ADS Hidden Stream/Symantec Antiviri?

Discussion in 'Trojan Defence Suite' started by fred22, Dec 6, 2004.

Thread Status:
Not open for further replies.
  1. fred22

    fred22 Registered Member

    Joined:
    Dec 6, 2004
    Posts:
    229
    hi, recently i changed to diff antivirus program
    Symantec Antivirus Corp 9.0.2.1000

    TDS3 scanned and found some streams including this 493 bytes from syma.
    a search dint came to anything thats why im posting it here just in case ;)
    should i delete it or is it save?

    btw tds also found streams i my Mirc/ Invision script folder
    any info on this would be appriciated, thanks

    http://img96.exs.cx/img96/1838/t1htds1.png
    http://img96.exs.cx/img96/6392/a2mtds2.png
     
  2. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Fred22, You can delete all of those streams. The kavich's are left over from KAV antivirus, so you probably had the latest KAV installed recently as it creates some streams to speed up scanning
    Streams smaller than 128 bytes are usually deemed as safe the MZ.exe I have seen before and if I remeber correctly it is not dangerous.

    HTH Pilli
     
  3. fred22

    fred22 Registered Member

    Joined:
    Dec 6, 2004
    Posts:
    229
    Hi Pilli, thx for the clearup on it, although i didnt have KAV installed
    i tested nod32/mks_2004 bfore though
    so basically its from older viri software?

    nway i leave it alone then. ;)
     
  4. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    I have only seen those streams associated woth KAV and I do not think that NOD uses streams. You can delete them anyway.
    Quite often some images create streams of 88 bytes so I have TDS Adstream options set to Ignore streams smaller than 90 bytes.

    Pilli :)
     
Thread Status:
Not open for further replies.