[dba-Tech] hidden files?

MartyConnelly martyconnelly at shaw.ca
Thu Aug 25 15:10:22 CDT 2005


These are probably ADS files Alternate Data Streams.
NTFS files contain one primary stream and, optionally, one or more 
alternate data streams
These streams are great for hiding viruses. Temporary ones are created 
by some ADO methods.
I am not sure but I think restore files are ADS files

Simple viewer with C Source code
http://www.sysinternals.com/Utilities/Streams.html

A more user friendly ADS viewer with a white paper
http://www.crucialsecurity.com/products/index.html

John Bartow wrote:

>Probably the room used by System Restore points. I can't recal off the top
>of my head what you have to do to see those files but it is more than just
>"view hidden and system files"
>
>-----Original Message-----
>From: dba-tech-bounces at databaseadvisors.com
>[mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of Billy Pang
>Sent: Thursday, August 25, 2005 1:38 PM
>To: dba-tech at databaseadvisors.com
>Subject: [dba-Tech] hidden files?
>
>Hello:
>
>windows xp home edition
>
>one of the basic partitions of my computer reports 1.5GB of used space but
>when I open up that partition, there are no files there (except for the
>system folders RECYCLER and System Volume Information; there is nothing in
>the recycler folder but I can't open the System Volume Information folder).
>
>any thoughts?  I am thinking of deleting this partition but am having
>seconds thoughts.
>
>thanks in advance
>
>Billy
>
>
>_______________________________________________
>dba-Tech mailing list
>dba-Tech at databaseadvisors.com
>http://databaseadvisors.com/mailman/listinfo/dba-tech
>Website: http://www.databaseadvisors.com
>
>_______________________________________________
>dba-Tech mailing list
>dba-Tech at databaseadvisors.com
>http://databaseadvisors.com/mailman/listinfo/dba-tech
>Website: http://www.databaseadvisors.com
>
>
>  
>

-- 
Marty Connelly
Victoria, B.C.
Canada






More information about the dba-Tech mailing list