East-Tec Eraser

Is there anyway to recover files erased using East-Tec Eraser? We had a disgruntled employee do a hatchet job on his c-drive.  
keljonesAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

cityhelperCommented:
No - I use this program and if he/she set the settings high enough, it's impossible to recover the information with either software OR hardware techniques.  If by chance the setting was set on the lowest setting you may be able to get some of the data back using hardware techniques but that would require you to contact a data recovery company.  They will probably charge you whether they get any data off or not but I highly doubt that the setting was on low.  If he/she knew enough to use this program they would know enough to set it beyond Department of Defense protection settings (which is impossible to get coherent data from it).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
hgottfriedCommented:
Depending on the settings and if the drive was defragged after the "earasure".  If they used the Peter Gutmann method of Secure Deletion of Data from Magnetic and Solid-State Memory then it is highly unlikley although it can be done.

The general concept behind an overwriting scheme is to flip each magnetic domain on the disk back and forth as much as possible (this is the basic idea behind degaussing) without writing the same pattern twice in a row. If the data was encoded directly, we could simply choose the desired overwrite pattern of ones and zeroes and write it repeatedly.

Data overwritten once or twice may be recovered by subtracting what is expected to be read from a storage location from what is actually read. Data which is overwritten an arbitrarily large number of times can still be recovered provided that the new data isn't written to the same location as the original data (for magnetic media), or that the recovery attempt is carried out fairly soon after the new data was written (for RAM). For this reason it is effectively impossible to sanitise storage locations by simple overwriting them, no matter how many overwrite passes are made or what data patterns are written.

However by using the relatively simple methods the task of an attacker can be made significantly more difficult, if not prohibitively expensive.
0
Rich RumbleSecurity SamuraiCommented:
speaking about prohibitively expensive, OnTrack Data Recovery tools have served us well for a number of years. I'd suggest them, and even if there appears to be physical damage or the HD is making weird sounds you could give Spin-Rite a try http://www.grc.com/sr/testimonials.htm.
-rich
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.