hiberfil.sys ---hibernation security risk

[Gerard Morentzy]

In Windows XP, when a laptop is put into hibernation mode, everything in RAM is placed in a single file called hiberfil.sys. I just recently learned that all files, (Including encrypted files, containers, volumes, etc. that are open) when a PC goes into hibernation are saved as plain text in the hiberfil.sys file. This can be an obvious security problem for many.

I have read the only way to delete the hiberfil.sys file is to disable hibernation, reboot, and the file is gone. You can then re-enable hibernation...repeat as necessary. Does anybody here know of a way to "erase" the file without the disable/enable routine? Even zeroing out the file would be fine since hibernation obviously depends on the file being present.

Thanks in advance for any info.


-
search tags/strings: "delete hibernation files", "delete hiberfil.sys", "safely deleting hiberfil.sys"

[Rmus]

On my laptop, you don't have to re-boot; as soon as you disable/enable hibernation, hiberfil.sys is deleted/recreated.

See:

http://www.jsifaq.com/SUBM/tip6100/rh6120.htm

I use a script to automate the procedure.