Jump to content

ROMANCING AHNASSI download link trouble


Sativarg

Recommended Posts

Hi I am using this space to report some thing I found to day.

 

I had a file on my drive left over that was one of the 0 byte file that I some times get from here. I was trying out a program I'd never used before that finds hidden Alternate Data Streams (ADS)

It notified me that the 0 Byte file 5215-1.0-Unique Landscapes was linked to a stream.

 

1) here is what explorer sees<click

http://files.tagworld.com/bdb15fe6e9174223991cb6cb2a28d53d.jpeg

2) the ADS detector

http://files.tagworld.com/a4a396cca455482e931d0694b2b1ff18.jpeg

3) now view the contents<click

http://files.tagworld.com/159f5126522f40b18182aa8d83d047a7.jpeg

4) looks like an RAR?<click

http://files.tagworld.com/1ec81fd37b514c5eba54df8104418c29.jpeg

5)saving as rar

http://files.tagworld.com/30f856327fa1412482b73475e60e5c96.jpeg

6the file was save in a ads stream.jpg

http://files.tagworld.com/9756fb89d582457095c7b083264c70ff.jpeg

7)Hmm its OK to<click

http://files.tagworld.com/ab6b98140ee641e886f5867a8dfcea13.jpeg

 

What are hidden Alternate Data Streams (ADS)?

NTFS, the filesystem used by Windows NT, Windows 2000 and Windows XP has a feature that is not well documented and is unknown to many developers and most users. This feature - Alternate Data Streams - allows data to be stored in hidden files that are linked to a normal visible file. Streams are not limited in size and there can be more than one stream linked to a normal file.

 

Why does NTFS support streams?

The main (but not only) reason is for Macintosh file support. Files stored on the Macintosh file system consist of two parts (known as forks) - one data fork, and one resource fork. Windows relies on the extension of the file (eg. ".exe") in order to determine which program should be associated with that file. Macintosh files use the resource fork to do this. NT stores Macintosh resource forks in a hidden NTFS stream, with the data fork becoming the main parent file to the stream. ADS has other uses. As just one example, you could store a thumbnail image of a picture in a stream and even an audio track, allowing a single file to have several multimedia components. Some anti-virus programs store checksums in a stream under every file on your disk.

 

The file I got was without any Extension and I believe this has something to do with Macintosh file support. I am only suggesting this as a possibility because so often I here of people having trouble with ZERO byte files that they can not open.

 

I hope this helps some one.

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...