdb && dd if=/dev/zero of=/dev/hdb
This command (actually dd repeated twice) first writes a random pattern to disk /dev/hdb, then writes all zeros to it. Replace /dev/hdb with the disk device's name.
Click on the Start button and then choose Programs > Eraser > Create Boot Nuke Disk.
Ensure 'Writing on Floppy' is ticked. Tick 'Formatting' if your floppy needs to be formatted.
Click OK. Result: Your Boot Nuke Disk has now been created.
Boot up your PC with the floppy still remaining in your a: drive.
Remember: If you wish to securely erase the hard disk of another PC, then bring this floppy to the PC, insert it into the a: drive and boot it up. Result: All drives will now be securely erased (including the operating system).
Summary: Darik's Boot and Nuke (DBAN) is a self-contained boot floppy that securely wipes the hard disks of most computers. DBAN will automatically and completely delete the contents of any hard disk that it can detect, which makes it an appropriate utility for bulk or emergency data destruction.
CAUTION: Even though you can remove - but not securely erase - your web page or site from Google's or any other search engine's cache, or the Wayback Machine, to avoid predators and the theft of your identity, I strongly recommend being careful anyway not to post or publish any private data online that can identify you.
If you like my web site, tell your friends and family about it. (A window will appear if Javascript is enabled in your browser, and if you temporarily disable your popup blocker, if you have one.)
I never had any problems with my former host, QualityHostOnline.com. I only changed hosts because they discontinued the very inexpensive package I had.