File Signature Verification

Discussion in 'Windows XP New Users' started by Guest, May 15, 2004.

  1. Guest

    Guest Guest

    I have done as many file scans as i can with the File Signature Verification program in Windows XP Home Edition and have found 8199 unsigned files.I browsed through some files and opened them with notepad .I saw several files with symbols mixed with words in them dating back to the first days when I first owned the computer. Then I was too naive to have had an antivirus ,since I have Norton Antivirus 2004 . Would those words mixed with symbols be legitimate programs or virus or the suchlike? Symantecs website test removed 3 Sasser type D 's from the computer according to their report but I have since removed a certificate with a big yellow triangle and exclamation mark from the certificates. Can and should I do something with those symbols?Thankyouse
     
    Guest, May 15, 2004
    #1
    1. Advertisements

  2. Guest

    Sharon F Guest

    While I can understand the desire to make sure that files are what they
    should be after a virus infection -- not all files are meant to be opened
    by humans. Impossible to say if the mix of text and numbers is "okay" or
    not but it's not unusual to see them if you do manage to open a program or
    system file with Notepad.

    I'm not sure I would use the file signature verification tool either. Not
    all files, even Microsoft's, are digitally signed. Instead, I would use
    System File Checker and re-apply updates.

    Description of Windows XP and Windows Server 2003 System File Checker
    (Sfc.exe)
    http://support.microsoft.com/default.aspx?scid=kb;en-us;310747
     
    Sharon F, May 15, 2004
    #2
    1. Advertisements

  3. Guest

    Guest Guest

    I have looked at Article kb310747 . Can you tell me are the 3 scans , sfc/scannow , sfc/scanonce and sfc/scanboot used the same way in the Check Disk as they would be used from the RUN Command ? And am I correct to think Check Disk would be used to replace corrupted files after having had an intrusion into the system?I had to remove a file reported as unvarified by Microsoft and did experience a sudden shutdown.
     
    Guest, May 16, 2004
    #3
  4. Guest

    Sharon F Guest

    Open a command prompt window. Type
    sfc /scannow

    System File Checker will check the system files. Replace them if necessary.
    You may be prompted during the process for your Windows CD.

    If you run into a wall with the CD, direct SFC to the i386 folder. I have
    Service Pack 1 installed on top of the original XP and sometimes get
    prompted by SFC for the Service Pack files. When/if that happens, I select
    (or type in the path to) C:\Windows\ServicePackFiles and click OK.

    If SFC's progress flies by and it finishes without prompting you at all,
    it's reasonably safe to assume that your core Windows files are fine.
     
    Sharon F, May 16, 2004
    #4
  5. Guest

    Guest Guest

    I could not RUN sfc/scannow or RUN C:\Windows\Service Pack Files . And I tried putting the Windows CD Rom in the drive .Thankyou
     
    Guest, May 16, 2004
    #5
  6. Guest

    Sharon F Guest

    Put a space between sfc and /scannow:
    sfc /scannow

    Also, I forgot to mention before that you need to be logged on with an
    account in the administrator group to use the SFC tool.
     
    Sharon F, May 16, 2004
    #6
  7. Guest

    Guest Guest

    Thanks for your advice. Since that I have reinstalled XP Home Edition because I had difficulty loading downloaded drivers.My last attempt appears to have been successful and the display is better than previous display appearances.And I do not think I had spaces between the sfc , the / , and the scannow . I hope I will remember if I need to try that RUN in the future , thankyou , Nicholas .
     
    Guest, May 20, 2004
    #7
  8. Guest

    Sharon F Guest

    You're most welcome, Nicholas. Good luck with your renewed setup.
     
    Sharon F, May 20, 2004
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.