Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
May 16th, 2008, 2:11am
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner
(Moderators: Helena, Gavin_Coe, Magnus)
   Alternate Data Stream in TEMP ?
« Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Alternate Data Stream in TEMP ?  (Read 74 times)
Waudiz
Newbie
*





   


Posts: 1
Alternate Data Stream in TEMP ?
« on: Apr 21st, 2008, 3:47am »
Quote Quote  Modify Modify

At each weekly scan I get a report like this:
 
TrojanHunter Scan Report
Saved 2008-04-15 at 18:59
 
Scanning drives C:\ D:\ E:\ F:\
Found NTFS alternate data stream attached to directory: C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34:$DATA
 
Anyone knows what this is? When I delete that TEMP dir it is created again somewhen later. Could not figure out the responsible process for this.
 
Kaspersky AV 7.0 and AVG Anti-Malware 7.5 which both run on this system together with Trojan Hunter 5.0 have not reported anything dangerous.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
Posts: 5270
Re: Alternate Data Stream in TEMP ?
« Reply #1 on: Apr 21st, 2008, 4:01am »
Quote Quote  Modify Modify

Welcome to the forum Waudiz  Wink
 
Quote:
Found NTFS alternate data stream attached to directory: C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34:$DATA

 
This specific ADS is nothing to worry about.  Windows is placing the ADS on this Temp folder.  I get the same thing on both my XP-SP2 system and Vista SP1 Business system.
IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register