Jump to content
YOUR-AD-HERE
HOSTING
TOOLS
992Proxy

Locked NoVirusThanks Stream Detector


0x1

Recommended Posts

This is the hidden content, please

 

NoVirusThanks Stream Detector is a useful utility which finds all hidden Alternate Data Streams (ADS) on NTFS drives. After finding the alternate data streams, you can extract these streams, delete the file, delete unwanted streams, or export the list of found streams to a log file. This program can also list multiple hidden streams and can properly detect alternate data streams on an actual folder\directory.

 

NoVirusThanks Stream Detector is a great tool for forensic analysis to discover hidden files (such as archives, images, videos, executables, databases, etc) within the alternate data streams. This tool can be used to find and delete hidden alternate data streams used by malware and rootkits, such as the infamous Backdoor.Rustock.A that used to hide its kernel-mode driver file into System32 folder as a stream.

Key features and characteristics

 

* List all hidden Alternate Data Streams on NTFS drives

* Support listing of multiple Alternate Data Streams

* Option to extract or delete the selected streams

* Export the complete scan report to a custom .LOG file

* Detect Alternate Data Streams on an actual folder\directory

* Option to remove all streams with one single click

* Option to ignore safe streams (like Zone.Identifier)

* You can also create a custom file Alternate Data Stream

* Show detailed information about all streams found

* Search information about a file on Google search engine

* Drag & drop the folder you want to scan

* Support all Microsoft Windows operating systems

* Very lightweight in memory and CPU usage

 

Download : [HIDE-THANKS]

This is the hidden content, please
[/HIDE-THANKS]

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.