Stream Detector

Product Overview

NoVirusThanks Stream Detector is a useful utility which finds all hidden Alternate Data Streams (ADS) on NTFS drives. After finding the alternate data streams, you can extract these streams, delete the file, delete unwanted streams, or export the list of found streams to a log file. This program can also list multiple hidden streams and can properly detect alternate data streams on an actual folder\directory.


NoVirusThanks Stream Detector is a great tool for forensic analysis to discover hidden files (such as archives, images, videos, executables, databases, etc) within the alternate data streams. This tool can be used to find and delete hidden alternate data streams used by malware and rootkits, such as the infamous Backdoor.Rustock.A that used to hide its kernel-mode driver file into System32 folder as a stream.

Key features and characteristics

  • List all hidden Alternate Data Streams on NTFS drives
  • Support listing of multiple Alternate Data Streams
  • Option to extract or delete the selected streams
  • Export the complete scan report to a custom .LOG file
  • Detect Alternate Data Streams on an actual folder\directory
  • Option to remove all streams with one single click
  • Option to ignore safe streams (like Zone.Identifier)
  • You can also create a custom file Alternate Data Stream
  • Show detailed information about all streams found
  • Search information about a file on Google search engine
  • Drag & drop the folder you want to scan
  • Support all Microsoft Windows operating systems
  • Very lightweight in memory and CPU usage

Additional Details

File Version
Last Updated 12 January 2016
Category System Utility
License Type Freeware
Operating System Windows All (32-bit / 64-bit)

Recent Changes and Fixes