Dennis Borkhus-Veto wrote: > I have received the following error on a win 2003 svr with exchange > 2003 how should I go about checking this. > > rootcheck Rule: 510 fired (level 7) -> "Host-based anomaly detection > event (rootcheck)." Portion of the log(s): > > NTFS Alternate data stream found: 'C:\/Program > Files/Exchsrvr/Mailroot/vsi > 1/Queue/NTFS_63bb493301c81d7f00000d86.EML:PROPERTIES-LIVE'. Possible > hidden content. > > http://www.heysoft.de/Frames/f_faq_ads_en.htm
They have a fair amount of info about alternate data streams in Windows -- Regards, Will "The worst that can happen under monarchy is rule by a single imbecile, but democracy often means the rule by an assembly of three or four hundred imbeciles" -- Robert Anton Wilson
