Date:        1/7/98 8:48:46 PM
From:        Joo Soo Lim <joosoo.lim@colesmyer.com.au>
Subject:     [NTSEC] Wiping the system page file
To:          ("NT Security List <ntsecurity@iss.net>"@LOCAL)

TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------


For security reason, I want to wipe off the system page file during
clean system shutdown.  
To ensure that sensitive information from process memory that may have
made into the page file is not available to a snooping user.  I have
tried to modified the resgistry as follow:

Hive:	HKEY_LOCAL_MACHINE\SYSTEM
Key:	System\CurrentControlSet\Control\SessionManager\Memory
Management
Name:	ClearPageFileAtShutdown
Type:	REG_DWORD
Value:	1 (Hex)

After this modification, I used a Windows 95 Boot disk to boot the
system. The pagefile.sys in the c: drive is still exist.  I though the
pagefile will be deleted during clean system shutdown.  Any idea?  Have
any one tested this before??

Thanks.