Eraser Artifacts

Moderators: Eraser DevTeam, Eraser Moderators

Eraser Artifacts

Postby David.Knutson » Wed Jul 08, 2009 5:54 pm

I am a forensic examiner and have come across a computer that has artifacts from Eraser 586 in the NTUSER.dat file of the registry. I also see many files that have a 241 character file name. The first 238 characters are zeros the lase three characters are alphanumeric. The file size is zero.

Question: Does Eraser 586 leave the long file name artifacts?
David.Knutson
 
Posts: 1
Joined: Wed Jul 08, 2009 5:47 pm

Re: Eraser Artifacts

Postby loveranger » Tue Dec 13, 2011 9:12 pm

Seems like he works for the FBI... what is he stumbled upon?

http://www.forensic.org/index.php?optio ... Itemid=153
loveranger
 
Posts: 12
Joined: Mon Dec 12, 2011 1:29 pm

Re: Eraser Artifacts

Postby mucio77 » Sun Mar 09, 2014 9:55 pm

It might be true just need close examining.
mucio77
 
Posts: 3
Joined: Mon Mar 03, 2014 10:10 pm


Return to Forensic Practitioners

Who is online

Users browsing this forum: No registered users and 1 guest