<![CDATA[
<p><a href="https://www.hahwul.com/2015/03/22/ntfs-file-system-adsalternate-data/" target="_blank" class="ke-link">https://www.hahwul.com/2015/03/22/ntfs-file-system-adsalternate-data/</a>   </p><p>아무 것도 아닌줄 알았는대 바이러스도 숨길수 있겠네요.</p><p>echo "codeblack" >> README.txt:codeblack</p><p> </p><p><a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-zero-day-bug-exploited-to-push-malware/" target="_blank" class="ke-link">https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-zero-day-bug-exploited-to-push-malware/</a>   </p><p>사용자 모르게 숨길수 있다 하네요.</p><p> </p><p><a href="https://www.sciencedirect.com/topics/computer-science/alternate-data-stream" target="_blank" class="ke-link">https://www.sciencedirect.com/topics/computer-science/alternate-data-stream</a>  </p><p> </p><p><a href="https://tmairi.github.io/posts/extracting-alternate-data-streams-with-linux/" target="_blank" class="ke-link">https://tmairi.github.io/posts/extracting-alternate-data-streams-with-linux/</a>     </p><p> </p><p><a href="https://learn.microsoft.com/en-us/sysinternals/downloads/streams" target="_blank" class="ke-link">https://learn.microsoft.com/en-us/sysinternals/downloads/streams</a>   </p><p>스트림 삭제 </p><p>streams.exe -d -s c:\</p><p> </p><p><a href="https://www.bleepingcomputer.com/tutorials/windows-alternate-data-streams/" target="_blank" class="ke-link">https://www.bleepingcomputer.com/tutorials/windows-alternate-data-streams/</a>   </p><p><a href="https://www.bleepingcomputer.com/download/ads-spy/" target="_blank" class="ke-link">https://www.bleepingcomputer.com/download/ads-spy/</a></p><p> </p><div class="figure-img" data-ke-type="image" data-ke-style="alignCenter" data-ke-mobilestyle="widthOrigin"><img src="https://t1.daumcdn.net/cafeattach/1HRzv/3388817ef2f12d6ebf732ec11fc0b065edc42603" class="txc-image" data-img-src="https://t1.daumcdn.net/cafeattach/1HRzv/3388817ef2f12d6ebf732ec11fc0b065edc42603" data-origin-width="453" data-origin-height="411"><div class="figcaption">이런 것이 나옴 -_- 헐</div></div><p>Alternate Data Streams (ADS) are pieces of info hidden as metadata on files on NTFS drives. They are not visible in Explorer and the size they take up is not reported by Windows. Recent browser hijackers started using ADS to hide their files, and very few anti-malware scanners detect this. Use ADS Spy to find and remove these streams. <br>Note: this app can also display legitimate ADS streams. Don't delete streams if you are not completely sure they are malicious! </p><p> </p><p>대체 데이터 스트림(ADS)은 NTFS 드라이브의 파일에 메타데이터로 숨겨진 정보 조각입니다. 탐색기에는 표시되지 않으며 차지하는 크기는 Windows에서 보고되지 않습니다. 최근 브라우저 하이재커는 ADS를 사용하여 파일을 숨기기 시작했으며 이를 감지하는 맬웨어 방지 스캐너는 거의 없습니다. ADS Spy를 사용하여 이러한 스트림을 찾아 제거하십시오. <br>참고: 이 앱은 합법적인 ADS 스트림도 표시할 수 있습니다. 악의적인지 확실하지 않은 경우 스트림을 삭제하지 마십시오!</p><hr data-ke-style="style3"><p><a href="https://github.com/ventoy/Ventoy/issues/1940" target="_blank" class="ke-link">https://github.com/ventoy/Ventoy/issues/1940</a></p><p>결론은 바이러스는 아니라고 하네요.</p><p>echo  123 > abc.txt:ads.txt</p><p>이렇게 해서 복사 해보면 된다고 하는대 이렇게 하니 정말 그렇게 되는 군요 ㅎㅎ</p><p>바이러스가 아니라 다행입니다.</p><p> </p><p>exfat도 기존 fat32를 따르기 때문에 그런가 아닌가? 하고 설명 하네요 ㅎㅎ.. 미스터리 합니다 아무튼.. 일종의 버그 같기도 하고요. </p><div class="figure-img" data-ke-type="image" data-ke-style="alignCenter" data-ke-mobilestyle="widthOrigin"><img src="https://t1.daumcdn.net/cafeattach/1HRzv/edaf88fd90548e5d4e325e74b576af70c0871aa3" class="txc-image" data-img-src="https://t1.daumcdn.net/cafeattach/1HRzv/edaf88fd90548e5d4e325e74b576af70c0871aa3" data-origin-width="449" data-origin-height="279"></div><div class="figure-img" data-ke-type="image" data-ke-style="alignCenter" data-ke-mobilestyle="widthOrigin"><img src="https://t1.daumcdn.net/cafeattach/1HRzv/f3065cecd2296ac7a3ca5e4cdd3b7f4bd0c4a520" class="txc-image" data-img-src="https://t1.daumcdn.net/cafeattach/1HRzv/f3065cecd2296ac7a3ca5e4cdd3b7f4bd0c4a520" data-origin-width="421" data-origin-height="548"></div><p>efat 인대 이렇게 물어 보더라 -_- 수상함 ㅋㅋ </p>
<!-- -->
]]>
카페 게시글
자유 게시판
해당 속성을 제외하고 이 파일을 복사하시겠습니까? usb 복사 경고 fat32
동우
추천 0
조회 369
22.10.31 03:33
댓글 6
북마크 번역하기 공유하기 기능 더보기
다음검색
첫댓글 https://answers.microsoft.com/en-us/windows/forum/all/are-you-sure-you-want-to-copy-this-file-without/fa810b7e-f228-4661-9789-2090175dd7de
Are you sure you want to copy this file without its properties? 영어로
https://www.vconsole.com/download
473.81-desktop-win10-win11-64bit-international-dch-whql.exe
ipfilter.zip
애내들도 물어 봤다 수상함 ㅎㅎ
https://youtu.be/0p8gyyHCg0Y
PLAY
Hidden data in ADS
Hidden data in ADS security regedit