PDA

View Full Version : Monitor Critical Files


Dazed_and_Confused
April 11th, 2004, 11:05 AM
I'm interested in adding some critical NOD32 files to my TDS-3 CRC32 test (in an effort to ensure critical files are not damaged / modified by some malware, effectively disabling the app). What files do you (anyone) recommend adding to this CRC32 test?

Technodrome
April 11th, 2004, 12:25 PM
NOD32 on demand scanner has it own CRC check function. In case of unauthorized modification it will let you know. So I wouldn’t bother with this. ;)


tECHNODROME

FanJ
April 11th, 2004, 12:35 PM
Thanks TD ! :)
I didn't know that ...

Here is the list of NOD32 files that I have added into my TDS-3 file crcfiles.txt :

C:\Program Files\ESET\AMON.VXD
C:\Program Files\ESET\NOD.OVL
C:\Program Files\ESET\nod32.000
C:\Program Files\ESET\NOD32.002
C:\Program Files\ESET\nod32.003
C:\Program Files\ESET\nod32.004
C:\Program Files\ESET\NOD32.EXE
C:\Program Files\ESET\NOD32KRN.EXE
C:\Program Files\ESET\NOD32KUI.EXE
C:\Program Files\ESET\NOD32M1.VXD
C:\Program Files\ESET\NODSHEX.DLL
C:\Program Files\ESET\NODUTILS.EXE
C:\Program Files\ESET\PS_AMON.DLL
C:\Program Files\ESET\PS_NMS.DLL
C:\Program Files\ESET\PS_NOD32.DLL
C:\Program Files\ESET\PS_UPD.DLL
C:\Program Files\ESET\PU_AMON.DLL
C:\Program Files\ESET\PU_IMON.DLL
C:\Program Files\ESET\PU_NMS.DLL
C:\Program Files\ESET\PU_NOD32.DLL
C:\Program Files\ESET\PU_UPD.DLL
C:\Program Files\ESET\SPORDER.DLL
C:\Program Files\ESET\Install\main.dll
C:\Program Files\ESET\Install\mfc42.dll
C:\Program Files\ESET\Install\msvcrt.dll
C:\Program Files\ESET\Install\setup.exe
C:\Program Files\ESET\Setup\MAIN.DLL
C:\Program Files\ESET\Setup\SETUP.EXE
C:\Program Files\ESET\Setup\00\KRNSTP.DLL
C:\Program Files\ESET\Setup\00\KRNVIS.DLL
C:\Program Files\ESET\Setup\00\PS_UPD.DLL
C:\Program Files\ESET\Setup\00\PU_UPD.DLL
C:\Program Files\ESET\Setup\01\PS_AMON.DLL
C:\Program Files\ESET\Setup\01\PS_NOD32.DLL
C:\Program Files\ESET\Setup\01\PU_AMON.DLL
C:\Program Files\ESET\Setup\01\PU_NOD32.DLL
C:\Program Files\ESET\Setup\02\IMON.DLL
C:\Program Files\ESET\Setup\02\PS_NMS.DLL
C:\Program Files\ESET\Setup\02\PU_IMON.DLL
C:\Program Files\ESET\Setup\02\PU_NMS.DLL

FanJ
April 11th, 2004, 12:39 PM
And this one:

%WINSYSDIR%\IMON.DLL

Maybe more...

Technodrome
April 11th, 2004, 12:43 PM
No Problem Jan. Of course this does not apply to AMON.

Technodrome
April 11th, 2004, 12:44 PM
and this...

Technodrome
April 11th, 2004, 12:44 PM
So you'd know if something is wrong... ;)


tECHNODROME

FanJ
April 11th, 2004, 12:50 PM
Thanks again TD !!! :D

Warm regards, Jan.