Difference between revisions of "StripADS"
(→Description) |
|||
| Line 5: | Line 5: | ||
===Examples=== | ===Examples=== | ||
| − | + | StripADS:"<$FILE_EXE>","<$WINDIR>\*.exe",":*:$DATA","","filesize=197352,md5=23812A64B891E8230F8283D51044886C" | |
| + | |||
| + | This faked example would detect an alternative data stream attached to any ''.exe'' file in the Windows folder that has a size of 197352 bytes and the specified MD5 hash. | ||
===Description=== | ===Description=== | ||
This command can be used to remove ADS streams from files. | This command can be used to remove ADS streams from files. | ||
| − | # It starts, as usual, with a description parameter. [[Description templates]] are welcomed here for a localized end user experience. | + | # It starts, as usual, with a description parameter. [[Description templates]] are welcomed here for a localized end user experience. Wildcards, or after version 1.5.2 generic [[AlgoPrefix|Algo-Prefixes]], are allowed here. {{AlgoPrefix}} |
| − | # Specify the name and path of the file that has the ADS attached. Use [[Path templates|path templates]] if possible. {{PathTemplates}} | + | # Specify the name and path of the file that has the ADS attached. Use [[Path templates|path templates]] if possible. Wildcards, or after version 1.5.2 generic [[AlgoPrefix|Algo-Prefixes]], are allowed here. {{AlgoPrefix}} {{PathTemplates}} |
# Specify the name of the attached ADS. {{PathTemplates}} | # Specify the name of the attached ADS. {{PathTemplates}} | ||
# Use [[Advanced file parameters|advanced file parameters]] to clearly identify the file. | # Use [[Advanced file parameters|advanced file parameters]] to clearly identify the file. | ||
# Use [[Advanced file parameters|advanced file parameters]] to clearly identify the attached stream. | # Use [[Advanced file parameters|advanced file parameters]] to clearly identify the attached stream. | ||
| + | |||
| + | ===Scan Results=== | ||
| + | * The ADS ''file''. | ||
==See also== | ==See also== | ||
* [[Advanced file parameters]] | * [[Advanced file parameters]] | ||
| + | * [[AlgoPrefix]] | ||
* [[Description templates]] | * [[Description templates]] | ||
* [[Path templates]] | * [[Path templates]] | ||
Revision as of 13:08, 18 February 2008
Scans for an ADS attached to an existing file.
Usage
StripADS:[description],[path & filename],[ads name],<advanced file parameters>,<advanced file parameters for ads stream>
Examples
StripADS:"<$FILE_EXE>","<$WINDIR>\*.exe",":*:$DATA","","filesize=197352,md5=23812A64B891E8230F8283D51044886C"
This faked example would detect an alternative data stream attached to any .exe file in the Windows folder that has a size of 197352 bytes and the specified MD5 hash.
Description
This command can be used to remove ADS streams from files.
- It starts, as usual, with a description parameter. Description templates are welcomed here for a localized end user experience. Wildcards, or after version 1.5.2 generic Algo-Prefixes, are allowed here. AP
- Specify the name and path of the file that has the ADS attached. Use path templates if possible. Wildcards, or after version 1.5.2 generic Algo-Prefixes, are allowed here. AP PT
- Specify the name of the attached ADS. PT
- Use advanced file parameters to clearly identify the file.
- Use advanced file parameters to clearly identify the attached stream.
Scan Results
- The ADS file.
