Artifacts after using Eraser 6.0.8.2273

If indeed it is the Eraser.ddl from Heidi, it is a single wipe utillity that would leave little to no data. The approach we took was to review the rregistry to determine a timeline in which it was run as it creates lnk files, however since it has learnt to wipe up well after itself. The log files however should give you an idea of when the application has been run.

With regards to the torrents, have you been able to identify any torrent trackings in fileslack which will point you to when, where and how the torren has been downloaded, the date stamp is in unix but you can find an online convertor these files should then enable you to link it to a specific persons ssid number.