Eraser Artifacts

[David.Knutson]

I am a forensic examiner and have come across a computer that has artifacts from Eraser 586 in the NTUSER.dat file of the registry. I also see many files that have a 241 character file name. The first 238 characters are zeros the lase three characters are alphanumeric. The file size is zero.

Question: Does Eraser 586 leave the long file name artifacts?

 

[loveranger]

Seems like he works for the FBI... what is he stumbled upon?

http://www.forensic.org/index.php?optio ... Itemid=153

 

[mucio77]

It might be true just need close examining.

 

[ethanjakson]

It might be possible. But, you need to verify it closely to get an exact answer.

 

[LenQuowl]

I congratulate, your idea is very good

 

[LenQuowl]

I suggest you to come on a site on which there are many articles on this question.

 

[LenQuowl]

Prompt reply, attribute of ingenuity

 

[LenQuowl]

It completely agree with told all above.

 

[LenQuowl]

In it something is. Earlier I thought differently, thanks for the help in this question.

 

[LenQuowl]

In my opinion the theme is rather interesting. I suggest you it to discuss here or in PM.

 

[LenQuowl]

Yes, I with you definitely agree

 

[LenQuowl]

It is possible to speak infinitely on this theme.