Overwriter
Active Member
Hi
I am using Eraser 5.8.7. Beta on XP Pro SP3. NTFS.
I noticed in the change log it said this “ Further complicate forensics: Set MACE to invalid values (NTFS only)”
On my C drive I wiped my free space, cluster tips and directory entries with the new beta and then looked at it with WinHex. I noticed that all the deleted files (the ones Eraser uses to wipe the free space) have the current date and time on them.
Is this supposed to happen ? If so would it be a good idea to scramble those as well so as to further complicate things ?
Sorry if I have misunderstood something here as I am a bit of a thicky. :roll:
I am using Eraser 5.8.7. Beta on XP Pro SP3. NTFS.
I noticed in the change log it said this “ Further complicate forensics: Set MACE to invalid values (NTFS only)”
On my C drive I wiped my free space, cluster tips and directory entries with the new beta and then looked at it with WinHex. I noticed that all the deleted files (the ones Eraser uses to wipe the free space) have the current date and time on them.
Is this supposed to happen ? If so would it be a good idea to scramble those as well so as to further complicate things ?
Sorry if I have misunderstood something here as I am a bit of a thicky. :roll: