Turmoil, this particular trick (alternate data streams) has been in place since Windows NT. Some other sources that might be helpful or add more.
http://patriot.net/~carvdawg/docs/dark_side.html
http://www.heysoft.de/nt/ep-lads.htm
Microsoft Q188806 Article
http://www.ciac.org/ciac/bulletins/m-034.shtml