A shortcut for hiding files in Windows-NTFS file stream (ADS)

I,

1. Open the CMD command prompt in any NTFS partition and enter echo
ABCDE> a.txt: B .txt, a file named a.txt will be generated in the current directory, but the file size is
0 bytes. NO content is displayed after the command is opened. Only the written ABCDE can be viewed by running notepad a.txt: B .txt.

Optional |. exe |. asp;
B .txt can also specify the file name and suffix. (You can hide any token information in any file, but you only need to expose the Virtual File Name (B .txt) behind it ),
No one else can view hidden information)

3. The file containing the hidden information can continue to hide other content. In the above example, we can still use the echo command.
12345> a.txt: c.txt.
To hide information, run the notepad command.
A.txt: After c.txt is opened, the 12345field of information will be found, while abcdestill exists in a.txt: B .txt.

----------------------------------------------------------------------------------------------------------------------------- Gorgeous asymmetric split line

Ii. Hide files

1. Similar to the above, the command format is type file name + suffix> Any file: any file name + original file suffix,
For example, type 1.jpg>> 2.abc: 1.jpg
When writing 1.jpg content to the 2.abc: 1.jpg file, you can change the content to 2.abc: 1.jpg at will. However, you can choose to use a normal file like the file to be hidden, so that the file is more concealed.

2. When opening a hidden file, note that if you use the built-in system, you can directly enter the program name. For example, you can use a drawing tool to open 2.abc: 1.jpg to be mspaint.
2. ABC: 1.jpg
If you use a third-party software to open it, you need to complete the path. For example, open 2.abc: 1.jpgwith acdsee9.exe drive letter:/2.abc: 1.jpg

Note: In the same way, other files can be hidden as long as the corresponding program is opened based on the suffix, and multiple files can be hidden as the hidden information.
Drawing tool: mspaint
Executable program EXE: Start

3. Hiding Trojans

1. Similar to hidden files, Type
Muma.exe> 2.jpg: muma.exe, write muma.exeto the stream file 2.jpg: muma.exe,
When opening, the absolute path of the Start stream file is: start C:/2.jpg: muma.exe;
Otherwise, the system prompts that the parameter is incorrect.

Bytes -----------------------------------------------------------------------------------------------------------------------------


Gorgeous asymmetric split line




Note:

1. Stream files cannot be directly transmitted over the network. You must use WinRAR to "save file stream data" in the advanced options during compression.

2. The size of the created stream file is the same as that of the original file. Only the size of the hidden file is included after compression, indicating that the NTFS file stream still occupies disk space.

3. stream files can only be stored and run in the NTFS partition (compress "save file stream data" can also be stored to FAT32, but the extracted files are still files with lost data streams ).
To other file systems, even if it is put back, NTFS data streams will be lost.