I made these guidelines on the old forum. Click on the words 'old forum' and you will go to that old thread. I post them here again because they were maybe a bit too much burried in a long thread. [hr] NISFileCheck can be downloaded here: http://www.capimonitor.nl/niscrc.htm The program is made by Albert Janssen. You do not need to have the firewalls NIS, NPF, AtGuard on your system to use NISFileCheck. [hr] I start NISFileCheck not automatically but by myself. Generally spoken I run it once every day, or (when I (un)installed or upgraded a program) I do it after such an (un)installation. With NISFileCheck you can check whether any file, which is in his database, has changed or is deleted, and you can check whether there is any new file on your system, based on pre-defined description of file-extensions. That checking is taken place by using some kind of checksum algorithm. You can choose between three different algorithms: Options > Hash. You can let it automatically search for files, based on file-extensions, and/or you can add a file by yourself. You can have only one database, or you can have two or more databases; it is up to you. For example you can have one database for the dll files, one for the exe files, and one for all the ocx vxd sys and bat files. You can have one database for your partition C, and, in case you have also a D partition, one for your D partition. Now take this example: you want to make a database for all the dll files on your C partition. Start NISFileCheck. Go to: Files > Add files on extension Make sure that in the box 'Drives to check' is only C mentioned. Make sure that in the box 'Add file with the extention' is only dll mentioned. Now click Cancel (this is important in the case you already have a database for the C dll files, otherwise you will end up with every file twice mentioned in your database). Go to: Files > Search for new files (based on 'Add files on extension'). Now NISFileCheck will search for every such dll file on your C partition. The new files will be colored red, and the number of new files will be showed. Go at the top to: Filter > Only new files. Go to: Edit > Select all records The new files (which you just selected) will be colored blue. Go to: Validate > Validate all applications You have to repeat this validating until all the records are validated (every time you hit that button, half of the records will be validated). Go at the top to: Filter > Validated. Go to: Check > Check if All the files are the same. Again you have to repeat this until all the files are checked. Go at the top to: Filter > Filter off Go to: Edit > Unselect all records. All the files are now colored white. Go to: Files > Save database. Now give your database a name; or, when you already have the desired database, click on his name, and you will be asked whether you want to change it; in that case, answer yes. Now you close NISFileCheck. Now, after a while (say the next day), you want to check whether any dll file on C is changed. Start NISFileCheck. In case a different database now is opened (when you have more than one databases), go to: Files > Load a database, and click on the name of the desired database. Note: when you have more than one databases, make sure that you give them a logic name that you can easily remember, f.e. C_dll for your dll files on your C partition. Now you want to check whether any dll file on C was changed. So go to: Check > Check if all the files are the same. In case any file has changed or was not found, these will be colored red, and the number will be shown. Now some different things can happen: Some files were deleted from your system: Go at the top to: Filter > File not found The files, which were not found, are colored red. Go to: Edit > Select all records The selected files are colored blue. Go to: Edit > Delete selected records (there is no reason why these files would stay in your database). Some files were changed: Go at the top to: Filter > Only changed files The files, which were changed, are colored red. Go to: Edit > Select all records The selected files are colored blue. Go to: Validate > validate all applications (maybe you have to repeat this validating) Go at the top to: Filter > Validated Go to: Check > Check if all the files are still the same (maybe you have to repeat this). Go at the top to: Filter > Filter off Go to: Edit > Unselect all records All files are now colored white. Now you want to check whether there are any new dll files on your C partition. Do the same thing as you did when you first made your database.