NoVirusThanks Stream Detector is used to find hidden Alternate Data Streams (ADS) on NTFS drives as well as find and delete hidden alternate data streams used by malware and rootkits.

NoVirusThanks Stream Detector is used to find hidden Alternate Data Streams (ADS) on NTFS drives as well as find and delete hidden alternate data streams used by malware and rootkits, which includes the infamous Backdoor.Rustock.A that used to hide its kernel-mode driver file into the System32 folder as a stream.

After finding any alternate data streams, NoVirusThanks Stream Detector allows you to extract these streams, delete the file, delete unwanted streams, or export the list of found streams to a log file. This program can also list multiple hidden streams and properly detect alternate data streams on an actual folder directory.

NoVirusThanks Stream Detector is perfect for forensic analysis to discover hidden files (such as archives, images, videos, executables, databases, etc.) within the alternate data streams.

NoVirusThanks Stream Detector Features:

List all hidden Alternate Data Streams on NTFS drives
Support listing of multiple Alternate Data Streams
Option to extract or delete the selected streams
Export the complete scan report to a custom .LOG file
Detect Alternate Data Streams on an actual folderdirectory
Option to remove all streams with one single click
Option to ignore safe streams (like Zone.Identifier)
You can also create a custom file Alternate Data Stream
Show detailed information about all streams found
Search information about a file on Google search engine
Drag & drop the folder you want to scan
Support all Microsoft Windows operating systems
Very lightweight in memory and CPU usage

  Download