Messages

1

RogueKiller / Re: question on ADS found with roguekiller

« on: July 09, 2018, 04:33:28 PM »

Ok Curson
Thanks for the information. 

So we believe these ADS were created upon Windows being upgraded.  Being that they are replaced/recreated every time the machine is rebooted there seems to be a mechanism in place to recreate them.

2

RogueKiller / Re: question on ADS found with roguekiller

« on: July 07, 2018, 05:32:31 AM »

as requested

3

RogueKiller / question on ADS found with roguekiller

« on: July 05, 2018, 10:52:35 PM »

I have a client pc that was acting strangely- very slow.  Roguekiller found 4 ADS and claimed to have removed but a subsequent scan immediately finds 2 of 4 still there and all 4 there after a reboot.  I admit to not having a great deal of knowledge concerning ads but realize they are data 'forked" into other files that are likely legit.  I'm hoping for some guidance to know what is in the ADS' that RK is detecting.  Here's a screen shot.  I can supply the actual files if that will help
Thanks