News

Uncover File Manipulations With File Checksum Integrity Verifier [Windows]

17 Gen/10

File Checksum Integrity Verifier is a free command line program by Microsoft that can be used to create and verify md5 checksums of files in a specific folder. The program can for instance be used to check if files in a specific directory have been modified which is often the case if malicious software has been executed on the computer system. This is done by calculating hashes of every file – or only specific file types – in the selected directory with the option to compare those generated the first time with hashes that have been generated at a later time.

Identical hashes mean no file manipulation while nonidentical hashes suggest file manipulations. The File Checksum Integrity Verifier can be downloaded from the Microsoft homepage. The Microsoft Support page that lists the file download contains an explanation of the program’s command line parameters.

The program needs to be unpacked after download. It is suggested to move the file fciv.exe into a system folder like the Windows folder so that it can be run without specifying a path.

MD5 hashes of a specific directory can be created with the following command:


fciv folder -r -xml output.xml
fciv c:windows -r -xml c:md520100117md5.xml

It is possible to specify file extensions with the -type parameter followed by the filetype, e.g. *.exe.

A previously created xml document containing hashes can be verified with the following command


fciv -v -xml output.xml
fciv -v -xml c:md520100117md5.xml

The tool will display a list of modified files at the end of the comparison. It is possible to switch to use -sha instead of -md5. Users who want to verify the files regularly might want to consider creating a batch file for the file verification checks.

Continua a leggere – Original Link: Uncover File Manipulations With File Checksum Integrity Verifier [Windows]

Technorati Tags: , , , , , , , , ,

Leggi Anche

Condividi
Condividi in DeliciousCondividi in DiggCondividi in RedditCondividi in StumbleCondividi in MixxCondividi in TecnoratiCondividi in Ok Notizie

Commenti

I commenti sono disabilitati per questo articolo.

I commenti sono chiusi.

Autore

    Spina Rosario
    Inserito da

Archivio

Iscrizione Newsletter

    Tieniti informato con tutte le novità del mondo informatico con la nostra newsletter
    Email:

    Nome:

    Auto Shop Italia
    Web Burning Blog
    Info Privacy

Meta