Set MACE to invalid values

Overwriter

Active Member
Hi

I am using Eraser 5.8.7. Beta on XP Pro SP3. NTFS.

I noticed in the change log it said this “ Further complicate forensics: Set MACE to invalid values (NTFS only)”

On my C drive I wiped my free space, cluster tips and directory entries with the new beta and then looked at it with WinHex. I noticed that all the deleted files (the ones Eraser uses to wipe the free space) have the current date and time on them.

Is this supposed to happen ? If so would it be a good idea to scramble those as well so as to further complicate things ?

Sorry if I have misunderstood something here as I am a bit of a thicky. :roll:
 
Well I'm rushing because I keep getting logged out... but that change was by Garrett. I didn't really understand it, to be honest. He said it was a work in progress.

Joel
 
Joel said:
Well I'm rushing because I keep getting logged out...

Tell me about it !! :lol:
but that change was by Garrett. I didn't really understand it, to be honest. He said it was a work in progress.

OK thank you. :wink:
 
Back
Top