Alternate Data Stream

[Steven]

I ran my anti trojan software and it found two alternate data streams. Is
this something I need to be concerned with? What is an ADS? Is it some sort
of hacker thing?

TIA

Steven Connor

 

[Guest]

You might try the anti trogan web site since they make
that program and Microsoft doesn't.

 

[Steven]

I bet they didn't make the alternate data stream though, you wanna bet?

Steven

 

[Carrie Garth]

<SNIP> What is an ADS? <SNIP>

For some information on Alternate Data Streams see:

- A Programmer's Perspective on NTFS 2000 Part 1: Stream and Hard Link
By Dino Esposito
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnfiles/html/ntfs5.asp

- Sysinternals Freeware - Utilities for Windows NT and Windows 2000 -
Miscellaneous Tools for Windows
http://www.sysinternals.com/ntw2k/source/misc.shtml#Streams

 

[Steven]

I really didn't want to read a book. I just want to know if it is something
to be worried about. Would someone please give me the readers digest
condensed version?

TIA

Steven Connor

 

[Carrie Garth]

I really didn't want to read a book. I just want to know if it is something
to be worried about. <SNIP>

Perhaps the experts in the microsoft.public.security.virus group could answer your
questions.

Your newsgroup message header seems to indicate that you are posting to the Microsoft
Public Newsgroups using the Microsoft Communities Web Page. If I am correct, if you
click the first link below it will open your browser to:

Microsoft Communities Newsgroups Web Interface: microsoft.public.security.virus
http://communities2.microsoft.com/c...curity.virus&cat=en-us-security&lang=en&cr=US

If you read newsgroups using a NNTP newsreader, such as Outlook Express, and
use the msnews.microsoft.com news server, here is a link:
news://msnews.microsoft.com/microsoft.public.security.virus