Ticket #374 (closed task: fixed)

Opened 4 years ago

Last modified 4 years ago

Does Eraser do at least the same for NTFS erasure Russinovich's SDelete?

Reported by: erasrnd Owned by:
Priority: major Milestone: Eraser 6.0.8
Component: Core Version:
Keywords: NTFS Cc:
Processor Architecture: Blocked By:
Blocking: Operating System:

Description

You probably know the Windows internals guru Mark Russinovich (formerly Sysinternals, now employed by Microsoft).

He wrote a tool to wipe files and free space in NTFS. If someone knows the Windows internals, it's him.

Could you please read the section "How SDelete Works" on the following page and check that Eraser does at least as good job?

BTW, I have the source code for this archived (when he got acquired by Microsoft, the source code was never republished). The source is also on archive.org.

http://technet.microsoft.com/en-us/sysinternals/bb897443.aspx

Thanks!

Change History

comment:1 Changed 4 years ago by Joel

  • Status changed from new to closed
  • Resolution set to fixed
  • Milestone set to Eraser 6.0.8

To a large extent Eraser does follow what SDelete does, with minor changes to fit differences in security etc since the releases of Windows after SDelete was written. If you have any specifics, do ask because to list down all differences and details Eraser uses would be quite difficult (to recall and write down)

comment:2 Changed 4 years ago by Joel

The most important difference is that Eraser 6 no longer uses the defragmentation API to do raw disk accesses for NTFS since that approach caused drive corruption in earlier versions.

Note: See TracTickets for help on using tickets.