Saturday, June 2, 2012
GK Alternate Data Streams
[ GK ADS (ALTERNATE DATA STREAMS) ]
Author: Ronnie c. Pedales ("NIERO")
Version 1.0.1 September 28, 2010
/* FULLY FUNCTIONAL SHIFT FROM BETA REALEASE */
--BUG FIXED ON ADS EXTRACTION
--ADDED LADS ADS DETECTION UTILITY
--ADDED QUICK EDIT MODE
--ADDED INFOBOX FROM NIRCMD
Version 1.0 September 17, 2010
--Folder binding Support
--File Binding Support
--TXT binding support
Alternative Data Stream support was added to NTFS (Windows NT, Windows 2000 and Windows XP) to help support Macintosh Hierarchical File System (HFS) which uses resource forks to store icons and other information for a file. While this is the intended use (as well as a few Windows internal functions) there or other uses for Alternative Data Streams that should concern system administrators and security professionals. Using Alternative Data Streams a user can easily hide files that can go undetected unless closely inspection.
Hides Data into NTFS Alternate data Stream (Fork filesystem) Data hidden by this tool is undetectable by normal users the filesize of the original file binded and its file hash remain unchanged
no matter what how many ADS files you binded to the file.
NOTES and Known Bugs:
* Extraction of ADS into folders is unsupported by the extract option in this release i will definitly make up an update for these
* Files With Long File names will give an error message upon proccessing try to rename those files to short file names to fix this error
* Alternate way of Deleting an ADS file is to move it to an either FAT16 or FAT32 drive
HOW TO USE :????
Easy Just drag and Drop The required files into the console window and it will do the job !
EXTRACTION OF ADS LOOK FOR THE COLON DELIMETER
The filename before the colon is the hidden data
type this filename as indicated..
For Bugs and Constructive Comments Please Visit Our Forum
In The GK APPZ Subsection
Special Thanks To
and the other forum members
Hope This app will be useful for you!!
GK LEAVE NO KUL BEHIND .................................
HOW TO USE ???