Database of Hashes for Windows Operating System Files

[mraeryceos]

If we had a database of hashes of all Windows files (like crc, md5, sha1, etc), including those in updates, we could check the windows directory for any that don't match the database. These we could assume to be afflicted files (virus or otherwise), and replace them with original Windows files.

I know there is the "catroot" database in Windows itself, but this often gets altered by viruses, and I have also read to be inaccurate in some forums(?). I think it would be better if each known Windows file got a third party hash of its own to add to the hash database.

Is there some program that has this database of hashes, and can run a check on the Windows directory?

Here is some poor fellow who was looking for the same:

http://forums.devshed.com/security-and-cryptography-17/how-to-dump-content-of-system32-catroot-cat-files-536678.html

Granted I could use the "repair" option from Windows bootable media, but I don't like the closed box feel to it. I don't know exactly what the repair option does. For example, I would like it to ask me: "Replace explorer.exe with original?". I would also prefer the same third party GUI regardless of which Windows OS it is.

Edited October 19, 2010 by mraeryceos