Results 1 to 3 of 3

Thread: ADS Scanner Help Needed

  1. #1
    Junior Member
    Join Date
    Nov 2006
    Posts
    1

    Default ADS Scanner Help Needed

    I just noticed that in the MISC TOOLS section, there is an ADS scanner. I thought I'd try it out and see if it found anything on my system, and it did.

    It found a bunch of .jpg files and gave results like this:

    E:\<directory path>\<image name.jpg> : Q30lsldxJoudresxAaaqpcawXc (10120 bytes)

    WTF is this all about?

  2. #2
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hi Tangles

    You do understand alternate data files are used by windows ?
    Can be used by malware to though.
    Some information can be found >
    http://support.microsoft.com/kb/105763
    ~~~~~~~~~~~~~~~~~~~~~~~
    Microsoft MVP Windows-Security 2006

  3. #3
    Member of Team Spybot PepiMK's Avatar
    Join Date
    Oct 2005
    Location
    Planet Earth
    Posts
    3,601

    Default

    The ADS scanner already hides some default ADS types imho. Suggestion: use FileAlyzer to open such a file, on its "Streams" tab, you can view the contents of this ADS stream. If it's about images (only search results I found for that name btw), it may just be a picture thumbnail or similar...
    Just remember, love is life, and hate is living death.
    Treat your life for what it's worth, and live for every breath
    (Black Sabbath: A National Acrobat)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •