OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Windows file problem
From: Flaherty, Jack (ShockroAOL.COM)
Date: Mon Oct 09 2000 - 19:33:43 CDT


Yep. This has been a potential security risk for quite some time now because
these extra file streams can be dropped anywhere (possibly behind important
DLLs, etc.) They're perfect places to hide rootkits, stolen nuclear hard
drive images, etc.

Uhhh...Some white-hat group released a program to find file streams and
delete them if necessary. I thought it was the L0pht, but I can't seem to
remember now and I sure can't find it on their site. URL someone?

amp