What Is HoodCheck?
HoodCheck is a program I developed while exploring Window's internals. Frankly, I was often
alarmed at all the programs running on my computer, but it was time-consuming to look up each
one to verify that it was safe. HoodCheck scans all of your in-process applications and sends
a unique hash-key to hoodcheck.com so that you can compare your computer to 1000's of others.
What Exactly Does HoodCheck Do?
HoodCheck scans the current process list of all running programs. It then examines each program
to find dependent .dll and other executable code running in memory. For each file found, it
calculates a unique MD5 hash value that uniquely identifies the version you are running. HoodCheck
does not modify any files or subvert your system in any-way.
Is HoodCheck Safe to Run?
Yes, I consider it to be 100% safe. HoodCheck does not alter or modify any files on your
computer other than creating a single registry session variable. All software source code
used by HoodCheck either comes from Microsoft or was developed by me personally. I run
up-to-date virus and malware detection software on my computer.
Does HoodCheck Contain MalWare?
No, HoodCheck does not contain any subversive code to do anything other than exactly what is
state here. The HoodCheck program is kept secure from my development environment straight to
the HoodCheck web-server which is 100% owned and administrated by myself.
What Information Does HoodCheck Send?
HoodCheck collects a process list of everythings that is currently running on your computer
and any dependent in-memory files used by those applications. For each file found the size,
MD5 check-sum, path name, and a group id is sent to the hoodcheck.com website. In addition
a random session key and anti-tampering key are also sent, nothing more.
Will HoodCheck Detect RootKits?
No, HoodCheck is not able to detect software that is hiding through a RootKit. Software
that is using a RootKit has removed itself from the in-memory process-list making it impossible
to know that it is running on your computer using standard operating system API calls.
Will HoodCheck Remove Malware?
No, HoodCheck will not modify your files in any-way. It is primarily a detection utility
for new and unique programs running on your system. By using statistical analysis, it can
be shown what programs you may have installed that are not part of a standard operating
system installation.
|
