Sigcheck usage advice

Discussion in 'other software & services' started by Minimalist, Apr 7, 2014.

Thread Status:
Not open for further replies.
  1. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,058
    I use sigcheck with this parameters:
    Code:
    sigcheck -ct -e -s -u -v -vt c:\ > d:\sigcheck.csv
    Whole scan took 3 and a half hours because all executable files' hashes were checked on Virustotal for possible infection. Is there a way to run this tool so that it checks unsigned files' hashes only? So sigcheck would first check for signature. All unsigned files' hashes are sent to VT to be checked for positive detections. Only unsigned and detected files are stored in report. Does anybody have an idea how to achieve this?

    hqsec
     
  2. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    No, as far as I know, without resorting to writing a program. Perhaps you could request this feature at the Sysinternals forums.
     
Loading...
Thread Status:
Not open for further replies.