Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When a file is deleted from the hard drive and the free space it used to occupy is securely overwritten (wiped), recovery tools can still usually find the file was there and show its name. As far as I understand this is because some data about old files is left in MFT area. How to eliminate this?

share|improve this question
    
possible duplicate of Is there a program to truly delete all deleted files? –  Ƭᴇcʜιᴇ007 Mar 7 '11 at 4:00
    
I've found CCleaner to offer "Wipe MFT Free Space" option, but haven't tested this yet... And I am pretty sceptical about it to help... –  Ivan Mar 10 '11 at 14:00
    
I believe that option will do exactly what you are looking for. –  grawity Mar 24 '11 at 17:15

3 Answers 3

Short answer, it is not possible.

The MFT is a complex dynamic table file at the heart of the NTFS. To change one small part of it, corrupts the whole drive.

MS isn't telling how it is structured, and no one is going to risk putting out a application on a trial and error basis, that 'cleans' the file names, if there is any chance it will destroy the system.

(Oh yes, insert negative comments about MS exposing peoples data here.)

So depending on the pros and cons, you may want to restart with a fresh install, and then use less sensitive file names and use secure deletion at the recycling bin. Use TrueCrypt containers to keep files separate from programs. Perhaps FDE (Full Disk Encryption) is a option if it is that important.

To make things clear to others, it is not what Ccleaner and the others do, drive wiping the MTF and defragging it and all the rest doesn't clean the MFT names. They overwrite the file spaces in the MTF, but the names remain. It is the deletion of the FILE NAMES ONLY that the OP is asking about. (File names that can only be seen with specialized file recovery applications)

share|improve this answer

I think Paragon Hard Disk Manager Suite (Pro?) can help you do this by shrinking the MFT:

As the $MFT grows, it will occupy the increasing amount of space in the MFT Zone, and the current size of $MFT is totally unrelated to the size of the MFT Zone.
When one executes the "Compact MFT" (also may be called “Shrink MFT” in some editions) operation, the $MFT itself will be shrinked, but the MFT Zone will remain intact - just a block of reserved free space.

It can shrink the MFT, which means deleted file records won't be there anymore.

share|improve this answer

Revo Uninstaller freeware wipes the MFT almost completely. Tested on formated WD 500GB with AVG PC tuneup utility to view the MFT size before Revo Unistaller and after Revo Unistaller. MFT almost completely gone while before it was enormous.

http://www.revouninstaller.com/revo_uninstaller_free_download.html

Go to Tools --> Tracks Cleaner --> Evidence Remover --> select drive and run it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.