FingerPrint – Detects file changes in system directory

Finger Print is a kind of security software for Windows that let's you check if any file in a directory have been created, deleted, or modified since its last scan. This is useful for checking if a program, for instance viruses and Trojans, has changed a system file (In Windows system 32 directory where viruses are usually hang). The use of MD5 checksums guarantees detection of any file changes.

FingerPrint can also be used to find duplicate files, search for files with a specific MD5 value, and save MD5 values to file (and compare with). With its integration with the Windows Task Scheduler, you can automate your scans, e.g. scan your Windows directory every night.

How to use it? After installation run FingerPrint and create a profile. There are two types of profiles - ‘Hash file in a directory’ and ‘Group profile’ (a group profile is a collection of profiles, so you can perform many scans at one time). Select Hash files in a directory and create a profile by giving a name.

Next, select a Directory from the directory edit box to scan (e.g. Windows System 32), by default all the sub-directories are also scanned and click ok to perform the scan. Save this profile.

When you run this profile again, if any files have been created, modified, or deleted then the Differences window will be appeared: There are three tabs in the display:
Modified -This is a list of all the files that have been created, modified, or deleted, Modified (inc. excluded) - This is a list of all the files that have been created, modified, or deleted. It also includes files that have been excluded (see below) and so will not appear in the log and Modified (only excluded) - This is a list of only the excluded files that have been created, modified, or deleted. You can download it here.