Super User
Super User

Questions tagged [alternate-data-stream]

Alternate Data Streams are a method of storing multiple sets of data under an existing file in NTFS. Use this tag only when asking about this feature of NTFS.

33 questions
104
votes
5 answers

Why the heck does NTFS allow invisible executables?

You can hide any file inside of another file just by typing: type sol.exe > container.txt:sol.exe and to run the file hidden file just use: start c:\hide\container.txt:sol.exe But the crazy part about this is it doesn't increase the size of the…
Kredns
  • 3,067
20
votes
2 answers

NTFS alternate stream in compressed archive?

Does any of the major compressed archive formats in Windows (e.g. zip, rar, 7z) support NTFS alternate data stream?
netvope
  • 5,475
15
votes
1 answer

How can I add metadata to NTFS files/folders?

I want to tag different file types (i.e. .pdf, .epub, .iso, .bin, folders,..) using the same descriptive fields. For example i would like a metadata field "type" which would be "eBook" on pdf- and epub-files, "CD-Image" on iso- and bin-files. I read…
Pwdr
  • 390
10
votes
2 answers

Alternate Data Stream "Win32App_1" attached to a large number of folders

My Windows 10 machine has a large number of NTFS Alternate Data Streams named Win32App_1 attached to various folders throughout the system drive. NoVirusThanks' Stream Detector detects them as being zero size $DATA streams. Does anyone know what…
Hannah Vernon
  • 628
10
votes
2 answers

Is the origin of a file traceable? If it is how can I sanitise it?

If I copied a file from my PC to a newly formatted USB flash drive, took the file to a public PC and public Internet connection, created from there a new email, created a new account on an uploading server, uploaded the file, shared a downloading…
adam
  • 111
9
votes
4 answers

Anybody have a legitimate use for Alternate Data Streams in NTFS?

I have been reading about alternate data streams and I am kind of curious if any big applications for Windows actually uses this feature of NTFS. I am also really curious as to whether or not traditional backup and archiving utilities back up this…
qroberts
  • 5,329
7
votes
3 answers

Sending file with alternate data stream?

I got .vbs file which has alternate data stream added with notepad. is there way to send it to someone without losing that. I tried to search for answer, but it seems like that alternate data stream, can't be moved to another device. Is that…
Aapo Pesonen
  • 101
6
votes
2 answers

Hard/SymLinks and Alternate Data Streams

An interesting thought just occurred to me while thinking about NTFS. NTFS supports hard links, symbolic links, and Alternate Data Streams. Is it possible for an ADS to be a link to another file? Conversely, do the Alternate Data Streams attached…
Andrew Lambert
  • 7,805
5
votes
2 answers

How do I execute a batch file in an alternate data stream in Windows 7?

Normally, after creating an executable as an alternate data stream, for instance: type exec_this.bat > C:\blank.txt:exe.bat one could simply say start C:\blank.txt:exe.bat to run the executable. In Windows 7, all I seem to get is "Access is…
Joseph Hansen
  • 4,510
5
votes
2 answers

Read alternate data streams over SMB with Linux

I recently did a CTF involving a file on a samba share which had a password in an alternate data stream. To read it I had to connect using Windows, but I'm curious if there's any way to read ADS from linux, either using SMBclient or another tool.
clubby789
  • 217
5
votes
3 answers

Does moving a file outside NTFS lose data in alternate data streams?

I have a lot of files on a machine running Windows Server 2008 which I wanted to move to a Fedora machine. How can I keep the attributes stored in, for example, media files (date taken, rating, length, etc.) while transferring it to outside the…
Jay Wick
  • 6,817
4
votes
2 answers

Starting executables in alternate data streams

I've read an article on this topic, and I know running executables from Alternate Data Streams (ADS) is disabled in Windows 7. Is there any alternate way to achieve it?
fackeid
  • 49
4
votes
5 answers

Good software to handle NTFS alternate data stream in windows explorer?

I found one, but it seems to support XP only (I'm not sure) http://www.codeproject.com/KB/shell/csadsdetectorarticle.aspx Do you know any alternate data stream plug-in or add-on for Windows 7?
netvope
  • 5,475
3
votes
2 answers

How to get rid of the File Access Security Warning for EXEs downloaded with Firefox 26+?

When downloading an executable file in Firefox (26) windows shows the "File Access - Security warning". Since I am not stupid and don't try to execute downloaded files I don't trust and clearly don't need to be asked again every time I download…
ThiefMaster
  • 6,505
  • 9
  • 38
  • 43
3
votes
1 answer

Archive / compression formats or tools which support multiple file forks or streams?

Lately I've become interested in the ability of several filesystems including Apple's HFS+ and Microsoft's NTFS which support two or more data streams. In Mac terminology these were most widely known before OS X as the separate data and resource…
hippietrail
  • 4,605
1
2 3