Windows NTFS Alternate Data Streams

Windows NTFS Alternate Data Streams
Don Parker

Windows NTFS Alternate Data Streams 2006-01-02
Anonymous

Very helpful article about a security risk that I was not previously aware of! Thanks for the great article on it....

[ more ] [ reply ]

Windows NTFS Alternate Data Streams 2006-10-13
Anonymous (1 replies)

http://www.securityfocus.com/infocus/1822

This artical's author's info. seems to be mispelled. i think it should be GIAC and nod GICA....

[ more ] [ reply ]

Re: Windows NTFS Alternate Data Streams 2006-10-31
Don Parker

Hello,

Actually GIAC is the certification arm of SANS and the GCIA is one of the certifications that GIAC offers. Hope this clears things up for you. ...

[ more ] [ reply ]

Windows NTFS Alternate Data Streams 2007-12-18
Anonymous

When I went to the web site to download lns my browser informed me that it was a spyware site....

[ more ] [ reply ]

Windows NTFS Alternate Data Streams 2008-01-03
Anonymous

I downloaded a utility named ADSSpy.exe which detects, lists and allows deletion of ads files(entries). I have 2,028 entries, entirely created by ROXIO CD/DVD BURNING software. Are these really necessary and what are they used for?...

[ more ] [ reply ]

Windows NTFS Alternate Data Streams 2008-09-18
Anonymous (1 replies)

Hello, the artcle looks very interesting. I have a small question.I downloaded the lads and lns tools of the sites linked from the article and after run them thwy discovered ads files mainly on the directory I dowloaded and name zone.Identifier. Pls let me know if this is normal because it looks sus...

[ more ] [ reply ]

Re: Windows NTFS Alternate Data Streams 2008-09-23
Anonymous (1 replies)

I also have the same C:\WINDOWS\Cursors\arrow_n.cur:NEDTA.DAT and this stuff \RP357\A0066779.exe:Zone.Identifier and 786 others found... so does this mean the file A0066779.exe is the spyware/trojan??? a better explanation of the tool would be appreciated

thanks...

[ more ] [ reply ]

Re: Re: Windows NTFS Alternate Data Streams 2009-07-24
Anonymous

Zone Identifier is to tell your system to pop up a stupid message every time you use that file (i.e. you downloaded this file from the Internet, are you sure you are not a retard?)

Whose idea was alternate data streams anyways? It wouldn't be so bad - if there were tools *included* with the oper...

[ more ] [ reply ]

Windows NTFS Alternate Data Streams 2008-10-09
Anonymous

When the ADS is saved to a NTFS external drive and then plugged into a MAC running 10.5 how do you view the ADS on a MAC or can you?

The external holds the ADS and is then unplugged from the PC and plugged into the PC. How will the MAC 10.5 see it? ...

[ more ] [ reply ]