NTFS Alternate Data Stream ADS Hidden Stream Detected

Discussion in 'Trojan Defence Suite' started by bvagnoni, Oct 22, 2003.

Thread Status:
Not open for further replies.
  1. bvagnoni

    bvagnoni Registered Member

    Joined:
    Oct 15, 2003
    Posts:
    16
    Dear All;

    NTFS Alternate Data Stream ADS Hidden Stream Detected, this is coming from some .jpg pictures I downloaded off a trusted web site. Basically clipart.

    Can someone please tell what this is and do I need to be concerned about?

    Sincerely

    Brian
     
    bvagnoni, Oct 22, 2003
    #1
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi Brian,
    if they're smaller then 80 bytes no worries at all. The jpg's often have some datastreams, maybe for some identification, copyrights?
    Maybe you can drag it to notepad and see some more from it?
     
    Jooske, Oct 22, 2003
    #2
  3. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi bagnoni, You can set the minimum size of datastreams that you would like shown, I have mine set for 88bytes.
    Gavin has said in the past that it is unlikely that malicious code will be smaller than 256 bytes - Not impossible but unlikely :)
     
    Pilli, Oct 22, 2003
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...