• 0

Permanently delete data from hdd by using format?


Question

21 answers to this question

Recommended Posts

  • 0

full format.

If you want to be sure do it two times. If you really want to be sure use a program that writes random data to your disc. But in all honesty, the tales about data recovery are hugely blown out of proportion anyway. Nobody will be able to read any kind of residual data from your drive after doing a full format twice. And your data wouldn't be worth that kind of trouble and cost anyway (sorry :p)

  • 0

A full format in XP does nothing but remove the pointers and make sure the sectors can be read. This will not remove the ability to recover a file. If you are using vista or higher then it does write zero's and that would be good enough

As long as you write something over the sectors - then data can not be recovered. Doing multiple wipes is overkill, once is enough.

  • 0

Ignore the comments regarding doing just a format, this is nonsense.

A format deletes where the information is on the disk, the information is still there. A format can easily be unformatted and information found.

U need to Erase ( http://en.wikipedia.org/wiki/Data_erasure ), Depending on the information stored, although a single pass might be ok, doing a few would be better ( Can always be done over night ). In the old days this would be done in DOS / out of windows, might have changed now. This sets the whole partition or disk to random 0s and 1s.

  • 0

"ignore the comments regarding doing just a format, this is nonsense."

http://support.microsoft.com/kb/941961

Change in the behavior of the format command in Windows Vista

The format command behavior has changed in Windows Vista. By default in Windows Vista, the format command writes zeros to the whole disk when a full format is performed. In Windows XP and in earlier versions of the Windows operating system, the format command does not write zeros to the whole disk when a full format is performed.

  • 0
Ignore the comments regarding doing just a format, this is nonsense.

A format deletes where the information is on the disk, the information is still there. A format can easily be unformatted and information found.

U need to Erase ( http://en.wikipedia....ki/Data_erasure ), Depending on the information stored, although a single pass might be ok, doing a few would be better ( Can always be done over night ). In the old days this would be done in DOS / out of windows, might have changed now. This sets the whole partition or disk to random 0s and 1s.

FUD.

If I write a series on 1's and 0's on a disk, then go through the whole disk again and replace everything with 1's, how will a program be able to tell where a 1 was a 0 before, and where a 1 should remain a 1? It can't.

A basic format does what you pointed out, it removes the headers. But once you do one pass on a disk you're fine.

  • 0

If you're really paranoid, or stored Top Secret government data on a hard drive, the drive needs to be physically destroyed. For everyone else there are all sorts of drive scrubbing apps available, McAfee for example includes this in at least some versions of their AV software.

Erasing or securely deleting files means overwriting that part of the hard drive's storage with new data, usually garbage but all ones or zeros, as with a full format works too. This is because data's stored all over the place on the hard drive's platter(s), with a Table of Contents at the front of the drive/partition recording where all the bits & pieces of each file are -- simply deleteing a file only removes its TOC entries. That's why all those utilities to recover lost files work -- you can fit all the pieces of a file back together like some sort of jigsaw puzzle [assuming all those pieces are still there, haven't yet been overwritten, which is why if there's something *Real* important you need to recover you click off the main power switch or pull the plug, running your recovery app(s) from a boot disc/USB stick]. Now, conventional hard drives work by having heads float above the disk platter(s) to read/write data -- since they float there's a very slight amount of wobble. If as a file is written one head happens to wobble to the right, then when it's overwritten that same head happens to wobble left, there could be traces of the original file remaining alongside the newly written data -- that's why erasing/scrubbing a drive usually means overwriting everything multiple times... the more passes you make the more chances the head(s) were on the right, the left, & everywhere in between overwriting data.

You can also erase, scrub, securely delete individual files, &/or all the free space to get rid of stuff without wiping the entire drive. In that case you might want to use an erasing app that goes after the unused portion of cluster blocks... On a conventional hard drive the storage space is divided up into small chunks & data's stored in those -- one way to think of it is if you set out a row of glasses & start pouring a bottle of your favorite beverage -- the last glass is likely to be only partially filled. If one of these blocks or chunks was completely filled, then only partly overwritten, there's old data still there that could potentially be recovered.

  • 0
Nobody will be able to read any kind of residual data from your drive after doing a full format twice. And your data wouldn't be worth that kind of trouble and cost anyway
As long as you write something over the sectors - then data can not be recovered. Doing multiple wipes is overkill, once is enough.

Purely FWIW I agree, but I still will either destroy an old drive I'm getting rid of, or use multiple passes if the drive's going to someone else... Connecting the drive to a PC/laptop I'm not using at the time & running whatever to erase that drive costs me only a few minutes connecting/disconnecting the drive & fireing up whatever app -- the [admitedly small amount of] additional peace of mind I get is well worth it to me. :) 'Sides, makes it harder for someone to get away with claiming they recovered this or that from the drive, they can't as easily get away with saying whatever files were on there when they got it & so on.

  • 0

i've done in the morning the (only) format for the 3 partitions by using my windows 7 ultimate dvd.. I hope I'm ok with this, I'm not paranoid and the buyer is not an experienced user.. as I know. Hdd is on it's way to the client but my best friend that routes it still can help me.. should I?

Install-Windows-7-12-format.jpg

  • 0

Get Parted Magic and do a secure erase. HDDerase will also do a secure erase. Secure erase is suppose to the best method. I have been told zero wiping is good enough. I would do more than that though. If your drive does not support secure erase Parted Magic has other methods. https://www.youtube.com/watch?v=g8t2ZXOMGKY. As mentioned before DBAN too.

  • 0

A full format in XP does nothing but remove the pointers and make sure the sectors can be read. This will not remove the ability to recover a file. If you are using vista or higher then it does write zero's and that would be good enough

As long as you write something over the sectors - then data can not be recovered. Doing multiple wipes is overkill, once is enough.

+1

a full format on xp doesnt write 0's and 1's. it just does a standard format then fully checks the disk.

i'm a fan of the shred command in linux myself. i just put my hdd in a usb enclosure. boot up my favorite linux live cd and shred -n 2 -fvz /dev/X

i think there's a ton of free erasing programs that you can make a live cd with. but it's been a while since i've looked up any.

  • 0

you can do a similar command with windows

cipher /w

http://support.microsoft.com/kb/814599

How to Use the Cipher Security Tool to Overwrite Deleted Data

Note The cipher /w command does not work for files that are smaller than 1 KB. Therefore, make sure that you check the file size to confirm whether is smaller than 1 KB. This issue is scheduled to be fixed in longhorn.

To overwrite deleted data on a volume by using Cipher.exe, use the /w switch with the cipher command:

  1. Quit all programs.
  2. Click Start, click Run, type cmd, and then press ENTER.
  3. Type cipher /w:folder, and then press ENTER, where folder is any folder in the volume that you want to clean. For example, the cipher /w:c:\test command causes all deallocated space on drive C to be overwritten. If C:\folder is a Mount Point or points to a folder on another volume, all deallocated space on that volume will be cleaned.

Data that is not allocated to files or folders is overwritten. This permanently removes the data. This can take a long time if you are overwriting a large amount of space.

But full windows since vista does work as well.

  • 0

Even then, it is recommended to perform this multiple times to ensure the drive has been truly zeroized. Every IT Security company I have worked for state that we need to wipe 3-5 times. Normal users won't need this and I feel it to be a little over kill. but it will ensure not a single bit is flipped.

  • 0

"I have worked for state that we need to wipe 3-5 times."

This is just pure FUD plain and simple! Even if you missed a few bits from being flipped - there is no actual data that is going to be recovered.

So in NIST 800-88, clearly states

http://csrc.nist.gov...with-errata.pdf

"That is, for ATA disk drives manufactured after 2001 (over 15 GB) clearing by overwriting the media once is adequate to protect the media from both keyboard and laboratory attack."

So unless you have some DOD **** and some out dated procedures/policies that you have to follow in your job. 1 overwrite all that is required. Now I would make sure you trust that the wipe is actually being done, etc. But there is no reason to do the wipe more than once.

Here is a good read on the why you only need 1 wipe

http://computer-fore...ard-drive-data/

  • 0

Data on a disk which has had its data overwritten cannot be recovered with a simple software program, right?

Such data recovery would require the dismantling of the disk and the use special hardware.

Unless the data on your drive is worth millions, the average person is not going to go through all that trouble.

A single overwrite pass should be enough for your needs.

Please correct me if I am wrong.

  • 0

And if you read the documentation I provided already, even dismantling of is not going to work.

http://csrc.nist.gov...with-errata.pdf

"That is, for ATA disk drives manufactured after 2001 (over 15 GB) clearing by overwriting the media once is adequate to protect the media from both keyboard and laboratory attack."

Notice the laboratory attack part ;)

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • it would've been better to just have a screenshot with claude running instead of using a generic thumbnail that doesn't fit the narrative.
    • Helium Browser 0.13.2.1 by Razvan Serea Helium is a private, fast, and honest Chromium-based web browser — built for people, with love. It offers the best privacy by default, unbiased ad-blocking, and a clean experience free from bloat and noise. Proudly based on Ungoogled-Chromium, Helium removes Google’s clutter while keeping a fast, efficient development pipeline. With thoughtful touches like native !bangs and split view, Helium is a people-first, fully open-source browser that puts control back in your hands. Privacy, security, and control come first. Ads, trackers, and third-party cookies are blocked automatically, HTTPS is enforced everywhere, and all Chromium extensions work seamlessly — while Google can’t track your activity. Helium’s 13,000+ offline-ready !bangs let you jump straight to sites or AI tools like ChatGPT instantly. Open-source, people-first, and unbiased, Helium delivers a browsing experience that’s fast, secure, and free from noise, ads, and compromises. Helium Browser key features: Performance Fast, efficient, and lightweight — built on Chromium’s optimized engine. Energy-saving and consistent — stays fast over time without slowing down. No bloat — stripped of unnecessary components for maximum speed. Minimalist interface — compact, clean, and distraction-free. Customizable toolbar — hide elements you don’t need. Smooth and stable — no flicker, lag, or animation glitches. Comfort-focused experience — intuitive and unobtrusive. Privacy & Security Best privacy by default — blocks ads, trackers, phishing, and third-party cookies. Unbiased ad-blocking — powered by community filters and uBlock Origin. No telemetry or analytics — zero background web requests on first launch. Strict HTTPS enforcement — warns for insecure sites. Passkeys supported — modern authentication made simple. No built-in password manager or cloud sync — your data stays yours. Extension Compatibility Full Chromium extension support — including MV2 extensions. Anonymized Chrome Web Store requests — Google can’t track extension installs. Extended MV2 support — maintained for as long as possible. Smart Features Native !bangs — browse faster using 13,000+ offline-ready shortcuts. AI integration — use !chatgpt and others directly from the address bar. Offline functionality — bangs work without an Internet connection. Philosophy People-first design — open source, transparent, and community-driven. No ads, no noise, no bias — privacy and honesty over profit. Helium Browser 0.13.2.1 changelog: 6b6fbd0f revision: bump to 2 (#1907) cb3f77bd helium/ui/zen: fix cmd+s shortcut sidebar preference in zen mode (#1849) e3980159 deps: bump onboarding (#1905) c99531d5 helium/core: add an option to copy URLs from tab context menu (#1904) c1aba0ea helium/search: add kagi image search params (#1899) eb6711f4 helium/core/hibernate: add an option to hibernate other tabs (#1901) 425306f5 merge: update to chromium 149.0.7827.102 (#1897) ae94c3c8 helium/core/update-pref: improve auto updates strings (#1896) 06897c1d patches & domain_substitution: refresh for chromium 149.0.7827.102 d09826d0 merge: update ungoogled-chromium to 149.0.7827.102 9aeb58da helium/search-engine: reject default engine urls without %s (#1893) 4d7bb965 Update to Chromium 149.0.7827.102 fa67665c i18n: fix "add shortcut" string collision (#1891) 6894bd30 devutils/i18n: parse meaning into source.gen.json dc3fe739 helium/kb-shortcuts: disambiguate "Add shortcut" string cbf38eb4 i18n/apply: pass meaning to fingerprint generator 53ea9920 extra/disable-jit-flag: build drumbrake only if supported Download: Helium 64-bit | Portable 64-bit |~100.0 MB (Open Source) Download: Helium ARM64 | Portable ARM64 Links: Helium Home Page | macOS | Linux | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • ExplorerPatcher 26100.8457.70.2 by Razvan Serea ExplorerPatcher is a versatile and free tool that allows you to tweak and enhance the Windows Explorer. It comes with a range of useful features, including the ability to add new context menu items, change file name colors, and enable hidden features. Feature summary Choose between Windows 11 or Windows 10 taskbar (with labels support, small icons and lots of customization). Disable Windows 11 context menu and command bar in File Explorer and more. Open Start to All apps by default, choose number of frequent apps to show, display on active monitor and more. Choose between the Windows 11, Windows 10 and Windows NT Alt-Tab window switcher with customization. Lots of quality of life improvements for the shell, like: