A
Aaron
"The idea behind SVV is to check important Windows System components, which
are usually altered by various stealth malware, in order to ensure system
integrity and to discovery potential system compromise.
SVV 1.0 implements only code virginity verification which is the first step
in SVV implementation and its task is to ensure the integrity of the code
sections of in-memory mapped kernel and usermode modules (that is kernel
drivers and usermode DLLs)."
It's a commandline tool. Has some intelligence instead of merely
enumerating all entries, it tries to guess which modifications are
dangerous and which are done by legimate security programs.
Only for advanced users.
are usually altered by various stealth malware, in order to ensure system
integrity and to discovery potential system compromise.
SVV 1.0 implements only code virginity verification which is the first step
in SVV implementation and its task is to ensure the integrity of the code
sections of in-memory mapped kernel and usermode modules (that is kernel
drivers and usermode DLLs)."
It's a commandline tool. Has some intelligence instead of merely
enumerating all entries, it tries to guess which modifications are
dangerous and which are done by legimate security programs.
Only for advanced users.