Search results

Hi, You're absolutely right to be concerned about this sort of thing. Here are a couple of suggestions. 1) DBAN--I recently ran DBAN to wipe a 30 GB hard drive. It's true that running it with the 7-pass DoD-grade wipe option can take hours. But for all practical purposes, running a...

OK, sorry about all the posts, but I thought I'd share what I've learned on this topic this evening. First, it would appear, from what I've seen, that Eraser does what it's supposed to do: namely, wipe files, including files whose data is stored entirely in the MFT. However, Eraser (and...

(continued from previous post) Now, a subsequent all-disk search for the nonsense word in the erased file did find it again, in the NTFS transaction log file $LogFile. Not sure how long that will last--the log file is 4MB, which means it probably gets overwritten. I also don't know whether...

Well, I just ran two tests. In the first, I created a text file with a short, nonsense name in the root (C:\) directory. In the file, I put another nonsense word. I proceeded to run Disk Investigator to search for the nonsense word that had been placed within the text file. It found the word...

Re: obscure bug Interesting observation. The Eraser FAQ says that Eraser doesn't clear the MFT, which clearly can contain the entire file: http://www.pcguide.com/ref/hdd/file/ntfs/archMFT-c.html Of course, in order for this to happen, the entire file has to fit in the MFT entry, which...

I can't speak to your experience, but I recently (last weekend) used DBAN, the hard drive wipe program that comes with Eraser to nuke the hard drive on my computer for a complete wipe and reformat. After running a 7-pass DBAN wipe, I checked the disk with Winhex, which found absolutely nothing...

Hello, Erasers, Here's a suggestion for Eraser developers: an Eraser plug-in for Firefox that lets you run a secure erase for any and all cache, history and cookie clearing, rather than the usual delete. Perhaps it could even do an automatic Erase, rather than the normal delete, when Firefox's...

Before and after test I just ran a test with two text files, one large and one small. I used Winhex to view the actual disk contents, before and after an erase. Before the erase, the sector hex map clearly displayed the file text. After an Eraser wipe, the contents at that location were...

Re: Help! Matthew, Did your professor make sure that there were no other copies of the file anywhere (e.g. in a swap file, etc.)? Did you attempt to replicate the results, or try eraser with other files?

In my opinion, they're basically wrong. I say "basically" because hard drives are mechanical components that will eventually wear out: motors burn out, defects on the disk platters will eventually lead to unwriteable (bad) bits, etc. It's certainly true that the more hard drives are used...

Yes. As I understand it, BartPE is a system for creating bootable Windows CD's, mainly for the purpose of mass installations of a Windows OS or programs. But it's also useful for simply creating bootable Windows CD's for forensics or other uses.

Another take I thought I'd comment on this, even though the thread obviously is a tad old. First of all, let me be clear that I'm not a computer forensics expert in any way. I do have a background in electrical engineering specializing in semiconductor fabrication, which includes the use of...

I'm in the process of evaluating Eraser myself. So far, it seems very good at what it does. The one drawback seems to be the fact that it can't eliminate all traces of directory entries, and I'm not sure anything can under NTFS (except for a full disk wipe an reformat)--rather, it overwrites...