"Stream Armor is the sophisticated tool to discover Hidden Alternate Data Streams (ADS) and clean them completely from your system." http://securityxploded.com/streamarmor.php#Screenshots_StreamArmor Has anyone used this software? I know there have been previous versions. StreamArmor 4.0 was released on August 16, 2016.
"Version 4.0: 16th Aug 2016 Mega release to support for windows 10 version" won't install on my win 10 .
ok ran it in win 8 compatibility mode and after 7 min scan it crashed my pc in shadow mode. it is a no go.
UPDATE!!!!!!!!!! yes I am running shadow defender. tech support e-mailed me back and posted a new build. I was able to run that in shadow mode just fine. standard scan tool 11 min. one thing I noticed is on my machine if I try do anything else while can is running, it appears to be frozen but if wait a while it comes back. a lot of programs I try to install in quietzone won't be allowed to load their drivers. with shadow defender, I can still install apps. just after posting this my machine rebooted on it's own. at least I didn't get the blue sscreen this time.
not sure yet. I don't like the idea it seems to freeze when trying to do something else. it does it even when I try min the gui. I reported it to them so well see. it finds a lot of favicons and zone identifiers. and we all know what them favicons are. also smart screen doesn't like it at all. also do not like the fact that my machine rebooted without any reason.
Version 4.1: 27th Aug 2016 Fixed the minor bug in checking OS version on Windows 10. http://www.majorgeeks.com/files/details/streamarmor.html
Victek: yes this new version does fix that but like I said I see some strange things happening to my system both times I tried it. askmark: what is a favicon or others and why hackers use them.? http://www.rootkitanalytics.com/userland/Exploring-Alternate-Data-Streams.php at bottom of page they list streamarmor as a tool to detect them. look at the different stuff an ADS stream gets added to.
. Regarding malware I wonder if StreamArmor detects anything that is not already detected by other apps, such as TDSSkiller, MBAM, HitmanPro, etc?
there was a member from here that created a program to detect them also https://www.wilderssecurity.com/threads/ntfs-streams-eraser-revived.375139/#post-2480711