{"action":"opened","issue":{"url":"https://api.github.com/repos/RichardD2/NTFS-Streams/issues/4","repository_url":"https://api.github.com/repos/RichardD2/NTFS-Streams","labels_url":"https://api.github.com/repos/RichardD2/NTFS-Streams/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/RichardD2/NTFS-Streams/issues/4/comments","events_url":"https://api.github.com/repos/RichardD2/NTFS-Streams/issues/4/events","html_url":"https://github.com/RichardD2/NTFS-Streams/issues/4","id":197414940,"number":4,"title":"Strange File Stream, mysterious effects, how to handle/repair?","user":{"login":"cocoon","id":1071741,"avatar_url":"https://avatars.githubusercontent.com/u/1071741?v=3","gravatar_id":"","url":"https://api.github.com/users/cocoon","html_url":"https://github.com/cocoon","followers_url":"https://api.github.com/users/cocoon/followers","following_url":"https://api.github.com/users/cocoon/following{/other_user}","gists_url":"https://api.github.com/users/cocoon/gists{/gist_id}","starred_url":"https://api.github.com/users/cocoon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cocoon/subscriptions","organizations_url":"https://api.github.com/users/cocoon/orgs","repos_url":"https://api.github.com/users/cocoon/repos","events_url":"https://api.github.com/users/cocoon/events{/privacy}","received_events_url":"https://api.github.com/users/cocoon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-12-23T19:07:37Z","updated_at":"2016-12-23T19:07:37Z","closed_at":null,"body":"Hi,\r\nthanks for keeping this project alive, I use it for some time already for a small tool to simply store checksums as ADS in my files. \r\nWorking great most of the time but I have a very strange PDF file that I cannot handle, I cannot add a new stream, even when copied to FATand  back, and it even corrupts the powershell console window if I show it's content.\r\n\r\nI hope you or someone can help me to find some code that can hanlde such a file and repair it somehow.\r\n\r\n**File(zip):** \r\nhttps://multiupload.biz/cdxnourm4wok/WXPMode_HowToGuide_MultiUpload.biz.zip.html\r\n\r\n**Environment:** \r\nWindows 10 x64 (1607 Build 14393.576)\r\n\r\n**File/Stream-Infos**\r\n\r\n```\r\nPS C:\\tmp2> Get-Item -stream * -Path .\\WXPMode_HowToGuide.pdf\r\n\r\n\r\nPSPath        : Microsoft.PowerShell.Core\\FileSystem::C:\\tmp2\\WXPMode_HowToGuide.pdf::$DAT\r\nPSParentPath  : Microsoft.PowerShell.Core\\FileSystem::C:\\tmp2\r\nPSChildName   : WXPMode_HowToGuide.pdf::$DATA\r\nPSDrive       : C\r\nPSProvider    : Microsoft.PowerShell.Core\\FileSystem\r\nPSIsContainer : False\r\nFileName      : C:\\tmp2\\WXPMode_HowToGuide.pdf\r\n**Stream        : :$DATA**\r\nLength        : 3520196\r\n```\r\n\r\n\r\n**Trying to add a stream (same with your lib)**\r\n\r\n```\r\nPS C:\\tmp2> Set-Content -Path .\\WXPMode_HowToGuide.pdf -Stream Test\r\n\r\nCmdlet Set-Content an der Befehlspipelineposition 1\r\nGeben Sie Werte für die folgenden Parameter an:\r\nValue[0]: Test\r\nValue[1]:\r\nSet-Content : Der alternative Datenstrom \"Test\" der Datei \"C:\\tmp2\\WXPMode_HowToGuide.pdf\" konnte nicht geöffnet\r\nwerden.\r\nIn Zeile:1 Zeichen:1\r\n+ Set-Content -Path .\\WXPMode_HowToGuide.pdf -Stream Test\r\n+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n    + CategoryInfo          : NotSpecified: (:) [Set-Content], FileNotFoundException\r\n    + FullyQualifiedErrorId : System.IO.FileNotFoundException,Microsoft.PowerShell.Commands.SetContentCommand\r\n```\r\n\r\n\r\n\r\n\r\n**Powershell that causes corruption to the output:**\r\n\r\nGet-Content -Path .\\WXPMode_HowToGuide.pdf -Stream ':$DATA'\r\nor\r\n(Get-Item -stream * -Path .\\WXPMode_HowToGuide.pdf)[0] | Get-Content\r\n\r\n`├⎼▒\u000B┌\r\n⎼\r\n<< /S\u000B≥\r\n9°75 /R⎺⎺├ 128 0 R /I┰°⎺ 1 0 R /ID [ <\f680\f37°1\r\n\f8>4613°5▒02\f475\r\n9°680\f37°1\r\n\f8> ] >>5▒02\f475\r\n⎽├▒⎼├│⎼\r\n°\r\n3516533\r\n%%EOF\r\nPS C:\\├└⎻2>`\r\n\r\n\r\n```\r\nPS C:\\├└⎻2> dir\r\n\r\n\r\n    V\r\n⎼≥\r\n\u000B\f\r\n┰\u000B⎽: C:\\├└⎻2\r\n\r\n\r\nM⎺\r\n                L▒⎽├W⎼\u000B├\r\nT\u000B└\r\n         L\r\n┰±├\r\n N▒└\r\n\r\n----                -------------         ------ ----\r\n-----       23.12.2016     19:49                S├┤°°\r\n-▒----       20.11.2015     20:24           7005 E┤┌▒.├│├\r\n-▒⎼---       03.11.2009     19:04        3520196 WXPM⎺\r\n_H⎺┬T⎺G┤\u000B\r\n°\r\n-▒----       23.12.2016     19:46        3428688 WXPM⎺\r\n_H⎺┬T⎺G┤\u000B\r\n.≥\u000B⎻\r\n```"}}
{"actor":{"display_login":"cocoon"}}