Do these system files have verified MS signatures?


V

vfclists

I am using Process Explorer to verify file signatures on Windows XP
and the following Microsoft files are not verifying.
This in spite of running Kaspersky AV and currently AVG

svchost.exe
winlogon.exe
services.exe
regedit.exe
cmd.exe
ctfmon.exe
explorer.exe
lsass.exe

Does Microsoft supply verified signatures for these files?

If they do why aren't the AV programs flagging them?

/vfclists
 
Ad

Advertisements

A

Allan

vfclists said:
I am using Process Explorer to verify file signatures on Windows XP
and the following Microsoft files are not verifying.
This in spite of running Kaspersky AV and currently AVG

svchost.exe
winlogon.exe
services.exe
regedit.exe
cmd.exe
ctfmon.exe
explorer.exe
lsass.exe

Does Microsoft supply verified signatures for these files?

If they do why aren't the AV programs flagging them?
MS does not necessarily sign all executables and drivers and the security
companies generally know which ones. Unless your security software flags it
as a threat I would not worry too much. Sometimes it may be a false positive
by the security software. I do not know the answer for these particular .exe
files.
 
Ad

Advertisements

M

MowGreen

vfclists said:
I am using Process Explorer to verify file signatures on Windows XP
and the following Microsoft files are not verifying.
This in spite of running Kaspersky AV and currently AVG

svchost.exe
winlogon.exe
services.exe
regedit.exe
cmd.exe
ctfmon.exe
explorer.exe
lsass.exe

Does Microsoft supply verified signatures for these files?

If they do why aren't the AV programs flagging them?

/vfclists
XP has a built in File Signature verification tool:

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sig_verification_howto.mspx?mfr=true

" To check the digital signatures for system or non-system files

1. Open File Signature Verification

2. Click Advanced.

3. On the Search tab, click one of the following:

• Notify me if any system files are not signed

Checks only the Windows system files and all device driver files to see
if they have a digital signature.

• Look for other files that are not digitally signed

Enables you to specify the file type and location of non-system files to
check for a digital signature.


4. Click OK, and then click Start.

Note

• To start File Signature Verification, click Start, click Run, type
sigverif, and then click OK. "


See if running that tool shows if the system files are digitally signed.


MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top