You are here

TrendMicro Rootkitbuster

3 posts / 0 new
Last post
scant_regard
Offline
Last seen: 14 years 1 month ago
Joined: 2010-11-19 23:23
TrendMicro Rootkitbuster

Found this great little program, portable (doesn't need installing) but I was wondering with all the recent additions of utilities, can there be one that finds file streams?

P.S. Would any guru here know what a file stream actually is and can they be used to hide malicious content?

3D1T0R
3D1T0R's picture
Offline
Last seen: 3 years 9 months ago
Developer
Joined: 2006-12-29 23:48
Don't know much about TrendMicro's RootKitBuster, but ...

... but prapper made Portable packages of a bunch of NirSoft software one of which is "AlternateStreamView" which finds files among your filesystem with alternate streams, but AFAIK it's nor really something that you need to worry to much about as far as security (someone correct me if I'm wrong here) but there are other uses for alternate streams, like saving data about a file within an alternate stream of that file (and sometimes it's fun to give people files with other information in it with steganography tools [or by playing with the internals of files for yourself] to see if they can find it and I guess you might be able to do the same kind of thing with alternate streams, IDK I haven't tried)
Note: AlternateStreamViewPortable is a Development Test release, NOT an official Portable App, and may not be entirely portable so use at your own risk.
Note2: If this app will do what you want, I'm sure prapper would like to have some feedback (is there something that's getting left behind, or some typo's somewhere)

~3D1T0R

scant_regard
Offline
Last seen: 14 years 1 month ago
Joined: 2010-11-19 23:23
Nir makes a lot of good soft,

Nir makes a lot of good soft, but the problem is most of it can't be used to edit the system, unlike the stuff that's coming out now on this forum.

That TrendMicro app lets you delete the file streams because I don't want anyone hiding any cr@p on my system yeh?

Log in or register to post comments