Stream Detector v1.0 (Freeware): Discover NTFS Hidden Alternate Data Streams

Discussion in 'other software & services' started by novirusthanks, Nov 23, 2015.

  1. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    704
    Location:
    Italy
    We've recently released a new useful tool:

    stream-detector-gui.png

    Read more & download here:
    http://www.novirusthanks.org/products/stream-detector/
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,026
    Location:
    The Netherlands
    Looks interesting thanks.

    BTW, please don't make the NoVirusThanks tools open the browser after install, I hate that, and would love it if ERP could block this. :D
     
  3. subhrobhandari

    subhrobhandari Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    708
    Ah, nice tool. :)
     
  4. Umbra

    Umbra Registered Member

    Joined:
    Feb 10, 2011
    Posts:
    2,157
    Location:
    in a remote land :)
    very handy tool ; good job NVT !
     
  5. Mister X

    Mister X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    1,764
    Location:
    Mexico
    Thank you for your smart and amazing job! Chapeau.
     
  6. Ashanta

    Ashanta Registered Member

    Joined:
    Aug 21, 2007
    Posts:
    659
    Location:
    Europe
    What's exactely 'extract stream' function ? Who can explain a little more ?
     
  7. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    704
    Location:
    Italy
    With "Extract Stream" function you can extract the stream, like the file that has been joined in the host file. Rustock Rootkit A used to hide its driver as a Alternate Data Stream, with the "Extract Stream" function you are able to extract, for example, the driver of Rustock Rootkit A for further analysis. Or if an user has used ADS to hide a document or file, you can extract\dump it.
     
  8. Umbra

    Umbra Registered Member

    Joined:
    Feb 10, 2011
    Posts:
    2,157
    Location:
    in a remote land :)
    Andreas , what happen if i decide to delete all streams on my system? (question just for educational purposes ^^ )
     
  9. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    704
    Location:
    Italy
Loading...