View Full Version : NTFS Alternate Data Streams
SpongeBob
April 3rd, 2004, 07:03 PM
I run WinXP Pro. I have just D/L and installed TDS-3, which I've been configuring. I set the options to "scan ntfs ADS hidden streams" and "show all ntfs ADS streams" which I assume is the safest thing to do. I ran a scan everything was fine except it turned up lots of these ADS streams files.
These files are the summary information of files which is accessed by right clicking on the file, selection properties, etc, etc. I use this facility to keep file comments and/or descriptions in. I have explorer setup to show the comments column when viewing folders contents.
Obviously these are not trojans, but they will keep turning up in a scan. So is there any way that I can exclude the file summary info from being scanned?
Regards, Bob
TheQuest
April 3rd, 2004, 08:15 PM
Hi, SpongeBob
If you go to TDS's Scan Control>Stream Options, you can alter the size too about 150 to 250.
Or you can go to Windows explorer>[or any folder] Tools>Folder Options>View>Do not cache thumbnails, and check it, that should stop it.
Hope this is of some help.
TheQuest 8)
SpongeBob
April 4th, 2004, 05:43 PM
-{ Quote: " quoting: TheQuest link=board=5;threadid=26862;start=0#msg155137 date=1081041330]
If you go to TDS's Scan Control>Stream Options, you can alter the size too about 150 to 250." }-
Thanks.. After I posted my question I found the stream options, but I was still unsure what was the best size to set it to... It doesn't give much information/recommendations.
-{ Quote: "Or you can go to Windows explorer>[or any folder] Tools>Folder Options>View>Do not cache thumbnails, and check it, that should stop it.
" }-
I wouldn't have known this was connected with ADS at all! I thought this was only for thumbnails, pictures etc, and not the file comments information. If I do this will I still be able to make use of/display file comments, which I use a lot?
Thanks, Bob
TheQuest
April 4th, 2004, 06:07 PM
Hi, SpongeBob
-{ Quote: " I was still unsure what was the best size to set it to... It doesn't give much information/recommendations." }-
Here is a link to info on Data Stream's:-
http://www.wilderssecurity.com/showthread.php?t=22026;start=msg131925#msg131925
-{ Quote: "I thought this was only for thumbnails, pictures " }-
Yes you are right but a lot of stream's are thumbs.db, which is windows cache of the thumbnail's so it stop them stream's.
Hope this is of some help
TheQuest 8)
Edit:-More Info on Data Streams:-
http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=data+streams&btnG=Google+Search
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums