Re: NTNamedStreamRead() openNamedStream errors
I recommend opening a PMR. Before opening the PMR, you should collect a SERVICE trace of a command line selective backup of that specific file and have it ready for support. Del "ADSM: Dist Stor Manager" wrote on 04/12/2018 08:42:57 AM: > From: Zoltan Forray > To: ADSM-L@VM.MARIST.EDU > Date: 04/12/2018 08:43 AM > Subject: Re: NTNamedStreamRead() openNamedStream errors > Sent by: "ADSM: Dist Stor Manager" > > Thank you for the info. I would have thought the ISP client could handle > ADS. The server should be running the University requires A/V program so I > would not think it is a infection. > > IBM - your thoughts on this? > > On Wed, Apr 11, 2018 at 9:05 PM, Harris, Steven < > steven.har...@btfinancialgroup.com> wrote: > > > Zoltan > > > > I think the problem is the colon in the file name. > > > > Windows has the capability to write multiple streams to the same file. > > The streams are differentiated by a colon and the the stream id. > > > > At least that’s the gist of it. See https:// > urldefense.proofpoint.com/v2/url? > u=https-3A__www.owasp.org_index&d=DwIFaQ&c=jf_iaSHvJObTbx- > siA1ZOg&r=0hq2JX5c3TEZNriHEs7Zf7HrkY2fNtONOrEOM8Txvk8&m=FLLADfxjAevhtLY- > M_Ke4zRAAdenQZiUhYxCwFTBJpY&s=i6qsSsiPIxgU9BYZcyOwsI6PZXgSP4gvK2h3NDQrank&e=. > > php/Windows_::DATA_alternate_data_stream > > Often used by hackers to hide stuff apparently. > > > > Cheers > > > > Steve > > > > Steven Harris > > TSM Admin > > Canberra Australia > > > > > > -----Original Message- > > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of > > Zoltan Forray > > Sent: Thursday, 12 April 2018 3:40 AM > > To: ADSM-L@VM.MARIST.EDU > > Subject: [ADSM-L] NTNamedStreamRead() openNamedStream errors > > > > Has anyone seen these kind of errors? A user has been having these errors > > for a long time (they manage their own box and thus din't notice these > > errors for 9+ months) > > > >TSM return code : 104 > >TSM file : ..\..\common\winnt\psmech.cpp (6583) > > 04/10/2018 22:58:04 ANS0361I DIAG: NTNamedStreamRead(): openNamedStream > > S:\arts-data\Private Directories\jwaltonen\Muse\ > > Muse\Exceptions\AdobeMuse7.0-mul\Install Adobe > > Muse.app\Contents\Resources\Adobe > > Muse\Contents\Resources\META-INF\AIR\extensions\com.adobe. > > oobelib.extensions\META-INF\ANE\MacOS-x86\OOBELibANE. > > framework\Versions\Current:AFP_AfpInfo: > > RC=104 > > 04/10/2018 22:58:04 ANS5250E An unexpected error was encountered. > >TSM function name : openNamedStream > >TSM function : CreateFile() returned '2' for file ':AFP_AfpInfo' > > > > All Google hits are for a much older client - they are fairly current at > > 7.1.6.5 on a Windows 2012 server. > > > > -- > > *Zoltan Forray* > > Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator Xymon > > Monitor Administrator VMware Administrator Virginia Commonwealth University > > UCC/Office of Technology Services www.ucc.vcu.edu zfor...@vcu.edu - > > 804-828-4807 Don't be a phishing victim - VCU and other reputable > > organizations will never use email to request that you reply with your > > password, social security number or confidential personal information. For > > more details visit https://urldefense.proofpoint.com/v2/url? > u=http-3A__phishing.vcu.edu_&d=DwIFaQ&c=jf_iaSHvJObTbx- > siA1ZOg&r=0hq2JX5c3TEZNriHEs7Zf7HrkY2fNtONOrEOM8Txvk8&m=FLLADfxjAevhtLY- > M_Ke4zRAAdenQZiUhYxCwFTBJpY&s=kW3hJburmEq5_GBZnEAuvIwlFNjWVI5jNnlzLgghN7k&e= > > > > > > This message and any attachment is confidential and may be privileged or > > otherwise protected from disclosure. You should immediately delete the > > message if you are not the intended recipient. If you have received this > > email by mistake please delete it from your system; you should not copy the > > message or disclose its content to anyone. > > > > This electronic communication may contain general financial product advice > > but should not be relied upon or construed as a recommendation of any > > financial product. The information has been prepared without taking into > > account your objectives, financial situation or needs. You should consider > > the Product Disclosure Statement relating to the financial product and > > consult your financial adviser before making a decision about whether to > > acquir
Re: NTNamedStreamRead() openNamedStream errors
Thank you for the info. I would have thought the ISP client could handle ADS. The server should be running the University requires A/V program so I would not think it is a infection. IBM - your thoughts on this? On Wed, Apr 11, 2018 at 9:05 PM, Harris, Steven < steven.har...@btfinancialgroup.com> wrote: > Zoltan > > I think the problem is the colon in the file name. > > Windows has the capability to write multiple streams to the same file. > The streams are differentiated by a colon and the the stream id. > > At least that’s the gist of it. See https://www.owasp.org/index. > php/Windows_::DATA_alternate_data_stream > Often used by hackers to hide stuff apparently. > > Cheers > > Steve > > Steven Harris > TSM Admin > Canberra Australia > > > -Original Message- > From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of > Zoltan Forray > Sent: Thursday, 12 April 2018 3:40 AM > To: ADSM-L@VM.MARIST.EDU > Subject: [ADSM-L] NTNamedStreamRead() openNamedStream errors > > Has anyone seen these kind of errors? A user has been having these errors > for a long time (they manage their own box and thus din't notice these > errors for 9+ months) > >TSM return code : 104 >TSM file : ..\..\common\winnt\psmech.cpp (6583) > 04/10/2018 22:58:04 ANS0361I DIAG: NTNamedStreamRead(): openNamedStream > S:\arts-data\Private Directories\jwaltonen\Muse\ > Muse\Exceptions\AdobeMuse7.0-mul\Install Adobe > Muse.app\Contents\Resources\Adobe > Muse\Contents\Resources\META-INF\AIR\extensions\com.adobe. > oobelib.extensions\META-INF\ANE\MacOS-x86\OOBELibANE. > framework\Versions\Current:AFP_AfpInfo: > RC=104 > 04/10/2018 22:58:04 ANS5250E An unexpected error was encountered. >TSM function name : openNamedStream >TSM function : CreateFile() returned '2' for file ':AFP_AfpInfo' > > All Google hits are for a much older client - they are fairly current at > 7.1.6.5 on a Windows 2012 server. > > -- > *Zoltan Forray* > Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator Xymon > Monitor Administrator VMware Administrator Virginia Commonwealth University > UCC/Office of Technology Services www.ucc.vcu.edu zfor...@vcu.edu - > 804-828-4807 Don't be a phishing victim - VCU and other reputable > organizations will never use email to request that you reply with your > password, social security number or confidential personal information. For > more details visit http://phishing.vcu.edu/ > > > This message and any attachment is confidential and may be privileged or > otherwise protected from disclosure. You should immediately delete the > message if you are not the intended recipient. If you have received this > email by mistake please delete it from your system; you should not copy the > message or disclose its content to anyone. > > This electronic communication may contain general financial product advice > but should not be relied upon or construed as a recommendation of any > financial product. The information has been prepared without taking into > account your objectives, financial situation or needs. You should consider > the Product Disclosure Statement relating to the financial product and > consult your financial adviser before making a decision about whether to > acquire, hold or dispose of a financial product. > > For further details on the financial product please go to > http://www.bt.com.au > > Past performance is not a reliable indicator of future performance. > -- *Zoltan Forray* Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator Xymon Monitor Administrator VMware Administrator Virginia Commonwealth University UCC/Office of Technology Services www.ucc.vcu.edu zfor...@vcu.edu - 804-828-4807 Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit http://phishing.vcu.edu/
Re: NTNamedStreamRead() openNamedStream errors
Zoltan I think the problem is the colon in the file name. Windows has the capability to write multiple streams to the same file. The streams are differentiated by a colon and the the stream id. At least that’s the gist of it. See https://www.owasp.org/index.php/Windows_::DATA_alternate_data_stream Often used by hackers to hide stuff apparently. Cheers Steve Steven Harris TSM Admin Canberra Australia -Original Message- From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Zoltan Forray Sent: Thursday, 12 April 2018 3:40 AM To: ADSM-L@VM.MARIST.EDU Subject: [ADSM-L] NTNamedStreamRead() openNamedStream errors Has anyone seen these kind of errors? A user has been having these errors for a long time (they manage their own box and thus din't notice these errors for 9+ months) TSM return code : 104 TSM file : ..\..\common\winnt\psmech.cpp (6583) 04/10/2018 22:58:04 ANS0361I DIAG: NTNamedStreamRead(): openNamedStream S:\arts-data\Private Directories\jwaltonen\Muse\Muse\Exceptions\AdobeMuse7.0-mul\Install Adobe Muse.app\Contents\Resources\Adobe Muse\Contents\Resources\META-INF\AIR\extensions\com.adobe.oobelib.extensions\META-INF\ANE\MacOS-x86\OOBELibANE.framework\Versions\Current:AFP_AfpInfo: RC=104 04/10/2018 22:58:04 ANS5250E An unexpected error was encountered. TSM function name : openNamedStream TSM function : CreateFile() returned '2' for file ':AFP_AfpInfo' All Google hits are for a much older client - they are fairly current at 7.1.6.5 on a Windows 2012 server. -- *Zoltan Forray* Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator Xymon Monitor Administrator VMware Administrator Virginia Commonwealth University UCC/Office of Technology Services www.ucc.vcu.edu zfor...@vcu.edu - 804-828-4807 Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit http://phishing.vcu.edu/ This message and any attachment is confidential and may be privileged or otherwise protected from disclosure. You should immediately delete the message if you are not the intended recipient. If you have received this email by mistake please delete it from your system; you should not copy the message or disclose its content to anyone. This electronic communication may contain general financial product advice but should not be relied upon or construed as a recommendation of any financial product. The information has been prepared without taking into account your objectives, financial situation or needs. You should consider the Product Disclosure Statement relating to the financial product and consult your financial adviser before making a decision about whether to acquire, hold or dispose of a financial product. For further details on the financial product please go to http://www.bt.com.au Past performance is not a reliable indicator of future performance.
NTNamedStreamRead() openNamedStream errors
Has anyone seen these kind of errors? A user has been having these errors for a long time (they manage their own box and thus din't notice these errors for 9+ months) TSM return code : 104 TSM file : ..\..\common\winnt\psmech.cpp (6583) 04/10/2018 22:58:04 ANS0361I DIAG: NTNamedStreamRead(): openNamedStream S:\arts-data\Private Directories\jwaltonen\Muse\Muse\Exceptions\AdobeMuse7.0-mul\Install Adobe Muse.app\Contents\Resources\Adobe Muse\Contents\Resources\META-INF\AIR\extensions\com.adobe.oobelib.extensions\META-INF\ANE\MacOS-x86\OOBELibANE.framework\Versions\Current:AFP_AfpInfo: RC=104 04/10/2018 22:58:04 ANS5250E An unexpected error was encountered. TSM function name : openNamedStream TSM function : CreateFile() returned '2' for file ':AFP_AfpInfo' All Google hits are for a much older client - they are fairly current at 7.1.6.5 on a Windows 2012 server. -- *Zoltan Forray* Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator Xymon Monitor Administrator VMware Administrator Virginia Commonwealth University UCC/Office of Technology Services www.ucc.vcu.edu zfor...@vcu.edu - 804-828-4807 Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit http://phishing.vcu.edu/
