Streams
Živjo.
Kako zbrisati to, kar je javil rootkitrevealer?
C:\Documents and Settings\Klemen\Local Settings\Temp\$$$reghive 3.11.2006 21:41 540.00 KB Hidden from Windows API.
S pomočjo programa streams iz Sysinternalsove strani.
Nimam pojma kaj to pomeni in kaj moram naredit oz. vtipkat.
Introduction
The NTFS file system provides applications the ability to create alternate data streams of information. By default, all data is stored in a file’s main unnamed data stream, but by using the syntax “file:stream”, you are able to read and write to alternates. Not all applications are written to access alternate streams, but you can demonstrate streams very simply. First, change to a directory on a NTFS drive from within a command prompt. Next, type “echo hello > test:stream”. You’ve **** created a stream named ‘stream’ that is associated with the file ‘test’. Note that when you look at the size of test it is reported as 0, and the file looks empty when opened in any text editor. To see your stream enter “more
-s
Recurse subdirectories.
-d
Delete streams.
Streams takes wildcards e.g. ‘streams *.txt’.
Hvala za pomoč!
Forum je zaprt za komentiranje.