Evidence Eliminator capabilities

[Jupes]

First I'd like to apologise if this has been covered before. I searched the web and antionline and came up blank.

My question relates to the capabilities of the Evidence Eliminator package. Does it actually wipe what it claims? And does it miss any areas that it shouldn't? (assuming you wanted to clean all areas without damaging the OS). I know practically this is very difficult, and in many cases unnecessary. But from an intellectual perspective I am interested in if/how it is achieved.

Also I am aware of the dubious moral and legal practices of Robin Hood Software, the company who make EE. See http://evidence-eliminator-sucks.com/eesucks/index.html . While this site details the immoral advertising practices of the company and some of the difficulties of achieving what Robin Hood Software claims, it does not explain technically whether EE works or not. The site does however link to http://www.radsoft.net/resources/software/reviews/ee/ which has some detailed information on how EE doesn't perform what it claims. But while Radsoft are quite well respected, they are still a competing company with a competing product and I was wondering if there was any other information out there?

Thanks in advance

[journy101]

Hello, while I can't tell you if it misses anything I can tell you this. While back I started to write my own cleaner in C. To find out what I needed to clean, I used a few tools. One such tool called filemon is freeware available from

http://www.pcworld.com/downloads/fil...leidx,1,00.asp

That will literaly watch all of you files and can tell you when a file is being opened, read writen to ext.. very usefull and if you turn it on before you open EE then you can make filters that will only alow EE stuff to be displayed. Because explorer and other running processes will also be opening files and it will get in your way.

Another tool I used was regmon and can be downloaded for free here

http://www.sofotex.com/download/software/5016.html

Same thing that filemon does except its for the registry instead of files.

But it realy all comes down to knowing your operating system, windows in this case. cookies, cache and tem are the obvious, but clipboard and start menu history are not so obvious.

To clean those types of stuff I made use of the Win32 API in C, more spasificaly the shell functions Those are the functions that begin with SH*

I did alot of searching too on google to find things to clean. But again just experimenting, useing difernt cleaners and becomeing familiar with windows is the way to go.

Sorry I cant answer your question, however if you PM me I can give you more information on cleaning.

[ChrisWuk]

i use historykill (www.historykill.com), it cleans up once u close the IE window and it deletes all cookies, history, index.dat, recent files list, media player list and about a million other things and i think its GREAT !!!

[Trust_Not_123]

yep, and just as a further note. if you write your own cleaner or any program for that matter that makes system wide changes, i suggest you have a different box that you can practise on. that way there is minimal risk of destroying your data. which is often a bad thing.

[CXGJarrod]

Originally posted here by Jupes
First I'd like to apologise if this has been covered before. I searched the web and antionline and came up blank.

My question relates to the capabilities of the Evidence Eliminator package. Does it actually wipe what it claims? And does it miss any areas that it shouldn't? (assuming you wanted to clean all areas without damaging the OS). I know practically this is very difficult, and in many cases unnecessary. But from an intellectual perspective I am interested in if/how it is achieved.

Also I am aware of the dubious moral and legal practices of Robin Hood Software, the company who make EE. See http://evidence-eliminator-sucks.com/eesucks/index.html . While this site details the immoral advertising practices of the company and some of the difficulties of achieving what Robin Hood Software claims, it does not explain technically whether EE works or not. The site does however link to http://www.radsoft.net/resources/software/reviews/ee/ which has some detailed information on how EE doesn't perform what it claims. But while Radsoft are quite well respected, they are still a competing company with a competing product and I was wondering if there was any other information out there?

Thanks in advance

I have heard both sides of the story. On one hand Evidence Eliminator will erase your data very well (most unerase programs cannot get it back afterwards) but it seems to fail in several tests against machines that are made to recover data. I will try to dig up the website that I got the information from...