![]() ![]() Most, if not all of these will be entirely legitimate: if you use IE, for instance, you'll see most of your favourites have a favicon stream which stores an icon for them. When it's done you'll see a (probably) lengthy list of files, with the name of the stream they contain, the file path, and stream size. The program will immediately leap into action, examining every file on that drive and reporting anything that contains an extra stream. ![]() To find out what might be lurking on your system, simply launch AlternateStreamView, choose the drive you'd like to check and click Scan. This extra data isn't visible in Explorer, though, so some malware will also use the technology to hide itself. Some programs do this legitimately: Internet Explorer tags all the files it downloads with a marker in an alternate data stream. NTFS normally stores a file's data in just one data stream, but it can add more. ![]() AlternateStreamView is a small, simple and portable tool which will quickly scan any NTFS drives for files containing alternate data streams. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |