Alternate Data Stream Detected

Discussion in 'Trojan Defence Suite' started by Snook, Aug 12, 2004.

Thread Status:
Not open for further replies.
  1. Snook

    Snook Registered Member

    Joined:
    Jun 19, 2003
    Posts:
    182
    How would I submit an Alternate Data Stream to DiamondCS? TD3 does not give me an option to submitt this finding for inspection.
     
  2. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
  3. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Snook, I believe these data streams are usually a part of another filewhich is usually shown in the console such as thumbs.db, you can see what is in them by right clicking the stream, cut & paste this into a .txt file and or a copy of the complete file preferably zipped to suibmit@diamondcs.com.au.
    Obviously zero byte files can just be deleted and anything less than about 128 bytes can be ignored as harmless.

    HTH Pilli
     
  4. Snook

    Snook Registered Member

    Joined:
    Jun 19, 2003
    Posts:
    182
    Thanks all for the reply. I'll do as described, (cut/paste/zip/email, etc.) for inspection.
     
Thread Status:
Not open for further replies.