Thursday, May 5, 2011

Findind Hidden files in ADS (Alternate Data Streams) in Windows

In the previous post, we have known, how to hide files in ADS of files/folder in NTFS file format. In this post we will study ways to find hidden files in ADS. Sysinternals is a tools suite which contains a whole lot of tools meant for manipulating/adding/observing  various features of OS.
One of the tools is streams.exe which we have to run through command prompt.
#streams.exe -s c:\folder 
Executing this command will display each & every ADS used within the specified folder. In case, you want to delete all ADS attached to the folder/file, execute command.
#streams.exe -d c:\folder 

There is yet another tool called LADS.
Command to be executed for finding ADS is as follows:
#lads.exe c:\folder 

You can download sysinternals from this link.

No comments:

Post a Comment