What You Should All Know About Evidence Eliminator

[Anonymous]

I decided to start a new thread here.

Do not trust EE! All it does is lul you into a false sense of security. Someone posted an article in the previous topic showing how a forensic expert was able to determine how many files had been deleted, this is just one problem with EE.

Another is the fact that records of deleted file names are kept in the NTUSER.DAT file and EE doesn't touch these. Someone posted earlier how to clean the NTUSER.DAT file here in this forum. I don't trust the way EE handles the MFT either. (I use fat32 personally).

Even Eraser leaves the 'ghost file names' unless you wipe the cluster tips and free space *from* a seperate bootable partition or drive, in which case, it would be very hard, impossible even, for even a forensic expert to tell how many files were deleted or of any were deleted. Cleaning your HD should be standard practice for anyone who does any online financial transactions via bank or CC. Any judge who would find fault with that would be an idiot.

I personally do alot of online banking and financial transactions, and I dont want some script kiddy getting access to my HD and being able to recover anything.

If you are trying to wipe sensitive information, you should know your OS and your applications and know where your computer stores the information.

The makers of EE have no idea what applications you are using, what the data is that you want to permanently delete, and does not even do a good job of eliminating the most common things many people are concerned about like what 'porn' sites you visit - lol - as indicated above, EE does not clean the NTUSER.DAT file.

I would not give 2 cents for EE - its trash, as are the people who make it and distribute it by trying to create a sense of paranoia and then trying to provide 'peace of mind' with a less than adiquate applicaton.

Best advice is to know what data you want to delete, know the places its stored, and know how to properly delete it.

Eraser, when used properly, is the best tool I know of.

KnowItAll

 

[Anonymous]

ddd

The makers of EE have no idea what applications you are using, what the data is that you want to permanently delete, and does not even do a good job of eliminating the most common things many people are concerned about like what 'porn' sites you visit

No program can know what applications you're using. It cleans the most popular programs with it's plugins. You can set it too erase the ntuser.dat along with any custom files/folders/file contents that you're heart desires.

I use Eraser and Evidence Eliminator. Both work fine. EnCase cannot recover anything deleted by EE, I've tested it. EnCase (when using the script) has a function where it finds all of your internet activities and general activities, all of which Evidence Eliminator (if set up properly) deletes, it brought up nothing, even with EE set on it's weakest overwrite settings (overwrites with 0s once).

Evidence Eliminator does have it's limitations, as does all software of this type. The fact that it cleans most, if not all 'sensitive' areas of your PC with ease is great, something Eraser should have as a standard feature too, because not everyone can know what to erase.

Evidence Eliminator does fall short in setting up how many effective overwrite functions you can use. It allows you to have up to 27 (0+1+random x 9 = 27). It should also allow you to customize your overwrite patterns to overwriting with all random data, but it doesn't.

It can remove previously erased data from underneath files and folders, also eliminating file contents from folder entries. Which is good because it means I don't have to use DBAN.

In short, Evidence Eliminator works, and does what it says. It's very user friendly, despite all the controversy that surrounds the company Robbin Hood Software and their Evidence Eliminator software.

If you're weary about using Evidence Eliminator, stick with Eraser... But if you don't know how to set it up properly, then get EE or get CyberScrub (another fine security tool).

 

[Anonymous]

I'm not sure about XP but deleting the NTUSER.DAT file using 2000 can cause serious priblems.

The NTUSER.DAT file contains important settings in addition to records of deleted/recently access files/applications. In fact, if you examine that file with Notepad you may find information that is years old. This file needs to be 'cleaned' - not erased. EE doesn't touch it, (at least the version a friend of mine wasted his money on didn't).

If a person is really serious about wipeing files/usage tracks etc, then that person needs to know where the applications he uses store that data and how to access that data to clean/erase it. Once you know that, you don't need to spend a fortune on some crap program to do it for you.

 

[Anonymous]

ee

You know you really did not have to make a big fuss about Evidence Eliminator. There was no need at all. Eraser as standard does not even clean the NTUSER.dat file, you have to SET IT UP TOO (like your argument said.. EE doesn't know what apps you use and where the information is that they store... ) just like with any other quality erasing type program.

You could have just made a big fuss about wiping programs in general and then SHOWING people how to clean the ntuser.dat rather than bitch about another program, which of course you know nothing about.

Evidence Eliminator doesn't simply 'delete' it, it 'cleans' the contents of it (atleast the sensitive data), I have it set to wipe my ntuser.dat file and all work fine.

Once you know that, you don't need to spend a fortune on some crap program to do it for you.

Like I've said, Evidence Eliminator is well worth your money (hell get it cracked if you wish too)... Because the price is a bit expensive.

And regarding those 'temp file' problems when you delete files with EE... Well I've done some more testing and when you use the 'Safe Shutdown' or Safe Restart' features (the best way to use EE) those temp files are cleaned up and there is no trace of them, by EE cleaning out all directory entries of previous/deleted files and securing free space.

Obviously, everyone should disregard this thread and people that have dis-information about Evidence Eliminator. There are many people out there that claim it doesn't work, but it does and very well too. Eliminating ALL sensitive areas that Windows can store and includes support for cleaning of some of the most popular programs.