Skin tray menus to match Windows style, make them behave like flyouts and center them relative to the icon. Choose action when left and/or right clicking the network icon. Revert to the Windows 7 search box in File Explorer, or disable Windows Search altogether. Disable immersive menus and use mitigations that help you run the real classic theme without glitches. Discover the program's full range of features by reading this wiki article. ExplorerPatcher 26100.8457.70.2 changelog: Tested on OS builds 22621.4317, 22631.7079, 26100.6899, 26100.8037, 26200.8246, 26200.8457, 26300.8493, and 28000.2113. TIP: Windows Defender no longer flags ExplorerPatcher. It is no longer needed to configure Defender exclusions. Enjoy! Important Fixed Windows 10 taskbar and Start menu crashes on builds 26220.8474 (Beta) and 26300.8493 (Experimental). Update ExplorerPatcher as soon as possible. Without this update, Explorer and the Windows 10 Start menu may stop working on future builds. Microsoft removed Windows 10 Start menu components from StartTileData.dll on these builds, so the Windows 10 Start menu option has been removed where it is no longer supported. Temporary workaround: replace C:\Windows\System32\StartTileData.dll with the version from build 26xxx.8457 (x64/ARM64). This may stop working in future builds. Work is ongoing to restore Windows 10 Start menu support. Highlights Fixed Windows 10 battery flyout crashes on build 25951+. Network flyout buttons reverted to pre-24H2 behavior as a side effect. Taskbar location changes now apply instantly. Windows 11 taskbar auto-hide is no longer modified when Explorer starts. "Open Start in All apps by default" is now hidden when using the new Windows 11 Start menu. Fixed Windows 10 Start menu crashes on builds 21996–22000.51. Fixed Regedit crashes when switching to thumbnail view in registry import/export dialogs. Improved compatibility with recent Windows builds, including 26H1 ARM64. Improved ARM64 performance. Added Greek translations. ep_taskbar Now supports all 43 Windows 11 languages. Fixed issues in the system tray and other components. Updated DLL naming scheme for mod developers. Improved TrayUI compatibility and vtable stability on builds with multiple ITrayUI revisions. Fixed a taskbar initialization deadlock. Windows 10 Start Menu Added a new tile layout engine to restore support removed in build 26xxx.8474. Restoration is currently partial: Tiles may overlap when pinned using "Pin to Start". Restarting StartMenuExperienceHost.exe or explorer.exe fixes the layout. Further improvements are planned. Other Changes Added an executable blacklist to prevent shell extensions from loading in selected applications. Updated Windows 10 Start menu animation support for ARM64 builds 28xxx.2149+. Please consult the README for more details. Download: ExplorerPatcher 26100.8457.70.2 | ARM64 | ~11.0 MB (Open Source) View: ExplorerPatcher Home Page | Features | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Microsoft: Windows 11 KB5094126, KB5093998 finally stops trusting a critical system threat by Sayan Sen This week Microsoft released the Patch Tuesday updates for June 2026 with KB5094126 on Windows 11 25H2, 24H2, and KB5093998 on Windows 11 23H2. On Windows 10 22H2 it's under KB5094127. Alongside the announced release notes for the new builds, Microsoft has revealed another change that is coming to Windows with these new releases. It has been confirmed that custom folders are getting a significant change with the June 2026 updates as such folders or folder names defined by desktop.ini will no longer appear after this update is successfully installed. While you may inititally think this is a bug with the new release, Microsoft has stated that this is in fact "expected behaviour" in its new support article regarding this which Neowin spotted today while browsing. Essentially it's a security hardening measure such that custom folder presentations are treated as potentially unsafe whenever Windows is not sure about their origin and whether that desktop.ini folder can be trusted or not. Here is list of such untrusted files and folders: Files downloaded from the internet that carry Mark-of-the-Web (MOTW). Files copied from certain remote locations, such as some WebDAV or HTTP-based locations. Files on network paths that are not classified as intranet or trusted by zone policy. For those who may not be familiar, Desktop.ini is a special configuration file used by Windows to customize the appearance and behavior of individual folders. Basically Windows can read specific instructions stored in Desktop.ini instead of displaying every folder with the same default settings. This can be used to apply custom icons, thumbnail images, localized folder names, and such informational tooltips (infotip). The file can also influence certain folder-specific behaviors and properties. It is typically stored as a hidden system file within a folder that has been designated to support Desktop.ini customization. However, because Windows Shell automatically reads and applies these attributes whenever a customized folder is opened, they have historically (since the Windows XP days) presented an attack surface as a result of an unchecked buffer in the Shell component responsible for extracting custom attributes from Desktop.ini files. As such an attacker could create a specially crafted Desktop.ini containing a malicious or corrupted attributes and place it on a network share. So if a user were to browse that folder, Windows would automatically process the file, potentially triggering a buffer overflow. This could allow arbitrary code to run with the same permissions as the logged-in user. Hence a seemingly harmless folder could become a security risk when their contents are not properly validated. For admins and users alike looking to manage this behaviour, Microsoft has shared a few ways. One of them is to assign a trusted mark on the folder in case you are sure of its source. Secondly a policy can be used to revert back to the previous state. Finally, the MOTW can be removed too to indicate to Windows that this is a safe file. The company explains: Option 1: Add the source to Trusted Sites (Recommended) If the affected content is stored on a known internal or managed source, add that source to the Trusted Sites list. Once the source is treated as trusted, Windows processes desktop.ini from that source normally. This keeps the protection in place for other locations and is the lower-risk option. Option 2: Use policy to restore previous behavior Organizations that need broader compatibility can enable the policy Allow the use of remote paths in file shortcut icons.Enabling this policy restores the pre-June 2026 behavior for affected remote or untrusted scenarios. Option 3: Check for and remove the Mark of the Web (MotW) If the desktop.ini file has a Mark of the Web (MotW), Windows may treat it as coming from an untrusted source and block customization. Verify whether MotW is present and, if appropriate, remove it from the desktop.ini file. This can restore expected behavior, but should only be done for trusted content, as it removes the associated security protection. To remove the MotW tag, open PowerShell and run one of the following commands: For a single desktop.ini file: Unblock-File "C:\Your\Folder\Path\desktop.ini" For all desktop.ini files in a folder: Get-ChildItem "C:\Your\Folder\Path" -Recurse -Filter desktop.ini -Force | Unblock-File Microsoft has warned though against using a broad opt-out using the provided policy as it reduces protection against potentially malicious remote folder-customization content. As such the tech giant recommends trusting only controlled internal sources and keeping trust settings as strict as possible. You can check out the official support article here on Microsoft's website.
    • LAV Filters 0.82.0 by Razvan Serea LAVFSplitter is a multi-format media splitter that uses libavformat (the demuxing library from ffmpeg) to demux all sorts of media files. LAV Splitter is a Souce Filter/Splitter required to demux the files into their separate elementary streams. LAV Audio and Video Decoder are powerful decoders with a focus on quality and performance, without any compromises. Supported Formats: MKV/WebM, AVI, MP4/MOV, MPEG-TS/PS (including basic EVO support), FLV, OGG, and many more that are supported by ffmpeg! LAV Filters are based on ffmpeg and libbluray and is aimed to offer a all-around solution to perfect playback of file-based Media as well as Blu-rays. LAV Filters 0.82.0 changelog: LAV Splitter NEW: Support for demuxing Dolby Vision Enhancement Layer streams NEW: Support for Animated WebP images Changed: When demuxing Blu-ray discs, Dolby Vision metadata is available on the primary video stream LAV Video NEW: Support for Animated WebP images Changed: Hardware decoding support for DVDs has been removed Download: LAV Filters 0.82.0 | 15.5 MB (Open Source) View: LAV Filters Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • One Month Later
      Sopa flores earned a badge
      One Month Later
    • First Post
      StaticMatrix earned a badge
      First Post
    • Week One Done
      StaticMatrix earned a badge
      Week One Done
    • Rookie
      lamborghiniv10 went up a rank
      Rookie
    • One Month Later
      pinnclepd earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      506
    2. 2
      PsYcHoKiLLa
      207
    3. 3
      +Edouard
      156
    4. 4
      Steven P.
      88
    5. 5
      ATLien_0
      79
  • Tell a friend

    Love Neowin? Tell a friend!