-
Notifications
You must be signed in to change notification settings - Fork 4
raja-jamwal/Spysym
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
Spysym 007 is a mini filter file system that prevents kernel level execution of executable code and files from the removable devices, thus preventing possible malware infection. spysym007 insists on using data archives{.zip,.rar,.tar..} for data sharing. Following extensions are prevented from execution RTL_CONSTANT_STRING( L"ade"), RTL_CONSTANT_STRING( L"adp"), RTL_CONSTANT_STRING( L"bas"), RTL_CONSTANT_STRING( L"bat"), RTL_CONSTANT_STRING( L"chm"), RTL_CONSTANT_STRING( L"cmd"), RTL_CONSTANT_STRING( L"com"), RTL_CONSTANT_STRING( L"cpl"), RTL_CONSTANT_STRING( L"crt"), RTL_CONSTANT_STRING( L"dll"), RTL_CONSTANT_STRING( L"doc"), RTL_CONSTANT_STRING( L"docs"), RTL_CONSTANT_STRING( L"docx"), RTL_CONSTANT_STRING( L"exe"), RTL_CONSTANT_STRING( L"hlp"), RTL_CONSTANT_STRING( L"hta"), RTL_CONSTANT_STRING( L"inf"), RTL_CONSTANT_STRING( L"ins"), RTL_CONSTANT_STRING( L"isp"), RTL_CONSTANT_STRING( L"js"), RTL_CONSTANT_STRING( L"jse"), RTL_CONSTANT_STRING( L"lnk"), RTL_CONSTANT_STRING( L"mdb"), RTL_CONSTANT_STRING( L"mde"), RTL_CONSTANT_STRING( L"msc"), RTL_CONSTANT_STRING( L"msi"), RTL_CONSTANT_STRING( L"msp"), RTL_CONSTANT_STRING( L"mst"), RTL_CONSTANT_STRING( L"ocx"), RTL_CONSTANT_STRING( L"pcd"), RTL_CONSTANT_STRING( L"pif"), RTL_CONSTANT_STRING( L"pot"), RTL_CONSTANT_STRING( L"ppt"), RTL_CONSTANT_STRING( L"reg"), RTL_CONSTANT_STRING( L"scr"), RTL_CONSTANT_STRING( L"sct"), RTL_CONSTANT_STRING( L"shb"), RTL_CONSTANT_STRING( L"shs"), RTL_CONSTANT_STRING( L"sys"), RTL_CONSTANT_STRING( L"url"), RTL_CONSTANT_STRING( L"vb"), RTL_CONSTANT_STRING( L"vbe"), RTL_CONSTANT_STRING( L"vbs"), RTL_CONSTANT_STRING( L"wsc"), RTL_CONSTANT_STRING( L"wsf"), RTL_CONSTANT_STRING( L"wsh"), RTL_CONSTANT_STRING( L"xls"), {0, 0, NULL} The package come with no installation program, right click .inf file that comes with it, click install, driver can be dynamically loaded, reloaded, removed. first install then, when you need driver, like prevent execution, in command prompt type sc start spysym007 similarly, to stop driver sc stop spysym007 Spysym 007 (c) Raja Jamwal 2010 <[email protected]>
About
Mini filter filesystem driver to prevent kernel level execution of executable code and files from the removable devices
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published