Genuinity and integrity of iso downloaded


  1. Posts : 31
    Windows 7 Ultimate x64
       #1

    Genuinity and integrity of iso downloaded


    hi could any one please explain me how to check the genuinity and integrity of any iso downloaded from unofficial source( i.e downloaded from genuine source viz technet etc and uploaded on any file hosting services).......i want to check that it is untouched non manipulated & free from malwares some says compare hashes or SHA1 what is this?
      My Computer


  2. Posts : 1,810
    Dual Boot: Windows 8.1 & Server 2012r2 VMs: Kali Linux, Backbox, Matriux, Windows 8.1
       #2

    Basically, a hash is a long code that is unique to that file in its current state. When you download the file, you compare the hash with a utility like MD5 & SHA Checksum Utility - Free download and software reviews - CNET Download.com ::: If the hash matches, the file you downloaded was not tampered with. If anything is changed, the hash changes. This doesn't mean the ISO you got doesn't contain malware though, it just means the file is the same file you downloaded from that server. Typically, if its from a reputable source, the ISO is good and you can just compare the hash.

    To check the validity of your ISO, you can use something like this: Windows 7 ISO Verifier

    Hope this helps.
      My Computer


  3. Posts : 31
    Windows 7 Ultimate x64
    Thread Starter
       #3

    thanks for a good response.....so how to check if iso is tampered with spywares and malwares is there any method or software as same as verifying hash or something
      My Computer


  4. Posts : 1,810
    Dual Boot: Windows 8.1 & Server 2012r2 VMs: Kali Linux, Backbox, Matriux, Windows 8.1
       #4

    Parashar said:
    thanks for a good response.....so how to check if iso is tampered with spywares and malwares is there any method or software as same as verifying hash or something
    You can unzip the file with something like 7-Zip and then scan the files with something like Avast or your virus software of choice.
      My Computer


  5. Posts : 5,092
    Windows 7 32 bit
       #5

    Also you can verify the hash using my MD5Hash program. It's written in C++ and has both native 32 and 64 bit implementations in the download. It comes with a utility to add it to both File and Folder context menus.

    It can queue up to a depth of 4095 files. Also you may run multiple instances(for example, launch a separate copy to do the hash for a multi-GB file.)

    It is a bit quirky in that it has hybrid single instance/multi-instance behavior. An instance with a command line param will check for an already open master instance etc..

    See the Readme.txt included. :)
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:47.
Find Us