Windows Vista 64Bit non-signed driver install tool (atsiv) blocked

  • Article

The third party kernel mode driver named “Atsiv” provides a mechanismto load code that conflicts with the Kernel Mode Code Signing (KMCS) policy included in Windows Vista x64 editions. In Windows Vista x64 editions, the default KMCS policy is to only allow code to load into the kernel if it has been digitally signed with a valid code signing certificate. The Atsiv driver isn't malicious in itself, but it could allow malicious code into the kernel.

Windows Defender released a signature update on 2 August, 2007, that allows detection, blocking, and removal of the current Atsiv driver.

https://blogs.msdn.com/windowsvistasecurity/archive/2007/08/03/x64-driver-signing-update.aspx

https://news.zdnet.co.uk/security/0,1000000189,39288393,00.htm

Urs