Eraser Artifacts

David.Knutson

New Member
I am a forensic examiner and have come across a computer that has artifacts from Eraser 586 in the NTUSER.dat file of the registry. I also see many files that have a 241 character file name. The first 238 characters are zeros the lase three characters are alphanumeric. The file size is zero.

Question: Does Eraser 586 leave the long file name artifacts?
 
It might be possible. But, you need to verify it closely to get an exact answer.
 
Top