[CRC32] File doesn't exist

[Kalkriese]

I have a question regarding certain reporting that TDS is doing upon startup.........

22:36:13 [Memory Scan] Memory scan complete.
22:36:13 [Mutex Memory Scan] Started...
22:36:15 [Mutex Memory Scan] Finished (no trojan mutexes found).
22:36:15 [Trace Scan] Started...
22:37:31 [Trace Scan] Finished.

==========================================================
(The following is what I am asking about)

22:37:32 [CRC32] Started - verifying 29 files ...
22:37:32 [CRC32] File doesn't exist: C:\WINDOWS\System\cmd.exe
22:37:33 [CRC32] File doesn't exist: C:\WINDOWS\System\netstat.exe
22:37:33 [CRC32] File doesn't exist: C:\WINDOWS\System\drwatson.exe
22:37:34 [CRC32] File doesn't exist: C:\WINDOWS\System\drwtsn32.exe
22:37:34 [CRC32] File doesn't exist: C:\WINDOWS\System\rundll32.exe
22:37:35 [CRC32] File doesn't exist: C:\WINDOWS\System\taskman.exe
22:37:35 [CRC32] File doesn't exist: C:\WINDOWS\System\taskmgr.exe
22:37:36 [CRC32] File doesn't exist: C:\WINDOWS\System\winlogon.exe
22:37:36 [CRC32] File doesn't exist: C:\WINDOWS\System\regedt32.exe
22:37:37 [CRC32] File doesn't exist: C:\WINDOWS\System\netmsg.dll
22:37:38 [CRC32] File doesn't exist: C:\WINDOWS\System\winsock.dll
22:37:38 [CRC32] Test finished.

I am running WIN98 SE at this time...... Can you please tell me just what it is that is going on ????

Thanks Again.........

Kalkriese
Wyoming, USA

[Pilli]

Hi Kalkriese,
You need to modify your CRCfiles.txt found in the \TDS3\config\ folder. It is a simple text file that you can modify to suit your computers configuration i.e. You can add or remove files to be checked and alter the default paths.
For more information please read Fanj's excellent post here: http://www.wilderssecurity.com/showthread.php?t=13740
Also check out the other threads found here: http://www.wilderssecurity.com/showthread.php?t=24666

HTH Pilli.

[FanJ]

Hi Kalkriese,

TDS-3 can be run on all kind of Windows versions (98, 2000, XP, etc).
The reason you see those warnings, is that in the default file crcfiles.txt there are files for W98, for XP, etc.
So in the default list there are some files listed that does not exist on your Windows 98 SE machine, or have a different location.
Nothing wrong with that; you can simply remove them from crcfiles.txt if you like, or change their full path in crcfiles.txt
You can do a search on your system for the files you mentioned.



Let's have a look at the files you mentioned and look for them on my W98SE machine (Dutch):
X below means it is not on my W98SE machine:

cmd.exe - X
netstat.exe - location C:\WINDOWS\NETSTAT.EXE
drwatson.exe - location C:\WINDOWS\DRWATSON.EXE
drwtsn32.exe - X
rundll32.exe - location C:\WINDOWS\RUNDLL32.EXE
taskman.exe - location C:\WINDOWS\TASKMAN.EXE
taskmgr.exe - X
winlogon.exe - X
regedt32.exe - X
netmsg.dll - X
winsock.dll - location C:\WINDOWS\WINSOCK.DLL

[Kalkriese]

Thanks FanJ !!

Pretty much a piece of cake ! Thanks again...

[Kalkriese]

Whoops !!! Thanks to Pilli and FanJ both !
And thanks for the links..... ! 8)