Shodan816

There is still at least one major security hole left after CCleaner runs. CCleaner erases Temporary Internet Files, but leaves the index.dat file behind. This file contains lots of information regarding the user's internet tracks. It would be great if CCleaner had the ability (under advanced options) to add a batch file name (such as ClrIndex.bat) to the 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' section of the registry. This file would run at startup and delete IE's index.dat file. In order for this file to be deleted, the temporary internet folders must have been already deleted, but CCleaner already does this - assuming the options have been properly ticked. Users would have to be savvy enough to edit this batch file and put in the correct path to IE's index.dat file. The index.dat file is system protected but may be erased on boot up by running a deletion utility from the registry (or startup folder.) It should be relatively easy for CCleaner to do this. Thanks for listening.

Just downloaded and installed the latest version - 2.03.532 - and tested secure deletion of the Recycle Bin in Vista. Preliminary tests say 'YES ! ! !' Finally, I can find no trace of a test file that I wiped from the Recycle Bin with CCleaner. THANK YOU ! ! ! ! ! ! ! Well done ! ! ! Shodan

IF indeed CCleaner does not do what it is ADVERTISED to do, e.g. WIPE files instead of merely deleting them in ALL Windows systems, then THAT is what should be stated, and that is my main complaint here. IF CCleaner does not do the full job under Vista, then stop infering that it does. I refer to popular download sites such as 'majorgeeks' and others that clearly state that CCleaner runs on WINALL. And while we are on the subject, before the latest version of CCleaner was released this past summer, many people, myself included, volunteered to be beta testers. I have no clue how many, if any, were chosen, or whether or not any of them are running Vista. Not to mention their experience levels in testing alpha and beta level software. It would seem to me that if these issues had been caught and recognized before the latest version release, it would have been the prudent thing to do to not say CCleaner runs on 'winall' until the issues are resolved on all windows platforms. What 'htome' wrote is encouraging - that the issue may be with the naming convention of Recycle Bin under Vista and that it may well be fixed in the next release. This certainly makes a world of sense. Other folders under Vista indeed seem to be wiped properly. And to those of you who just can't help badmouthing Microsoft given the slightest chance, you too have options. They are called Apple and Unix, just to name a couple. If you had ANY clue how much pains and effort we go through at Microsoft to put out a quality, yet unbelievably complex product, there is no doubt you would think twice before airing such comments. All of this aside, even without secure deletion working properly under Vista, it's still a FANTASTIC utility and I use it constantly.

Just to make certain I did not overlook something, I ran this test one more time. Deleted a JPG file to my Recycle Bin. CCleaner is set to Secure File Deletion - DOD (3 passes.) While the deleted JPG was in my Recycle Bin, I ran CCleaner. Indeed the Recycle Bin emptied and next I ran a good undeleter - Recover My Files. It recovered a JPG photo from the Recycle Bin and I undeleted it to another drive. The file name had changed, but as soon as I opened it - WALAHHHH ! ! - there was the photo I had 'ERASED' with CCleaner - good as new. Now, the only answer I would like is whether or not CCleaner will ever be made to truly destroy files cleaned from the Recycle Bin. It CAN be done - just install Eraser and it will prove that point. Files 'erased' from the Recycle Bin with Eraser are not recoverable, at least not by simple undelete utilities like Recuva and Recover My Files. Will CCleaner ever be able to accomplish this - as so many of us believed it has been doing all along ?

Thank you, 'htome' for your testing efforts. I can follow preciesly the same steps in Vista and the contents of the TXT file are clearly visible, as though I had never deleted the file at all. Perhaps Mr. G can explain why it works under XP and not under Vista. CCleaner seems to destroy other files just fine on my machine. Only the recycle bin files that I have a problem with.

All I can say is 'unbelievable.' Unbelievable that unless secure file deletion is either fixed once and for all the author should simply admits it will never work. I have posted this issue here for months and months. OK, here is the scenario - one more time. Running Windows Vista and CCleaner Portable edition - V2.02.527. Secure deletion set for 1 pass (simple overwrite.) I delete a file from Windows Explorer to my Recycle Bin. Then run CCleaner. I would EXPECT CCleaner to overwrite all recycle bin contents one time. Next I run a good file recovery program. Indeed the name of the file has changed, but as soon as I restore it, the contents are untouched. When I read the term 'Secure file deletion - simple overwrite' I certainly assume that applies to file CONTENTS and not just the file name. Obviously, it does not. I wonder how many thousands of other CCleaner users are assuming their files are being overwritten, when they are not ? All I would like to know is whether or not this issue will EVER be FIXED ? ! People have been raising it to the author's attention for at least a couple of YEARS now. Thanks for listening, and my apologies in advance for sounding a bit frustrated here. Yes, I AM aware this is free software, but as highly as it is acclaimed, it should do what it claims to do. Other file deletion utilities - e.g. 'Eraser' - indeed render files 'unrecoverable' via normal file recovery utilities. So then, why can't CCleaner do the same ?

I have written about CCleaner NOT erasing file content and particularly file names numerous times. Just a relief to finally see so many who have confirmed my findings of months and months ago. Hopefully this bug will be fixed in the next release once and for all. Either that, or just remove the 'Secure delete' option completely from CCleaner, if it is not going to work properly. And, as long as we are on the topic, it would be FANTASTIC if CCleaner would destroy FILE NAMES along with destroying file contents. Most true 'erasers' wipe both names and content. Thanks for listening.

I would like to second the motion to add an erase function to Recuva. In addition, it sure would be swell if Recuva stored column size settings and was available in a portable version, as CCleaner is. e.g., store the app settings in an ini file and leave the registry alone. Thanks for listening !