Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Windows for a while now has added an additional hidden stream to files that were downloaded from the internet. If you attempted to use these files, you'd get all kinds of odd behavior as windows was detecting this additional stream and then preventing the app / exe from getting all sorts of security clearance. But in previous versions of windows you could right click on a file, go to properties then click 'Unblock' which removed the extra stream. Windows 8 seems to be doing the additional streams trick, but I haven't yet found a way to remove them using the win 8 UI. Anyone know how to do this?

share|improve this question
There are >5 "Alternate Data Stream" programs that will view , and some that will remove ADS data. These programs have worked in all the NTFS system so far. I dont know 8, but you could try "hijackthis" (watch which button you hit to download) In hijackthis, select "config" lower right, then go into the "misc tools" And you will find ADS spy. I would be interested in anything you know or learn about it. – Psycogeek Mar 7 '12 at 9:37
up vote 1 down vote accepted

Found this on Michael Crump's site

Basically this is setting up a global menu item in the shell allowing you to call powershell to remove the extra data stream.

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT*\shell\powershell] @="Unblock Files"

[HKEY_CLASSES_ROOT*\shell\powershell\command] @="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe Unblock-File -LiteralPath '%L'"

Edit: This is no longer needed as the windows explorer property pages now has the 'unblock' command as of Win 8 RTW.

share|improve this answer

Windows 8 does not use NTFS by default. It uses REFS which does not have support for named streams. Consequently no file should have an alternative data stream called $data.

share|improve this answer
Wrong. ReFS is only available on Windows Server 8:… – surfasb Mar 7 '12 at 19:47
Fair enough. That seems like a bit of a random decision by Microsoft to build a new filesystem and then not to deploy it. – SecurityMatt Mar 7 '12 at 20:36
Oh, it is being deployed, but not by default. – surfasb Mar 8 '12 at 1:35
ReFS is not a bootable file system. Even on win8 server the boot drives will continue to be in NTFS AFAIK. – chris.w.mclean Mar 9 '12 at 4:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .