Much easier to hide in the registry (or even a LNK file) than an ADS. Too many forensic tools now key in on ADS.