scan for rootkits and other embedded files occupying the NTFS secondary data stream.

:runs: