Sandboxie - using CCleaner for secure file deletion

[luciddream]

I know a lot of people in here use CCleaner. So figure some may want to use it for secure file deletion on sandbox close. I prefer it over the other methods. Here is how.

In the "Delete Command" field, enter this. I have mine in G: partition, but substitute wherever you have it, naturally:

"G:\CCleaner\CCleaner.exe" /delete "%SANDBOX%"

and include the quotes, btw.

I recommend having CCleaner set up to delete using Secure file deletion, simple overwrite (1 pass).

When you close your browser there will be a prompt asking you to use CCleaner for the deletion. If anyone has any suggestions on how to make it carry it out automatically, and avoid that prompt... I'm all ears.

[kupo]

Hello, try adding /auto at the end making it look like this.
"G:\CCleaner\CCleaner.exe" /delete "%SANDBOX%" /auto

[kupo]

Never mind, I tried it, and while it won't ask for permission, when I checked inside the SANDBOX folder, secure deletion seem to fail.

[Snowden]

Would this be more / less or equally secure to the default eraser 6 option that is provided?

[kupo]

The default option provided by Sandboxie to delete with Eraser 6 is, AFAIK, 3 passes of overwriting of data. (a single overwrite, the one I used in Eraser 6 before and now using with CCleaner is enough). If you want to have a 3 passes of overwrite in CCleaner, you can do so in the settings.

[AMIGA500]

Im using a program called ccenhancer and sandboxie is in the list of added applications that are cleaned.this is doing the same thing isnt it.?

[mi3x]

Could we use ccleaner portable to do this? Instead of the one installed? I ask this as I run sandboxie in a container on my usb, so I don't want any ties with my C: or D:

I tried it and it works, but as I have ccleaner also installed on my C: I don't know if they communicate

[Escalader]

I'm not sure why we want to second guess Sandboxie's cleaner choice.
Do we KNOW that CCleaner is "better" than the vendors choice for it's functionality?

What does Sandboxie vendor say about this?

[Page42]

Originally Posted by luciddream

I know a lot of people in here use CCleaner. So figure some may want to use it for secure file deletion on sandbox close. I prefer it over the other methods. Here is how.

In the "Delete Command" field, enter this. I have mine in G: partition, but substitute wherever you have it, naturally:

"G:\CCleaner\CCleaner.exe" /delete "%SANDBOX%"

and include the quotes, btw.

I recommend having CCleaner set up to delete using Secure file deletion, simple overwrite (1 pass).

When you close your browser there will be a prompt asking you to use CCleaner for the deletion. If anyone has any suggestions on how to make it carry it out automatically, and avoid that prompt... I'm all ears.

Thanks a million for bringing up this topic, luciddream!
SBIE with Eraser is taking waay too long on my XP box (but I tolerate the long wait), and SBIE with Eraser won't work right on my W7 boxes, so currently I am using default deletion, which is not secure deletion. I am excited about the prospect of using CCleaner in this capacity. I will probably configure it tomorrow... looking forward to it.

[pegr]

Originally Posted by Page42

SBIE with Eraser is taking waay too long on my XP box (but I tolerate the long wait), and SBIE with Eraser won't work right on my W7 boxes, so currently I am using default deletion, which is not secure deletion. I am excited about the prospect of using CCleaner in this capacity.

Another option for automatic sandbox deletion when the last sandboxed program ends is to set the sandbox container folder to use a ramdisk then secure deletion isn't necessary. The browser will start quicker sandboxed too.

[chris1341]

Originally Posted by pegr

Another option for automatic sandbox deletion when the last sandboxed program ends is to set the sandbox container folder to use a ramdisk then secure deletion isn't necessary. The browser will start quicker sandboxed too.

That's what I do. Works extremely well and is a touch faster as you say. Not necessary but the RAM disc also has a random pass deletion on unmount.

[kupo]

Originally Posted by Escalader

I'm not sure why we want to second guess Sandboxie's cleaner choice.
Do we KNOW that CCleaner is "better" than the vendors choice for it's functionality?

What does Sandboxie vendor say about this?

Since many users are already using CCleaner, why install another software just to have secure deletion in Sandboxie?

[Page42]

Originally Posted by skudo12

The default option provided by Sandboxie to delete with Eraser 6 is, AFAIK, 3 passes of overwriting of data. (a single overwrite, the one I used in Eraser 6 before and now using with CCleaner is enough). If you want to have a 3 passes of overwrite in CCleaner, you can do so in the settings.

I was told by the very helpful Guest10 on the SBIE forum that, "When using Eraser in Windows (Eraser.exe not EraserL.exe) the default erase method is Gutmann 35 passes."

Originally Posted by pegr

Another option for automatic sandbox deletion when the last sandboxed program ends is to set the sandbox container folder to use a ramdisk then secure deletion isn't necessary. The browser will start quicker sandboxed too.

Thank you for posting that info, pegr.

[kupo]

I thought it was changed before. LOL. Talk about overkill.

[Page42]

Originally Posted by Escalader

I'm not sure why we want to second guess Sandboxie's cleaner choice.
Do we KNOW that CCleaner is "better" than the vendors choice for it's functionality?

What does Sandboxie vendor say about this?

While the following does not directly address the developer's "cleaner choice", it does offer some insight into tzuk's thoughts about deletion versus secure deletion in his program. Back in May of 2011 tzuk replied in a thread I'd started,

Well, if you don't mind me asking, why do you need secure deletion anyway? If you're trying to be extra safe from malware, then secure deletion offers no benefit over regular deletion. If you need to hide your data, then putting your sandbox on a TrueCrypt is a more robust approach to data privacy.

And several posts later on that same thread, tzuk elaborated a bit more...

Anyway, as for deletion, I think you are confusing "send to recycle bin" with "delete" and "secure delete". Sandboxie doesn't do send to recycle bin, period. Stuff you delete is deleted and is not going to come back.

So the difference between "delete" and "secure delete" is the question will you still have magnetic residue on your hard drive following this deletion. For normal delete yes, for secure deletion, ideally no. But this is only going to make a difference for forensic experts who might be trying to recover your data.

Bottom line, you can probably turn off your secure deletion and not be concerned with it. I would not keep normal deletion as the default mode if had security issues. It doesn't. Secure deletion is only* a question of keeping deleted data out of reach of forensic data recovery experts.

(* Actually there is more one scenario that I can think of involving defragmenting virtual machine hard drives, but again, not a security issue.)

HTH

[pegr]

Originally Posted by Page42

Thank you for posting that info, pegr.

You're welcome.

Kind regards

[Escalader]

Originally Posted by skudo12

Since many users are already using CCleaner, why install another software just to have secure deletion in Sandboxie?

If the vendor chooses "another" I'm not going to assume I know better than his programmer or that there is zero dependance twixt Sandboxie and his choice. I'm not that smart.

[cheater87]

I tried this but all it does for me is delete all the downloads and not close the browser and erase the sandbox. Am I doing something wrong?

[Escalader]

Originally Posted by cheater87

I tried this but all it does for me is delete all the downloads and not close the browser and erase the sandbox. Am I doing something wrong?

Follow the vendors methods and tools.

[luciddream]

Originally Posted by cheater87

I tried this but all it does for me is delete all the downloads and not close the browser and erase the sandbox. Am I doing something wrong?

You must be, because it works just fine for me and everyone else apparently. Don't know why Escalader is so adamantly opposed to it?... All it's doing is securely deleting the files, just as one of the other methods would. This way I don't have to install anything else, since I already use CCleaner. And as another in this thread pointed out, Eraser isn't playing nicely on XP for me either. And I don't feel that 35 passes is necessary either. Good god... at that rate I'd have a groove burned into my hard disk within 2 weeks, like an old record.

[luciddream]

Originally Posted by Escalader

If the vendor chooses "another" I'm not going to assume I know better than his programmer

This is pretty flawed logic. I don't think anyone pretends to know more about Sandboxie than Tzuk.

Tell me... when you decide to install another AV besides MSE, or use another FW besides the integrated one, are you doing so from the presumption that you know more than Bill Gates?

[Escalader]

Originally Posted by luciddream

This is pretty flawed logic. I don't think anyone pretends to know more about Sandboxie than Tzuk.

Tell me... when you decide to install another AV besides MSE, or use another FW besides the integrated one, are you doing so from the presumption that you know more than Bill Gates?

Nope! I have no idea what Bill Gates knows.

I'm not that concerned about the use of ccleaner h.ll I use it daily.

My only point was ( and you disagree which is fine) is the 3rd party vendor uses another product for these deletions. He must or should have a reason.

If you know better that ccleaner will duplicate 100% what eraser does in Sandboxie that's great!

I'm off now to do 50 erases

[luciddream]

Originally Posted by Escalader

My only point was ( and you disagree which is fine) is the 3rd party vendor uses another product for these deletions. He must or should have a reason.

If you know better that ccleaner will duplicate 100% what eraser does in Sandboxie that's great!

Who could know? Why does MS bundle IE with it's OS when there are better options? Does that mean we should all blindly use IE? I think you know you're being obtuse about this. If you use an alternate browser, you're being a hypocrite here.

No, it doesn't duplicate 100% what Eraser does. It doesn't use 35 passes. What is does do is securely delete the files... that, I absolutely know for a fact.

[Techwiz]

Originally Posted by luciddream

Who could know? Why does MS bundle IE with it's OS when there are better options? Does that mean we should all blindly use IE? I think you know you're being obtuse about this. If you use an alternate browser, you're being a hypocrite here.

No, it doesn't duplicate 100% what Eraser does. It doesn't use 35 passes. What is does do is securely delete the files... that, I absolutely know for a fact.

I've been Eraser 6 (35 passes) for sandboxie auto-delete. Then I run a couple others afterwards for an overall computer cleaning:
CCleaner Very Complex Overwrite (35 Passes)
Cleanafterme Fill the file with zero bytes, and then delete
PrivaZer (In-Depth Scan)

My computer's been running without issues. No blue screens, crashes, etc. Even those it may seem redundant and probably wastes time. It's a practice I do religiously before walking away from my computer and before putting it to sleep. Probably sound like a nut.

[Sordid]

Originally Posted by luciddream

When you close your browser there will be a prompt asking you to use CCleaner for the deletion. If anyone has any suggestions on how to make it carry it out automatically, and avoid that prompt... I'm all ears.

Have you updated and turned on "skip user account control" in the options?