Awesome

drvscan

<pre> C:\Users\Juho\source\repos\drvscan\Client\x64\Release>Client.exe --help --scan scan target process memory changes --pid (optional) target process id --usecache (optional) we use local cache instead of original PE files --savecache (optional) dump target process modules to disk --scanefi scan abnormals from efi memory map --dump (optional) dump found abnormal to disk --scanpci scan pci cards from the system --advanced (optional) test pci features --block (optional) block illegal cards --cfg (optional) print out every card cfg space --scanmouse catch aimbots by monitoring mouse packets --log (optional) print out every mouse packet Example (verifying modules integrity by using cache): 1. load malware 1. drvscan.exe --scan --savecache --pid 4 2. reboot the computer 3. load windows without malware 4. drvscan.exe --scan --usecache --pid 4 all malware patches should be now visible build date: Jul 22 2024, 10:55:00 C:\Users\Juho\source\repos\drvscan\Client\x64\Release> </pre>

Driver Installation

right click start.bat as admin

Win11 24H2

kernel image scan is broken

14/10/2024

archived repository
OS updates -> do it yourself