[dba-Tech] hidden files?

John Bartow john at winhaven.net
Thu Aug 25 17:35:21 CDT 2005


Thanks Marty,
Interesting - ActiveSync for (PocketPCs) uses an ADS.

Crucial security sure has a dumb form to fill in! I had to remove all
formatting from the phone numbers and add a fake fax number. I had to guess
at the formatting part :o( 

-----Original Message-----
From: dba-tech-bounces at databaseadvisors.com
[mailto:dba-tech-bounces at databaseadvisors.com] On Behalf Of MartyConnelly

These are probably ADS files Alternate Data Streams.
NTFS files contain one primary stream and, optionally, one or more alternate
data streams These streams are great for hiding viruses. Temporary ones are
created by some ADO methods.
I am not sure but I think restore files are ADS files

Simple viewer with C Source code
http://www.sysinternals.com/Utilities/Streams.html

A more user friendly ADS viewer with a white paper
http://www.crucialsecurity.com/products/index.html




More information about the dba-Tech mailing list