2 days to learning all about NTFS ADS viruses.

[MrLinus]

Turmoil, this particular trick (alternate data streams) has been in place since Windows NT. Some other sources that might be helpful or add more.

http://patriot.net/~carvdawg/docs/dark_side.html
http://www.heysoft.de/nt/ep-lads.htm
Microsoft Q188806 Article
http://www.ciac.org/ciac/bulletins/m-034.shtml

[ali1]

Hello Everyone and thankyou for your feedback.
Yay I finally got rid of the red dots.
Deaflamb thankyou for pointing out that typing mistake.I'm glad people liked this report.For people who want to learn more about NTFS ADS,I wrote another article on it.You can get it for free from my website:
http://www.virustimes.cjb.net/stunts/stunts.html
Thanks again everyone.

[foxyloxley]

Nice and easy to comprehend, then I found the link by sysmin770, and now I've really got some reading to do, I am up to speed on encryption techniques and codes, but this is a real big box of tricks I'm getting into now. Advice on site has been of a consistent high quality, with the emphasis on three 'RE's REsearch, REading and REmembering, have printed out copies for my own use, and am starting to gain a really impressive pile of books and notes.
Wife is not too impressed, but baby loves the marker pens ?? Can honestly say that I have learnt more here in two months, than in the previous couple of years, although at this rate I'll run out of (real) memory pretty soon.