Ads

Unblocking DLLs

NTFS Alternate Data Streams (ADS) provides the mechanism for MS to block the execution of DLLs. This is a security mechanism that was first introduced in XP SP2 & Windows 2003 SP1. More info here. Alternate data streams is also a popular way for hackers to hide files from administrators.

The typical method used to remove the offending ADS, is by right clicking the DLL selecting properties and then clicking Unblock. This can become tedious if there are a lot of DLLs to unblock, or if it needs to be done frequently.